last executing test programs:

2.286197767s ago: executing program 1 (id=1438):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10) (async)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0) (async)
listen(r0, 0x0)
socket(0x28, 0x5, 0x0) (async)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@dev}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@multicast1}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in6=@private1}]}]}, 0x1bc}}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='\t', 0x1}], 0x1}}], 0x1, 0x24048094)
accept4$unix(r0, 0x0, 0x0, 0x0) (async)
r3 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0)
recvfrom$unix(r1, 0x0, 0x0, 0x2002, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xbf}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)

1.882329041s ago: executing program 4 (id=1442):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xc, [@volatile={0xf, 0x0, 0x0, 0x9, 0x3}, @func={0x10, 0x0, 0x0, 0xc, 0x5}, @fwd={0x9}, @typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x5}, @volatile={0xa, 0x0, 0x0, 0x9, 0x2}, @ptr={0x8, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x0, 0x30, 0x5f, 0x61, 0x30, 0x61, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000001c0)=""/84, 0x78, 0x54, 0x1, 0x2}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000d0ff0000001f000000000000851000000600000018000000c0ff58c45b8a7d048b30ca1e4afb192bb089a2f54968e2cd2fd4cc8f746b2f6c8795cdd33f30bf719b6c055c718ecbe47ae4a14e4b4bc52509c849b29df5ff8e58dbeac723ca86b930c9f8437179b53c53142fa94d322af52634fe3f43221cc1613a434f2c1e2f20c20c047ab9fcfa6f3c1574937dacee73af5b775078c02bfe3fa0e2e7faa934e19ba7ffffe0", @ANYRES32, @ANYBLOB="00000000000000206608000000000000180000000000010000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa1000000000000070100000aa8ffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, r0}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0)
ioctl$XFS_IOC_GETBMAP(r3, 0xc0205826, &(0x7f00000003c0)={0x5, 0x8, 0x0, 0x8b32, 0x395260ef})
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x1, 0xb})
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
close(0x3)
sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0xee01}, {@in6=@remote, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x70bd28}, 0x0, 0x5dfe}, [@proto={0x5, 0x19, 0x2b}]}, 0x100}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xc, [@volatile={0xf, 0x0, 0x0, 0x9, 0x3}, @func={0x10, 0x0, 0x0, 0xc, 0x5}, @fwd={0x9}, @typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x5}, @volatile={0xa, 0x0, 0x0, 0x9, 0x2}, @ptr={0x8, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x0, 0x30, 0x5f, 0x61, 0x30, 0x61, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000001c0)=""/84, 0x78, 0x54, 0x1, 0x2}, 0x28) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000d0ff0000001f000000000000851000000600000018000000c0ff58c45b8a7d048b30ca1e4afb192bb089a2f54968e2cd2fd4cc8f746b2f6c8795cdd33f30bf719b6c055c718ecbe47ae4a14e4b4bc52509c849b29df5ff8e58dbeac723ca86b930c9f8437179b53c53142fa94d322af52634fe3f43221cc1613a434f2c1e2f20c20c047ab9fcfa6f3c1574937dacee73af5b775078c02bfe3fa0e2e7faa934e19ba7ffffe0", @ANYRES32, @ANYBLOB="00000000000000206608000000000000180000000000010000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa1000000000000070100000aa8ffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, r0}, 0x94) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) (async)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async)
ioctl$XFS_IOC_GETBMAP(r3, 0xc0205826, &(0x7f00000003c0)={0x5, 0x8, 0x0, 0x8b32, 0x395260ef}) (async)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) (async)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x1, 0xb}) (async)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async)
close(0x3) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0xee01}, {@in6=@remote, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x70bd28}, 0x0, 0x5dfe}, [@proto={0x5, 0x19, 0x2b}]}, 0x100}}, 0x0) (async)

1.745556619s ago: executing program 4 (id=1445):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], 0x10}}, 0x800)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x21, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r3 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000100)=0x8)
r4 = accept4$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000400)=0x10, 0x80800)
recvfrom$llc(r4, &(0x7f00000006c0)=""/4096, 0x1000, 0x42, &(0x7f00000016c0)={0x1a, 0x13, 0x5, 0x3f, 0x1, 0x3, @random="df78d8ff7a1d"}, 0x10) (async)
recvfrom$llc(r4, &(0x7f00000006c0)=""/4096, 0x1000, 0x42, &(0x7f00000016c0)={0x1a, 0x13, 0x5, 0x3f, 0x1, 0x3, @random="df78d8ff7a1d"}, 0x10)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000240)=0xc) (async)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000240)=0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="7a0a00fff9b8311a6e00000071108e000000000095e8fffffffffffffd0083184493b0af93107a35f751f8b7b2bc3bf10e2a76d238e470b3252b2eb1aba1c57be2398034b514a87235cc5686b9905953924af5d716d8f53a6e5e69012b2df2d2fd027ce3a2e33ff0796560f4086e8c2dfc8594a0c1477151d7de48fcba5046ec2fb284e3d59e012ea56e08a746e37964afefd20e85127a691dcd7ac47eff41"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)

1.598169569s ago: executing program 3 (id=1447):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
listen(r1, 0x0)
ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x1008}], 0x2, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$inet6(0xa, 0x800000000000002, 0x0) (async)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x33d}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x33d}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x11, &(0x7f0000000000), 0x4)
bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r2, 0x118, 0x2, 0x0, &(0x7f00000003c0))

1.470133234s ago: executing program 2 (id=1449):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='@\x00\x00\x00']}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@generic="a664f7feda247668"]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff})
socketpair(0x3e, 0x4, 0x9, &(0x7f0000000180)={<r5=>0xffffffffffffffff})
sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x3, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x5}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x9401}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x800)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="810902000000000000000300000008000100000000001c0007800c00018008000100", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x0)

1.428445548s ago: executing program 3 (id=1450):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x1c, 0x18, 0x100, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0)

1.34125041s ago: executing program 3 (id=1451):
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="01000000000000000000050000000c"], 0x38}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012002102000000000000000007"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={<r5=>0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x800, 0x9, 0xffff0162, 0x9, 0x0, 0xca, 0x81}, &(0x7f0000000280)=0x9c)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r5, 0x7fffffff}, &(0x7f0000000300)=0x8)

1.264225575s ago: executing program 4 (id=1452):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0xfe}]}]}]}}]}, 0x44}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0xc4ea, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r4, 0x0, 0x0}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

1.262338386s ago: executing program 2 (id=1453):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r0=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000700039022dbd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="0c0001800800010000000e000c0001800800010002000100"], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x44014)

1.204238821s ago: executing program 1 (id=1454):
r0 = socket(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7fffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)

1.203775859s ago: executing program 0 (id=1455):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x13, 0x0, 0x0) (async)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) (async)
r5 = socket$kcm(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x30, r9, 0x1, 0x70bd25, 0x3, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x2400c046)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c0006"], 0x70}}, 0x0) (async)
bind$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) (async)
ioctl$sock_proto_private(r5, 0x89e5, &(0x7f0000000140)="9d8c9f902eb8558ca59ac752a7b1bb3827665a154e6cbb5b4b6283962e5439ff22c69a2272679ceb07c97c9a3ab6f2a150913e9cdb860a8c1a34420467bc0ba122d5e0126c170b") (async)
r11 = socket$kcm(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10)
bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x40d, 0x70bd2c, 0x1ffffffc, {0x0, 0x0, 0x0, r3, 0x60046, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0x80) (async)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000007d99080000", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0)

1.061108257s ago: executing program 2 (id=1456):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, 0x0, 0x0) (async)
setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={@private2, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfc00000000000000}, 0x7, 0xd, 0x4, 0x0, 0x7, 0x800002})
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x30, 0xa, 0xa, {0x3, @sctp_ip6_spec={@mcast1, @ipv4={'\x00', '\xff\xff', @remote}, 0x4e22, 0x4e20, 0xff}, {0x0, @empty, 0x84c, 0x800, [0x4, 0x8]}, @esp_ip6_spec={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x1, 0x6}, {0x0, @broadcast, 0x7, 0x6, [0x6, 0x4]}, 0xffffffffffffffff, 0x4}, 0x4, [0xb8000, 0x5, 0x6, 0x0]}})

1.031683522s ago: executing program 3 (id=1457):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', <r1=>0x0}) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2ca1b724573b53e8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r4 = accept(0xffffffffffffffff, &(0x7f0000000240)=@alg, &(0x7f00000002c0)=0x80)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000300)={<r5=>0xffffffffffffffff}) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', <r8=>0x0}) (rerun: 32)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x22080000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r7, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xd}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) (async)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r6)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000004) (async)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r6) (async)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd0, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0xa4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffd590b05d}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x881}, 0x20004804) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(r10, &(0x7f0000001ac0)={&(0x7f0000000840)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x1000}], 0x1, &(0x7f00000018c0)=[@ip_retopts={{0x84, 0x0, 0x7, {[@generic={0x86, 0x2}, @rr={0x7, 0xb, 0xec, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x24, 0x0, [{0x2, 0xc, "0299d872ca746494865d"}, {0x1, 0xb, "0b73dbf030fb3002d0"}, {0x7, 0x5, "c9f46e"}, {0x1, 0x2}]}, @lsrr={0x83, 0x17, 0x47, [@local, @private=0xa010101, @remote, @private=0xa010102, @multicast2]}, @cipso={0x86, 0x2c, 0x3, [{0x6, 0x8, "6fce707f988f"}, {0x2, 0xa, "f3d8649970e865eb"}, {0x1, 0x7, "9b36eb2113"}, {0x5, 0xd, "cd9472473f0c7b02ccfe63"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0xdc, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0xfd, [@broadcast, @dev={0xac, 0x14, 0x14, 0x35}, @local, @dev={0xac, 0x14, 0x14, 0x20}, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1]}, @cipso={0x86, 0x65, 0x3, [{0x1, 0x8, "695ee66f56ce"}, {0x6, 0x6, "00b2642f"}, {0x1, 0x11, "517e19b2b89645ea320dcaa4ec7ef5"}, {0x2, 0xf, "fae5edd3bd8077a3dbf79f35fe"}, {0x6, 0xd, "3f71ff955e19ebc943525a"}, {0x2, 0xa, "3018122109b69e8b"}, {0x2, 0x10, "fa5b50368bc603faff9f1b074f3f"}, {0x6, 0xa, "e824104c0b86f130"}]}, @lsrr={0x83, 0xb, 0xa2, [@multicast2, @broadcast]}, @timestamp_addr={0x44, 0x34, 0x88, 0x1, 0x6, [{@private=0xa010102, 0x4}, {@multicast2, 0xe}, {@remote, 0x9f}, {@empty, 0x8001}, {@rand_addr=0x64010101, 0x5}, {@multicast1}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}], 0x1c8}, 0x0) (async)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000001b40), r6)
sendmsg$NBD_CMD_STATUS(r11, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x60, r12, 0x0, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'wpan1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x48001}, 0x4040800) (async)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r11, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x40, r9, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) (async)
ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000001dc0)={'wpan0\x00', <r13=>0x0})
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x21040c00}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x4c, r9, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x850}, 0x4040014) (async)
r14 = socket$inet(0x2, 0x800, 0xff)
sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x20, r7, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x44015)
r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002300)={0x6, 0x14, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x58a, 0x0, 0x0, 0x0, 0x8000}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000020c0)='GPL\x00', 0xfffffffe, 0xbc, &(0x7f0000002100)=""/188, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000021c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000002200)={0x1, 0xb, 0x6, 0x401}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000002240)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r10], &(0x7f0000002280)=[{0x5, 0x2, 0xc}, {0x2, 0x3, 0x8, 0x3}, {0x1, 0x4, 0x10, 0x8}, {0x2, 0x3, 0xe, 0x8}, {0x4, 0x1, 0x4, 0x5}, {0x4, 0x5, 0x6, 0x2}, {0x5, 0x1, 0xe, 0x4}, {0x5, 0x5, 0x8, 0x4}], 0x10, 0xff}, 0x94) (async, rerun: 32)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000024c0)={@cgroup, 0x1d, 0x0, 0x9, &(0x7f00000023c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000002400)=[0x0, 0x0], &(0x7f0000002440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r16=>0x0}, 0x40) (async, rerun: 32)
getpeername$packet(r5, &(0x7f0000002540)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002580)=0x14)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r14, 0x4058587a, &(0x7f00000027c0)={{<r18=>r10, &(0x7f00000025c0)='NLBL_UNLBL\x00', 0x100, &(0x7f0000002600)={@_ha_fsid={[0x6, 0xf]}, {0x10, 0x9, 0xffff, 0x40}}, 0x4000000, &(0x7f0000002640), &(0x7f0000002680)=0xa}, {[0x1, 0x4, 0x1, 0x6]}, 0x7, 0xf0, &(0x7f00000026c0)=""/240})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002500)={@ifindex=r17, r15, 0x33, 0x0, 0x0, @void, @value=r18, @void, @void, r16}, 0x20)

971.682509ms ago: executing program 4 (id=1458):
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) (async)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r1) (async)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r1)
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) (async)
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r2, 0x10, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004880}, 0x1400084c)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
close(0x4)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, 0x0, &(0x7f00000003c0)=0x14) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, 0x0, &(0x7f00000003c0)=0x14)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000300", @ANYRES32], 0x60}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010004b0400000000fcdbdf257a000000", @ANYRES32=r7, @ANYBLOB="0000000023000400240012800b0001006272696467650000140002800800080088a8"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local}, "5613e798"}}}}, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r8, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@flowinfo={{0x14, 0x29, 0xb, 0x8000}}], 0x18}, 0x0) (async)
sendmsg$inet6(r8, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@flowinfo={{0x14, 0x29, 0xb, 0x8000}}], 0x18}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r9, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
connect$inet6(r9, &(0x7f0000000240)={0xa, 0x4c23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0xffffffff}, 0x1c)
shutdown(r9, 0x1) (async)
shutdown(r9, 0x1)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)

970.371596ms ago: executing program 1 (id=1459):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x4, 0x1}, 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x4, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000000000073000c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socket(0x28, 0x5, 0x0) (async)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r1, 0x0)
connect$can_j1939(r1, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x18, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x40}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x190, 0x5802, 0x294, 0x0, 0x294, 0x2d8, 0x325, 0x378, 0x2d8, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffff00, 0xffffff00, 0xff000000], [0xffffffff, 0xff, 0xff000000, 0xffffffff], 'nicvf0\x00', 'ip6erspan0\x00', {}, {}, 0x32, 0xfd, 0x0, 0x59}, 0x0, 0x128, 0x190, 0x52020000, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x8, 0x3, 0x1, 0x5, 0x5, 0x0, 0x2513097a, 0x0, 0x18}, {0x8000}}}, @common=@ipv6header={{0x28}, {0x88, 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x8, 0x7, 0x8, 0x6, 0x101, 0x800, 0x8, 0x8000, 0x4a, 0x9, 0xff, 0x1000, 0x1, 0x8, 0x4c8, 0xa68], 0xa}}, @common=@frag={{0x30}, {[0x3]}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408)

969.608704ms ago: executing program 0 (id=1460):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYRES8=0x0], &(0x7f0000000280)=""/265, 0x41, 0x109, 0x1}, 0x28)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0xffff, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x20}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

861.791334ms ago: executing program 2 (id=1461):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="0203000210000000020000000000000005000600000000000a004e240000f59cff01000000000000000000000000000101000000000000000200010000000000000000000000000005000500000000000a004e2000000007fe80000000000000000000000000000bff7f0000000000000200080010"], 0x80}, 0x1, 0x7}, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c)
socket$nl_netfilter(0x10, 0x3, 0xc)

790.745941ms ago: executing program 0 (id=1462):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09050000000000000000020000000900020073797a3100000000080004400000000f0900010073797a30000000000800034000000001"], 0x74}}, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70500000000000079109f00000000001d0a00000003000095000000000000005a09aa5605b4d381d0a6e2eb561f263ce7445bcfaaeb91967c5b917e4126c24feeeb4083b7f2277e05a5c143"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)

735.970271ms ago: executing program 3 (id=1463):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000000c0))
syz_emit_ethernet(0x6a, &(0x7f0000000280)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x1000, 0x0]}, {}, {0x8, 0x88be, 0x2}}}}}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000006060500000000000000000000000007050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfffa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x47, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x51fc, 0xb, 0x5}}}}]}, 0x40}}, 0x840)

547.210552ms ago: executing program 1 (id=1464):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc"], 0x23c}}, 0x4004000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e)
r2 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f00000000c0))
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8084)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r1, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)

546.736479ms ago: executing program 2 (id=1465):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c00028005000a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

546.264736ms ago: executing program 4 (id=1466):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x5, 0x7, 0x7, 0x9, 0x28, 0x0, 0xa2}, 0x9c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0x270}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478)
r6 = gettid()
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x45e], 0x0, 0x0, 0x1, 0x0, r6}}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x18000000000002a0, 0xeff, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x2100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b7000000105f93322249933ea13613d3a4d20300003a80a4a8917a829b7d00006111900000000000c600000000000000000088fed398bec35a4aeb367de0378896e4ca3e675a01594bb2be8b000000000113d6c2c1142d19881ad15d7b2a49b7", @ANYRESHEX=r3, @ANYRES64=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3}, 0x94)

545.962403ms ago: executing program 0 (id=1467):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) (async)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
getsockopt$inet_tcp_int(r4, 0x6, 0x2, 0x0, &(0x7f0000000340))
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) (async)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="34002fd777842e0100", @ANYRES16=r5, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) (async)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000240)={0x1, &(0x7f0000000180)=[{@none}]})

523.105999ms ago: executing program 1 (id=1468):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x470, 0x268, 0x1c8, 0x300, 0x268, 0x98, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xffffffff, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@addrtype={{0x30}, {0x400, 0x8, 0x4, 0x1}}, @common=@addrtype={{0x30}, {0x91c, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x7, @local, 0x4e22}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0)
socket$l2tp(0x2, 0x2, 0x73) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) (async)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x470, 0x268, 0x1c8, 0x300, 0x268, 0x98, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xffffffff, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@addrtype={{0x30}, {0x400, 0x8, 0x4, 0x1}}, @common=@addrtype={{0x30}, {0x91c, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x7, @local, 0x4e22}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) (async)

486.122908ms ago: executing program 2 (id=1469):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="03000000d7fe68ca6d683a7932fdffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000040000000000000000020000b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x400)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r3=>0x0})
unshare(0x20020400)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="017f000000000766bc9d963db27bf1"], 0x18}}, 0x4000)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x847b0dac5bec178f, &(0x7f00000000c0)}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x70bd2b, 0x2, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x2, 0xffe, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580100001000130404000000fadbdf2500000000000000000000000000000000fe800000007269cb1e000000000000bb000000004e2200000200002006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010102000000000000000000000000000004d432000000e00000010000000000000000000000000000000000000000020000000000000005000000000000001000000000008000fcffffffffffffff02000000000000000700000000020000000000000000000000000000000000000b0e00000000000004000000000000000000000000000000f6000000000000000700000026bd7000000000000a000109100000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000080000000a76af6c73c4a03bbca93d47bfc5f576ef2c8a50b9dfede4143fa4100"], 0x158}, 0x1, 0x0, 0x0, 0x88c0}, 0x0)

335.159779ms ago: executing program 4 (id=1470):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa15687efec3d286dd60f81fcb00483a00fc000000000000000000000000000000000000010400907800000000604aa1d300000000fc01000000000000000000000000000000000000000000000000ffff7f0000013c000000000000002f0004002300"/114], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003001d0020"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}}, [@tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}]}]}, 0x17c}}, 0x4000)
r3 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4)
recvmmsg(r3, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}, 0x496}], 0x1, 0x102, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf0, 0x1, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x28}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xd6e}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4a}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xe0}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x842}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x12}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0xa054, 0x1, 0x9, 0x95, 0x8, 0x8000]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffff137}]}, @CTA_NAT_DST={0x54, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20044844}, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000000)

334.364891ms ago: executing program 3 (id=1471):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x101, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r4)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009815}, 0x4000080)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', <r6=>0x0, 0x4, 0x5, 0x9, 0x9, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x700, 0x40, 0x53713d9f, 0x7}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000041)

332.078415ms ago: executing program 0 (id=1472):
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000000)={0x401, 0x1, 0xd})
socketpair(0x2, 0x6, 0x8, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00')
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0}, @GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000000)
socket(0x1c, 0x1, 0x3) (async)
socketpair(0x22, 0xa, 0xfffff280, &(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_getrule={0x1c, 0x22, 0x4, 0x70bd2c, 0x25dfdbfc, {0xa, 0x14, 0x14, 0xfb, 0xf, 0x0, 0x0, 0x5, 0x8}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000060) (async)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000380)={<r7=>0x0, 0xe}, &(0x7f00000003c0)=0x8)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000400)={r7, @in={{0x2, 0x4e21, @private=0xa010100}}}, 0x84) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000004c0)={'wg1\x00', <r8=>0x0})
r9 = accept4$phonet_pipe(r5, &(0x7f0000000500), &(0x7f0000000540)=0x10, 0x80400)
getsockopt$PNPIPE_ENCAP(r9, 0x113, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=0x4) (async)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r10, 0x40309439, &(0x7f0000000600)={0x0, 0x0, 0xd})
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r6)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000006c0)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r12, 0x402, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x80000001, 0x73}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x4000040) (async)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000800)=@ethtool_flash={0x33, 0x9, './file0\x00'}})
ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000900)={'hsr0\x00', 0x10}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'ip6gre0\x00', r8, 0x29, 0x5, 0x5, 0x7, 0x7e, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000, 0x0, 0x8, 0x82e}}) (async)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000a80)={'syz_tun\x00', &(0x7f0000000a00)=@ethtool_gfeatures={0x3a, 0x5, [{}, {}, {}, {}, {}]}})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b80)={r4, &(0x7f0000000ac0)="3bec75f72fc43453e64893f9535db80fa25bbf05f77d0d36986a42b73f1358db917699fe2893750dfce3cab1b75569d41a3077d1af134f70b6dafada76c32291cb7b778d6241c1563525a5d69f8ebe7733e1602780a590", &(0x7f0000000b40)=@tcp, 0x1}, 0x20)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c010}, 0x40) (async)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x80010, r6, 0x105d4000)
r15 = accept(r9, &(0x7f0000000cc0)=@sco={0x1f, @none}, &(0x7f0000000d40)=0x80)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r15, &(0x7f0000001440)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f0000000dc0)={0x5cc, r12, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x292, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x3, 0x5}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @perr={0x84, 0xf6, {0x1, 0x10, [{{}, @broadcast, 0x9, @void, 0x1b}, {{}, @device_b, 0x4, @void, 0x24}, {{0x0, 0x1}, @device_a, 0xca0c, @value=@device_b, 0x39}, {{0x0, 0x1}, @broadcast, 0xe, @value, 0xe}, {{}, @device_a, 0xffffffff, @void, 0x39}, {{0x0, 0x1}, @broadcast, 0x6, @value, 0x15}, {{}, @device_b, 0x1, @void, 0x2e}, {{0x0, 0x1}, @device_b, 0x1, @value=@device_b, 0x4}, {{}, @device_a, 0x5, @void, 0x14}, {{}, @broadcast, 0x4, @void, 0x38}, {{}, @device_a, 0xffffff7f, @void, 0x26}, {{}, @device_a, 0x10001, @void, 0x1c}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x21}, {{}, @device_b, 0x1, @void, 0x2e}, {{}, @broadcast, 0x1, @void, 0x21}, {{0x0, 0x1}, @device_b, 0xd8, @value, 0x1f}]}}, @random_vendor={0xdd, 0xf0, "0b4787216ff2dac1fcf4f5bd67b41941bfce0ad1d9ad126ec1d82aad613904b02f814467f5ff21612d7379a46f943e48447c5b3013b2afa4f7ea2e5aa71d4004755a8e5914f967a6965ac94b3b10c97e23f34cf356dce9f2e683406cee6da94b2191866cb1c364a18c0d04968c468abb4081cc46aa420983183480f0f420a1c5672ede31098a3b21602b966aa33d93b1c547c433a254bde6c927d934b88cfb6b43fb8c279c3e99dfc45717baeaa1bc991d6116bbeb0146aef25b5a29f4e401142eea1b5c5c26333d541a7c6b261072ba3362288dea3c758f328fc7539b8c027e733e43a5fefce52a68139ebcdae678d7"}, @random={0x1, 0x99, "b0be2e8661e44dac65dbd528163aebfdb039c1ac33b6450f46657262849ec0c7da61bfa754e76cf4df809f2392f1f43b263ddef9fb3ae554b18fef839b479fff894b31d844ee0b23b171b0e7dd091da187b9c392c368713221c2af50bc0446484be30ba46aa259d36564017e8f373b815b3db054ccc8fe9cd11252a42dec70328af5432b94955265f4da074f935e8e6c0ee99358ca2d34cf30"}]}, @NL80211_ATTR_IE={0x24, 0x2a, [@ibss={0x6, 0x2}, @ht={0x2d, 0x1a, {0x2, 0x1, 0x6, 0x0, {0x8000000000000000, 0x89, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x6, 0x4, 0x8}}]}, @NL80211_ATTR_IE={0x3e, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x89, 0x21}}, @random={0xc, 0x9, "28120dca12dc0de603"}, @challenge={0x10, 0x1, 0x17}, @mic={0x8c, 0x18, {0x8, "b128e08999d9", @long="a8e41f4296c6423d40a1735883e318a1"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x74, 0x40, 0x4}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_IE={0xa9, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0xd6, 0xe1, 0xffffffff, @device_a, 0x5, @value=@device_b, 0xff, 0x1, 0x5, [{{0x0, 0x0, 0x1}, @device_a, 0x101}, {{0x0, 0x0, 0x1}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_a, 0x81f}, {{0x1, 0x0, 0x1}, @device_b, 0x800}, {{}, @device_b}]}}, @gcr_ga={0xbd, 0x6}, @peer_mgmt={0x75, 0x8, {0x1, 0x2, @val=0x43, @val=0x6, @void}}, @perr={0x84, 0x28, {0x5, 0x2, [{{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x37}, {{0x0, 0x1}, @device_a, 0x2, @value, 0x32}]}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xc9, 0xfa, "78c3994193c7cc21dccb3a387ee74c73252abd0c99168f424ed7e8d7dcdea0cbf68f089237e8251ee48a3f1acf07a3e73d536cda0fa1ba56817428a9b5dc060a1b0ef63759d518bd67f027078491c3a2744a32d95f18b24f1efbf505d9598ce952866a8f0951815bc8e3ddfa89f6044d53c642671183631b3364c0e2ba34a1e97a9a9045bfdfd2c2fdfae170f68e229a08ca06ab98c5d1ab876e70fca17ac69fdeea8ed8e83b5cd6ca5eb5f585d6417ff27503ed11dda26156689dce92af7ae34f39cb5616"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x101}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "88fb8e2d90e7"}], @NL80211_ATTR_IE={0x12c, 0x2a, [@dsss={0x3, 0x1, 0x56}, @tim={0x5, 0xc0, {0x4, 0xa1, 0x0, "bb90cd8d04de470390c45a5a2895bb0cb7a62d79a89788607f05c68b13018307200c23d00d6bc8b3a9ff7d64b7fc50f952388099beb5c91d0e60ea23bd7f2b128676bebac175121912623cd09161ac21036800edc4ff8fb79a2c6a8034d675ab0a9484e11e202135ff0236f77d85271c21bc8c5fd17632466c7d4a7bb075d62641c567ab552aa66b9a669bba8e85f27177b142ab491c35f23766582f66a44cfbb69831ca318fe1cb9f5ad736b96fb5ce7fcdbffb108154450ee785210a"}}, @prep={0x83, 0x1f, {{}, 0x77, 0x1, @device_b, 0xa72a, @void, 0xfffffff7, 0x6, @device_b, 0x6}}, @mesh_chsw={0x76, 0x6, {0x82, 0x9, 0x28, 0xc}}, @channel_switch={0x25, 0x3, {0x0, 0x24, 0xe}}, @measure_req={0x26, 0x2e, {0x8, 0x74, 0x0, "84e2bc787c6f31dc8ace6fd85127059b14b7f52cd1bcf7f98504c8069f47a408bab75696213cbb9dbf78d4"}}, @channel_switch={0x25, 0x3, {0x0, 0x95, 0x46}}]}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x804}, 0x0)

195.596848ms ago: executing program 1 (id=1473):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=<r3=>r0, 0x0, 0x0, 0x7fffffff, &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400), <r4=>0x0}, 0x40)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x17, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @jmp={0x5, 0x0, 0x4, 0x4, 0xa, 0xffffffffffffffb4, 0x1}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x7, 0x2f, &(0x7f00000005c0)=""/47, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0xe, 0x2}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000680)=[{0x2, 0x3, 0x4, 0x3}, {0x0, 0x4, 0x2, 0x1f}, {0x2, 0x4, 0xb, 0x8}, {0x4, 0x4, 0x1, 0x7}, {0x4, 0x1, 0x6, 0x7}, {0x2, 0x1, 0x5, 0x5}, {0x3, 0x3, 0xb, 0x2}, {0x3, 0x1, 0x7, 0x9}, {0x1, 0x2, 0x2}, {0x5, 0x4, 0x1, 0x1}], 0x10, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@cgroup, r1, 0x29, 0x0, r2, @void, @value=r5, @void, @void, r4}, 0x20) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@cgroup, r1, 0x29, 0x0, r2, @void, @value=r5, @void, @void, r4}, 0x20)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x60, 0x1403, 0x100, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc80c}, 0x900ff8dc02c933ae)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000800)={'syztnl1\x00', <r7=>0x0, 0x1, 0x8000, 0x9, 0x8f6, {{0x27, 0x4, 0x0, 0x5, 0x9c, 0x66, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0xb0, 0x1, 0x1, [{@broadcast, 0x9}, {@broadcast}, {@local, 0x80}]}, @ra={0x94, 0x4}, @noop, @ssrr={0x89, 0xb, 0x89, [@broadcast, @dev={0xac, 0x14, 0x14, 0x11}]}, @cipso={0x86, 0x59, 0x3, [{0x1, 0xd, "7615ecdc57ce78ff483685"}, {0x6, 0xb, "6384b832c63d1b3bf4"}, {0x5, 0xe, "8a7e077bc525696133d55458"}, {0x5, 0xb, "caf5b44ea41c3415c5"}, {0x1, 0x11, "9f452511402402655f5b19747c8db7"}, {0x7, 0x11, "62656ffd122e7ddf2aba143a5060e3"}]}]}}}}})
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x1d, r7, 0x0, {0x2, 0x1, 0x2}, 0xff}, 0x18, &(0x7f0000000a00)={&(0x7f0000000940)="1303742683519663cf37056e9b3e04206606c2ec4cee13902c96f88d4ecc846039aa9891f0c3541fa32c3f4638ea71178ed4e4e5a087341891fe50d6efe90d85964b87fd8a8231dac428f8be2aab59bf4eeff2", 0x53}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x1d, r7, 0x0, {0x2, 0x1, 0x2}, 0xff}, 0x18, &(0x7f0000000a00)={&(0x7f0000000940)="1303742683519663cf37056e9b3e04206606c2ec4cee13902c96f88d4ecc846039aa9891f0c3541fa32c3f4638ea71178ed4e4e5a087341891fe50d6efe90d85964b87fd8a8231dac428f8be2aab59bf4eeff2", 0x53}, 0x1, 0x0, 0x0, 0x800}, 0x8000)

0s ago: executing program 0 (id=1474):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe04ff06"], 0x1c}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYRES8], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000140)=0x1ff, 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1200"/12, @ANYRES32=0x0, @ANYBLOB='v'], 0x20)
sendto$inet(r2, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10)
setsockopt$inet_int(r2, 0x0, 0xb, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="69d387051eaf71a0486e5c660000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="381aa400", @ANYRES16=r4, @ANYBLOB="000127bd7000fedbdf255c00000008000300", @ANYRES32=r5, @ANYBLOB="0c00990007ff01000000000000006b001c02000008006b0063030000"], 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x8000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.13' (ED25519) to the list of known hosts.
[   80.038722][ T5615] cgroup: Unknown subsys name 'net'
[   80.110208][ T5615] cgroup: Unknown subsys name 'cpuset'
[   80.121511][ T5615] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   81.788324][ T5615] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   84.339198][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   84.348375][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   84.359252][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   84.367681][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   84.375426][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   84.431877][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.442638][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.451862][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.463158][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.474161][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.574949][ T4945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.585119][ T4945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.597205][ T4945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.618850][ T4945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.627045][ T4945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.655072][ T4945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.667168][ T4945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.676528][ T4945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.690966][ T4945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.701853][ T4945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.731615][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   84.740986][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   84.750201][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   84.764244][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   84.772876][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   86.447016][ T5629] Bluetooth: hci0: command tx timeout
[   86.526274][ T5629] Bluetooth: hci1: command tx timeout
[   86.552681][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.560549][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.567927][ T5631] bridge_slave_0: entered allmulticast mode
[   86.575377][ T5631] bridge_slave_0: entered promiscuous mode
[   86.591729][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.598949][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.606681][ T5637] bridge_slave_0: entered allmulticast mode
[   86.614323][ T5637] bridge_slave_0: entered promiscuous mode
[   86.640624][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.648024][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.656748][ T5631] bridge_slave_1: entered allmulticast mode
[   86.664099][ T5631] bridge_slave_1: entered promiscuous mode
[   86.680992][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.688390][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.695773][ T5637] bridge_slave_1: entered allmulticast mode
[   86.701998][ T5629] Bluetooth: hci2: command tx timeout
[   86.708106][ T5637] bridge_slave_1: entered promiscuous mode
[   86.766514][ T5629] Bluetooth: hci3: command tx timeout
[   86.846158][ T5629] Bluetooth: hci4: command tx timeout
[   86.887275][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.901153][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.931149][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.954308][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.050279][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.058071][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.065360][ T5627] bridge_slave_0: entered allmulticast mode
[   87.073987][ T5627] bridge_slave_0: entered promiscuous mode
[   87.167258][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.174702][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.182310][ T5627] bridge_slave_1: entered allmulticast mode
[   87.189753][ T5627] bridge_slave_1: entered promiscuous mode
[   87.197529][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.204703][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.212250][ T5640] bridge_slave_0: entered allmulticast mode
[   87.220031][ T5640] bridge_slave_0: entered promiscuous mode
[   87.230124][ T5631] team0: Port device team_slave_0 added
[   87.249135][ T5637] team0: Port device team_slave_0 added
[   87.266427][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.273711][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.281029][ T5640] bridge_slave_1: entered allmulticast mode
[   87.288726][ T5640] bridge_slave_1: entered promiscuous mode
[   87.298655][ T5631] team0: Port device team_slave_1 added
[   87.304521][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.311939][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.319306][ T5643] bridge_slave_0: entered allmulticast mode
[   87.327577][ T5643] bridge_slave_0: entered promiscuous mode
[   87.337831][ T5637] team0: Port device team_slave_1 added
[   87.375467][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.382832][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.390483][ T5643] bridge_slave_1: entered allmulticast mode
[   87.397795][ T5643] bridge_slave_1: entered promiscuous mode
[   87.420623][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.480234][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.492231][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.502799][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.510047][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.536421][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.560240][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.567364][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.593591][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.618275][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.628119][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.635136][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.661654][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.675875][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.687365][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.694674][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.721446][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.775213][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.815055][ T5643] team0: Port device team_slave_0 added
[   87.823262][ T5627] team0: Port device team_slave_0 added
[   87.845897][ T5640] team0: Port device team_slave_0 added
[   87.854740][ T5640] team0: Port device team_slave_1 added
[   87.873503][ T5643] team0: Port device team_slave_1 added
[   87.881010][ T5627] team0: Port device team_slave_1 added
[   87.954231][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.961667][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.987757][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.040248][ T5637] hsr_slave_0: entered promiscuous mode
[   88.047384][ T5637] hsr_slave_1: entered promiscuous mode
[   88.055190][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.062856][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.088827][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.100515][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.107748][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.134019][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.146395][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.153527][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.179626][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.196860][ T5631] hsr_slave_0: entered promiscuous mode
[   88.203408][ T5631] hsr_slave_1: entered promiscuous mode
[   88.210048][ T5631] debugfs: 'hsr0' already exists in 'hsr'
[   88.215870][ T5631] Cannot create hsr debugfs directory
[   88.238388][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.245371][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.271970][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.283930][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.291201][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.317162][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.515886][ T5627] hsr_slave_0: entered promiscuous mode
[   88.522430][ T5627] hsr_slave_1: entered promiscuous mode
[   88.528894][ T5629] Bluetooth: hci0: command tx timeout
[   88.535115][ T5627] debugfs: 'hsr0' already exists in 'hsr'
[   88.541240][ T5627] Cannot create hsr debugfs directory
[   88.560278][ T5640] hsr_slave_0: entered promiscuous mode
[   88.567134][ T5640] hsr_slave_1: entered promiscuous mode
[   88.573657][ T5640] debugfs: 'hsr0' already exists in 'hsr'
[   88.579836][ T5640] Cannot create hsr debugfs directory
[   88.608314][ T5629] Bluetooth: hci1: command tx timeout
[   88.634817][ T5643] hsr_slave_0: entered promiscuous mode
[   88.642978][ T5643] hsr_slave_1: entered promiscuous mode
[   88.649907][ T5643] debugfs: 'hsr0' already exists in 'hsr'
[   88.655910][ T5643] Cannot create hsr debugfs directory
[   88.766280][ T5629] Bluetooth: hci2: command tx timeout
[   88.846178][ T5629] Bluetooth: hci3: command tx timeout
[   88.927074][ T5629] Bluetooth: hci4: command tx timeout
[   89.160847][ T5637] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   89.174939][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.183423][ T5637] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   89.196962][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.219100][ T5637] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   89.230055][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.249356][ T5637] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.261662][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.324860][ T5631] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   89.347566][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.358741][ T5631] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   89.369516][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.378032][ T5631] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   89.389067][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.399789][ T5631] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.410926][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.509829][ T5640] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   89.522609][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.540284][ T5640] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   89.552135][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.560711][ T5640] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   89.570413][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.579376][ T5640] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   89.590885][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.721781][ T5627] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.733747][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.742899][ T5627] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.752856][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.761930][ T5627] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.774172][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.795358][ T5627] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.805674][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.875028][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.939950][ T5643] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.950552][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.960242][ T5643] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.972531][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.990956][ T5643] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   90.003010][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.011820][ T5643] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   90.022104][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.043167][ T5637] 8021q: adding VLAN 0 to HW filter on device team0
[   90.083082][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.090796][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.132673][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.144791][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.152012][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.252977][ T5631] 8021q: adding VLAN 0 to HW filter on device team0
[   90.281068][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.319109][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.326349][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.354363][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.362021][ T3317] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.422751][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.443929][ T5640] 8021q: adding VLAN 0 to HW filter on device team0
[   90.506316][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.513637][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.551598][ T5627] 8021q: adding VLAN 0 to HW filter on device team0
[   90.569073][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.576307][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.606393][ T5629] Bluetooth: hci0: command tx timeout
[   90.618950][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.626235][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.687021][ T5629] Bluetooth: hci1: command tx timeout
[   90.715288][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.722582][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.743772][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.846786][ T5629] Bluetooth: hci2: command tx timeout
[   90.891788][ T5643] 8021q: adding VLAN 0 to HW filter on device team0
[   90.926394][ T5629] Bluetooth: hci3: command tx timeout
[   90.951406][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.958651][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.007428][ T5629] Bluetooth: hci4: command tx timeout
[   91.015084][  T279] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.022335][  T279] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.466939][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.667887][ T5637] veth0_vlan: entered promiscuous mode
[   91.712849][ T5637] veth1_vlan: entered promiscuous mode
[   91.827635][ T5637] veth0_macvtap: entered promiscuous mode
[   91.858664][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.867149][ T5637] veth1_macvtap: entered promiscuous mode
[   91.901125][   T24] cfg80211: failed to load regulatory.db
[   91.995931][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.054463][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.108148][ T1173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.153149][ T1173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.208325][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.215559][ T1173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.237188][ T1173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.305452][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.321704][ T5631] veth0_vlan: entered promiscuous mode
[   92.388838][ T5631] veth1_vlan: entered promiscuous mode
[   92.571211][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.597490][ T5631] veth0_macvtap: entered promiscuous mode
[   92.606585][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.668934][ T5631] veth1_macvtap: entered promiscuous mode
[   92.686753][ T5629] Bluetooth: hci0: command tx timeout
[   92.707710][ T5627] veth0_vlan: entered promiscuous mode
[   92.721984][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.732795][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.743224][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.766181][ T5629] Bluetooth: hci1: command tx timeout
[   92.775421][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.794718][ T5627] veth1_vlan: entered promiscuous mode
[   92.830947][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.851427][ T5637] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   92.895764][ T1154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.926501][ T5629] Bluetooth: hci2: command tx timeout
[   92.938492][ T1154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.977897][ T1154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.989060][ T1154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.006295][ T5629] Bluetooth: hci3: command tx timeout
[   93.028209][ T5640] veth0_vlan: entered promiscuous mode
[   93.075976][ T5643] veth0_vlan: entered promiscuous mode
[   93.086500][ T5629] Bluetooth: hci4: command tx timeout
[   93.099968][ T5627] veth0_macvtap: entered promiscuous mode
[   93.147514][ T5627] veth1_macvtap: entered promiscuous mode
[   93.170000][ T5640] veth1_vlan: entered promiscuous mode
[   93.209660][ T5643] veth1_vlan: entered promiscuous mode
[   93.305923][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.338895][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.352566][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.372097][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.420640][   T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.446191][   T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.458713][ T5640] veth0_macvtap: entered promiscuous mode
[   93.485440][   T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.503034][   T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.525962][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.541241][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.550086][ T5640] veth1_macvtap: entered promiscuous mode
[   93.583087][ T5643] veth0_macvtap: entered promiscuous mode
[   93.625981][ T5643] veth1_macvtap: entered promiscuous mode
[   93.688212][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.743054][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.772224][ T3317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.792143][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.803396][ T3317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.868650][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.883973][ T1173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.902056][ T1173] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.960279][ T1173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.960494][ T5833] Zero length message leads to an empty skb
[   93.995495][ T1173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.021072][ T5837] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   94.024742][ T3317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.054843][ T3317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.067403][ T1173] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.097791][ T1173] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.123807][ T1173] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.168888][ T3317] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.188122][ T3317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.231270][ T3317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.270943][ T3317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.293860][ T3317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.482778][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.526230][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.639853][ T5858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15'.
[   94.658256][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.666586][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.721979][ T5857] : entered promiscuous mode
[   94.834825][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.884340][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.925743][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'.
[   94.959155][ T5869] nft_compat: unsupported protocol 0
[   95.013021][ T3317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.041874][ T3317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.434002][ T5875] lo: entered allmulticast mode
[   95.512997][ T5884] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[   95.618601][ T5891] syz.3.21 uses obsolete (PF_INET,SOCK_PACKET)
[   95.715755][ T5903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23'.
[   95.725818][ T5903] netlink: 2 bytes leftover after parsing attributes in process `syz.2.23'.
[   96.500912][ T5908] warning: `syz.3.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   98.383338][ T5878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   98.667986][ T5922] netlink: 9 bytes leftover after parsing attributes in process `syz.4.29'.
[   98.684380][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'.
[   98.722805][ T5922] vlan0: entered promiscuous mode
[   98.935916][ T5927] syzkaller1: entered promiscuous mode
[   98.957789][ T5927] syzkaller1: entered allmulticast mode
[   99.035873][ T5936] sctp: [Deprecated]: syz.4.34 (pid 5936) Use of struct sctp_assoc_value in delayed_ack socket option.
[   99.035873][ T5936] Use struct sctp_sack_info instead
[   99.121355][ T5941] netlink: 40 bytes leftover after parsing attributes in process `syz.3.36'.
[   99.187710][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'.
[   99.205417][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'.
[   99.227889][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'.
[   99.940371][ T5966] netlink: 208 bytes leftover after parsing attributes in process `syz.3.45'.
[   99.991036][ T5966] netlink: 'syz.3.45': attribute type 3 has an invalid length.
[  100.044043][ T5966] netlink: 'syz.3.45': attribute type 29 has an invalid length.
[  100.102738][ T5966] netlink: 4708 bytes leftover after parsing attributes in process `syz.3.45'.
[  100.226544][ T5989] netlink: 36 bytes leftover after parsing attributes in process `syz.0.49'.
[  100.521110][ T6003] netlink: 40 bytes leftover after parsing attributes in process `syz.0.53'.
[  100.636323][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'.
[  100.673282][ T6003] veth0_macvtap: left promiscuous mode
[  100.702064][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'.
[  100.735390][ T6008] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.57'.
[  100.746314][ T6009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.56'.
[  100.755340][ T6009] wg1: entered promiscuous mode
[  100.761031][ T6010] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.57'.
[  100.772466][ T6009] wg1: entered allmulticast mode
[  100.781561][ T6010] openvswitch: netlink: Missing key (keys=40, expected=100)
[  100.796678][ T6009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.56'.
[  100.812772][ T6008] openvswitch: netlink: Missing key (keys=40, expected=100)
[  100.860550][ T6008] syz_tun: entered allmulticast mode
[  100.940843][ T6007] syz_tun: left allmulticast mode
[  100.955235][ T6017] openvswitch: netlink: IPv4 tun info is not correct
[  100.965763][ T6016] --map-set only usable from mangle table
[  101.335657][ T6036] Driver unsupported XDP return value 0 on prog  (id 9) dev N/A, expect packet loss!
[  101.415798][   T29] audit: type=1804 audit(1778977156.111:2): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.69" name="/newroot/17/cgroup.controllers" dev="tmpfs" ino=105 res=1 errno=0
[  101.439519][ T6043] netlink: 'syz.1.69': attribute type 8 has an invalid length.
[  101.523410][   T29] audit: type=1800 audit(1778977156.111:3): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.69" name="cgroup.controllers" dev="tmpfs" ino=105 res=0 errno=0
[  101.561199][   T29] audit: type=1804 audit(1778977156.111:4): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.69" name="/newroot/17/cgroup.controllers" dev="tmpfs" ino=105 res=1 errno=0
[  102.436767][ T6098] Bluetooth: MGMT ver 1.23
[  102.444115][ T6097] xt_hashlimit: size too large, truncated to 1048576
[  103.392642][ T6144] trusted_key: syz.1.91 sent an empty control message without MSG_MORE.
[  104.867507][ T6156] vlan2: entered allmulticast mode
[  105.083155][ T6167] syzkaller0: entered promiscuous mode
[  105.110457][ T6167] syzkaller0: entered allmulticast mode
[  105.349720][ T6183] __nla_validate_parse: 14 callbacks suppressed
[  105.349740][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'.
[  105.414721][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.99'.
[  105.449823][ T6188] netlink: 72 bytes leftover after parsing attributes in process `syz.4.101'.
[  105.487696][ T6179] ipvlan2: entered allmulticast mode
[  105.493629][ T6179] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[  105.563672][ T6189] syzkaller0: entered promiscuous mode
[  105.587664][ T6189] syzkaller0: entered allmulticast mode
[  105.700234][ T6197] netlink: 'syz.0.105': attribute type 4 has an invalid length.
[  105.734535][ T6197] netlink: 17 bytes leftover after parsing attributes in process `syz.0.105'.
[  105.981628][ T6207] sctp: [Deprecated]: syz.4.108 (pid 6207) Use of int in max_burst socket option.
[  105.981628][ T6207] Use struct sctp_assoc_value instead
[  106.061347][ T6211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.110'.
[  106.065589][ T6210] netlink: 'syz.3.109': attribute type 33 has an invalid length.
[  106.194189][ T6210] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  106.232269][ T6210] bond1 (unregistering): Released all slaves
[  106.332494][ T6224] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  106.369202][ T6224] netlink: 'syz.2.114': attribute type 39 has an invalid length.
[  106.599339][ T6236] netlink: 104 bytes leftover after parsing attributes in process `syz.3.117'.
[  106.823278][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.120'.
[  106.853621][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.120'.
[  106.910776][   T54] IPVS: starting estimator thread 0...
[  106.920023][ T6250] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available
[  107.017258][ T6245] Bluetooth: MGMT ver 1.23
[  107.032340][ T6258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.123'.
[  107.036371][ T6255] IPVS: using max 26 ests per chain, 62400 per kthread
[  107.373007][ T6270] 8021q: adding VLAN 0 to HW filter on device batadv1
[  107.426551][ T6270] team0: Port device batadv1 added
[  107.641725][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.131'.
[  107.666525][ T6288] netlink: 'syz.2.131': attribute type 2 has an invalid length.
[  107.828573][ T6299] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.875425][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.920606][ T6299] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.941312][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.075966][ T6308] netlink: 'syz.0.137': attribute type 1 has an invalid length.
[  108.444003][ T6323] netlink: 'syz.1.143': attribute type 7 has an invalid length.
[  108.475007][ T6323] netlink: 'syz.1.143': attribute type 8 has an invalid length.
[  108.608378][ T6331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  108.641106][ T6339] netlink: 'syz.2.148': attribute type 32 has an invalid length.
[  108.782402][ T6339] bond1: Setting coupled_control to off (0)
[  109.018924][ T6355] netlink: 'syz.3.152': attribute type 1 has an invalid length.
[  109.350761][ T6363] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[  109.562584][ T6383] sock: sock_timestamping_bind_phc: sock not bind to device
[  110.010421][ T6405] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.142250][ T6402] syzkaller0: entered promiscuous mode
[  110.166158][ T6402] syzkaller0: entered allmulticast mode
[  110.477462][ T6421] vlan2: entered promiscuous mode
[  110.491557][ T6421] bridge0: entered promiscuous mode
[  110.757392][ T6436] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma?
[  111.105466][ T6459] __nla_validate_parse: 9 callbacks suppressed
[  111.105500][ T6459] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.182'.
[  111.235570][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'.
[  112.048599][ T6491] netlink: 'syz.0.188': attribute type 21 has an invalid length.
[  112.261440][ T6497] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.192'.
[  112.294245][ T6495] openvswitch: netlink: nsh attr 12 is out of range max 3
[  112.302903][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.193'.
[  112.311315][ T6495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.384827][ T6500] netlink: 44 bytes leftover after parsing attributes in process `syz.4.193'.
[  112.530079][ T6509] netlink: 'syz.2.195': attribute type 27 has an invalid length.
[  112.542405][ T6504] x_tables: duplicate underflow at hook 1
[  112.572859][ T6509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.195'.
[  112.809616][ T6517] netlink: 'syz.3.197': attribute type 11 has an invalid length.
[  112.881939][ T6517] netlink: 64 bytes leftover after parsing attributes in process `syz.3.197'.
[  113.224541][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'.
[  113.345987][ T6539] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.472783][ T6538] wireguard0: entered promiscuous mode
[  113.481143][ T6538] wireguard0: entered allmulticast mode
[  113.521804][ T6546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.205'.
[  113.618880][ T6539] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.804709][ T6539] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.016292][ T6539] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.177294][   T29] audit: type=1800 audit(1778977168.881:5): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.208" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=220 res=0 errno=0
[  114.502650][   T58] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.533113][ T6589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.211'.
[  114.661993][ T6589] gretap0: entered promiscuous mode
[  114.699207][ T6589] gretap0: left promiscuous mode
[  114.791623][ T3317] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.877762][   T35] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.948295][ T6607] netlink: 'syz.1.217': attribute type 1 has an invalid length.
[  114.984232][ T6601] syzkaller0: entered promiscuous mode
[  115.017605][ T6601] syzkaller0: entered allmulticast mode
[  115.113295][   T35] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.159703][ T6607] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.213247][ T6613] bond1: (slave bridge3): making interface the new active one
[  115.224113][ T6613] bond1: (slave bridge3): Enslaving as an active interface with an up link
[  115.283232][ T6617] 8021q: adding VLAN 0 to HW filter on device bond1
[  115.380040][ T6631] x_tables: duplicate underflow at hook 2
[  115.419254][ T6634] Bluetooth: MGMT ver 1.23
[  115.623437][ T6641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  115.673616][ T6644] xt_CT: You must specify a L4 protocol and not use inversions on it
[  115.934922][  T809] IPVS: starting estimator thread 0...
[  116.036262][ T6664] IPVS: using max 36 ests per chain, 86400 per kthread
[  116.270678][ T6674] __nla_validate_parse: 7 callbacks suppressed
[  116.270700][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'.
[  116.336202][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'.
[  117.043017][ T6689] netlink: 67 bytes leftover after parsing attributes in process `syz.0.238'.
[  117.073059][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'.
[  117.202837][ T6703] Bluetooth: MGMT ver 1.23
[  117.225807][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'.
[  117.493090][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'.
[  117.799433][ T6734] IPv6: NLM_F_CREATE should be specified when creating new route
[  117.958497][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'.
[  117.975836][ T6743] netlink: 'syz.0.254': attribute type 11 has an invalid length.
[  118.025050][ T6738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.252'.
[  118.045918][ T6738] netlink: 48 bytes leftover after parsing attributes in process `syz.1.252'.
[  118.534575][ T6762] netdevsim netdevsim3: Direct firmware load for . failed with error -2
[  118.557597][ T6762] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  118.627482][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.262'.
[  119.025960][ T6788] netlink: 'syz.1.270': attribute type 3 has an invalid length.
[  119.043083][ T6788] netlink: 'syz.1.270': attribute type 1 has an invalid length.
[  119.116257][ T6791] netlink: 'syz.4.271': attribute type 1 has an invalid length.
[  119.229348][ T6791] bond1: Invalid ad_actor_system MAC address.
[  119.235740][ T6791] bond1: option ad_actor_system: invalid value (1)
[  119.245273][ T6791] bond1 (unregistering): Released all slaves
[  119.257947][ T5629] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  119.265360][ T5629] Bluetooth: hci2: command 0x0401 tx timeout
[  119.726296][ T6817] syzkaller0: entered promiscuous mode
[  119.732008][ T6817] syzkaller0: entered allmulticast mode
[  119.778874][ T6826] xt_TCPMSS: Only works on TCP SYN packets
[  119.861647][ T6831] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.899523][ T6831] netlink: 'syz.4.283': attribute type 1 has an invalid length.
[  120.056599][ T6831] bond1: entered promiscuous mode
[  120.079294][ T6831] 8021q: adding VLAN 0 to HW filter on device bond1
[  120.188665][ T6842] netlink: 'syz.0.285': attribute type 1 has an invalid length.
[  121.123509][ T6888] erspan0: entered promiscuous mode
[  121.187610][ T6902] xt_hashlimit: size too large, truncated to 1048576
[  121.374589][ T6909] __nla_validate_parse: 9 callbacks suppressed
[  121.374611][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'.
[  121.903848][ T6921] netlink: 'syz.0.306': attribute type 1 has an invalid length.
[  121.970598][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  122.129448][ T6921] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  122.185405][ T6938] netlink: 'syz.4.310': attribute type 8 has an invalid length.
[  122.282192][ T6941] netlink: 'syz.4.310': attribute type 3 has an invalid length.
[  122.299724][ T6943] netlink: 'syz.2.312': attribute type 4 has an invalid length.
[  122.387279][ T6945] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.313'.
[  122.397257][ T6947] nbd: must specify an index to disconnect
[  122.410724][ T6949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.314'.
[  122.441138][ T6949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.314'.
[  122.465563][ T6949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.314'.
[  122.479738][ T6949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.314'.
[  122.489607][ T6949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.314'.
[  122.521649][ T6940] netlink: 20 bytes leftover after parsing attributes in process `syz.3.311'.
[  122.533690][ T6949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.314'.
[  122.551336][ T6940] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.627545][ T6940] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.712060][ T6949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.314'.
[  123.224887][ T6980] team0: Device gtp0 is up. Set it down before adding it as a team port
[  123.390771][ T6987] netlink: 'syz.1.326': attribute type 15 has an invalid length.
[  123.449585][ T6991] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.471829][ T6991] team0: Port device batadv0 added
[  123.677228][ T7001] netlink: 'syz.4.333': attribute type 11 has an invalid length.
[  123.701061][ T7001] netlink: 'syz.4.333': attribute type 4 has an invalid length.
[  123.732893][ T7001] netlink: 'syz.4.333': attribute type 6 has an invalid length.
[  123.886736][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.206445][   T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.234860][ T7031] Unsupported ieee802154 address type: 0
[  124.446599][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.455044][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.094926][ T7046] xt_hashlimit: invalid rate
[  125.487185][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.495660][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.808622][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.886904][ T5629] Bluetooth: hci4: command tx timeout
[  126.526683][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.535111][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.658471][ T7002] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  126.905971][ T7056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.916517][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.215861][ T7069] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  127.276298][ T7067] __nla_validate_parse: 30 callbacks suppressed
[  127.276319][ T7067] netlink: 48 bytes leftover after parsing attributes in process `syz.0.349'.
[  127.322113][ T7079] netlink: 'syz.3.353': attribute type 1 has an invalid length.
[  127.538425][ T7084] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  127.539887][ T7090] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.357'.
[  127.558030][ T7090] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  127.568291][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.672886][ T7088] veth3: entered promiscuous mode
[  127.710236][ T7088] bond2: (slave veth3): Enslaving as a backup interface with a down link
[  127.902583][ T7112] geneve1: entered promiscuous mode
[  127.966987][ T7114] lo: entered allmulticast mode
[  128.233952][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.367'.
[  128.277159][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.367'.
[  128.369096][ T7128] xfrm1: entered promiscuous mode
[  128.387361][ T7128] xfrm1: entered allmulticast mode
[  128.435843][ T7136] netlink: 'syz.4.369': attribute type 4 has an invalid length.
[  128.478443][ T7135] netlink: 'syz.4.369': attribute type 4 has an invalid length.
[  128.524625][ T7141] netlink: 'syz.4.369': attribute type 4 has an invalid length.
[  128.669275][ T7147] netlink: 'syz.1.373': attribute type 1 has an invalid length.
[  129.098181][ T7168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.379'.
[  129.226278][ T7174] netlink: 16 bytes leftover after parsing attributes in process `syz.4.380'.
[  129.261540][ T7181] netlink: 'syz.2.382': attribute type 1 has an invalid length.
[  129.466818][ T7187] netlink: 48 bytes leftover after parsing attributes in process `syz.3.384'.
[  129.663652][ T7202] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.388'.
[  129.919451][ T7213] netlink: 40 bytes leftover after parsing attributes in process `syz.2.391'.
[  130.015974][ T7219] netlink: 'syz.0.392': attribute type 1 has an invalid length.
[  130.057889][ T7221] netlink: 'syz.2.393': attribute type 1 has an invalid length.
[  130.123672][ T7221] bond2: (slave gretap1): making interface the new active one
[  130.140871][ T7221] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  130.191102][ T7226] bond2: (slave bridge1): Enslaving as an active interface with a down link
[  130.223062][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'.
[  130.236741][ T7221] macvlan3: entered promiscuous mode
[  130.249071][ T7221] macvlan3: entered allmulticast mode
[  130.262575][ T7221] bond2: entered promiscuous mode
[  130.277229][ T7221] gretap1: entered promiscuous mode
[  130.303065][ T7221] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  130.321764][ T7221] bond2: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  130.339181][ T7221] bond2: left promiscuous mode
[  130.344193][ T7221] gretap1: left promiscuous mode
[  130.529148][ T7234] netlink: 'syz.2.396': attribute type 1 has an invalid length.
[  130.558481][ T7234] 8021q: adding VLAN 0 to HW filter on device bond3
[  130.631292][ T7242] netlink: 'syz.2.398': attribute type 5 has an invalid length.
[  130.923533][ T7249] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  130.937273][ T7249] bond4 (unregistering): Released all slaves
[  131.260777][ T7257] netlink: 'syz.2.403': attribute type 13 has an invalid length.
[  132.042250][ T7169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  132.334035][ T7268] __nla_validate_parse: 6 callbacks suppressed
[  132.334054][ T7268] netlink: 24 bytes leftover after parsing attributes in process `syz.4.405'.
[  132.777478][ T7291] netdevsim netdevsim3: Direct firmware load for .. failed with error -2
[  132.799609][ T7291] netdevsim netdevsim3: Falling back to sysfs fallback for: ..
[  132.821256][ T7295] net_ratelimit: 2 callbacks suppressed
[  132.821278][ T7295] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.851188][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  132.858744][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  133.087765][ T7310] netlink: 76 bytes leftover after parsing attributes in process `syz.0.418'.
[  133.221574][ T7317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.420'.
[  133.633650][ T7329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.424'.
[  133.673073][ T7327] syzkaller1: tun_chr_ioctl cmd 1074025677
[  133.679708][ T7327] syzkaller1: Linktype set failed because interface is up
[  133.690179][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'.
[  133.707931][   T10] syzkaller1: tun_net_xmit 90
[  133.766571][ T7341] validate_nla: 2 callbacks suppressed
[  133.766588][ T7341] netlink: 'syz.1.428': attribute type 9 has an invalid length.
[  134.027953][ T7353] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  134.152026][ T7359] netlink: 64 bytes leftover after parsing attributes in process `syz.0.433'.
[  134.269075][ T7364] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.435'.
[  134.422975][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.434'.
[  134.633661][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.439'.
[  134.776163][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.439'.
[  135.002984][ T7389] syz_tun: entered allmulticast mode
[  136.275241][ T7450] syzkaller0: entered promiscuous mode
[  136.295519][ T7450] syzkaller0: entered allmulticast mode
[  136.901096][ T7479] netlink: 'syz.0.458': attribute type 23 has an invalid length.
[  137.672384][ T7521] __nla_validate_parse: 5 callbacks suppressed
[  137.672411][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'.
[  137.876911][ T7534] netlink: 'syz.1.470': attribute type 1 has an invalid length.
[  138.111231][ T7534] 8021q: adding VLAN 0 to HW filter on device bond2
[  138.137111][ T7539] bond2: (slave gretap1): making interface the new active one
[  138.148766][ T7539] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  138.160593][ T7549] netlink: 596 bytes leftover after parsing attributes in process `syz.0.472'.
[  138.405769][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.473'.
[  138.473303][ T7556] : entered promiscuous mode
[  138.487265][ T7560] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.474'.
[  138.520000][ T7558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  138.540935][ T7566] set match dimension is over the limit!
[  138.593242][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.473'.
[  138.641507][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.473'.
[  138.805105][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.473'.
[  138.824245][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.473'.
[  139.049872][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.473'.
[  139.064463][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.473'.
[  139.248887][ T7594] netlink: 'syz.0.481': attribute type 4 has an invalid length.
[  139.492486][  T809] bridge0: entered promiscuous mode
[  139.762590][ T7611] xt_CT: You must specify a L4 protocol and not use inversions on it
[  139.790969][ T7616] netlink: 'syz.0.486': attribute type 4 has an invalid length.
[  139.824909][ T7616] netlink: 'syz.0.486': attribute type 1 has an invalid length.
[  139.893489][ T7618] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  139.914396][ T7616] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  139.934903][ T7616] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  140.079829][ T7629] openvswitch: netlink: IPv4 tunnel dst address is zero
[  140.190189][ T7637] xt_CT: You must specify a L4 protocol and not use inversions on it
[  140.887836][ T7669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.130949][ T7688] netlink: 'syz.3.503': attribute type 1 has an invalid length.
[  141.721627][ T7715] netlink: 'syz.1.511': attribute type 1 has an invalid length.
[  141.764588][ T7710] can: request_module (can-proto-0) failed.
[  141.835955][ T7724] netlink: 'syz.0.513': attribute type 83 has an invalid length.
[  142.106769][ T7710] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  142.130687][ T7728] veth0_to_bridge: entered promiscuous mode
[  142.173013][ T7709] veth0_to_bridge: left promiscuous mode
[  142.902170][ T7782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.711109][ T7718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  144.985307][ T7828] netlink: 'syz.4.526': attribute type 1 has an invalid length.
[  145.020076][ T7827] syzkaller0: entered promiscuous mode
[  145.053262][ T7827] syzkaller0: entered allmulticast mode
[  145.173734][ T7840] __nla_validate_parse: 15 callbacks suppressed
[  145.173753][ T7840] netlink: 52 bytes leftover after parsing attributes in process `syz.0.530'.
[  145.320947][ T7840] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.330240][ T7840] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.503014][ T7868] netlink: 220 bytes leftover after parsing attributes in process `syz.1.536'.
[  145.610003][ T7871] netlink: 'syz.2.537': attribute type 5 has an invalid length.
[  145.619055][ T7871] netlink: 140 bytes leftover after parsing attributes in process `syz.2.537'.
[  145.690721][ T7876] netlink: 'syz.1.538': attribute type 5 has an invalid length.
[  145.758129][ T7879] netlink: 128 bytes leftover after parsing attributes in process `syz.2.539'.
[  148.115004][ T7849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  148.617802][ T7902] netlink: 'syz.3.547': attribute type 30 has an invalid length.
[  148.893998][ T7909] syzkaller0: entered promiscuous mode
[  148.912498][ T7909] syzkaller0: entered allmulticast mode
[  148.934226][ T7910] netlink: 32 bytes leftover after parsing attributes in process `syz.2.550'.
[  149.578723][ T7934] raw_sendmsg: syz.4.557 forgot to set AF_INET. Fix it!
[  149.852666][ T7946] bridge_slave_0: left allmulticast mode
[  149.870688][ T7946] bridge_slave_0: left promiscuous mode
[  149.888926][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.934508][ T7946] bridge_slave_1: left allmulticast mode
[  149.953336][ T7946] bridge_slave_1: left promiscuous mode
[  149.969449][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.006383][ T7952] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.021023][ T7946] bond0: (slave bond_slave_0): Releasing backup interface
[  150.048127][ T7946] bond0: (slave bond_slave_1): Releasing backup interface
[  150.089361][ T7946] team0: Port device team_slave_0 removed
[  150.112719][ T7946] team0: Port device team_slave_1 removed
[  150.129981][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.150029][ T7946] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.186806][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.208354][ T7946] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.238988][ T7946] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  150.313328][ T7947] ip6gre1: entered allmulticast mode
[  150.326727][ T7947] team0: Port device ip6gre1 added
[  150.363103][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.566'.
[  150.526401][ T7970] netlink: 'syz.2.566': attribute type 5 has an invalid length.
[  150.567300][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'.
[  150.619286][ T7981] netlink: 'syz.4.568': attribute type 1 has an invalid length.
[  150.909130][ T7995] macvlan2: entered promiscuous mode
[  150.926644][ T7995] macvlan2: entered allmulticast mode
[  150.947843][ T7995] bond2: entered promiscuous mode
[  150.956954][ T7995] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  150.990368][ T7995] bond2: left promiscuous mode
[  152.039225][ T8063] netlink: 128 bytes leftover after parsing attributes in process `syz.3.588'.
[  152.068059][ T8060] x_tables: ip6_tables: mh match: only valid for protocol 135
[  152.070046][ T8065] x_tables: ip6_tables: mh match: only valid for protocol 135
[  152.093705][ T8064] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  152.625795][ T8083] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  152.650215][ T8090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.595'.
[  152.677088][ T8090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.595'.
[  152.692702][ T8083] bond4 (unregistering): Released all slaves
[  152.731812][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.596'.
[  152.788510][ T8094] syz_tun: entered allmulticast mode
[  152.798341][ T8096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.598'.
[  152.841102][ T8098] pimreg: entered allmulticast mode
[  152.861866][ T8092] syz_tun: left allmulticast mode
[  153.064729][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.598'.
[  153.203362][ T8119] block nbd0: not configured, cannot reconfigure
[  153.214301][ T8111] netlink: 'syz.2.599': attribute type 1 has an invalid length.
[  153.256664][ T8111] netlink: 224 bytes leftover after parsing attributes in process `syz.2.599'.
[  153.328878][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  153.789626][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'.
[  153.814336][ T8139] bond4: Unable to set up delay as MII monitoring is disabled
[  153.826318][ T8139] bond4 (unregistering): Released all slaves
[  154.115840][ T8158] netlink: 'syz.3.611': attribute type 1 has an invalid length.
[  154.200521][ T8163] block nbd0: not configured, cannot reconfigure
[  154.689935][ T8185] ieee802154 phy1 wpan1: encryption failed: -22
[  154.769820][ T8188] netlink: 'syz.2.619': attribute type 12 has an invalid length.
[  154.793298][ T8188] netlink: 'syz.2.619': attribute type 29 has an invalid length.
[  154.969937][ T8194] netlink: 'syz.2.619': attribute type 2 has an invalid length.
[  155.095847][ T8201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  155.290345][ T8209] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  155.308912][ T8209] bond1: (slave lo): Enslaving as an active interface with an up link
[  155.329693][ T8209] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  155.367442][ T8211] block nbd0: not configured, cannot reconfigure
[  155.404394][ T8215] openvswitch: netlink: IP tunnel dst address not specified
[  155.434506][ T8215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.439841][ T8217] __nla_validate_parse: 6 callbacks suppressed
[  155.439968][ T8217] netlink: 19 bytes leftover after parsing attributes in process `syz.1.629'.
[  155.618255][ T8217] syzkaller1: entered promiscuous mode
[  155.629826][ T8217] syzkaller1: entered allmulticast mode
[  155.651129][ T8217] netlink: 192 bytes leftover after parsing attributes in process `syz.1.629'.
[  156.014175][ T8250] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  156.192292][ T8261] netlink: 'syz.2.636': attribute type 1 has an invalid length.
[  158.569545][ T8231] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  158.893345][ T8292] Cannot find add_set index 9 as target
[  159.095460][ T8307] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.649'.
[  159.134266][ T8307] 0�X��D��: renamed from gretap0 (while UP)
[  159.143691][ T8307] 0�X��D��: entered allmulticast mode
[  159.515161][ T8325] block nbd0: not configured, cannot reconfigure
[  159.575042][ T8327] netlink: 596 bytes leftover after parsing attributes in process `syz.0.654'.
[  159.788793][ T8336] sctp: [Deprecated]: syz.3.657 (pid 8336) Use of struct sctp_assoc_value in delayed_ack socket option.
[  159.788793][ T8336] Use struct sctp_sack_info instead
[  160.023913][ T8352] netlink: 'syz.3.660': attribute type 21 has an invalid length.
[  160.091375][ T8352] IPv6: NLM_F_CREATE should be specified when creating new route
[  160.153508][ T8356] netlink: 'syz.1.662': attribute type 1 has an invalid length.
[  160.304630][ T8366] netlink: 14 bytes leftover after parsing attributes in process `syz.0.663'.
[  160.335919][ T8370] block nbd0: not configured, cannot reconfigure
[  160.391755][ T8367] netlink: 'syz.1.662': attribute type 1 has an invalid length.
[  160.409743][ T8367] netlink: 96 bytes leftover after parsing attributes in process `syz.1.662'.
[  160.428054][ T8367] netlink: 1 bytes leftover after parsing attributes in process `syz.1.662'.
[  160.439164][ T8367] netlink: 'syz.1.662': attribute type 1 has an invalid length.
[  160.448544][ T8367] netlink: 'syz.1.662': attribute type 8 has an invalid length.
[  160.462599][ T8367] netlink: 582 bytes leftover after parsing attributes in process `syz.1.662'.
[  160.484993][ T8360] bond4: (slave bridge4): making interface the new active one
[  160.521317][ T8360] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  160.546430][ T8356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  160.622127][ T8366] bond0 (unregistering): Released all slaves
[  160.629954][ T8380] netlink: 16 bytes leftover after parsing attributes in process `syz.4.668'.
[  160.711795][ T8386] netlink: 16 bytes leftover after parsing attributes in process `syz.3.669'.
[  160.909250][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.670'.
[  161.245840][ T8410] netlink: 192 bytes leftover after parsing attributes in process `syz.2.674'.
[  161.328805][ T8415] block nbd0: not configured, cannot reconfigure
[  161.524701][ T8423] netlink: 'syz.2.679': attribute type 1 has an invalid length.
[  161.545777][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'.
[  161.557334][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'.
[  161.640989][ T8427] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  161.717550][ T8423] veth3: entered promiscuous mode
[  161.741693][ T8423] bond4: (slave veth3): Enslaving as a backup interface with a down link
[  161.843169][ T8431] bridge_slave_0: left allmulticast mode
[  161.849352][ T8431] bridge_slave_0: left promiscuous mode
[  161.855603][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.051830][ T8431] bridge_slave_1: left allmulticast mode
[  162.060572][ T8431] bridge_slave_1: left promiscuous mode
[  162.073227][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.092612][ T8431] bond0: (slave bond_slave_0): Releasing backup interface
[  162.113763][ T8431] bond0: (slave bond_slave_1): Releasing backup interface
[  162.140627][ T8431] team0: Port device team_slave_0 removed
[  162.160260][ T8431] team0: Port device team_slave_1 removed
[  162.169298][ T8431] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  162.214283][ T8442] bridge_slave_0: left allmulticast mode
[  162.220554][ T8442] bridge_slave_0: left promiscuous mode
[  162.230809][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.243514][ T8442] bridge_slave_1: left allmulticast mode
[  162.252731][ T8442] bridge_slave_1: left promiscuous mode
[  162.258777][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.279242][ T8442] bond0: (slave bond_slave_0): Releasing backup interface
[  162.299553][ T8442] bond0: (slave bond_slave_1): Releasing backup interface
[  162.332163][ T8442] team0: Port device team_slave_0 removed
[  162.350849][ T8442] team0: Port device team_slave_1 removed
[  162.369154][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.378249][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.387612][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.395216][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.405056][ T8442] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  162.434642][ T8446] wireguard0: entered promiscuous mode
[  162.441133][ T8446] wireguard0: entered allmulticast mode
[  162.778851][ T8471] block nbd0: not configured, cannot reconfigure
[  162.897427][ T8477] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20004
[  162.932953][ T8476] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0
[  163.142587][ T8496] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.698'.
[  163.233727][ T8502] IPv6: NLM_F_CREATE should be specified when creating new route
[  163.312708][ T8502] netlink: 64 bytes leftover after parsing attributes in process `syz.2.699'.
[  163.464370][ T8514] openvswitch: netlink: Flow key attribute not present in set flow.
[  163.661874][ T8521] block nbd0: not configured, cannot reconfigure
[  164.054392][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.709'.
[  164.232595][ T8541] 8021q: adding VLAN 0 to HW filter on device bond4
[  164.376801][ T8552] ip6t_srh: unknown srh invflags 4000
[  164.401636][ T8552] netlink: 'syz.0.712': attribute type 1 has an invalid length.
[  164.514948][ T8556] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.641113][ T8565] block nbd0: not configured, cannot reconfigure
[  164.946389][ T8577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.027757][ T8578] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  165.169403][ T8587] netlink: Unknown conntrack attr (0)
[  165.355379][ T8595] IPVS: Error connecting to the multicast addr
[  165.388231][ T8595] block nbd0: not configured, cannot reconfigure
[  165.403966][ T8592] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  165.437241][ T8596] tipc: Started in network mode
[  165.454001][ T8596] tipc: Node identity fe503967a548, cluster identity 4711
[  165.481541][ T8596] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.514980][ T8599] block nbd0: not configured, cannot reconfigure
[  165.522447][ T8602] netlink: 'syz.2.731': attribute type 1 has an invalid length.
[  165.543916][ T8602] __nla_validate_parse: 6 callbacks suppressed
[  165.543932][ T8602] netlink: 224 bytes leftover after parsing attributes in process `syz.2.731'.
[  165.630600][ T8603] syzkaller0: entered promiscuous mode
[  165.636445][ T8603] syzkaller0: entered allmulticast mode
[  165.645700][ T8603] tipc: Resetting bearer <eth:syzkaller0>
[  165.748796][ T8594] tipc: Resetting bearer <eth:syzkaller0>
[  166.089344][ T8630] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  166.183988][ T8632] netlink: 27 bytes leftover after parsing attributes in process `syz.1.739'.
[  167.562673][ T8594] tipc: Disabling bearer <eth:syzkaller0>
[  167.582214][ T5761] tipc: Node number set to 1528314215
[  167.773692][ T8639] IPVS: Error connecting to the multicast addr
[  167.794452][ T8638] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  167.816372][ T8639] block nbd0: not configured, cannot reconfigure
[  168.037697][ T8650] netlink: 'syz.4.745': attribute type 29 has an invalid length.
[  168.214724][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'.
[  168.249082][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'.
[  168.264654][ T8658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.748'.
[  168.802866][ T8694] netlink: 'syz.3.756': attribute type 1 has an invalid length.
[  168.865508][ T8694] IPVS: Error connecting to the multicast addr
[  168.932369][ T8694] block nbd0: not configured, cannot reconfigure
[  169.386865][ T8712] bond0: entered promiscuous mode
[  169.691899][ T8734] netlink: 'syz.1.773': attribute type 1 has an invalid length.
[  169.782319][ T8734] IPVS: Error connecting to the multicast addr
[  169.849436][ T8734] block nbd0: not configured, cannot reconfigure
[  169.960767][ T8745] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  170.243422][ T8761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.254984][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.336504][ T8763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.780'.
[  170.560401][ T8778] netlink: 'syz.1.786': attribute type 10 has an invalid length.
[  170.610784][ T8781] netlink: 'syz.2.787': attribute type 1 has an invalid length.
[  170.677201][ T8778] team0 (unregistering): Port device batadv1 removed
[  170.708397][ T8781] IPVS: Error connecting to the multicast addr
[  170.711963][ T8786] block nbd0: not configured, cannot reconfigure
[  171.112084][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.793'.
[  171.150175][ T8809] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  171.169318][ T8808] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  171.279506][ T8816] xt_TCPMSS: Only works on TCP SYN packets
[  171.363190][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.798'.
[  171.400104][ T8820] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  171.450791][ T8828] netlink: 'syz.2.800': attribute type 1 has an invalid length.
[  171.552539][ T8828] block nbd0: not configured, cannot reconfigure
[  171.818016][ T8848] netlink: 'syz.3.806': attribute type 1 has an invalid length.
[  171.983655][ T8848] bond5: entered promiscuous mode
[  172.012530][ T8848] 8021q: adding VLAN 0 to HW filter on device bond5
[  172.151997][ T8854] bond5: (slave bridge2): making interface the new active one
[  172.170137][ T8854] bridge2: entered promiscuous mode
[  172.202004][ T8854] bridge2: left promiscuous mode
[  172.257231][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'.
[  172.560946][ T8871] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.648017][ T8873] xt_l2tp: v2 doesn't support IP mode
[  172.704133][ T8875] netlink: 'syz.3.812': attribute type 2 has an invalid length.
[  172.766421][ T4945] Bluetooth: hci4: command 0x0405 tx timeout
[  173.172420][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  173.463517][ T8900] bond3 (unregistering): Released all slaves
[  173.614242][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.825'.
[  173.647669][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.825'.
[  173.664843][ T8918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.825'.
[  173.716693][ T8920] bridge0: port 3(syz_tun) entered blocking state
[  173.723695][ T8920] bridge0: port 3(syz_tun) entered disabled state
[  173.777788][ T8920] syz_tun: entered promiscuous mode
[  173.787639][ T8920] bridge0: port 3(syz_tun) entered blocking state
[  173.794269][ T8920] bridge0: port 3(syz_tun) entered forwarding state
[  173.838302][ T8922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  174.350357][   T29] audit: type=1107 audit(1778977229.051:6): pid=8946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  174.377161][ T8944] netlink: 'syz.2.832': attribute type 15 has an invalid length.
[  175.276381][ T8981] 8021q: adding VLAN 0 to HW filter on device bond5
[  175.312093][ T8979] syzkaller1: entered promiscuous mode
[  175.317885][ T8979] syzkaller1: entered allmulticast mode
[  175.930840][ T9003] syzkaller1: entered promiscuous mode
[  175.936588][ T9003] syzkaller1: entered allmulticast mode
[  175.942691][ T8911] SET target dimension over the limit!
[  175.952220][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'.
[  176.155185][ T9011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.850'.
[  176.460586][ T9019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.852'.
[  176.480057][ T9020] sctp: Trying to GSO but underlying device doesn't support it.
[  176.605547][ T8833] Set syz1 is full, maxelem 65536 reached
[  177.053808][ T9060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  177.078436][ T9042] netlink: 388 bytes leftover after parsing attributes in process `syz.0.857'.
[  177.178999][ T9065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.187566][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.300497][ T9068] netlink: 'syz.1.859': attribute type 1 has an invalid length.
[  177.440123][ T9068] bond5: entered promiscuous mode
[  177.445742][ T9068] 8021q: adding VLAN 0 to HW filter on device bond5
[  177.523523][ T9068] bond5: (slave bridge5): making interface the new active one
[  177.531353][ T9068] bridge5: entered promiscuous mode
[  177.538646][ T9068] bond5: (slave bridge5): Enslaving as an active interface with an up link
[  177.559230][ T9084] netlink: 336 bytes leftover after parsing attributes in process `syz.2.862'.
[  177.569792][ T9084] netlink: 25 bytes leftover after parsing attributes in process `syz.2.862'.
[  177.615967][ T9077] netlink: 36 bytes leftover after parsing attributes in process `syz.3.861'.
[  177.931974][ T9099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.868'.
[  178.141901][ T9107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.872'.
[  178.242836][ T9111] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  178.251765][ T9111] IPv6: NLM_F_CREATE should be set when creating new route
[  178.305551][ T9107] 8021q: adding VLAN 0 to HW filter on device bond6
[  178.390547][ T9111] netlink: 14 bytes leftover after parsing attributes in process `syz.1.872'.
[  178.455963][ T9107] bond6: (slave dummy0): Enslaving as an active interface with an up link
[  178.491049][ T9111] bond6: (slave dummy0): Releasing backup interface
[  179.604580][ T9181] netlink: 'syz.2.885': attribute type 25 has an invalid length.
[  179.677795][ T9187] netlink: 'syz.0.887': attribute type 1 has an invalid length.
[  179.753865][ T9192] block nbd0: not configured, cannot reconfigure
[  179.793309][ T9187] IPVS: Error connecting to the multicast addr
[  180.074386][ T9212] ipt_rpfilter: unknown options
[  180.107068][ T9212] netlink: 36 bytes leftover after parsing attributes in process `syz.0.891'.
[  180.184361][ T9213] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  180.204864][ T9213] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  180.318101][ T9221] netlink: 'syz.0.891': attribute type 10 has an invalid length.
[  180.338251][ T9221] syz_tun: entered promiscuous mode
[  180.374519][ T9207] batadv1: entered allmulticast mode
[  180.380681][ T9227] netlink: 'syz.2.897': attribute type 1 has an invalid length.
[  180.384883][ T9226] netlink: 'syz.2.897': attribute type 1 has an invalid length.
[  180.418111][ T9226] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  180.569808][ T9231] netlink: 'syz.2.899': attribute type 9 has an invalid length.
[  180.581088][ T9231] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20004
[  180.609602][ T9232] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  180.619007][ T9232] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  180.627046][ T9232] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  180.635062][ T9232] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  180.643115][ T9232] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  180.651381][ T9232] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  180.659883][ T9232] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  180.668134][ T9232] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  180.676249][ T9232] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  180.739011][ T9235] netlink: 'syz.2.901': attribute type 1 has an invalid length.
[  180.753221][ T9235] IPVS: Error connecting to the multicast addr
[  180.764306][ T9235] block nbd0: not configured, cannot reconfigure
[  180.934113][ T9240] 8021q: VLANs not supported on ipvlan0
[  180.947926][ T9241] tipc: Started in network mode
[  180.957948][ T9241] tipc: Node identity aeedbefa0b5a, cluster identity 4711
[  180.973196][ T9241] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.990397][ T9241] syzkaller0: entered promiscuous mode
[  181.005146][ T9241] syzkaller0: entered allmulticast mode
[  181.054016][ T9243] can: request_module (can-proto-0) failed.
[  181.073084][ T9241] tipc: Resetting bearer <eth:syzkaller0>
[  181.088724][ T9238] tipc: Resetting bearer <eth:syzkaller0>
[  181.170765][ T9238] tipc: Disabling bearer <eth:syzkaller0>
[  181.245099][ T9257] __nla_validate_parse: 5 callbacks suppressed
[  181.245119][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.907'.
[  181.425668][ T9259] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.456749][ T9258] tipc: Disabling bearer <eth:syzkaller0>
[  181.542758][ T9265] x_tables: duplicate underflow at hook 2
[  181.574488][ T9268] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  181.700787][ T9272] netlink: 'syz.1.913': attribute type 1 has an invalid length.
[  181.724761][ T9274] netlink: 'syz.3.914': attribute type 1 has an invalid length.
[  181.754607][ T9274] netlink: 'syz.3.914': attribute type 11 has an invalid length.
[  181.766251][ T9272] IPVS: Error connecting to the multicast addr
[  181.793475][ T9274] netlink: 224 bytes leftover after parsing attributes in process `syz.3.914'.
[  181.822814][ T9272] block nbd0: not configured, cannot reconfigure
[  182.003808][ T9284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.917'.
[  182.255521][ T9294] batadv0: entered promiscuous mode
[  182.293456][ T9294] macsec2: entered promiscuous mode
[  182.320378][ T9294] 8021q: adding VLAN 0 to HW filter on device macsec2
[  182.358980][ T9294] batadv0: left promiscuous mode
[  183.051211][ T9340] block nbd0: not configured, cannot reconfigure
[  183.138640][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'.
[  183.172913][ T9347] netlink: 144 bytes leftover after parsing attributes in process `syz.2.931'.
[  183.282205][ T9356] netlink: 168 bytes leftover after parsing attributes in process `syz.0.932'.
[  183.445583][ T9362] netlink: 104 bytes leftover after parsing attributes in process `syz.3.936'.
[  183.541972][ T9363] netlink: 104 bytes leftover after parsing attributes in process `syz.3.936'.
[  183.608799][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.936'.
[  183.664937][ T9362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.936'.
[  183.907800][ T9396] block nbd0: not configured, cannot reconfigure
[  184.453743][ T9412] syzkaller0: entered promiscuous mode
[  184.462124][ T9412] syzkaller0: entered allmulticast mode
[  186.250724][ T9446] team_slave_0: entered promiscuous mode
[  186.256567][ T9446] team_slave_0: entered allmulticast mode
[  186.400754][ T9448] validate_nla: 7 callbacks suppressed
[  186.400775][ T9448] netlink: 'syz.3.956': attribute type 1 has an invalid length.
[  186.470505][ T9450] block nbd0: not configured, cannot reconfigure
[  186.536603][ T9453] __nla_validate_parse: 1 callbacks suppressed
[  186.536623][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'.
[  186.622165][ T9453] veth0_macvtap: left promiscuous mode
[  187.013383][ T9485] netlink: 'syz.2.967': attribute type 9 has an invalid length.
[  187.117783][ T9485] block nbd0: not configured, cannot reconfigure
[  187.190856][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'.
[  187.317354][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.973'.
[  187.330625][ T9502] block nbd0: not configured, cannot reconfigure
[  187.342953][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.971'.
[  187.499520][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'.
[  187.515509][ T9512] netdevsim netdevsim3: Direct firmware load for . failed with error -2
[  187.531657][ T9512] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  187.540515][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'.
[  187.550670][ T9514] block nbd0: not configured, cannot reconfigure
[  187.576689][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'.
[  187.689475][ T9527] netlink: 'syz.4.978': attribute type 1 has an invalid length.
[  187.725436][ T9527] bond3: entered promiscuous mode
[  187.731228][ T9527] 8021q: adding VLAN 0 to HW filter on device bond3
[  187.740591][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'.
[  187.919041][ T9539] block nbd0: not configured, cannot reconfigure
[  188.114015][ T9547] netlink: 32 bytes leftover after parsing attributes in process `syz.4.987'.
[  188.167230][ T9549] block nbd0: not configured, cannot reconfigure
[  188.400670][ T9557] netlink: 'syz.2.990': attribute type 5 has an invalid length.
[  188.702566][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'.
[  188.745254][ T9586] netlink: 'syz.1.996': attribute type 5 has an invalid length.
[  188.772771][ T9586] geneve2: entered promiscuous mode
[  188.781098][ T9586] geneve2: entered allmulticast mode
[  188.805107][ T8893] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  188.845056][ T8893] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  188.873164][ T8893] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  188.901284][ T8893] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  188.913265][ T9593] syzkaller0: entered promiscuous mode
[  188.919226][ T9593] syzkaller0: entered allmulticast mode
[  188.953605][ T9595] block nbd0: not configured, cannot reconfigure
[  189.249369][ T9609] netlink: 'syz.4.1005': attribute type 1 has an invalid length.
[  189.355419][ T9611] bond4: (slave gretap1): making interface the new active one
[  189.364482][ T9611] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  189.682656][ T9625] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  189.682656][ T9625] Please contact the netfilter-devel mailing list or update your nftables rules.
[  190.004469][ T9642] block nbd0: not configured, cannot reconfigure
[  190.384873][ T9655] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  190.431957][ T9660] netlink: 'syz.4.1015': attribute type 2 has an invalid length.
[  190.582185][ T9671] netlink: 'syz.0.1019': attribute type 11 has an invalid length.
[  190.973636][ T9691] block nbd0: not configured, cannot reconfigure
[  191.190068][ T9702] xt_hashlimit: size too large, truncated to 1048576
[  191.345880][ T8893] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  191.415763][ T9716] netem: change failed
[  192.011272][ T9704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  192.020667][ T9714] block nbd0: not configured, cannot reconfigure
[  192.053356][ T9742] block nbd0: not configured, cannot reconfigure
[  192.276534][ T9755] __nla_validate_parse: 14 callbacks suppressed
[  192.276555][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1041'.
[  192.296298][ T9757] x_tables: duplicate underflow at hook 1
[  192.302853][ T9751] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1039'.
[  192.331135][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'.
[  192.371968][ T5761] net_ratelimit: 48 callbacks suppressed
[  192.371989][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  192.808895][ T9784] block nbd0: not configured, cannot reconfigure
[  192.895194][ T9793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1051'.
[  192.932697][ T9793] netlink: 'syz.0.1051': attribute type 7 has an invalid length.
[  192.957394][ T9793] netlink: 'syz.0.1051': attribute type 8 has an invalid length.
[  192.992923][ T9798] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.1053'.
[  193.003257][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'.
[  193.111577][ T9800] sch_tbf: peakrate 4 is lower than or equals to rate 996173156578218475 !
[  193.125869][ T9800] syzkaller0: entered promiscuous mode
[  193.136497][ T9800] syzkaller0: entered allmulticast mode
[  193.223682][ T9804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1056'.
[  193.266208][ T9806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.478083][ T9811] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1059'.
[  193.510743][ T9817] netlink: 'syz.4.1060': attribute type 1 has an invalid length.
[  193.539675][ T9811] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1059'.
[  193.603853][ T9824] netlink: 'syz.1.1061': attribute type 1 has an invalid length.
[  193.605959][ T9825] netlink: 'syz.1.1061': attribute type 1 has an invalid length.
[  193.640223][ T9826] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1060'.
[  193.692600][ T9825] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  193.702865][ T9824] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  193.713313][ T9824] IPVS: set_ctl: invalid protocol: 12 172.20.20.35:20004
[  194.090169][ T9842] bond2: option xmit_hash_policy: invalid value (64)
[  194.137842][ T9842] bond2 (unregistering): Released all slaves
[  194.214795][ T9840] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.249793][ T9840] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.289627][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  194.459065][ T9858] netlink: 'syz.0.1071': attribute type 4 has an invalid length.
[  194.486271][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.511347][ T9861] netlink: 'syz.0.1071': attribute type 1 has an invalid length.
[  194.611225][ T9861] 8021q: adding VLAN 0 to HW filter on device bond2
[  195.678022][ T9922] block nbd0: not configured, cannot reconfigure
[  195.790457][ T9926] tap0: tun_chr_ioctl cmd 1074025672
[  195.804348][ T9926] tap0: ignored: set checksum disabled
[  196.314027][ T9953] netlink: 'syz.4.1100': attribute type 1 has an invalid length.
[  196.508867][ T9954] bond5: (slave gretap2): making interface the new active one
[  196.528266][ T9954] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  196.573334][ T9962] bond5: (slave bridge7): Enslaving as an active interface with a down link
[  196.640706][ T9967] block nbd0: not configured, cannot reconfigure
[  197.020598][ T9984] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  197.097435][ T9984] macvlan6: entered promiscuous mode
[  197.128707][ T9984] macvlan6: entered allmulticast mode
[  197.145261][ T9984] bond6: entered promiscuous mode
[  197.159167][ T9984] bridge5: entered promiscuous mode
[  197.179862][ T9984] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  197.205185][ T9984] bond6: left promiscuous mode
[  197.219113][ T9984] bridge5: left promiscuous mode
[  197.469484][T10012] netlink: 'syz.4.1117': attribute type 1 has an invalid length.
[  197.625565][T10014] veth5: entered promiscuous mode
[  197.807537][T10036] xt_NFQUEUE: number of total queues is 0
[  198.183934][T10049] netlink: 'syz.1.1126': attribute type 29 has an invalid length.
[  198.234554][T10049] __nla_validate_parse: 14 callbacks suppressed
[  198.234572][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'.
[  198.533872][T10074] block nbd0: not configured, cannot reconfigure
[  198.574532][T10077] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1136'.
[  198.793349][T10083] xt_CT: No such helper "pptp"
[  198.820848][T10090] x_tables: duplicate underflow at hook 2
[  199.173703][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'.
[  199.325021][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1151'.
[  199.359077][T10120] block nbd0: not configured, cannot reconfigure
[  199.495746][T10127] syzkaller1: entered promiscuous mode
[  199.505785][T10127] syzkaller1: entered allmulticast mode
[  199.760568][T10143] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1158'.
[  199.911637][T10150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1160'.
[  199.982919][T10154] lo: entered promiscuous mode
[  200.006305][T10154] netlink: 'syz.2.1160': attribute type 2 has an invalid length.
[  200.044506][T10154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  200.160301][T10162] block nbd0: not configured, cannot reconfigure
[  200.250408][T10166] netlink: 'syz.2.1166': attribute type 1 has an invalid length.
[  200.286270][T10166] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1166'.
[  200.316912][T10166] netlink: 'syz.2.1166': attribute type 1 has an invalid length.
[  200.344387][T10166] netlink: 'syz.2.1166': attribute type 8 has an invalid length.
[  200.384926][T10166] netlink: 606 bytes leftover after parsing attributes in process `syz.2.1166'.
[  200.395853][T10166] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1166'.
[  200.544399][T10173] bond7: Removing last ns target with arp_interval on
[  200.701145][T10184] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1171'.
[  200.735901][T10184] netlink: 'syz.2.1171': attribute type 6 has an invalid length.
[  200.765726][T10184] netlink: 'syz.2.1171': attribute type 5 has an invalid length.
[  200.786574][T10188] SET target dimension over the limit!
[  200.873874][   T29] audit: type=1107 audit(1778977255.571:7): pid=10189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  200.940647][   T29] audit: type=1107 audit(1778977255.571:8): pid=10189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  200.995868][   T29] audit: type=1107 audit(1778977255.571:9): pid=10189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  201.017230][T10198] netlink: 'syz.2.1175': attribute type 29 has an invalid length.
[  201.039837][   T29] audit: type=1107 audit(1778977255.571:10): pid=10189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  201.074499][   T29] audit: type=1107 audit(1778977255.571:11): pid=10189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  201.113442][   T29] audit: type=1107 audit(1778977255.601:12): pid=10189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  201.154887][   T29] audit: type=1107 audit(1778977255.601:13): pid=10189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  201.193694][   T29] audit: type=1107 audit(1778977255.601:14): pid=10189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  201.245500][T10205] block nbd0: not configured, cannot reconfigure
[  201.252691][   T29] audit: type=1107 audit(1778977255.601:15): pid=10189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  201.317080][   T29] audit: type=1107 audit(1778977255.601:16): pid=10189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  201.666401][T10230] SET target dimension over the limit!
[  202.218244][T10247] block nbd0: not configured, cannot reconfigure
[  202.247792][T10249] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  202.278451][T10249] gretap3: entered promiscuous mode
[  202.311659][T10249] gretap3: entered allmulticast mode
[  202.691557][T10278] xt_TCPMSS: Only works on TCP SYN packets
[  202.737316][T10283] tipc: Enabled bearer <eth:vlan0>, priority 24
[  202.839293][T10292] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  203.141937][T10300] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  203.310320][T10314] netlink: 'syz.4.1210': attribute type 1 has an invalid length.
[  203.400861][T10313] bond8: (slave geneve2): making interface the new active one
[  203.441834][T10314] __nla_validate_parse: 4 callbacks suppressed
[  203.441854][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1210'.
[  203.492168][T10313] bond8: (slave geneve2): Enslaving as an active interface with an up link
[  203.532263][ T8892] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  203.564758][ T8892] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  203.599120][ T8892] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  203.626769][ T8892] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  203.843424][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1215'.
[  203.924641][T10340] netlink: 'syz.0.1217': attribute type 22 has an invalid length.
[  203.934132][T10342] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1219'.
[  203.954173][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1217'.
[  203.974158][T10342] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1219'.
[  204.026336][T10344] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1217'.
[  204.084086][T10343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  204.119626][ T8892] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  204.137329][ T8892] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  204.154987][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'.
[  204.188523][T10349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1219'.
[  204.221864][T10349] netlink: 'syz.2.1219': attribute type 14 has an invalid length.
[  204.236813][T10353] openvswitch: netlink: IP tunnel TTL not specified.
[  204.260056][T10349] netlink: 'syz.2.1219': attribute type 13 has an invalid length.
[  204.303214][ T8892] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  204.332037][ T9061] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  204.375350][T10359] netlink: 'syz.0.1224': attribute type 8 has an invalid length.
[  204.402748][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1224'.
[  204.525032][T10367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1226'.
[  204.675236][T10378] sock: sock_set_timeout: `syz.1.1228' (pid 10378) tries to set negative timeout
[  204.692433][T10353] nbd0: detected capacity change from 0 to 63
[  204.742470][ T4945] block nbd0: Receive control failed (result -32)
[  204.743073][   T50] block nbd0: Receive control failed (result -32)
[  204.783019][ T5731] block nbd0: Dead connection, failed to find a fallback
[  204.830028][ T5731] block nbd0: shutting down sockets
[  204.853348][ T5731] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  204.870301][ T5731] Buffer I/O error on dev nbd0, logical block 0, async page read
[  204.879859][ T5731] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  204.915860][ T5731] Buffer I/O error on dev nbd0, logical block 1, async page read
[  204.941209][ T5731] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  204.974962][ T5731] Buffer I/O error on dev nbd0, logical block 2, async page read
[  205.008960][ T5731] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.058979][T10392] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma?
[  205.060972][ T5731] Buffer I/O error on dev nbd0, logical block 3, async page read
[  205.150638][ T5731] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.164192][ T5731] Buffer I/O error on dev nbd0, logical block 0, async page read
[  205.172661][ T5731] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.182574][ T5731] Buffer I/O error on dev nbd0, logical block 1, async page read
[  205.192370][ T5731] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.202048][ T5731] Buffer I/O error on dev nbd0, logical block 2, async page read
[  205.210354][ T5731] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.219988][ T5731] Buffer I/O error on dev nbd0, logical block 3, async page read
[  205.228016][ T5731] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.237556][ T5731] Buffer I/O error on dev nbd0, logical block 0, async page read
[  205.245538][ T5731] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.255178][ T5731] Buffer I/O error on dev nbd0, logical block 1, async page read
[  205.267591][ T5731] ldm_validate_partition_table(): Disk read failed.
[  205.287472][ T5731] Dev nbd0: unable to read RDB block 0
[  205.296051][ T5731]  nbd0: unable to read partition table
[  205.324381][ T5731] ldm_validate_partition_table(): Disk read failed.
[  205.347459][ T5731] Dev nbd0: unable to read RDB block 0
[  205.368127][ T5731]  nbd0: unable to read partition table
[  205.455349][T10408] netlink: 'syz.4.1235': attribute type 4 has an invalid length.
[  205.658770][T10418] syzkaller0: entered promiscuous mode
[  205.664631][T10418] syzkaller0: entered allmulticast mode
[  205.767477][T10420] openvswitch: netlink: Flow key attr not present in new flow.
[  206.606512][ T4945] Bluetooth: hci1: command 0x0406 tx timeout
[  208.014091][T10392] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  208.263996][T10440] bond1: (slave lo): Releasing backup interface
[  208.282352][T10440] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  208.311406][T10440] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  208.409712][T10455] xt_connbytes: Forcing CT accounting to be enabled
[  208.421509][T10449] bond6 (unregistering): Released all slaves
[  208.461572][T10442] team0: No ports can be present during mode change
[  208.470313][T10453] __nla_validate_parse: 6 callbacks suppressed
[  208.470335][T10453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1248'.
[  208.493913][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1248'.
[  208.504862][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1248'.
[  208.515259][T10450] tipc: Started in network mode
[  208.520502][T10450] tipc: Node identity , cluster identity 4711
[  208.527198][T10450] tipc: Failed to obtain node identity
[  208.532763][T10450] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  208.543290][T10453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1248'.
[  208.702786][T10468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1250'.
[  208.754669][T10470] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1252'.
[  209.147505][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1258'.
[  209.198636][T10493] pim6reg: entered allmulticast mode
[  209.215913][T10493] pim6reg: left allmulticast mode
[  209.328048][T10500] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1261'.
[  210.250072][T10542] netlink: 'syz.0.1271': attribute type 10 has an invalid length.
[  210.280039][T10542] veth1_macvtap: left promiscuous mode
[  210.444921][T10561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1274'.
[  210.629341][T10567] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1277'.
[  211.208648][T10590] netlink: 'syz.4.1284': attribute type 1 has an invalid length.
[  211.301091][T10592] openvswitch: netlink: Message has 8 unknown bytes.
[  211.430487][T10601] netlink: 'syz.4.1288': attribute type 11 has an invalid length.
[  211.726166][ T5629] Bluetooth: hci3: command 0x0406 tx timeout
[  211.726174][T10583] Bluetooth: hci2: command 0x0401 tx timeout
[  211.913258][T10619] syzkaller0: entered promiscuous mode
[  211.924730][T10619] syzkaller0: entered allmulticast mode
[  212.146492][T10608] netem: change failed
[  212.419482][T10644] xt_hashlimit: size too large, truncated to 1048576
[  212.620781][T10648] xt_hashlimit: size too large, truncated to 1048576
[  213.386813][T10677] 8021q: adding VLAN 0 to HW filter on device bond6
[  213.684563][T10700] __nla_validate_parse: 10 callbacks suppressed
[  213.684585][T10700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1316'.
[  213.760097][T10707] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1316'.
[  213.771233][T10707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1316'.
[  213.825021][T10711] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  214.103395][T10719] syzkaller1: entered promiscuous mode
[  214.114854][T10719] syzkaller1: entered allmulticast mode
[  214.149549][T10728] ve: renamed from ip6gre0 (while UP)
[  214.202011][T10728] netlink: 5520 bytes leftover after parsing attributes in process `syz.1.1324'.
[  214.227128][T10732] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1325'.
[  214.238815][T10728] openvswitch: netlink: Flow key attr not present in new flow.
[  214.445100][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1326'.
[  214.456249][T10742] syzkaller0: entered promiscuous mode
[  214.461855][T10742] syzkaller0: entered allmulticast mode
[  214.603214][T10750] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1329'.
[  215.220075][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1338'.
[  215.285741][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1338'.
[  215.333877][T10779] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1338'.
[  215.410154][T10780] netlink: 'syz.0.1338': attribute type 1 has an invalid length.
[  216.693897][T10777] team1: entered promiscuous mode
[  216.722172][T10777] team1: entered allmulticast mode
[  216.799451][T10778] team2: entered promiscuous mode
[  216.804737][T10778] team2: entered allmulticast mode
[  216.875835][T10789] syzkaller1: entered allmulticast mode
[  217.339370][T10816] tipc: New replicast peer: 255.255.255.255
[  217.355702][T10816] tipc: Enabled bearer <udp:syz2>, priority 10
[  217.742705][T10839] xt_hashlimit: size too large, truncated to 1048576
[  218.417869][T10876] netlink: 'syz.2.1366': attribute type 11 has an invalid length.
[  218.464958][T10882] netlink: 'syz.3.1368': attribute type 1 has an invalid length.
[  218.486915][T10882] netlink: 'syz.3.1368': attribute type 11 has an invalid length.
[  218.514223][T10874] veth0_macvtap: left promiscuous mode
[  218.622953][   T54] tipc: Node number set to 2780282618
[  218.664537][T10886] bond0: (slave bond_slave_1): Releasing backup interface
[  218.692619][T10886] sctp: [Deprecated]: syz.2.1369 (pid 10886) Use of int in max_burst socket option.
[  218.692619][T10886] Use struct sctp_assoc_value instead
[  219.334386][T10914] x_tables: duplicate underflow at hook 2
[  219.613921][T10930] syz_tun: entered allmulticast mode
[  219.650623][T10930] pimreg: entered allmulticast mode
[  219.700441][T10927] syz_tun: left allmulticast mode
[  219.893973][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  220.272241][T10951] can: request_module (can-proto-0) failed.
[  220.658728][T10976] sctp: [Deprecated]: syz.3.1397 (pid 10976) Use of struct sctp_assoc_value in delayed_ack socket option.
[  220.658728][T10976] Use struct sctp_sack_info instead
[  220.781112][T10976] sctp: [Deprecated]: syz.3.1397 (pid 10976) Use of struct sctp_assoc_value in delayed_ack socket option.
[  220.781112][T10976] Use struct sctp_sack_info instead
[  220.809590][T10990] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  220.824705][T10991] gtp0: entered promiscuous mode
[  220.830771][T10991] gtp0: entered allmulticast mode
[  221.116371][T11005] netlink: 'syz.1.1406': attribute type 1 has an invalid length.
[  221.237491][T11005] bond8: (slave geneve3): making interface the new active one
[  221.263415][T11005] bond8: (slave geneve3): Enslaving as an active interface with an up link
[  221.273842][ T9067] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0
[  221.300503][ T9067] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0
[  221.324951][ T9067] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0
[  221.343491][ T9067] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0
[  221.369035][T11013] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.378312][T11013] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.640342][T11027] __nla_validate_parse: 8 callbacks suppressed
[  221.640362][T11027] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1413'.
[  221.708337][    C1] vcan0: j1939_tp_rxtimer: 0xffff888069708400: rx timeout, send abort
[  221.719707][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888069708400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  221.947211][T11042] netlink: 'syz.3.1418': attribute type 1 has an invalid length.
[  222.039347][T11042] bond7: entered promiscuous mode
[  222.044827][T11042] 8021q: adding VLAN 0 to HW filter on device bond7
[  222.064605][T11047] team0: Port device vlan0 added
[  222.104757][T11050] bond7: (slave bridge2): making interface the new active one
[  222.112567][T11050] bridge2: entered promiscuous mode
[  222.120009][T11050] bond7: (slave bridge2): Enslaving as an active interface with an up link
[  222.222985][T11052] veth5: entered promiscuous mode
[  222.378349][T11054] block nbd0: reconnected socket
[  222.401056][   T50] block nbd0: Receive control failed (result -32)
[  222.487823][T11064] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1425'.
[  222.518757][T11064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1425'.
[  222.659405][T11073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1428'.
[  222.892761][T11089] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1433'.
[  223.118857][T11101] block nbd0: reconnected socket
[  223.129453][   T50] block nbd0: Receive control failed (result -32)
[  223.335823][T11113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  223.363461][T11113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  223.397994][T11113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  223.664945][T11131] netlink: 'syz.4.1445': attribute type 4 has an invalid length.
[  223.693633][T11134] netlink: 'syz.4.1445': attribute type 4 has an invalid length.
[  223.710208][T11133] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20002
[  223.825618][T11131] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  223.852436][T11131] bond9 (unregistering): Released all slaves
[  223.922564][T11143] block nbd0: reconnected socket
[  223.947934][   T50] block nbd0: Receive control failed (result -32)
[  224.420154][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'.
[  224.444152][T11170] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1458'.
[  224.467710][T11170] netlink: 'syz.4.1458': attribute type 8 has an invalid length.
[  224.488699][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'.
[  224.714527][T11191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1463'.
[  224.775349][T11191] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1463'.
[  224.930569][T11205] xt_TPROXY: Can be used only with -p tcp or -p udp
[  224.971818][T11208] xt_TPROXY: Can be used only with -p tcp or -p udp
[  225.097501][T11213] netlink: 'syz.3.1471': attribute type 21 has an invalid length.
[  225.285171][T11222] macvtap1: entered promiscuous mode
[  225.310807][T11222] team0: entered promiscuous mode
[  225.333189][T11222] batadv0: entered promiscuous mode
[  225.356922][T11222] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  225.375273][T11222] team0: Device macvtap1 is already an upper device of the team interface
[  225.389994][T11231] IPv6: Can't replace route, no match found
[  225.399683][T11231] IPv6: Can't replace route, no match found
[  225.407784][T11222] team0: left promiscuous mode
[  225.457312][T11222] 
[  225.459717][T11222] ======================================================
[  225.466770][T11222] WARNING: possible circular locking dependency detected
[  225.473837][T11222] syzkaller #0 Not tainted
[  225.478283][T11222] ------------------------------------------------------
[  225.485351][T11222] syz.4.1470/11222 is trying to acquire lock:
[  225.491431][T11222] ffff88801be8d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80
[  225.501381][T11222] 
[  225.501381][T11222] but task is already holding lock:
[  225.508777][T11222] ffffffff8f38ddc0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  225.517531][T11222] 
[  225.517531][T11222] which lock already depends on the new lock.
[  225.517531][T11222] 
[  225.527958][T11222] 
[  225.527958][T11222] the existing dependency chain (in reverse order) is:
[  225.536997][T11222] 
[  225.536997][T11222] -> #10 (gdp_mutex){+.+.}-{4:4}:
[  225.544240][T11222]        __mutex_lock+0x1a3/0x1550
[  225.549472][T11222]        get_device_parent+0x16f/0x3a0
[  225.554952][T11222]        device_add+0x2e1/0xbb0
[  225.559830][T11222]        device_create+0x269/0x300
[  225.564962][T11222]        msr_device_create+0x33/0x50
[  225.570268][T11222]        cpuhp_invoke_callback+0x445/0x860
[  225.576195][T11222]        cpuhp_thread_fun+0x36b/0x780
[  225.581587][T11222]        smpboot_thread_fn+0x541/0xa50
[  225.587064][T11222]        kthread+0x389/0x470
[  225.591960][T11222]        ret_from_fork+0x514/0xb70
[  225.597116][T11222]        ret_from_fork_asm+0x1a/0x30
[  225.602433][T11222] 
[  225.602433][T11222] -> #9 (cpuhp_state-up){+.+.}-{0:0}:
[  225.610020][T11222]        cpuhp_thread_fun+0x127/0x780
[  225.615416][T11222]        smpboot_thread_fn+0x541/0xa50
[  225.620904][T11222]        kthread+0x389/0x470
[  225.625524][T11222]        ret_from_fork+0x514/0xb70
[  225.630659][T11222]        ret_from_fork_asm+0x1a/0x30
[  225.635965][T11222] 
[  225.635965][T11222] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  225.643737][T11222]        cpus_read_lock+0x42/0x160
[  225.648871][T11222]        static_key_slow_inc+0x12/0x30
[  225.654359][T11222]        nbd_genl_reconfigure+0x132f/0x1ea0
[  225.660276][T11222]        genl_family_rcv_msg_doit+0x22a/0x330
[  225.666369][T11222]        genl_rcv_msg+0x61c/0x7a0
[  225.671424][T11222]        netlink_rcv_skb+0x232/0x4b0
[  225.676737][T11222]        genl_rcv+0x28/0x40
[  225.681261][T11222]        netlink_unicast+0x75c/0x8e0
[  225.686572][T11222]        netlink_sendmsg+0x813/0xb40
[  225.691881][T11222]        ____sys_sendmsg+0x972/0x9f0
[  225.697197][T11222]        ___sys_sendmsg+0x2a5/0x360
[  225.702426][T11222]        __x64_sys_sendmsg+0x1bd/0x2a0
[  225.708004][T11222]        do_syscall_64+0x15f/0xf80
[  225.713144][T11222]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.719580][T11222] 
[  225.719580][T11222] -> #7 (&nsock->tx_lock){+.+.}-{4:4}:
[  225.727251][T11222]        __mutex_lock+0x1a3/0x1550
[  225.732394][T11222]        nbd_queue_rq+0x37b/0x1100
[  225.737640][T11222]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  225.743736][T11222]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  225.750620][T11222]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  225.757146][T11222]        blk_mq_run_hw_queue+0x348/0x4f0
[  225.762805][T11222]        blk_mq_dispatch_list+0xd16/0xe10
[  225.768547][T11222]        blk_mq_flush_plug_list+0x48d/0x570
[  225.774469][T11222]        __blk_flush_plug+0x3ed/0x4d0
[  225.779868][T11222]        __submit_bio+0x28d/0x580
[  225.784914][T11222]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  225.791134][T11222]        block_read_full_folio+0x599/0x830
[  225.796960][T11222]        filemap_read_folio+0x137/0x3b0
[  225.802534][T11222]        do_read_cache_folio+0x358/0x590
[  225.808198][T11222]        read_part_sector+0xb6/0x2b0
[  225.813514][T11222]        adfspart_check_ICS+0xb1/0x960
[  225.819000][T11222]        bdev_disk_changed+0x817/0x1770
[  225.824593][T11222]        blkdev_get_whole+0x380/0x510
[  225.830008][T11222]        bdev_open+0x31e/0xd30
[  225.834836][T11222]        blkdev_open+0x470/0x610
[  225.839826][T11222]        do_dentry_open+0x785/0x14e0
[  225.845134][T11222]        vfs_open+0x3b/0x340
[  225.849759][T11222]        path_openat+0x2e08/0x3860
[  225.854926][T11222]        do_file_open+0x23e/0x4a0
[  225.859993][T11222]        do_sys_openat2+0x113/0x200
[  225.865231][T11222]        __x64_sys_openat+0x138/0x170
[  225.870722][T11222]        do_syscall_64+0x15f/0xf80
[  225.875880][T11222]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.882325][T11222] 
[  225.882325][T11222] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  225.889567][T11222]        __mutex_lock+0x1a3/0x1550
[  225.894719][T11222]        nbd_queue_rq+0xc6/0x1100
[  225.899818][T11222]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  225.905926][T11222]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  225.912820][T11222]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  225.919363][T11222]        blk_mq_run_hw_queue+0x348/0x4f0
[  225.925033][T11222]        blk_mq_dispatch_list+0xd16/0xe10
[  225.930806][T11222]        blk_mq_flush_plug_list+0x48d/0x570
[  225.936745][T11222]        __blk_flush_plug+0x3ed/0x4d0
[  225.942162][T11222]        __submit_bio+0x28d/0x580
[  225.947213][T11222]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  225.953413][T11222]        block_read_full_folio+0x599/0x830
[  225.959244][T11222]        filemap_read_folio+0x137/0x3b0
[  225.964828][T11222]        do_read_cache_folio+0x358/0x590
[  225.970497][T11222]        read_part_sector+0xb6/0x2b0
[  225.975820][T11222]        adfspart_check_ICS+0xb1/0x960
[  225.981320][T11222]        bdev_disk_changed+0x817/0x1770
[  225.986906][T11222]        blkdev_get_whole+0x380/0x510
[  225.992359][T11222]        bdev_open+0x31e/0xd30
[  225.997167][T11222]        blkdev_open+0x470/0x610
[  226.002128][T11222]        do_dentry_open+0x785/0x14e0
[  226.007447][T11222]        vfs_open+0x3b/0x340
[  226.012073][T11222]        path_openat+0x2e08/0x3860
[  226.017226][T11222]        do_file_open+0x23e/0x4a0
[  226.022296][T11222]        do_sys_openat2+0x113/0x200
[  226.027557][T11222]        __x64_sys_openat+0x138/0x170
[  226.032963][T11222]        do_syscall_64+0x15f/0xf80
[  226.038190][T11222]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.044632][T11222] 
[  226.044632][T11222] -> #5 (set->srcu){.+.+}-{0:0}:
[  226.051782][T11222]        __synchronize_srcu+0xca/0x300
[  226.057266][T11222]        elevator_switch+0x1e8/0x7a0
[  226.062578][T11222]        elevator_change+0x2cc/0x450
[  226.067894][T11222]        elevator_set_default+0x36c/0x430
[  226.073820][T11222]        blk_register_queue+0x3e9/0x4e0
[  226.079391][T11222]        __add_disk+0x677/0xd50
[  226.084272][T11222]        add_disk_fwnode+0xfb/0x480
[  226.089523][T11222]        nbd_dev_add+0x72c/0xb50
[  226.094485][T11222]        nbd_init+0x168/0x1f0
[  226.099626][T11222]        do_one_initcall+0x250/0x870
[  226.104930][T11222]        do_initcall_level+0x104/0x190
[  226.110431][T11222]        do_initcalls+0x59/0xa0
[  226.115310][T11222]        kernel_init_freeable+0x2a6/0x3e0
[  226.121052][T11222]        kernel_init+0x1d/0x1d0
[  226.125930][T11222]        ret_from_fork+0x514/0xb70
[  226.131163][T11222]        ret_from_fork_asm+0x1a/0x30
[  226.136472][T11222] 
[  226.136472][T11222] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  226.144388][T11222]        __mutex_lock+0x1a3/0x1550
[  226.149564][T11222]        elevator_change+0x1b3/0x450
[  226.154878][T11222]        elevator_set_none+0xb5/0x140
[  226.160273][T11222]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  226.166629][T11222]        nbd_start_device+0x17f/0xb10
[  226.172039][T11222]        nbd_genl_connect+0x165b/0x1cf0
[  226.177651][T11222]        genl_family_rcv_msg_doit+0x22a/0x330
[  226.183749][T11222]        genl_rcv_msg+0x61c/0x7a0
[  226.188802][T11222]        netlink_rcv_skb+0x232/0x4b0
[  226.194114][T11222]        genl_rcv+0x28/0x40
[  226.198722][T11222]        netlink_unicast+0x75c/0x8e0
[  226.204031][T11222]        netlink_sendmsg+0x813/0xb40
[  226.209344][T11222]        ____sys_sendmsg+0x972/0x9f0
[  226.214662][T11222]        ___sys_sendmsg+0x2a5/0x360
[  226.219892][T11222]        __x64_sys_sendmsg+0x1bd/0x2a0
[  226.225466][T11222]        do_syscall_64+0x15f/0xf80
[  226.230602][T11222]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.237040][T11222] 
[  226.237040][T11222] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  226.245682][T11222]        blk_alloc_queue+0x546/0x680
[  226.251010][T11222]        __blk_mq_alloc_disk+0x197/0x390
[  226.256673][T11222]        nbd_dev_add+0x499/0xb50
[  226.261632][T11222]        nbd_init+0x168/0x1f0
[  226.266336][T11222]        do_one_initcall+0x250/0x870
[  226.271662][T11222]        do_initcall_level+0x104/0x190
[  226.277145][T11222]        do_initcalls+0x59/0xa0
[  226.282020][T11222]        kernel_init_freeable+0x2a6/0x3e0
[  226.287760][T11222]        kernel_init+0x1d/0x1d0
[  226.292641][T11222]        ret_from_fork+0x514/0xb70
[  226.297775][T11222]        ret_from_fork_asm+0x1a/0x30
[  226.303081][T11222] 
[  226.303081][T11222] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  226.310340][T11222]        fs_reclaim_acquire+0x71/0x100
[  226.315843][T11222]        kmem_cache_alloc_lru_noprof+0x45/0x640
[  226.322118][T11222]        alloc_inode+0xb8/0x1b0
[  226.326995][T11222]        iget_locked+0x131/0x6a0
[  226.331955][T11222]        kernfs_get_inode+0x4f/0x780
[  226.337279][T11222]        kernfs_get_tree+0x5cd/0x980
[  226.342602][T11222]        sysfs_get_tree+0x46/0x110
[  226.348010][T11222]        vfs_get_tree+0x92/0x2a0
[  226.352976][T11222]        do_new_mount+0x341/0xd30
[  226.358019][T11222]        __se_sys_mount+0x31d/0x420
[  226.363238][T11222]        do_syscall_64+0x15f/0xf80
[  226.368381][T11222]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.374817][T11222] 
[  226.374817][T11222] -> #1 (&root->kernfs_rwsem){++++}-{4:4}:
[  226.382832][T11222]        down_write+0x96/0x200
[  226.387618][T11222]        kernfs_remove_by_name_ns+0x4e/0x140
[  226.393649][T11222]        device_links_driver_bound+0x54f/0x14e0
[  226.399931][T11222]        driver_bound+0xd8/0x2e0
[  226.404902][T11222]        really_probe+0x789/0xaf0
[  226.409988][T11222]        __driver_probe_device+0x1ef/0x380
[  226.415998][T11222]        driver_probe_device+0x4f/0x240
[  226.421580][T11222]        __device_attach_driver+0x279/0x430
[  226.427544][T11222]        bus_for_each_drv+0x258/0x2f0
[  226.432948][T11222]        __device_attach+0x2c5/0x450
[  226.438254][T11222]        device_initial_probe+0xa1/0xd0
[  226.443828][T11222]        bus_probe_device+0x12a/0x220
[  226.449233][T11222]        device_add+0x7e9/0xbb0
[  226.454107][T11222]        faux_device_create_with_groups+0x189/0x290
[  226.460720][T11222]        regulator_dummy_init+0x19/0x40
[  226.466392][T11222]        regulator_init+0xca/0x110
[  226.471541][T11222]        do_one_initcall+0x250/0x870
[  226.476936][T11222]        do_initcall_level+0x104/0x190
[  226.482419][T11222]        do_initcalls+0x59/0xa0
[  226.487376][T11222]        kernel_init_freeable+0x2a6/0x3e0
[  226.493126][T11222]        kernel_init+0x1d/0x1d0
[  226.497996][T11222]        ret_from_fork+0x514/0xb70
[  226.503123][T11222]        ret_from_fork_asm+0x1a/0x30
[  226.508431][T11222] 
[  226.508431][T11222] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  226.517057][T11222]        __lock_acquire+0x15a5/0x2cf0
[  226.522466][T11222]        lock_acquire+0x106/0x350
[  226.527511][T11222]        down_read+0x47/0x2e0
[  226.532205][T11222]        kernfs_remove+0x35/0x80
[  226.537166][T11222]        __kobject_del+0xe1/0x330
[  226.542209][T11222]        kobject_del+0x45/0x60
[  226.547081][T11222]        cleanup_glue_dir+0x1a3/0x220
[  226.552474][T11222]        device_del+0x780/0x8f0
[  226.557342][T11222]        device_destroy+0xb2/0x1a0
[  226.562474][T11222]        macvtap_device_event+0x226/0x400
[  226.568217][T11222]        notifier_call_chain+0x1ad/0x3d0
[  226.573876][T11222]        unregister_netdevice_many_notify+0x17a5/0x22c0
[  226.580833][T11222]        rtnl_newlink_create+0x84b/0xb70
[  226.586493][T11222]        rtnl_newlink+0x166a/0x1bb0
[  226.591711][T11222]        rtnetlink_rcv_msg+0x7d5/0xbe0
[  226.597195][T11222]        netlink_rcv_skb+0x232/0x4b0
[  226.602593][T11222]        netlink_unicast+0x75c/0x8e0
[  226.607904][T11222]        netlink_sendmsg+0x813/0xb40
[  226.613212][T11222]        ____sys_sendmsg+0x972/0x9f0
[  226.618530][T11222]        ___sys_sendmsg+0x2a5/0x360
[  226.623777][T11222]        __x64_sys_sendmsg+0x1bd/0x2a0
[  226.629532][T11222]        do_syscall_64+0x15f/0xf80
[  226.634812][T11222]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.641296][T11222] 
[  226.641296][T11222] other info that might help us debug this:
[  226.641296][T11222] 
[  226.651630][T11222] Chain exists of:
[  226.651630][T11222]   &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex
[  226.651630][T11222] 
[  226.665049][T11222]  Possible unsafe locking scenario:
[  226.665049][T11222] 
[  226.672519][T11222]        CPU0                    CPU1
[  226.677908][T11222]        ----                    ----
[  226.683291][T11222]   lock(gdp_mutex);
[  226.687218][T11222]                                lock(cpuhp_state-up);
[  226.694095][T11222]                                lock(gdp_mutex);
[  226.700533][T11222]   rlock(&root->kernfs_supers_rwsem);
[  226.706019][T11222] 
[  226.706019][T11222]  *** DEADLOCK ***
[  226.706019][T11222] 
[  226.714177][T11222] 3 locks held by syz.4.1470/11222:
[  226.719408][T11222]  #0: ffffffff9030fe10 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  226.728940][T11222]  #1: ffffffff8fdd0240 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[  226.738292][T11222]  #2: ffffffff8f38ddc0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  226.747468][T11222] 
[  226.747468][T11222] stack backtrace:
[  226.753429][T11222] CPU: 1 UID: 0 PID: 11222 Comm: syz.4.1470 Not tainted syzkaller #0 PREEMPT(full) 
[  226.753451][T11222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  226.753471][T11222] Call Trace:
[  226.753485][T11222]  <TASK>
[  226.753493][T11222]  dump_stack_lvl+0xe8/0x150
[  226.753514][T11222]  print_circular_bug+0x2e1/0x300
[  226.753539][T11222]  check_noncircular+0x12e/0x150
[  226.753563][T11222]  __lock_acquire+0x15a5/0x2cf0
[  226.753589][T11222]  ? kernfs_remove+0x35/0x80
[  226.753611][T11222]  lock_acquire+0x106/0x350
[  226.753626][T11222]  ? kernfs_remove+0x35/0x80
[  226.753653][T11222]  down_read+0x47/0x2e0
[  226.753668][T11222]  ? kernfs_remove+0x35/0x80
[  226.753690][T11222]  kernfs_remove+0x35/0x80
[  226.753712][T11222]  __kobject_del+0xe1/0x330
[  226.753728][T11222]  kobject_del+0x45/0x60
[  226.753742][T11222]  cleanup_glue_dir+0x1a3/0x220
[  226.753762][T11222]  device_del+0x780/0x8f0
[  226.753783][T11222]  ? __pfx_device_del+0x10/0x10
[  226.753804][T11222]  device_destroy+0xb2/0x1a0
[  226.753823][T11222]  ? __pfx_device_destroy+0x10/0x10
[  226.753844][T11222]  ? kernfs_remove_by_name_ns+0x101/0x140
[  226.753870][T11222]  macvtap_device_event+0x226/0x400
[  226.753896][T11222]  ? __pfx_macvtap_device_event+0x10/0x10
[  226.753918][T11222]  ? igmp_netdev_event+0x7c/0x750
[  226.753945][T11222]  notifier_call_chain+0x1ad/0x3d0
[  226.753968][T11222]  unregister_netdevice_many_notify+0x17a5/0x22c0
[  226.753989][T11222]  ? unregister_netdevice_queue+0x19b/0x360
[  226.754015][T11222]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  226.754034][T11222]  ? netdev_upper_dev_unlink+0x99/0xe0
[  226.754053][T11222]  ? __pfx_netdev_upper_dev_unlink+0x10/0x10
[  226.754074][T11222]  ? macvlan_dellink+0x3e2/0x470
[  226.754094][T11222]  rtnl_newlink_create+0x84b/0xb70
[  226.754117][T11222]  ? __pfx___nla_validate_parse+0x10/0x10
[  226.754146][T11222]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  226.754170][T11222]  ? __pfx___mutex_lock+0x10/0x10
[  226.754198][T11222]  ? ns_capable+0x89/0xe0
[  226.754215][T11222]  rtnl_newlink+0x166a/0x1bb0
[  226.754241][T11222]  ? __pfx_rtnl_newlink+0x10/0x10
[  226.754259][T11222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.754290][T11222]  ? kasan_quarantine_put+0xbb/0x1f0
[  226.754312][T11222]  ? lockdep_hardirqs_on+0x7a/0x110
[  226.754337][T11222]  ? nlmon_xmit+0xb0/0x100
[  226.754356][T11222]  ? kmem_cache_free+0x182/0x650
[  226.754390][T11222]  ? __lock_acquire+0x6b5/0x2cf0
[  226.754408][T11222]  ? __dev_queue_xmit+0x2b6/0x3950
[  226.754434][T11222]  ? __local_bh_enable_ip+0xd0/0x130
[  226.754450][T11222]  ? lockdep_hardirqs_on+0x7a/0x110
[  226.754472][T11222]  ? __dev_queue_xmit+0x2b6/0x3950
[  226.754495][T11222]  ? __local_bh_enable_ip+0xd0/0x130
[  226.754510][T11222]  ? __dev_queue_xmit+0x2b6/0x3950
[  226.754536][T11222]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  226.754562][T11222]  ? __pfx_rtnl_newlink+0x10/0x10
[  226.754581][T11222]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  226.754602][T11222]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  226.754621][T11222]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  226.754639][T11222]  ? ref_tracker_free+0x693/0x840
[  226.754662][T11222]  ? __pfx_ref_tracker_free+0x10/0x10
[  226.754688][T11222]  netlink_rcv_skb+0x232/0x4b0
[  226.754711][T11222]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  226.754731][T11222]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  226.754758][T11222]  ? netlink_deliver_tap+0x2e/0x1b0
[  226.754824][T11222]  ? netlink_deliver_tap+0x2e/0x1b0
[  226.754848][T11222]  netlink_unicast+0x75c/0x8e0
[  226.754872][T11222]  netlink_sendmsg+0x813/0xb40
[  226.754899][T11222]  ? __pfx_netlink_sendmsg+0x10/0x10
[  226.754923][T11222]  ? aa_sock_msg_perm+0xf1/0x1b0
[  226.754945][T11222]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  226.754969][T11222]  ____sys_sendmsg+0x972/0x9f0
[  226.754994][T11222]  ? __might_fault+0xaf/0x130
[  226.755016][T11222]  ? __pfx_____sys_sendmsg+0x10/0x10
[  226.755043][T11222]  ? import_iovec+0x73/0xa0
[  226.755068][T11222]  ___sys_sendmsg+0x2a5/0x360
[  226.755090][T11222]  ? __lock_acquire+0x6b5/0x2cf0
[  226.755108][T11222]  ? __pfx____sys_sendmsg+0x10/0x10
[  226.755133][T11222]  ? futex_wait+0x2a2/0x390
[  226.755166][T11222]  ? __fget_files+0x2a/0x420
[  226.755185][T11222]  ? __fget_files+0x3a0/0x420
[  226.755208][T11222]  __x64_sys_sendmsg+0x1bd/0x2a0
[  226.755231][T11222]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  226.755258][T11222]  ? rcu_is_watching+0x15/0xb0
[  226.755280][T11222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.755297][T11222]  do_syscall_64+0x15f/0xf80
[  226.755320][T11222]  ? trace_irq_disable+0x3b/0x140
[  226.755344][T11222]  ? clear_bhb_loop+0x40/0x90
[  226.755362][T11222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.755385][T11222] RIP: 0033:0x7f119f59ce59
[  226.755410][T11222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.755425][T11222] RSP: 002b:00007f11a03ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  226.755443][T11222] RAX: ffffffffffffffda RBX: 00007f119f816090 RCX: 00007f119f59ce59
[  226.755455][T11222] RDX: 0000000024000000 RSI: 0000200000000240 RDI: 0000000000000003
[  226.755466][T11222] RBP: 00007f119f632d6f R08: 0000000000000000 R09: 0000000000000000
[  226.755477][T11222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  226.755486][T11222] R13: 00007f119f816128 R14: 00007f119f816090 R15: 00007ffc7fceaf98
[  226.755505][T11222]  </TASK>
[  227.320152][   T42] batadv0: left promiscuous mode