last executing test programs:

1.289535064s ago: executing program 1 (id=569):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000410000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a0101000000f3ff000000010000000900030073797a310000000014000480080002401000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000040000480240001800b00010072656a656374000014000280050002000800020008000140000000854c9138cf7bdd04006f7366000c000280080001400000001408000b40000000000900010073797a3000"], 0xf0}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r4=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069116700000000008510000002000000850000f70d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x801, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c1}, 0x0)

1.209427883s ago: executing program 1 (id=571):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000100005ff00000000fbdbdf250000004a", @ANYRES32=0x0, @ANYBLOB="0180000000000000140012800b0001006261746164760000040002800a0001000000000000000000d9fcb6211b98a679d9281e8d1752bec69611d6a82ca6899e393ef927326e71e5c404ffb06a032954b0650e27c7ab9a8a5fb0c3c0e11f970d52be3119"], 0x40}, 0x1, 0x0, 0x0, 0xd0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4)
recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x400)
sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x0, 0x35}, 0x28)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xfc}}, 0x14)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
close(r5)
r7 = socket$kcm(0x2b, 0x1, 0x0)
r8 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000080)={r8})
sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x22044028}, 0x81)
sendmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000017c0)="93", 0x1}], 0x1}, 0x40)
sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2004c841)

976.761808ms ago: executing program 2 (id=577):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@bridge_getvlan={0x48, 0x72, 0x0, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x48}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000440)=@bloom_filter={0x1e, 0x4, 0x3, 0x295, 0x20000, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x20, 0x0, 0x4, 0xa}, 0x50)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01000000000000000000000000000108003d00", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r10=>0x0})
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r10}, 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
clock_gettime(0x0, &(0x7f0000000400)={<r11=>0x0, <r12=>0x0})
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3, 0x400, 0x0, {}, {r11, r12/1000+10000}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "717703000000ba02"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800)
r13 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r13, 0x0)
pipe(&(0x7f0000002740))
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r4, &(0x7f00000002c0)={0x10})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)=r7}, 0x20)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x1000)
syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local, @broadcast, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0xce, 0x3, 0xf, [{@multicast2, 0xfff}, {@rand_addr=0x64010101, 0x2}, {@local, 0x7ff}, {@broadcast, 0x9}]}, @ra={0x94, 0x4}, @rr={0x7, 0x3, 0x5d}]}}, "040086dd0000ffff"}}}}}, 0x0)

569.224536ms ago: executing program 0 (id=578):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x6, 0x300)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x10c, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x800)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'erspan0\x00', <r4=>0x0})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x3fc, 0x6}, 0x1c)
sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080081004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)

568.483396ms ago: executing program 2 (id=579):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r2, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newtaction={0xb8, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa4, 0x1, [@m_nat={0xa0, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x70000000}, @multicast2, @remote}}]}, {0x4f, 0x6, "c95d6ca63c4d1999750e62edfbfcddb0ea639cc7b6bd730271d5ce48d03184aede32f0d9d77f3f6dd1d24a7123af7f22877343e94b20caff130648312c0522b700"/75}, {0xc}, {0xc}}}]}]}, 0xb8}}, 0x240004c0)
sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0xde139dbf16073048, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0xc1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c000900", @ANYRES32], 0x4c}}, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r8, 0x8b2c, &(0x7f0000000040))
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010600000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="05f9050004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0)
sendmsg$NL80211_CMD_DISASSOCIATE(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8004a280}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="04020000", @ANYRES16=r11, @ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x4010}, 0x80)

566.003082ms ago: executing program 0 (id=580):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x4c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x35, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f"]}]}, 0x4c}], 0x1}, 0x300)

490.34684ms ago: executing program 2 (id=581):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @private0, 0x6}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x11, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x48)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4, 0x208}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x8, 0x4)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)

355.610395ms ago: executing program 0 (id=582):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x2, {0x1}}, 0x18)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd28, 0x25dfdbee, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xc, 0x9}, {0xd, 0x1}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
connect$can_bcm(r2, &(0x7f0000000100)={0x1d, r3}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='objagg_obj_root_destroy\x00', r4, 0x0, 0x9}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)

283.709768ms ago: executing program 1 (id=583):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}]}, 0x38}}, 0x4000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r3, @ANYBLOB="0000800000000000180034"], 0x38}, 0x1, 0x300}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)
write$cgroup_netprio_ifpriomap(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="766574b60d"], 0x12)
connect$vsock_stream(r0, &(0x7f00000016c0)={0x28, 0x0, 0x2711}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00fffe1e3300000000000007000000373a11e845c28117a9bdef65e21f0b1eebaf"], 0x14}}, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x4000, r5}, 0x18)

280.54468ms ago: executing program 1 (id=584):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000400)=""/88, 0x58}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f00000006c0)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000880)=""/127, 0x7f}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x677, 0x2000, &(0x7f0000003700)={0x77359400})

204.277816ms ago: executing program 1 (id=585):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001900010028bd7000fcdbdf251d01020008000900", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001200375f3fbd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x8000)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0x888, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x9, 0x4, 0x1, 0x8, 0x0, 0x1ff, 0x2, 0x81, 0x1, 0x9, 0x8, 0x1, 0x4, 0x7, 0x3e, 0x10001, 0x7fffffff, 0x1, 0x6, 0x0, 0xef, 0x7, 0x1000, 0x9, 0x7, 0x1778a670, 0x6, 0xa34, 0x7, 0x3, 0x3, 0xffffffff, 0x1, 0x1b5, 0x3, 0xe5, 0xfffffff5, 0xfc46, 0xffff, 0x7, 0x4, 0x6, 0x9, 0x1, 0x64, 0xfffffffa, 0x7368, 0x2e, 0x0, 0x1, 0x3, 0x4, 0x6, 0x3, 0x3, 0x80000000, 0x6, 0x800, 0x9, 0x6, 0xfffffffd, 0x80000001, 0x40, 0x3, 0x8f, 0x7, 0x1, 0x5, 0x4, 0xc, 0x3, 0x10001, 0x80000000, 0x4007008, 0x200, 0x1, 0x5, 0x1000, 0x0, 0xaaf5, 0x2, 0x0, 0x0, 0x1, 0x9, 0xb, 0xd3, 0x5, 0x9, 0x1, 0x9, 0x2, 0x6, 0x10001, 0x3ff, 0x0, 0xa, 0x101, 0x8, 0x5, 0xb, 0x4, 0x1, 0xb3f4, 0xc8, 0x6a41, 0xde, 0x400, 0x54, 0x0, 0x2, 0xe6c, 0x7c77a153, 0x5, 0x9, 0x2, 0x8001, 0x202, 0x0, 0x401, 0x1, 0x8, 0x47, 0x7, 0x1, 0x5, 0x4, 0xc, 0x9, 0xff, 0x8006, 0x3ff, 0x6, 0x10, 0x3, 0x2, 0xe0000, 0x1, 0x7, 0xfffffff7, 0xfff, 0x2, 0x5, 0x8, 0x9, 0x5, 0xfffff801, 0x0, 0x9e76, 0x8, 0x8, 0xfff, 0x3034, 0xe, 0x200, 0x2, 0x1ff, 0x2, 0x9, 0x0, 0x80000001, 0x5, 0x1, 0x8, 0x1, 0x5, 0xfffffb24, 0x4, 0x7ff, 0x6, 0x4, 0x8, 0x8, 0x1400, 0xfbac, 0xa, 0x81, 0x7, 0x3, 0x4, 0x6, 0x0, 0x0, 0x565e975e, 0xbac8, 0x0, 0xffff8001, 0x0, 0x0, 0x248, 0x9, 0x7, 0xfffffffc, 0x4000400, 0x80, 0x8, 0x14f8, 0x10, 0x8, 0x9, 0x0, 0x101, 0x0, 0x101, 0x40, 0x101, 0x294, 0x6, 0xfff, 0x3, 0x5c0a, 0x9, 0x7fffffff, 0xfffffff7, 0x9, 0xa5, 0x8, 0x7, 0x5f, 0x4, 0x825, 0xf592, 0x2, 0x8, 0x800, 0x1, 0x4, 0x3, 0x5, 0x2, 0x1, 0x5, 0xffffffff, 0x9, 0x7f, 0xa, 0x9e, 0x7, 0xef1, 0x800, 0x6, 0x4, 0x10000, 0x400, 0x9, 0x8, 0x38f, 0x5b7f0f1c, 0x7, 0x80, 0x2, 0xffffffff, 0x7273, 0x5, 0xff]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x1c, 0x1ff, 0x800, 0x2, 0xa4000000, 0xbcb, 0x422, 0x4, 0x1, 0x400, 0xe326, 0x0, 0x6, 0x4, 0x1, 0x6, 0x200, 0x3, 0x2, 0x7, 0xe89b, 0x7c0, 0x6, 0x9, 0x3, 0xc0, 0x3ff, 0x1, 0x9, 0x9, 0x7, 0x3, 0xfffffffc, 0x8, 0x3ff, 0x3, 0x6, 0x2, 0x3, 0x5, 0x0, 0x50000, 0x80, 0x9, 0x1, 0x5, 0xe60, 0x6, 0x4310, 0x5, 0x55, 0x8, 0xb, 0x0, 0x3ff, 0xcdc, 0x1, 0x1, 0xd933, 0x6, 0x0, 0xb, 0x4, 0xb, 0x4000000, 0x6, 0x3, 0x3, 0x401, 0x2, 0x6, 0xb85, 0x5, 0x5, 0x9, 0xfffffffc, 0x1, 0x1, 0x75, 0x6, 0xffffffff, 0x0, 0x3, 0x6, 0x1f, 0x3, 0x0, 0x0, 0x2, 0x9, 0x383e, 0x18, 0x3, 0x1, 0xbdb3, 0x0, 0x8001, 0x7fffffff, 0x2c3e426c, 0x3, 0x0, 0x1, 0x10, 0x0, 0x0, 0x3, 0x9, 0x7e, 0x81, 0x8, 0xffffffff, 0xe6, 0x6e, 0xd0625800, 0x100, 0x1, 0x1, 0x80000000, 0x919, 0x3, 0xa, 0xb18, 0x60b3fb30, 0xbd, 0x5, 0xb9de, 0x9, 0x0, 0x4, 0x923, 0x800, 0x80, 0xf, 0x4, 0x3, 0x5, 0x80, 0x4, 0x4, 0x0, 0x10, 0x2, 0x65e2d6b5, 0xfffffff8, 0x200, 0xfffffffa, 0x7, 0x9, 0xbb97, 0x0, 0x7fffffff, 0x7, 0xffffffff, 0x8, 0x6, 0x3d3e, 0x19c3, 0x0, 0x5, 0xfffffffd, 0x400, 0xa, 0x80000000, 0x2, 0x33, 0xb, 0x5fd4, 0x8000, 0x0, 0xc, 0xd, 0x10000, 0x0, 0xff, 0x51c, 0x18, 0x6, 0xfffffff6, 0x4, 0x7c53, 0xfb, 0x3, 0x4, 0x2, 0x7, 0x3, 0xfffffffd, 0x31, 0xffff, 0x4, 0x87d, 0x5, 0x65d, 0x3, 0x3, 0x14, 0x8, 0x81, 0x8a22, 0x9, 0x2, 0x800, 0xca5, 0x7, 0x3, 0x6, 0xe45, 0x49, 0x599, 0x3, 0x1ff, 0x200, 0xa, 0x8, 0x4f77, 0x6, 0xf6, 0x7, 0x9, 0x4, 0x9, 0xfffffffa, 0x8000, 0xff, 0x9, 0xf, 0x7fffffff, 0x1000, 0x7, 0x80000000, 0x4, 0xfffffffa, 0x460, 0xee, 0x800, 0x8, 0x7ff, 0xd66, 0xc4, 0x5, 0xf, 0x81, 0x3, 0x22, 0xfffffff7, 0x7, 0x5, 0x9, 0x3, 0x0, 0x69, 0x800, 0x13bc013c, 0x1, 0x80]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0xfffffffffffffffe, 0x0, 0x110, 0x1, {0x1, 0x2, 0x3, 0x1, 0x101, 0x1}, {0xb, 0x0, 0x3, 0xf, 0x800, 0xdb}, 0x2, 0x1, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}]}}, @TCA_RATE={0x0, 0x5, {0xff, 0x7}}]}, 0x888}, 0x1, 0x0, 0x0, 0x10}, 0x0)

201.836888ms ago: executing program 2 (id=586):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r1, @ANYBLOB="140001"], 0x34}}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800)

135.951152ms ago: executing program 2 (id=587):
r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{}, 0x2a, 0x80000007ff, 0x2}) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003680)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) (async)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x14)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) (async, rerun: 64)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (rerun: 64)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0000000108653904030405ffffff09c56a3000", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0xff02, 0x0) (async)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}]}, 0x38}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r6=>0x0})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x95f}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x12}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x8095)

135.343192ms ago: executing program 0 (id=588):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x4c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x35, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f"]}]}, 0x4c}], 0x1}, 0x300)

67.791947ms ago: executing program 0 (id=589):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet(0x2b, 0x801, 0x0)
getsockopt$MRT(r2, 0x0, 0xce, 0x0, 0x0)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0xffffec77, @hyper=0x300}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x1}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @socket={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @nat={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @quota={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @inner={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @bitwise={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x0, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "ea9ed9e89266fbb3153aea258ed0e19c480af612b8ff20d6c4cf33ec1bbcde059bc0645b12bc47ff1d3f10436835816633bd1f6d25c3170f89e3c4ce587c6370452cc6d69fbf996634e21cded1c867a0fa8fa4e5d6ba62e8b8af314d91401a8da7259d62917c57ea1bed233a830e6f4e06d685a78e468ceedcfda39167c5e15db4fd638470e187180e9fd56621537c5075cc7ebeedcd59ca43cd6aa08db9"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_BITWISE_XOR={0x0, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x0, 0x1, "b29a58e451976cdd7212965a69f183be6e7b9b6d913ecc3440d5a0325e1b0fc6420de60d477e025113bf72c32e87b084c8d0d2745df444ea000c59210be7654baf9dddefde103ebd4bd01f93d4cab5fcabc997639fd5344ddaa7d2b1bbe714297b08eb613edbae3e6060bfb15acc1515906afe19c02a0359d861975f03b47e069a0bfcf05f581661380e6c871afc2dea29ddf21bbe439e94df794f1db52a1456f97b5285067f4fd8c8010170ee444cabf03ecf7c0610a7daf3a37b8bb1abb795c17e714fc88d3709a0ccc3be2dad091ce0d390100a20ab71dda9220e137ff3a39958b4cd8cca7f7f"}, @NFTA_DATA_VALUE={0x0, 0x1, "55f906730dac2597674548f9c0821b7bc26ce8acd4a37563d2a4e8a4306752ddfefef83c7e1cb2aa13cf4db83f5c3009b11d25a35eb84b620734d43a64451734d572affabd185bd8be1ddfbae41025c004076fe4bef5aee003b438"}, @NFTA_DATA_VALUE={0x0, 0x1, "f23a8b9b808045d61f1affcd831844ac3d15b9686cc9c029b09e4f735070a9b46ef4bed55502cb9448064aa38959"}, @NFTA_DATA_VALUE={0x0, 0x1, "53e688efde32a55636ac1f73b72bc8d4d8592e575963752174d14b770fb1d64a266936ca8fa928760baff72efafdcdb6e5fef868c86aa20001aec60808467671443b0c40e935a43e304bfa08f0dc68bedbff35ec15fde25b278051b6e47a622b84006c289afed8185250fd1eb09bd7346e887f6ab0df66d6"}, @NFTA_DATA_VALUE={0x0, 0x1, "46f659de7dc75860c71926362cc1100ce11ed9889093d516ed3a7f7612c56df13e8794cf54e9d25482e22ce9d8eff597080a9967e881538f98ff079bf06484b0283339c4c31a1d1cfc7a4d174aa8939c0216b993"}]}, @NFTA_BITWISE_LEN={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DATA]}}}, {0x0, 0x1, 0x0, 0x1, @byteorder={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @payload={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @tproxy={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x0, 0x2, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY, @NFTA_TPROXY_REG_ADDR={0x0, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000880)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000007030e00000000000000000a0000040900018073797a300000000008000540000000030c00024000000000000000090c00024000000000000000056190ef51c2abdb36c032eed3e64321c4e4c0c6d04683e07c325992bf4c83f323ca14b0f459f4dc9180cc7a1ab01ee48f184368c356123da8160e7ae8ff6203f9dee1b43f5a6c0d690853f4db75ac3139a56c8dff4e8df4825ff2686613ec5850bd919d51d875b31bca791361c35a25abd9ebbd0896f019a7834f9f78"], 0x40}, 0x1, 0x0, 0x0, 0x24004895}, 0x4)

67.27958ms ago: executing program 1 (id=590):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x6}, 0x50)
r1 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001001000090000000500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000007e66ed0118c606648a18c7d800e1ff00"/40], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r2}, 0x38)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendto$inet6(r3, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c)
sendmsg$inet6(r3, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x4, 0xfffffffd, 0x53, 0x801}, &(0x7f0000000300)=0x9c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000e40)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x4, &(0x7f0000000240)=@gcm_256={{}, "2474000000000da1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5005f500", "7c5cec21291a43fe"}, 0x38)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000040)={'ip6gre0\x00'})

63.123324ms ago: executing program 2 (id=591):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40000891)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000340), 0x10)
read(r0, &(0x7f00000027c0)=""/4073, 0xfe9)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4)
sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x60, r6, 0x1, 0xffffffff, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfff}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x60}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
close(0xffffffffffffffff)
socket$packet(0x11, 0x2, 0x300)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r9 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000000080), 0x4)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10)

0s ago: executing program 0 (id=592):
r0 = accept$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @default}, [@default, @rose, @default, @remote, @bcast, @bcast, @bcast, @rose]}, &(0x7f0000000280)=0x48)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000580))
bind(r0, &(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x3, 0x1, 0x2, {0xa, 0x4e22, 0x8, @loopback, 0x5}}}, 0x80)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r6, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0)
clock_gettime(0x4, &(0x7f0000000980))
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000600)={r5, 0x9}, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r8, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r7, @ANYBLOB="2c0433"], 0x448}}, 0x0)
sendmsg$NL80211_CMD_TESTMODE(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68010000", @ANYRES16=r8, @ANYBLOB="1d002abd7000fedbdf252d00000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x8001}, 0x8004)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:42973' (ED25519) to the list of known hosts.
syzkaller login: [   50.070638][ T5790] cgroup: Unknown subsys name 'net'
[   50.205458][ T5790] cgroup: Unknown subsys name 'cpuset'
[   50.211260][ T5790] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.308351][ T5790] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.693969][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.701645][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.704973][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.721081][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.746221][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.751111][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.754065][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.758280][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.761576][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.763146][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.767849][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.771645][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.774847][ T5219] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.794079][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.797850][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.105262][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   57.202086][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   57.209545][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   57.292038][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.295164][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.298079][ T5832] bridge_slave_0: entered allmulticast mode
[   57.303515][ T5832] bridge_slave_0: entered promiscuous mode
[   57.353493][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.356462][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.359316][ T5832] bridge_slave_1: entered allmulticast mode
[   57.364059][ T5832] bridge_slave_1: entered promiscuous mode
[   57.458727][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.461361][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.463539][ T5836] bridge_slave_0: entered allmulticast mode
[   57.466392][ T5836] bridge_slave_0: entered promiscuous mode
[   57.471663][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.474566][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.477176][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.479810][ T5836] bridge_slave_1: entered allmulticast mode
[   57.482857][ T5836] bridge_slave_1: entered promiscuous mode
[   57.485908][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.488622][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.492493][ T5828] bridge_slave_0: entered allmulticast mode
[   57.495235][ T5828] bridge_slave_0: entered promiscuous mode
[   57.499765][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.521104][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.523538][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.526095][ T5828] bridge_slave_1: entered allmulticast mode
[   57.529403][ T5828] bridge_slave_1: entered promiscuous mode
[   57.553378][ T5832] team0: Port device team_slave_0 added
[   57.574669][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.579171][ T5832] team0: Port device team_slave_1 added
[   57.583745][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.588061][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.615902][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.643473][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.646199][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.656626][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.672525][ T5828] team0: Port device team_slave_0 added
[   57.687535][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.690359][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.699784][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.713168][ T5828] team0: Port device team_slave_1 added
[   57.719411][ T5836] team0: Port device team_slave_0 added
[   57.725145][ T5836] team0: Port device team_slave_1 added
[   57.783480][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.785686][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.794372][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.799795][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.803688][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.812498][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.824894][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.827037][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.835498][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.843631][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.846310][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.856261][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.882653][ T5832] hsr_slave_0: entered promiscuous mode
[   57.885020][ T5832] hsr_slave_1: entered promiscuous mode
[   57.920666][ T5836] hsr_slave_0: entered promiscuous mode
[   57.923800][ T5836] hsr_slave_1: entered promiscuous mode
[   57.926674][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.929780][ T5836] Cannot create hsr debugfs directory
[   57.972137][ T5828] hsr_slave_0: entered promiscuous mode
[   57.974655][ T5828] hsr_slave_1: entered promiscuous mode
[   57.976786][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.979556][ T5828] Cannot create hsr debugfs directory
[   58.255900][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.264882][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.281793][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.294589][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.334761][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.340812][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.347541][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.352740][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.409572][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.416328][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.425818][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.433382][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.547080][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.559026][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.595960][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   58.602179][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   58.613748][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.618460][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.621460][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.636665][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.639505][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.657223][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.660144][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.667576][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.670492][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.729703][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   58.763305][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.765495][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.781664][ T5834] Bluetooth: hci1: command tx timeout
[   58.787284][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.789582][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.863924][ T5834] Bluetooth: hci2: command tx timeout
[   58.863967][ T5831] Bluetooth: hci0: command tx timeout
[   58.954202][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.967402][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.040939][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.054572][ T5836] veth0_vlan: entered promiscuous mode
[   59.059521][ T5832] veth0_vlan: entered promiscuous mode
[   59.074632][ T5832] veth1_vlan: entered promiscuous mode
[   59.087745][ T5836] veth1_vlan: entered promiscuous mode
[   59.111811][ T5828] veth0_vlan: entered promiscuous mode
[   59.125542][ T5828] veth1_vlan: entered promiscuous mode
[   59.128361][ T5836] veth0_macvtap: entered promiscuous mode
[   59.136411][ T5832] veth0_macvtap: entered promiscuous mode
[   59.142117][ T5836] veth1_macvtap: entered promiscuous mode
[   59.147390][ T5832] veth1_macvtap: entered promiscuous mode
[   59.167699][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.174824][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.195153][ T5828] veth0_macvtap: entered promiscuous mode
[   59.206393][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.212090][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.222257][ T5828] veth1_macvtap: entered promiscuous mode
[   59.228332][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.236171][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.239599][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.244942][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.258858][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.264098][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.267265][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.271833][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.295555][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.323693][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.335800][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.343087][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.346722][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.350611][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.479765][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.490695][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.502253][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.505298][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.540475][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.543273][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.568425][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.573867][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.618378][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.628130][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.647340][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.666500][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.669089][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.754892][ T5896] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   59.828343][ T5900] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   59.832607][ T5900] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'.
[   59.864083][ T5898] bond1: entered promiscuous mode
[   59.868275][ T5898] 8021q: adding VLAN 0 to HW filter on device bond1
[   59.873640][ T5900] batadv0: entered promiscuous mode
[   59.875993][ T5900] bridge0: port 3(batadv0) entered blocking state
[   59.880307][ T5900] bridge0: port 3(batadv0) entered disabled state
[   59.893573][ T5905] Zero length message leads to an empty skb
[   59.894103][ T5900] batadv0: entered allmulticast mode
[   59.908061][ T5900] bridge0: port 3(batadv0) entered blocking state
[   59.910432][ T5900] bridge0: port 3(batadv0) entered forwarding state
[   60.010905][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'.
[   60.084752][ T5920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5'.
[   60.117234][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'.
[   60.167952][ T5916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.239852][ T5923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.296417][ T5923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.302371][ T5860] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   60.305359][ T5860] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   60.349777][ T5923] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.735457][ T5936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8'.
[   60.860560][ T5831] Bluetooth: hci1: command tx timeout
[   60.941327][ T5831] Bluetooth: hci2: command tx timeout
[   60.945756][ T5831] Bluetooth: hci0: command tx timeout
[   61.345024][ T5953] bond0: option mode: unable to set because the bond device has slaves
[   61.349275][ T5953] netlink: 'syz.1.9': attribute type 4 has an invalid length.
[   61.359637][ T5953] netlink: 'syz.1.9': attribute type 4 has an invalid length.
[   61.439017][ T5953] syz.1.9 (5953) used greatest stack depth: 19960 bytes left
[   61.550025][ T5961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11'.
[   61.567425][ T5963] netlink: 'syz.1.11': attribute type 21 has an invalid length.
[   61.572526][ T5963] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11'.
[   61.591871][    C1] Unknown status report in ack skb
[   61.681182][ T5974] netlink: 'syz.1.12': attribute type 10 has an invalid length.
[   61.683643][ T5974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12'.
[   61.686437][ T5974] batadv0: entered promiscuous mode
[   61.688681][ T5974] bridge0: port 3(batadv0) entered blocking state
[   61.711389][ T5974] bridge0: port 3(batadv0) entered disabled state
[   61.713913][ T5974] batadv0: entered allmulticast mode
[   61.716966][ T5974] bridge0: port 3(batadv0) entered blocking state
[   61.719521][ T5974] bridge0: port 3(batadv0) entered forwarding state
[   61.742208][ T5860] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   61.745085][ T5860] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   61.929684][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'.
[   61.952375][ T5894] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   61.961156][ T5894] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   62.017197][ T6004] bond0: option mode: unable to set because the bond device has slaves
[   62.031928][ T6004] netlink: 'syz.0.18': attribute type 4 has an invalid length.
[   62.050964][ T6004] netlink: 'syz.0.18': attribute type 4 has an invalid length.
[   62.083306][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'.
[   62.119492][ T6007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.174878][ T6013] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   62.178105][ T6013] CPU: 1 UID: 0 PID: 6013 Comm: syz.0.20 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   62.178125][ T6013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   62.178135][ T6013] Call Trace:
[   62.178142][ T6013]  <TASK>
[   62.178188][ T6013]  dump_stack_lvl+0x189/0x250
[   62.178216][ T6013]  ? __pfx_dump_stack_lvl+0x10/0x10
[   62.178235][ T6013]  ? __pfx__printk+0x10/0x10
[   62.178257][ T6013]  ? kernfs_path_from_node+0x2c/0x260
[   62.178280][ T6013]  ? kernfs_path_from_node+0x2c/0x260
[   62.178299][ T6013]  ? kernfs_path_from_node+0x2c/0x260
[   62.178321][ T6013]  ? kernfs_path_from_node+0x22c/0x260
[   62.178341][ T6013]  ? kernfs_path_from_node+0x2c/0x260
[   62.178364][ T6013]  sysfs_warn_dup+0x8e/0xa0
[   62.178384][ T6013]  sysfs_do_create_link_sd+0xc0/0x110
[   62.178408][ T6013]  device_add_class_symlinks+0x1cf/0x240
[   62.178430][ T6013]  device_add+0x475/0xb50
[   62.178453][ T6013]  wiphy_register+0x199a/0x26b0
[   62.178485][ T6013]  ? __pfx_wiphy_register+0x10/0x10
[   62.178503][ T6013]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   62.178529][ T6013]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   62.178552][ T6013]  ieee80211_register_hw+0x33e1/0x4120
[   62.178587][ T6013]  ? ieee80211_register_hw+0x1481/0x4120
[   62.178614][ T6013]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   62.178638][ T6013]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   62.178666][ T6013]  ? __hrtimer_setup+0x187/0x210
[   62.178682][ T6013]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   62.178705][ T6013]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   62.178747][ T6013]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   62.178763][ T6013]  ? trace_kmalloc+0x1f/0xd0
[   62.178813][ T6013]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   62.178831][ T6013]  ? kstrndup+0xbf/0x160
[   62.178861][ T6013]  hwsim_new_radio_nl+0xea4/0x1b10
[   62.178882][ T6013]  ? __pfx___nla_validate_parse+0x10/0x10
[   62.178908][ T6013]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   62.178936][ T6013]  ? __nla_parse+0x40/0x60
[   62.178954][ T6013]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   62.178976][ T6013]  genl_family_rcv_msg_doit+0x215/0x300
[   62.179003][ T6013]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   62.179034][ T6013]  ? bpf_lsm_capable+0x9/0x20
[   62.179056][ T6013]  ? security_capable+0x7e/0x2e0
[   62.179083][ T6013]  genl_rcv_msg+0x60e/0x790
[   62.179109][ T6013]  ? __pfx_genl_rcv_msg+0x10/0x10
[   62.179129][ T6013]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   62.179157][ T6013]  netlink_rcv_skb+0x208/0x470
[   62.179174][ T6013]  ? __pfx_genl_rcv_msg+0x10/0x10
[   62.179195][ T6013]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   62.179226][ T6013]  ? down_read+0x1ad/0x2e0
[   62.179244][ T6013]  genl_rcv+0x28/0x40
[   62.179262][ T6013]  netlink_unicast+0x75b/0x8d0
[   62.179288][ T6013]  netlink_sendmsg+0x805/0xb30
[   62.179314][ T6013]  ? __pfx_netlink_sendmsg+0x10/0x10
[   62.179334][ T6013]  ? aa_sock_msg_perm+0x94/0x160
[   62.179357][ T6013]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   62.179369][ T6013]  ? __pfx_netlink_sendmsg+0x10/0x10
[   62.179387][ T6013]  __sock_sendmsg+0x21c/0x270
[   62.179405][ T6013]  ____sys_sendmsg+0x505/0x830
[   62.179429][ T6013]  ? __pfx_____sys_sendmsg+0x10/0x10
[   62.179455][ T6013]  ? import_iovec+0x74/0xa0
[   62.179476][ T6013]  ___sys_sendmsg+0x21f/0x2a0
[   62.179497][ T6013]  ? __pfx____sys_sendmsg+0x10/0x10
[   62.179547][ T6013]  ? __fget_files+0x2a/0x420
[   62.179567][ T6013]  ? __fget_files+0x3a0/0x420
[   62.179593][ T6013]  __x64_sys_sendmsg+0x19b/0x260
[   62.179613][ T6013]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   62.179650][ T6013]  ? do_syscall_64+0xbe/0x3b0
[   62.179667][ T6013]  do_syscall_64+0xfa/0x3b0
[   62.179681][ T6013]  ? lockdep_hardirqs_on+0x9c/0x150
[   62.179695][ T6013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.179709][ T6013]  ? exc_page_fault+0x9f/0xf0
[   62.179733][ T6013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.179746][ T6013] RIP: 0033:0x7f119ff8e929
[   62.179760][ T6013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.179805][ T6013] RSP: 002b:00007f11a0d23038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   62.179821][ T6013] RAX: ffffffffffffffda RBX: 00007f11a01b5fa0 RCX: 00007f119ff8e929
[   62.179832][ T6013] RDX: 000000002000c800 RSI: 0000200000000040 RDI: 0000000000000006
[   62.179842][ T6013] RBP: 00007f11a0010b39 R08: 0000000000000000 R09: 0000000000000000
[   62.179850][ T6013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   62.179858][ T6013] R13: 0000000000000000 R14: 00007f11a01b5fa0 R15: 00007ffc7b29d8d8
[   62.179881][ T6013]  </TASK>
[   62.358717][ T6014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.368952][ T6018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.940860][ T5831] Bluetooth: hci1: command tx timeout
[   63.028190][ T5831] Bluetooth: hci0: command tx timeout
[   63.030513][ T5831] Bluetooth: hci2: command tx timeout
[   63.148556][ T6039] netlink: 'syz.0.25': attribute type 21 has an invalid length.
[   63.478618][ T6061] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (5001287)
[   63.484626][ T6061] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   63.499491][ T6061] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   63.506243][ T6061] CPU: 0 UID: 0 PID: 6061 Comm: syz.0.31 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   63.506259][ T6061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   63.506266][ T6061] Call Trace:
[   63.506271][ T6061]  <TASK>
[   63.506276][ T6061]  dump_stack_lvl+0x189/0x250
[   63.506296][ T6061]  ? __pfx_dump_stack_lvl+0x10/0x10
[   63.506307][ T6061]  ? __pfx__printk+0x10/0x10
[   63.506320][ T6061]  ? kernfs_path_from_node+0x2c/0x260
[   63.506333][ T6061]  ? kernfs_path_from_node+0x2c/0x260
[   63.506343][ T6061]  ? kernfs_path_from_node+0x2c/0x260
[   63.506355][ T6061]  ? kernfs_path_from_node+0x22c/0x260
[   63.506365][ T6061]  ? kernfs_path_from_node+0x2c/0x260
[   63.506378][ T6061]  sysfs_warn_dup+0x8e/0xa0
[   63.506389][ T6061]  sysfs_do_create_link_sd+0xc0/0x110
[   63.506403][ T6061]  device_add_class_symlinks+0x1cf/0x240
[   63.506417][ T6061]  device_add+0x475/0xb50
[   63.506429][ T6061]  wiphy_register+0x199a/0x26b0
[   63.506450][ T6061]  ? __pfx_wiphy_register+0x10/0x10
[   63.506459][ T6061]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   63.506474][ T6061]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   63.506488][ T6061]  ieee80211_register_hw+0x33e1/0x4120
[   63.506508][ T6061]  ? ieee80211_register_hw+0x1481/0x4120
[   63.506523][ T6061]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   63.506536][ T6061]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   63.506553][ T6061]  ? __hrtimer_setup+0x187/0x210
[   63.506562][ T6061]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   63.506578][ T6061]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   63.506605][ T6061]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   63.506615][ T6061]  ? trace_kmalloc+0x1f/0xd0
[   63.506626][ T6061]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   63.506637][ T6061]  ? kstrndup+0xbf/0x160
[   63.506654][ T6061]  hwsim_new_radio_nl+0xea4/0x1b10
[   63.506665][ T6061]  ? __pfx___nla_validate_parse+0x10/0x10
[   63.506710][ T6061]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   63.506728][ T6061]  ? __nla_parse+0x40/0x60
[   63.506740][ T6061]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   63.506753][ T6061]  genl_family_rcv_msg_doit+0x215/0x300
[   63.506770][ T6061]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   63.506790][ T6061]  ? bpf_lsm_capable+0x9/0x20
[   63.506800][ T6061]  ? security_capable+0x7e/0x2e0
[   63.506816][ T6061]  genl_rcv_msg+0x60e/0x790
[   63.506831][ T6061]  ? __pfx_genl_rcv_msg+0x10/0x10
[   63.506843][ T6061]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   63.506875][ T6061]  netlink_rcv_skb+0x208/0x470
[   63.506888][ T6061]  ? __pfx_genl_rcv_msg+0x10/0x10
[   63.506902][ T6061]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   63.506921][ T6061]  ? down_read+0x1ad/0x2e0
[   63.506933][ T6061]  genl_rcv+0x28/0x40
[   63.506946][ T6061]  netlink_unicast+0x75b/0x8d0
[   63.506961][ T6061]  netlink_sendmsg+0x805/0xb30
[   63.506977][ T6061]  ? __pfx_netlink_sendmsg+0x10/0x10
[   63.506989][ T6061]  ? aa_sock_msg_perm+0x94/0x160
[   63.507003][ T6061]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   63.507010][ T6061]  ? __pfx_netlink_sendmsg+0x10/0x10
[   63.507021][ T6061]  __sock_sendmsg+0x21c/0x270
[   63.507031][ T6061]  ____sys_sendmsg+0x505/0x830
[   63.507053][ T6061]  ? __pfx_____sys_sendmsg+0x10/0x10
[   63.507069][ T6061]  ? import_iovec+0x74/0xa0
[   63.507082][ T6061]  ___sys_sendmsg+0x21f/0x2a0
[   63.507096][ T6061]  ? __pfx____sys_sendmsg+0x10/0x10
[   63.507125][ T6061]  ? __fget_files+0x2a/0x420
[   63.507137][ T6061]  ? __fget_files+0x3a0/0x420
[   63.507152][ T6061]  __x64_sys_sendmsg+0x19b/0x260
[   63.507164][ T6061]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   63.507180][ T6061]  ? rcu_is_watching+0x15/0xb0
[   63.507192][ T6061]  ? do_syscall_64+0xbe/0x3b0
[   63.507203][ T6061]  do_syscall_64+0xfa/0x3b0
[   63.507211][ T6061]  ? lockdep_hardirqs_on+0x9c/0x150
[   63.507218][ T6061]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.507226][ T6061]  ? exc_page_fault+0x9f/0xf0
[   63.507239][ T6061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.507247][ T6061] RIP: 0033:0x7f119ff8e929
[   63.507257][ T6061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.507264][ T6061] RSP: 002b:00007f11a0d23038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   63.507275][ T6061] RAX: ffffffffffffffda RBX: 00007f11a01b5fa0 RCX: 00007f119ff8e929
[   63.507282][ T6061] RDX: 000000002000c800 RSI: 0000200000000040 RDI: 0000000000000007
[   63.507288][ T6061] RBP: 00007f11a0010b39 R08: 0000000000000000 R09: 0000000000000000
[   63.507293][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   63.507298][ T6061] R13: 0000000000000000 R14: 00007f11a01b5fa0 R15: 00007ffc7b29d8d8
[   63.507312][ T6061]  </TASK>
[   63.706318][ T6066] warning: `syz.1.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.867702][ T6082] netlink: 'syz.2.36': attribute type 4 has an invalid length.
[   64.012166][ T6096] netlink: 'syz.0.38': attribute type 1 has an invalid length.
[   64.077755][ T5894] IPVS: starting estimator thread 0...
[   64.094379][ T6087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.124437][ T6107] tipc: Started in network mode
[   64.126254][ T6107] tipc: Node identity 52a8edf11b7c, cluster identity 4711
[   64.128621][ T6107] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.134824][ T6107] syzkaller0: entered promiscuous mode
[   64.136751][ T6107] syzkaller0: entered allmulticast mode
[   64.153242][ T6108] tipc: Resetting bearer <eth:syzkaller0>
[   64.156483][ T6098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.177183][ T6107] tipc: Resetting bearer <eth:syzkaller0>
[   64.181131][ T6104] IPVS: using max 62 ests per chain, 148800 per kthread
[   64.189185][ T6107] tipc: Disabling bearer <eth:syzkaller0>
[   64.212603][ T6098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.387685][ T6126] bridge_slave_0: left allmulticast mode
[   64.392034][ T6126] bridge_slave_0: left promiscuous mode
[   64.397812][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.425378][ T6126] bridge_slave_1: left allmulticast mode
[   64.427984][ T6126] bridge_slave_1: left promiscuous mode
[   64.432852][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.485185][ T6126] bond0: (slave bond_slave_0): Releasing backup interface
[   64.502424][ T6126] bond0: (slave bond_slave_1): Releasing backup interface
[   64.524174][ T6126] team0: Port device team_slave_0 removed
[   64.533030][ T6126] team0: Port device team_slave_1 removed
[   64.536963][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.539640][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.545837][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.549141][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.566587][ T6136] team0: Mode changed to "broadcast"
[   64.569046][ T6137] bond0: option ad_select: unable to set because the bond device is up
[   64.573718][ T6130] vlan0: entered promiscuous mode
[   64.576755][ T5894] IPVS: starting estimator thread 0...
[   64.585334][ T6130] team0: Port device vlan0 added
[   64.595113][ T6134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.660199][ T6138] IPVS: using max 62 ests per chain, 148800 per kthread
[   64.686319][ T6142] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[   65.031899][ T5834] Bluetooth: hci1: command tx timeout
[   65.120455][ T5831] Bluetooth: hci0: command tx timeout
[   65.122691][ T5834] Bluetooth: hci2: command tx timeout
[   65.143218][ T6163] __nla_validate_parse: 8 callbacks suppressed
[   65.143229][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'.
[   65.173471][ T6165] xt_hashlimit: size too large, truncated to 1048576
[   65.225911][ T6169] : renamed from bridge_slave_0 (while UP)
[   65.301705][ T6172] netlink: 48 bytes leftover after parsing attributes in process `syz.1.54'.
[   65.390214][ T6178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.55'.
[   65.427630][ T6178] netlink: 16 bytes leftover after parsing attributes in process `syz.0.55'.
[   65.429055][ T6177] tc_dump_action: action bad kind
[   65.650417][ T6195] validate_nla: 1 callbacks suppressed
[   65.650454][ T6195] netlink: 'syz.2.59': attribute type 2 has an invalid length.
[   65.654990][ T6195] netlink: 164 bytes leftover after parsing attributes in process `syz.2.59'.
[   65.663759][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'.
[   65.826477][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'.
[   65.842316][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'.
[   65.851077][ T6199] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'.
[   65.868186][ T6208] netlink: 16 bytes leftover after parsing attributes in process `syz.2.63'.
[   66.251456][ T6233] netlink: 'syz.1.68': attribute type 1 has an invalid length.
[   66.276228][ T6233] veth3: entered promiscuous mode
[   66.285213][ T6233] erspan0: entered allmulticast mode
[   66.528684][ T6250] netlink: 'syz.1.73': attribute type 11 has an invalid length.
[   66.696551][ T6259] bridge0: port 3(batadv0) entered disabled state
[   66.699354][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.702785][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.804195][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.814346][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.884413][ T6259] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.887912][ T6259] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.892819][ T6259] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.896108][ T6259] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.136556][ T6269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.743509][ T6290] netlink: 'syz.2.86': attribute type 21 has an invalid length.
[   67.790196][ T6296] syzkaller1: entered promiscuous mode
[   67.792480][ T6296] syzkaller1: entered allmulticast mode
[   68.517848][ T6318] netlink: 'syz.1.93': attribute type 13 has an invalid length.
[   68.522209][ T6318] netlink: 'syz.1.93': attribute type 11 has an invalid length.
[   68.610660][ T6323] netlink: 'syz.1.94': attribute type 4 has an invalid length.
[   68.637938][ T6326] netlink: 'syz.2.95': attribute type 1 has an invalid length.
[   68.695891][    T9] IPVS: starting estimator thread 0...
[   68.697721][ T6323] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[   68.800182][ T6330] IPVS: using max 41 ests per chain, 98400 per kthread
[   69.493533][ T6375] netlink: 'syz.1.110': attribute type 4 has an invalid length.
[   69.619128][ T6383] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.623058][ T6383] syzkaller0: entered promiscuous mode
[   69.625292][ T6383] syzkaller0: entered allmulticast mode
[   69.631085][ T6383] tipc: Resetting bearer <eth:syzkaller0>
[   69.685379][ T6379] syz.1.112 uses obsolete (PF_INET,SOCK_PACKET)
[   69.695259][ T6389] tipc: Resetting bearer <eth:syzkaller0>
[   69.732901][ T6389] tipc: Disabling bearer <eth:syzkaller0>
[   70.191315][ T6407] tipc: Invalid UDP bearer configuration
[   70.191350][ T6407] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   70.196492][ T6407] netlink: 'syz.0.119': attribute type 1 has an invalid length.
[   70.357454][ T6418] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[   70.364322][ T6418] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   70.466081][ T6432] __nla_validate_parse: 15 callbacks suppressed
[   70.466094][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'.
[   70.524473][ T6437] netlink: 164 bytes leftover after parsing attributes in process `syz.2.125'.
[   70.529226][ T6436] netlink: 164 bytes leftover after parsing attributes in process `syz.2.125'.
[   70.678176][ T6446] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[   70.728766][ T6450] tipc: Started in network mode
[   70.731302][ T6450] tipc: Node identity 42576e3c6a4c, cluster identity 4711
[   70.734249][ T6450] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.776555][ T6450] syzkaller0: entered promiscuous mode
[   70.778696][ T6450] syzkaller0: entered allmulticast mode
[   70.782032][ T6450] tipc: Resetting bearer <eth:syzkaller0>
[   70.792410][ T6449] tipc: Resetting bearer <eth:syzkaller0>
[   70.866343][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.873167][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.541970][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'.
[   71.781609][   T47] tipc: Node number set to 672886332
[   71.962160][ T6449] tipc: Disabling bearer <eth:syzkaller0>
[   72.019506][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.133'.
[   72.051321][ T6467] pim6reg: entered allmulticast mode
[   72.284959][ T6484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.137'.
[   72.294862][ T6484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.137'.
[   72.303090][ T6484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.137'.
[   72.308246][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'.
[   72.309487][ T6484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.137'.
[   72.802107][   T33] audit: type=1800 audit(1752204482.092:2): pid=6502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.141" name="cgroup.controllers" dev="tmpfs" ino=258 res=0 errno=0
[   73.127384][ T6541] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.151910][ T6537] syzkaller0: entered promiscuous mode
[   73.155338][ T6537] syzkaller0: entered allmulticast mode
[   73.189040][ T6537] tipc: Resetting bearer <eth:syzkaller0>
[   73.193281][ T6536] tipc: Resetting bearer <eth:syzkaller0>
[   73.205686][ T6536] tipc: Disabling bearer <eth:syzkaller0>
[   73.672819][ T6555] batman_adv: batadv0: Adding interface: macvlan2
[   73.675331][ T6555] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.686954][ T6555] batman_adv: batadv0: Interface activated: macvlan2
[   74.295974][ T6582] validate_nla: 4 callbacks suppressed
[   74.295992][ T6582] netlink: 'syz.0.163': attribute type 27 has an invalid length.
[   74.989573][ T6612] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.033044][ T6608] erspan0: left allmulticast mode
[   75.092346][ T6608] bridge0: port 3(batadv0) entered disabled state
[   75.095450][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.098022][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.216580][ T6623] sctp: [Deprecated]: syz.0.172 (pid 6623) Use of int in max_burst socket option deprecated.
[   75.216580][ T6623] Use struct sctp_assoc_value instead
[   75.224352][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.237392][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.416767][ T6608] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.419874][ T6608] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.424067][ T6608] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.427531][ T6608] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.471858][ T6608] bond1: left promiscuous mode
[   75.475878][ T6608] veth3: left promiscuous mode
[   75.478057][ T6608] batman_adv: batadv0: Interface deactivated: macvlan2
[   75.605412][ T6639] __nla_validate_parse: 74 callbacks suppressed
[   75.605422][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'.
[   75.612186][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'.
[   75.615016][ T6639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.177'.
[   75.617858][ T6640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.177'.
[   75.632669][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'.
[   75.762225][ T6655] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0
[   75.851347][ T6666] team0: entered promiscuous mode
[   75.928220][ T6658] team0: left promiscuous mode
[   75.942201][ T6673] netlink: 156 bytes leftover after parsing attributes in process `syz.0.183'.
[   75.949041][ T6673] netlink: 84 bytes leftover after parsing attributes in process `syz.0.183'.
[   75.958009][ T6675] netlink: 132 bytes leftover after parsing attributes in process `syz.1.184'.
[   76.023710][ T6680] Cannot find set identified by id 0 to match
[   76.063465][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'.
[   76.073288][ T6686] netlink: 'syz.0.183': attribute type 6 has an invalid length.
[   76.214161][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'.
[   76.348932][ T6704] batadv1: entered promiscuous mode
[   76.351324][ T6704] batadv1: entered allmulticast mode
[   76.376703][ T6705] netlink: 'syz.0.191': attribute type 21 has an invalid length.
[   76.384558][ T6705] netlink: 'syz.0.191': attribute type 6 has an invalid length.
[   76.718361][ T6728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.279368][ T6748] openvswitch: netlink: Duplicate or invalid key (type 0).
[   77.282836][ T6748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.310140][ T6795] tap0: tun_chr_ioctl cmd 1074025677
[   78.312123][ T6795] tap0: linktype set to 823
[   78.415342][ T6807] gretap1: entered promiscuous mode
[   78.465729][ T6807] ip6gretap1: entered promiscuous mode
[   78.467514][ T6807] ip6gretap1: entered allmulticast mode
[   78.833891][ T6827] netlink: 'syz.0.229': attribute type 21 has an invalid length.
[   78.836937][ T6827] netlink: 'syz.0.229': attribute type 6 has an invalid length.
[   79.341485][   T70] wlan1: Trigger new scan to find an IBSS to join
[   79.489089][ T6864] netlink: 'syz.0.236': attribute type 1 has an invalid length.
[   79.545007][ T6864] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.592371][ T6869] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.596326][ T6869] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   79.602381][ T6869] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   79.624257][ T6864] gretap1: entered promiscuous mode
[   79.633071][ T6864] bond1: (slave gretap1): making interface the new active one
[   79.642274][ T6864] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   79.654891][ T6864] macvlan2: entered promiscuous mode
[   79.656881][ T6864] macvlan2: entered allmulticast mode
[   79.659529][ T6864] bond1: entered promiscuous mode
[   79.664728][ T6864] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   79.668836][ T6864] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   79.673941][ T6864] bond1: left promiscuous mode
[   79.899299][ T6894] Bluetooth: MGMT ver 1.23
[   79.936507][ T6896] IPv6: NLM_F_REPLACE set, but no existing node found!
[   79.954266][ T6896] IPv6: NLM_F_REPLACE set, but no existing node found!
[   80.005505][ T6904] ip6gre1: entered promiscuous mode
[   80.035133][ T6908] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[   80.114710][ T6913] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[   80.154674][ T6917] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   80.158038][ T6917] team0: Device ipvlan2 is already an upper device of the team interface
[   80.200243][ T6919] 8021q: VLANs not supported on wg1
[   80.202346][ T6920] 8021q: VLANs not supported on wg1
[   80.256546][ T6923] netlink: 'syz.1.253': attribute type 3 has an invalid length.
[   80.263763][ T6923] netlink: 'syz.1.253': attribute type 1 has an invalid length.
[   80.268528][ T6923] NCSI netlink: No device for ifindex 0
[   80.629290][ T6957] netlink: 'syz.1.261': attribute type 5 has an invalid length.
[   80.694787][ T6965] __nla_validate_parse: 26 callbacks suppressed
[   80.694797][ T6965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.263'.
[   80.873691][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'.
[   80.995631][ T6987] syzkaller1: entered promiscuous mode
[   81.003020][ T6987] syzkaller1: entered allmulticast mode
[   81.108703][   T24] cfg80211: failed to load regulatory.db
[   81.121299][ T6994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.270'.
[   81.124416][ T6995] netlink: 52 bytes leftover after parsing attributes in process `syz.1.270'.
[   81.125188][ T6994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.270'.
[   81.127392][ T6995] netlink: 52 bytes leftover after parsing attributes in process `syz.1.270'.
[   81.127405][ T6995] netlink: 52 bytes leftover after parsing attributes in process `syz.1.270'.
[   81.136206][ T6994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   81.205569][ T7001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.271'.
[   81.208902][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'.
[   81.248672][ T7003] netlink: 48 bytes leftover after parsing attributes in process `syz.1.272'.
[   84.267512][ T7094] erspan0: entered promiscuous mode
[   84.269275][ T7094] macvtap1: entered promiscuous mode
[   84.271187][ T7094] macvtap1: entered allmulticast mode
[   84.272746][ T7094] erspan0: entered allmulticast mode
[   84.312226][  T189] wlan1: Trigger new scan to find an IBSS to join
[   85.341047][ T3603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.750901][ T7174] netlink: 'syz.2.316': attribute type 13 has an invalid length.
[   85.753337][ T7174] netlink: 'syz.2.316': attribute type 17 has an invalid length.
[   85.753986][ T7175] __nla_validate_parse: 22 callbacks suppressed
[   85.753998][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'.
[   85.764788][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'.
[   85.792735][ T7178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.318'.
[   85.842869][ T7174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.877458][ T7181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.955325][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'.
[   85.958146][ T7188] netlink: 34 bytes leftover after parsing attributes in process `syz.2.322'.
[   86.126632][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'.
[   86.194115][ T7204] netlink: 68 bytes leftover after parsing attributes in process `syz.0.328'.
[   86.952116][ T7216] netlink: 'syz.1.330': attribute type 7 has an invalid length.
[   86.962230][ T7216] : entered promiscuous mode
[   87.098361][ T7229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.099720][ T7233] netlink: 180 bytes leftover after parsing attributes in process `syz.0.337'.
[   87.146573][ T7236] netlink: 'syz.2.338': attribute type 21 has an invalid length.
[   87.148906][ T7236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.338'.
[   87.152996][    C0] Unknown status report in ack skb
[   87.154913][ T7239] netlink: 40 bytes leftover after parsing attributes in process `syz.0.339'.
[   87.230732][ T7245] IPVS: length: 67 != 24
[   87.418663][ T7258] tap0: tun_chr_ioctl cmd 1074025678
[   87.425331][ T7258] tap0: group set to 0
[   88.089277][ T7288] netlink: 'syz.1.351': attribute type 7 has an invalid length.
[   88.092685][ T7288] xt_HMARK: proto mask must be zero with L3 mode
[   88.315468][ T7303] x_tables: duplicate underflow at hook 1
[   88.394243][ T7305] team0: Port device team_slave_0 removed
[   88.409130][ T7307] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000
[   88.459284][ T7311] openvswitch: netlink: IP tunnel TTL not specified.
[   88.651086][ T7328] pimreg: entered allmulticast mode
[   88.662378][ T7328] pimreg: left allmulticast mode
[   88.861572][ T7354] netlink: 'syz.0.367': attribute type 21 has an invalid length.
[   88.865975][ T7354] netlink: 'syz.0.367': attribute type 13 has an invalid length.
[   88.868465][ T7354] netlink: 'syz.0.367': attribute type 17 has an invalid length.
[   89.017237][ T7358] netlink: 'syz.1.369': attribute type 1 has an invalid length.
[   89.138543][ T7374] netlink: 'syz.2.374': attribute type 5 has an invalid length.
[   89.455389][ T7397] RDS: rds_bind could not find a transport for ::ffff:172.20.20.21, load rds_tcp or rds_rdma?
[   89.671607][ T7418] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.683686][ T7418] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.686695][ T7418] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.689720][ T7418] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.692191][ T7420] x_tables: ip_tables: udp match: only valid for protocol 17
[   89.701596][ T7420] openvswitch: netlink: IP tunnel dst address not specified
[   89.842521][ T7437] team0: Port device vlan0 removed
[   90.694177][ T7455] sctp: [Deprecated]: syz.2.396 (pid 7455) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.694177][ T7455] Use struct sctp_sack_info instead
[   90.790608][ T7453] nbd1: detected capacity change from 0 to 127
[   90.807852][ T7463] block nbd1: NBD_DISCONNECT
[   90.811344][ T7463] block nbd1: Disconnected due to user request.
[   90.813384][ T7463] block nbd1: shutting down sockets
[   90.920305][ T7461] __nla_validate_parse: 28 callbacks suppressed
[   90.920315][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'.
[   90.926729][ T7477] netlink: 220 bytes leftover after parsing attributes in process `syz.0.399'.
[   91.031102][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'.
[   91.358336][ T7513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.371344][ T7513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.608103][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'.
[   91.608355][ T7527] validate_nla: 3 callbacks suppressed
[   91.608369][ T7527] netlink: 'syz.1.412': attribute type 1 has an invalid length.
[   91.640849][ T7527] bond3: entered promiscuous mode
[   91.642698][ T7527] bond3: entered allmulticast mode
[   91.645197][ T7527] 8021q: adding VLAN 0 to HW filter on device bond3
[   91.663008][ T7527] bridge1: entered promiscuous mode
[   91.665357][ T7527] bridge1: entered allmulticast mode
[   91.667756][ T7527] bond3: (slave bridge1): Enslaving as a backup interface with an up link
[   91.675669][ T7527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.412'.
[   91.690532][ T7526] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.701799][ T7527] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.705259][ T7527] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.708766][ T7527] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.713164][ T7527] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.730877][ T7529] tap0: tun_chr_ioctl cmd 1074025678
[   91.732996][ T7529] tap0: group set to 0
[   91.760944][ T7526] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.819137][ T7526] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.826042][ T7531] netlink: 60 bytes leftover after parsing attributes in process `syz.1.413'.
[   91.829553][ T7531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.413'.
[   91.833737][ T7531] netlink: 60 bytes leftover after parsing attributes in process `syz.1.413'.
[   91.867440][ T7526] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.955008][ T7526] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.985326][ T7542] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[   92.081416][ T7526] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.096206][ T7526] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.108941][ T7526] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.147625][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'.
[   92.276922][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.418'.
[   92.871103][ T7615] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[   93.157020][ T7632] netlink: 'syz.0.439': attribute type 4 has an invalid length.
[   93.694282][ T7655] 8021q: adding VLAN 0 to HW filter on device batadv1
[   93.698556][ T7655] team0: Port device batadv1 added
[   93.738942][ T7659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.913664][ T7667] syzkaller1: entered promiscuous mode
[   93.915398][ T7667] syzkaller1: entered allmulticast mode
[   93.970658][ T7679] Unsupported ieee802154 address type: 0
[   94.000205][ T7677] netlink: 'syz.1.450': attribute type 3 has an invalid length.
[   94.003142][ T7677] netlink: 'syz.1.450': attribute type 3 has an invalid length.
[   94.045575][ T7685] netlink: 'syz.2.452': attribute type 1 has an invalid length.
[   94.048393][ T7684] netlink: 'syz.2.452': attribute type 27 has an invalid length.
[   94.147393][ T7694] batadv1: entered promiscuous mode
[   94.149561][ T7694] batadv1: entered allmulticast mode
[   94.227188][ T7698] vlan0: entered promiscuous mode
[   94.229130][ T7698] vlan0: entered allmulticast mode
[   94.231786][ T7698] hsr_slave_1: entered allmulticast mode
[   94.425765][ T7710] netlink: 'syz.2.458': attribute type 72 has an invalid length.
[   95.239582][ T7773] pim6reg: left allmulticast mode
[   95.618478][ T7793] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.862652][ T7809] netlink: 'syz.2.485': attribute type 11 has an invalid length.
[   96.078176][ T7817] __nla_validate_parse: 23 callbacks suppressed
[   96.078189][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.486'.
[   96.109480][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'.
[   96.193050][ T7841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.493'.
[   96.232419][ T7841] 8021q: adding VLAN 0 to HW filter on device bond4
[   96.261905][ T7839] 8021q: adding VLAN 0 to HW filter on device bond4
[   96.268313][ T7839] bond4: (slave vti0): The slave device specified does not support setting the MAC address
[   96.274048][ T7839] bond4: (slave vti0): Error -95 calling set_mac_address
[   96.452506][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'.
[   96.717019][ T7867] netlink: 'syz.2.501': attribute type 1 has an invalid length.
[   96.723277][ T7867] netlink: 236 bytes leftover after parsing attributes in process `syz.2.501'.
[   96.731778][ T7867] netlink: 236 bytes leftover after parsing attributes in process `syz.2.501'.
[   96.827917][ T7871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.502'.
[   96.993954][ T7875] syzkaller0: entered promiscuous mode
[   96.995831][ T7875] syzkaller0: entered allmulticast mode
[   98.108617][ T7890] netlink: 'syz.0.507': attribute type 29 has an invalid length.
[   99.104866][ T7908] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.111213][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'.
[   99.115030][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'.
[   99.115363][ T7908] syzkaller0: entered promiscuous mode
[   99.123125][ T7908] syzkaller0: entered allmulticast mode
[   99.148278][ T7908] tipc: Resetting bearer <eth:syzkaller0>
[   99.152408][ T7912] netlink: 256 bytes leftover after parsing attributes in process `syz.2.513'.
[   99.172834][ T7907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.184521][ T7907] tipc: Resetting bearer <eth:syzkaller0>
[   99.208543][ T7907] tipc: Disabling bearer <eth:syzkaller0>
[   99.246779][ T7925] xt_TCPMSS: Only works on TCP SYN packets
[   99.639723][ T7937] geneve0: entered promiscuous mode
[   99.660738][ T7937] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   99.667189][ T7937] netlink: 'syz.1.521': attribute type 1 has an invalid length.
[   99.894052][ T7947] netlink: 'syz.1.524': attribute type 21 has an invalid length.
[  100.013704][ T7954] sctp: [Deprecated]: syz.1.526 (pid 7954) Use of struct sctp_assoc_value in delayed_ack socket option.
[  100.013704][ T7954] Use struct sctp_sack_info instead
[  100.494786][ T7987] batadv0: left allmulticast mode
[  100.496549][ T7987] batadv0: left promiscuous mode
[  100.498227][ T7987] bridge0: port 3(batadv0) entered disabled state
[  100.504201][ T7987] bridge_slave_0: left allmulticast mode
[  100.506052][ T7987] bridge_slave_0: left promiscuous mode
[  100.507982][ T7987] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.513537][ T7987] bridge_slave_1: left allmulticast mode
[  100.516651][ T7987] bridge_slave_1: left promiscuous mode
[  100.522728][ T7987] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.531405][ T7987] bond0: (slave bond_slave_0): Releasing backup interface
[  100.537856][ T7987] bond0: (slave bond_slave_1): Releasing backup interface
[  100.548237][ T7987] team0: Port device team_slave_1 removed
[  100.550460][ T7987] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.561706][ T7987] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.564695][ T7987] batman_adv: batadv0: Removing interface: macvlan2
[  100.568166][ T7987] bond3: (slave bridge1): Releasing backup interface
[  100.570665][ T7987] bridge1: left promiscuous mode
[  100.572318][ T7987] bridge1: left allmulticast mode
[  100.613816][ T7987] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.617316][ T7987] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  100.722008][ T7995] xt_hashlimit: size too large, truncated to 1048576
[  100.937233][ T8011] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.940765][    C1] Illegal XDP return value 16128 on prog  (id 110) dev lo, expect packet loss!
[  100.946248][ T8011] syzkaller0: entered promiscuous mode
[  100.948237][ T8011] syzkaller0: entered allmulticast mode
[  101.048059][ T8011] tipc: Resetting bearer <eth:syzkaller0>
[  101.053372][ T8010] tipc: Resetting bearer <eth:syzkaller0>
[  101.064186][ T8010] tipc: Disabling bearer <eth:syzkaller0>
[  101.156801][ T8019] __nla_validate_parse: 14 callbacks suppressed
[  101.156812][ T8019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.545'.
[  101.297879][ T8031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.314206][   T33] audit: type=1800 audit(1752204510.602:3): pid=8034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.549" name="memory.events" dev="tmpfs" ino=903 res=0 errno=0
[  101.324558][   T33] audit: type=1804 audit(1752204510.612:4): pid=8034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.549" name="memory.events" dev="tmpfs" ino=903 res=1 errno=0
[  101.975313][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'.
[  102.056933][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'.
[  102.324075][ T8061] xt_hashlimit: size too large, truncated to 1048576
[  103.379271][ T8068] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  103.502342][ T8083] netlink: 176 bytes leftover after parsing attributes in process `syz.1.561'.
[  103.665377][ T8091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.562'.
[  103.736857][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'.
[  103.746241][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.566'.
[  103.946579][ T8118] IPVS: length: 167 != 8
[  103.952285][ T8118] netlink: 'syz.0.572': attribute type 1 has an invalid length.
[  104.003509][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'.
[  104.004600][ T8118] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  104.012425][ T8118] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  104.015988][ T8118] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  104.025979][ T8118] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  104.032016][ T8118] bond2: (slave geneve2): making interface the new active one
[  104.035676][ T8118] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  104.082074][ T8130] netlink: 'syz.2.575': attribute type 1 has an invalid length.
[  104.085167][ T8130] netlink: 220 bytes leftover after parsing attributes in process `syz.2.575'.
[  104.089349][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'.
[  104.104564][ T8118] 8021q: adding VLAN 0 to HW filter on device bond2
[  104.450957][ T8136] vlan0: left promiscuous mode
[  104.473785][ T8136] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.477279][ T8136] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.480581][ T8136] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.483560][ T8136] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.508214][ T8136] ip6gre1: left promiscuous mode
[  104.514580][ T8136] erspan0: left allmulticast mode
[  104.516424][ T8136] macvtap1: left promiscuous mode
[  104.518117][ T8136] macvtap1: left allmulticast mode
[  104.640474][ T8148] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  104.644364][ T8148] CPU: 0 UID: 0 PID: 8148 Comm: syz.0.580 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  104.644377][ T8148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  104.644382][ T8148] Call Trace:
[  104.644387][ T8148]  <TASK>
[  104.644392][ T8148]  dump_stack_lvl+0x189/0x250
[  104.644410][ T8148]  ? __pfx_dump_stack_lvl+0x10/0x10
[  104.644421][ T8148]  ? __pfx__printk+0x10/0x10
[  104.644435][ T8148]  ? kernfs_path_from_node+0x2c/0x260
[  104.644449][ T8148]  ? kernfs_path_from_node+0x2c/0x260
[  104.644459][ T8148]  ? kernfs_path_from_node+0x2c/0x260
[  104.644470][ T8148]  ? kernfs_path_from_node+0x22c/0x260
[  104.644480][ T8148]  ? kernfs_path_from_node+0x2c/0x260
[  104.644492][ T8148]  sysfs_warn_dup+0x8e/0xa0
[  104.644504][ T8148]  sysfs_do_create_link_sd+0xc0/0x110
[  104.644517][ T8148]  device_add_class_symlinks+0x1cf/0x240
[  104.644531][ T8148]  device_add+0x475/0xb50
[  104.644543][ T8148]  wiphy_register+0x199a/0x26b0
[  104.644563][ T8148]  ? __pfx_wiphy_register+0x10/0x10
[  104.644571][ T8148]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  104.644588][ T8148]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  104.644603][ T8148]  ieee80211_register_hw+0x33e1/0x4120
[  104.644664][ T8148]  ? ieee80211_register_hw+0x1481/0x4120
[  104.644682][ T8148]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  104.644695][ T8148]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  104.644716][ T8148]  ? __hrtimer_setup+0x187/0x210
[  104.644726][ T8148]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  104.644741][ T8148]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  104.644766][ T8148]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  104.644776][ T8148]  ? trace_kmalloc+0x1f/0xd0
[  104.644787][ T8148]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  104.644798][ T8148]  ? kstrndup+0xbf/0x160
[  104.644817][ T8148]  hwsim_new_radio_nl+0xea4/0x1b10
[  104.644828][ T8148]  ? __pfx___nla_validate_parse+0x10/0x10
[  104.644844][ T8148]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  104.644860][ T8148]  ? __nla_parse+0x40/0x60
[  104.644870][ T8148]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  104.644883][ T8148]  genl_family_rcv_msg_doit+0x215/0x300
[  104.644899][ T8148]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  104.644918][ T8148]  ? bpf_lsm_capable+0x9/0x20
[  104.644927][ T8148]  ? security_capable+0x7e/0x2e0
[  104.644943][ T8148]  genl_rcv_msg+0x60e/0x790
[  104.644958][ T8148]  ? __pfx_genl_rcv_msg+0x10/0x10
[  104.644969][ T8148]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  104.644986][ T8148]  netlink_rcv_skb+0x208/0x470
[  104.644996][ T8148]  ? __pfx_genl_rcv_msg+0x10/0x10
[  104.645008][ T8148]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  104.645026][ T8148]  ? down_read+0x1ad/0x2e0
[  104.645037][ T8148]  genl_rcv+0x28/0x40
[  104.645047][ T8148]  netlink_unicast+0x75b/0x8d0
[  104.645062][ T8148]  netlink_sendmsg+0x805/0xb30
[  104.645076][ T8148]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.645088][ T8148]  ? aa_sock_msg_perm+0x94/0x160
[  104.645101][ T8148]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  104.645109][ T8148]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.645119][ T8148]  __sock_sendmsg+0x21c/0x270
[  104.645129][ T8148]  ____sys_sendmsg+0x505/0x830
[  104.645144][ T8148]  ? __pfx_____sys_sendmsg+0x10/0x10
[  104.645164][ T8148]  ? import_iovec+0x74/0xa0
[  104.645176][ T8148]  ___sys_sendmsg+0x21f/0x2a0
[  104.645187][ T8148]  ? __pfx____sys_sendmsg+0x10/0x10
[  104.645216][ T8148]  ? __fget_files+0x2a/0x420
[  104.645227][ T8148]  ? __fget_files+0x3a0/0x420
[  104.645243][ T8148]  __x64_sys_sendmsg+0x19b/0x260
[  104.645254][ T8148]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  104.645270][ T8148]  ? rcu_is_watching+0x15/0xb0
[  104.645283][ T8148]  ? do_syscall_64+0xbe/0x3b0
[  104.645294][ T8148]  do_syscall_64+0xfa/0x3b0
[  104.645301][ T8148]  ? lockdep_hardirqs_on+0x9c/0x150
[  104.645308][ T8148]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.645317][ T8148]  ? exc_page_fault+0x9f/0xf0
[  104.645331][ T8148]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.645338][ T8148] RIP: 0033:0x7f119ff8e929
[  104.645348][ T8148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.645355][ T8148] RSP: 002b:00007f11a0d23038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  104.645366][ T8148] RAX: ffffffffffffffda RBX: 00007f11a01b5fa0 RCX: 00007f119ff8e929
[  104.645372][ T8148] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  104.645377][ T8148] RBP: 00007f11a0010b39 R08: 0000000000000000 R09: 0000000000000000
[  104.645382][ T8148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  104.645387][ T8148] R13: 0000000000000000 R14: 00007f11a01b5fa0 R15: 00007ffc7b29d8d8
[  104.645401][ T8148]  </TASK>
[  105.321830][ T8175] 
[  105.322977][ T8175] ======================================================
[  105.325702][ T8175] WARNING: possible circular locking dependency detected
[  105.328344][ T8175] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  105.332289][ T8175] ------------------------------------------------------
[  105.335021][ T8175] syz.2.591/8175 is trying to acquire lock:
[  105.337285][ T8175] ffffffff8e2257a8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0
[  105.341022][ T8175] 
[  105.341022][ T8175] but task is already holding lock:
[  105.343841][ T8175] ffff88802119d8b0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x16c/0xac0
[  105.347821][ T8175] 
[  105.347821][ T8175] which lock already depends on the new lock.
[  105.347821][ T8175] 
[  105.351784][ T8175] 
[  105.351784][ T8175] the existing dependency chain (in reverse order) is:
[  105.355178][ T8175] 
[  105.355178][ T8175] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  105.358411][ T8175]        lock_acquire+0x120/0x360
[  105.360266][ T8175]        blk_alloc_queue+0x538/0x620
[  105.362250][ T8175]        __blk_mq_alloc_disk+0x162/0x340
[  105.364312][ T8175]        nbd_dev_add+0x476/0xb00
[  105.366242][ T8175]        nbd_init+0x21a/0x2d0
[  105.368175][ T8175]        do_one_initcall+0x236/0x820
[  105.370289][ T8175]        do_initcall_level+0x137/0x1f0
[  105.372456][ T8175]        do_initcalls+0x69/0xd0
[  105.374378][ T8175]        kernel_init_freeable+0x3d9/0x570
[  105.376630][ T8175]        kernel_init+0x1d/0x1d0
[  105.378511][ T8175]        ret_from_fork+0x3fc/0x770
[  105.380429][ T8175]        ret_from_fork_asm+0x1a/0x30
[  105.382464][ T8175] 
[  105.382464][ T8175] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  105.385299][ T8175]        lock_acquire+0x120/0x360
[  105.387237][ T8175]        fs_reclaim_acquire+0x72/0x100
[  105.389362][ T8175]        prepare_alloc_pages+0x153/0x610
[  105.391547][ T8175]        __alloc_frozen_pages_noprof+0x123/0x370
[  105.394064][ T8175]        __alloc_pages_noprof+0xa/0x30
[  105.396213][ T8175]        pcpu_populate_chunk+0x182/0xb30
[  105.398385][ T8175]        pcpu_alloc_noprof+0xcbf/0x16b0
[  105.400550][ T8175]        bpf_map_alloc_percpu+0xbc/0x1b0
[  105.402762][ T8175]        array_map_alloc+0x370/0x6f0
[  105.404856][ T8175]        map_create+0x903/0x1150
[  105.406793][ T8175]        __sys_bpf+0x67e/0x860
[  105.408674][ T8175]        __x64_sys_bpf+0x7c/0x90
[  105.410626][ T8175]        do_syscall_64+0xfa/0x3b0
[  105.412505][ T8175]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.415035][ T8175] 
[  105.415035][ T8175] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}:
[  105.418107][ T8175]        validate_chain+0xb9b/0x2140
[  105.420306][ T8175]        __lock_acquire+0xab9/0xd20
[  105.422322][ T8175]        lock_acquire+0x120/0x360
[  105.424301][ T8175]        __mutex_lock+0x182/0xe80
[  105.426295][ T8175]        pcpu_alloc_noprof+0x286/0x16b0
[  105.428434][ T8175]        sbitmap_init_node+0x1e1/0x630
[  105.430549][ T8175]        sbitmap_queue_init_node+0x41/0x660
[  105.432854][ T8175]        blk_mq_init_tags+0x110/0x280
[  105.434972][ T8175]        blk_mq_alloc_map_and_rqs+0xbd/0x9f0
[  105.437300][ T8175]        blk_mq_update_nr_hw_queues+0x76a/0x14c0
[  105.439762][ T8175]        nbd_start_device+0x16c/0xac0
[  105.441786][ T8175]        nbd_genl_connect+0x1250/0x1930
[  105.443954][ T8175]        genl_family_rcv_msg_doit+0x215/0x300
[  105.446381][ T8175]        genl_rcv_msg+0x60e/0x790
[  105.448300][ T8175]        netlink_rcv_skb+0x208/0x470
[  105.450251][ T8175]        genl_rcv+0x28/0x40
[  105.452048][ T8175]        netlink_unicast+0x75b/0x8d0
[  105.454161][ T8175]        netlink_sendmsg+0x805/0xb30
[  105.456215][ T8175]        __sock_sendmsg+0x21c/0x270
[  105.458143][ T8175]        ____sys_sendmsg+0x505/0x830
[  105.460218][ T8175]        ___sys_sendmsg+0x21f/0x2a0
[  105.462266][ T8175]        __x64_sys_sendmsg+0x19b/0x260
[  105.464403][ T8175]        do_syscall_64+0xfa/0x3b0
[  105.466377][ T8175]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.468877][ T8175] 
[  105.468877][ T8175] other info that might help us debug this:
[  105.468877][ T8175] 
[  105.472747][ T8175] Chain exists of:
[  105.472747][ T8175]   pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49
[  105.472747][ T8175] 
[  105.477919][ T8175]  Possible unsafe locking scenario:
[  105.477919][ T8175] 
[  105.480786][ T8175]        CPU0                    CPU1
[  105.482936][ T8175]        ----                    ----
[  105.484939][ T8175]   lock(&q->q_usage_counter(io)#49);
[  105.486752][ T8175]                                lock(fs_reclaim);
[  105.489163][ T8175]                                lock(&q->q_usage_counter(io)#49);
[  105.491737][ T8175]   lock(pcpu_alloc_mutex);
[  105.493493][ T8175] 
[  105.493493][ T8175]  *** DEADLOCK ***
[  105.493493][ T8175] 
[  105.496651][ T8175] 7 locks held by syz.2.591/8175:
[  105.498542][ T8175]  #0: ffffffff8f582af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  105.501216][ T8175]  #1: ffffffff8f582908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  105.504140][ T8175]  #2: ffff88802130f230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  105.508001][ T8175]  #3: ffff88802130f188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  105.512269][ T8175]  #4: ffff88802130f0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x49/0x14c0
[  105.516509][ T8175]  #5: ffff88802119d8b0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x16c/0xac0
[  105.520317][ T8175]  #6: ffff88802119d8e8 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: nbd_start_device+0x16c/0xac0
[  105.523818][ T8175] 
[  105.523818][ T8175] stack backtrace:
[  105.525838][ T8175] CPU: 0 UID: 0 PID: 8175 Comm: syz.2.591 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  105.525851][ T8175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.525857][ T8175] Call Trace:
[  105.525862][ T8175]  <TASK>
[  105.525868][ T8175]  dump_stack_lvl+0x189/0x250
[  105.525881][ T8175]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.525891][ T8175]  ? __pfx__printk+0x10/0x10
[  105.525903][ T8175]  ? print_lock_name+0xde/0x100
[  105.525914][ T8175]  print_circular_bug+0x2ee/0x310
[  105.525927][ T8175]  check_noncircular+0x134/0x160
[  105.525938][ T8175]  validate_chain+0xb9b/0x2140
[  105.525951][ T8175]  __lock_acquire+0xab9/0xd20
[  105.525960][ T8175]  ? pcpu_alloc_noprof+0x286/0x16b0
[  105.525972][ T8175]  lock_acquire+0x120/0x360
[  105.525980][ T8175]  ? pcpu_alloc_noprof+0x286/0x16b0
[  105.525991][ T8175]  __mutex_lock+0x182/0xe80
[  105.525999][ T8175]  ? pcpu_alloc_noprof+0x286/0x16b0
[  105.526008][ T8175]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  105.526020][ T8175]  ? kasan_save_track+0x4f/0x80
[  105.526029][ T8175]  ? kasan_save_track+0x3e/0x80
[  105.526037][ T8175]  ? __kmalloc_cache_node_noprof+0x234/0x3d0
[  105.526048][ T8175]  ? pcpu_alloc_noprof+0x286/0x16b0
[  105.526057][ T8175]  ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0
[  105.526065][ T8175]  ? blk_mq_update_nr_hw_queues+0x76a/0x14c0
[  105.526074][ T8175]  ? __pfx___mutex_lock+0x10/0x10
[  105.526082][ T8175]  ? genl_rcv+0x28/0x40
[  105.526093][ T8175]  ? __sock_sendmsg+0x21c/0x270
[  105.526100][ T8175]  ? ____sys_sendmsg+0x505/0x830
[  105.526112][ T8175]  pcpu_alloc_noprof+0x286/0x16b0
[  105.526125][ T8175]  sbitmap_init_node+0x1e1/0x630
[  105.526134][ T8175]  ? __kasan_kmalloc+0x93/0xb0
[  105.526143][ T8175]  sbitmap_queue_init_node+0x41/0x660
[  105.526152][ T8175]  ? __raw_spin_lock_init+0x45/0x100
[  105.526163][ T8175]  blk_mq_init_tags+0x110/0x280
[  105.526174][ T8175]  blk_mq_alloc_map_and_rqs+0xbd/0x9f0
[  105.526184][ T8175]  ? blk_mq_update_nr_hw_queues+0x678/0x14c0
[  105.526192][ T8175]  ? kfree+0x18e/0x440
[  105.526201][ T8175]  blk_mq_update_nr_hw_queues+0x76a/0x14c0
[  105.526213][ T8175]  nbd_start_device+0x16c/0xac0
[  105.526223][ T8175]  ? __nla_parse+0x40/0x60
[  105.526231][ T8175]  nbd_genl_connect+0x1250/0x1930
[  105.526241][ T8175]  ? __pfx_nbd_genl_connect+0x10/0x10
[  105.526251][ T8175]  ? __nla_parse+0x40/0x60
[  105.526259][ T8175]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  105.526268][ T8175]  genl_family_rcv_msg_doit+0x215/0x300
[  105.526281][ T8175]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  105.526297][ T8175]  genl_rcv_msg+0x60e/0x790
[  105.526309][ T8175]  ? __pfx_genl_rcv_msg+0x10/0x10
[  105.526320][ T8175]  ? __pfx_nbd_genl_connect+0x10/0x10
[  105.526330][ T8175]  netlink_rcv_skb+0x208/0x470
[  105.526339][ T8175]  ? __pfx_genl_rcv_msg+0x10/0x10
[  105.526350][ T8175]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  105.526362][ T8175]  ? down_read+0x1ad/0x2e0
[  105.526370][ T8175]  genl_rcv+0x28/0x40
[  105.526381][ T8175]  netlink_unicast+0x75b/0x8d0
[  105.526391][ T8175]  netlink_sendmsg+0x805/0xb30
[  105.526402][ T8175]  ? __pfx_netlink_sendmsg+0x10/0x10
[  105.526412][ T8175]  ? aa_sock_msg_perm+0x94/0x160
[  105.526423][ T8175]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  105.526430][ T8175]  ? __pfx_netlink_sendmsg+0x10/0x10
[  105.526440][ T8175]  __sock_sendmsg+0x21c/0x270
[  105.526448][ T8175]  ____sys_sendmsg+0x505/0x830
[  105.526458][ T8175]  ? __pfx_____sys_sendmsg+0x10/0x10
[  105.526469][ T8175]  ? import_iovec+0x74/0xa0
[  105.526479][ T8175]  ___sys_sendmsg+0x21f/0x2a0
[  105.526489][ T8175]  ? __pfx____sys_sendmsg+0x10/0x10
[  105.526505][ T8175]  ? __fget_files+0x2a/0x420
[  105.526515][ T8175]  ? __fget_files+0x3a0/0x420
[  105.526527][ T8175]  __x64_sys_sendmsg+0x19b/0x260
[  105.526537][ T8175]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  105.526549][ T8175]  ? rcu_is_watching+0x15/0xb0
[  105.526559][ T8175]  ? do_syscall_64+0xbe/0x3b0
[  105.526567][ T8175]  do_syscall_64+0xfa/0x3b0
[  105.526575][ T8175]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.526620][ T8175]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.526628][ T8175]  ? exc_page_fault+0x9f/0xf0
[  105.526640][ T8175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.526648][ T8175] RIP: 0033:0x7f9d4af8e929
[  105.526657][ T8175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.526664][ T8175] RSP: 002b:00007f9d4bd84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  105.526679][ T8175] RAX: ffffffffffffffda RBX: 00007f9d4b1b6080 RCX: 00007f9d4af8e929
[  105.526689][ T8175] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000008
[  105.526697][ T8175] RBP: 00007f9d4b010b39 R08: 0000000000000000 R09: 0000000000000000
[  105.526706][ T8175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.526714][ T8175] R13: 0000000000000000 R14: 00007f9d4b1b6080 R15: 00007ffea1777948
[  105.526729][ T8175]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  105.740948][ T8175] nbd0: detected capacity change from 0 to 127
[  105.855150][ T5860] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  105.892391][ T5860] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  105.944830][ T5860] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  106.010811][ T7464] block nbd0: Receive control failed (result -32)
[  106.013350][   T55] block nbd0: Receive control failed (result -32)
[  106.016042][ T8183] block nbd0: Receive control failed (result -32)
[  106.031195][ T5860] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  106.078609][ T5860] batadv0: left allmulticast mode
[  106.080788][ T5860] batadv0: left promiscuous mode
[  106.082832][ T5860] bridge0: port 3(batadv0) entered disabled state
[  106.086768][ T5860] bridge_slave_1: left allmulticast mode
[  106.089114][ T5860] bridge_slave_1: left promiscuous mode
[  106.091723][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.095785][ T5860] bridge_slave_0: left allmulticast mode
[  106.098096][ T5860] bridge_slave_0: left promiscuous mode
[  106.100622][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.182566][ T5860] bond1 (unregistering): (slave gretap1): Releasing active interface
[  106.200721][ T5860] bond2 (unregistering): (slave geneve2): Releasing active interface
[  106.319657][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.323446][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.327043][ T5860] bond0 (unregistering): Released all slaves
[  106.393413][ T5860] bond1 (unregistering): Released all slaves
[  106.400146][ T5860] bond2 (unregistering): Released all slaves
[  106.455585][ T5860] tipc: Left network mode
[  106.649850][ T5860] hsr_slave_0: left promiscuous mode
[  106.654045][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.657471][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.671963][ T5860] team0 (unregistering): Port device batadv1 removed
[  106.822761][ T5860] team0 (unregistering): Port device team_slave_1 removed
[  106.847913][ T5860] team0 (unregistering): Port device team_slave_0 removed
[  107.457083][ T5860] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
03:28:34  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000338e RDI=000000000000338f RBP=00000000000003f8 RSP=ffffc90002f1e390
R8 =ffff88801fbf8237 R9 =1ffff11003f7f046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78f9 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9d4bd846c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000052 CR3=000000002118c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f11a0011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff1bf5208 RBX=ffffffff8dfa9040 RCX=ffff888022149cc0 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000004e72 RSP=ffffc90002f3fb10
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff81aec010
R12=000000185b18d284 R13=ffff888136627ba0 R14=ffffc90002f3fd01 R15=dffffc0000000000
RIP=ffffffff81aec08a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558d422500 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d452e6e000 CR3=000000002118c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f9d4b185478 00007f9d4b185450 XMM03=00007f9d4b185488 00007f9d4b185480
XMM04=00007f9d4bced100 00007f9d4b185440 XMM05=00007f9d4b185458 00007f9d4b1854a0
XMM06=00007f9d4b185498 00007f9d4b185490 XMM07=00007f9d4b185488 00007f9d4b185480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f9d4b011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
