last executing test programs:

2.023881472s ago: executing program 1 (id=1476):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fa0500", 0x48, 0x11, 0x0, @local, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e102060872381f41e5fff9620915b6f78670dfaf9a195fcb2a79cf6b7931c9b4"}}}}}}}, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x20000858)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}]}}]}, 0x3c}}, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x4e22, @multicast1}, 0x2}}, 0x2e)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0)

1.694148412s ago: executing program 1 (id=1487):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00', <r3=>0x0})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00'})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xf}, {0xe, 0xfff3}, {0x9, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x4}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0xffffffff}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0b0600000000008000003000000008000200", @ANYRESHEX=r9, @ANYBLOB], 0x1c}}, 0x4048000)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d40)={0x0, 0x300, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400202024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000002000001050003000000000088000080060001000a000000140002002001000000f800000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r3], 0x22c}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)={0x14, r2, 0x8, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008805}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x808)

1.514664056s ago: executing program 1 (id=1491):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0xfffc, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) (async)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f00000009c0)={{<r2=>r0, &(0x7f0000000180)='-:{\xfc\x00', 0x101000, &(0x7f00000001c0)={@_ha_fsid={[0x10001, 0x9]}, {0x3, 0x3, 0x0, 0x7}}, 0x6, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x3dab}, 0x2, &(0x7f0000000980)=[{0x1, 0x8, &(0x7f0000000280)='\x00', &(0x7f00000002c0)="075c2a9647c237ba98baba2bbe8886a97e993cfd42d12a9195781af1503184f5507a2550aad58b2a25be8b698799c59d8a43b5057ea3c2a9006f987b62e696c0b3748f8ffef04febfab94e7de655dbc23b0fb82163a0094409f3b192e13aa17ad00dc0d21bd461cd62", 0x69, 0x12}, {0x2, 0x3, &(0x7f0000000340)='$\x00', &(0x7f0000000880)="e16ab68a025fabb77ba0e557688ff050de08afe69fe5d9be2c057ac96edefd4cac26064724dd66cbd5596932dba71a034c7a08ca3db9591951b3bf79999d695d10f0ecafc5486ed32e7c0bb4973d975f24d1519664b87a2859ff3a26a9a4506d67f18c9b6d0e1e73b7b1afa88ba21ba2a999014aa7be988c7b970f1aa856218107a4f5311b37d1205888ad701cef4a9d4b2517e19699c9e88a9249e3c534a840cc2d343d64b07a0cba10690e817ec7126530e8e731c3266f5086a47ae2e44c2b4a", 0xc1, 0x10}]})
getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000a40)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0xfffffffffffffffe, 0x7f, 0x7fffffff, 0x59, 0x1000]}, &(0x7f0000000ac0)=0x78) (async)
getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000a40)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0xfffffffffffffffe, 0x7f, 0x7fffffff, 0x59, 0x1000]}, &(0x7f0000000ac0)=0x78)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x400840, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f0000000100)=""/7}, 0x20)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x330, 0x0, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x260, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x88, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x6e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0xffffff00, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x29, 0x0, 0x3}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x5, 0x1}, {0x6, 0x4}, {0xf, 0xfff}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x390)
syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r6, &(0x7f0000000000)={{0x3, @null, 0x1}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0))
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r3, 0x40109441, &(0x7f0000000140)={0x9, 0x5, 0x9})
ioctl$PPPIOCGIDLE64(r3, 0x8010743f, &(0x7f0000000c00))
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x800, '\x00', 0x0, r2, 0x5, 0x2, 0x1}, 0x50) (async)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x800, '\x00', 0x0, r2, 0x5, 0x2, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000bc0)={r8, &(0x7f0000000b00)="dc449180f6861edfe662a22b8e7646d65c790488ddb7fca8838e7597e0885a99463090266f9a72fa2daa1c556043bd9eee59", &(0x7f0000000b40)=""/72}, 0x20)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000003060111000000000000000003000000"], 0x14}}, 0x44040)
close(r7)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))

1.502318347s ago: executing program 0 (id=1493):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) (async)
r1 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 32)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
setsockopt$packet_rx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) (async)
setsockopt$sock_timeval(r4, 0x1, 0x31, &(0x7f0000000280)={0x0, 0xea60}, 0x10) (async)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) (async, rerun: 32)
pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (async, rerun: 32)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) (async, rerun: 64)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) (async, rerun: 64)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0x13, &(0x7f0000000380)=0x3fc, 0x4)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r6) (async, rerun: 32)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010f000000000000000003000000080004"], 0x1c}}, 0x0) (async)
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x17, 0x5c, 0x5, 0xd71, 0x400, 0xffffffffffffffff, 0x8, '\x00', 0x0, r11, 0x2, 0x5}, 0x50) (async)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r9, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x84)

1.433612112s ago: executing program 0 (id=1494):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000007180)={'broute\x00', 0x0, 0x0, 0x0, [0x7f, 0x2, 0x9, 0x7fffffff, 0x0, 0x9]}, &(0x7f0000007200)=0x78)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300), &(0x7f0000000100)=[0x0], <r1=>0x0, 0xb9, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), &(0x7f00000000c0), 0x8, 0x50, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='rdma.current\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x1, 0x3, 0x20)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000240)={0x4001, 0x7ff, 0x1000, 0x5}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x70bd27, 0x27dfdffd, {0xa, 0x0, 0x80}}, 0x18}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}}, 0x20}, 0x1, 0x0, 0x0, 0x404c002}, 0x40040)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000500170001000000060018"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000880)

1.433022875s ago: executing program 1 (id=1495):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000006c0)={0x2, 0x4620, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000240)=0x2, 0x4)
sendto$inet(r1, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', <r5=>0x0})
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0xffff, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x1c}}, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r9, 0x541b, &(0x7f00000000c0))
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r8], 0x7c}}, 0x20000000)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000300000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000340))
r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000340)={0x0, 0x2, 0x100000004, 0x5})
socket(0x10, 0x803, 0x0)

1.431643181s ago: executing program 0 (id=1496):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000140)={{}, [@rose, @null, @rose, @rose, @rose, @netrom, @rose, @null]}, &(0x7f00000001c0)=0x48)
setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000200)=0x3, 0x4)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_FAMILY={0x5, 0xd, 0x28}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x8880)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x4c, 0x2, {0x10, "000000000000000000001000000010dc"}}}]}, 0x48}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800090000000f00040019"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, r6, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc52c}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9, 0x3, "609e828f1c"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4)

1.122810876s ago: executing program 1 (id=1497):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = accept4$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @bcast}, [@null, @bcast, @rose, @default, @remote, @null, @remote, @bcast]}, &(0x7f0000000240)=0x48, 0x1800)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000380)=0x6e)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000540)=ANY=[@ANYBLOB="060000000000000001000000000000000300000000000000", @ANYRES32=r1, @ANYBLOB="000000000600"/28, @ANYRES32=r1, @ANYBLOB="00000000070000fa0000000000ab729badae00"/33, @ANYRES32=r3, @ANYBLOB="000000000100"/28])
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24d32f478206010100000000000001000a00000a06000b00040000000500010007000000"], 0x24}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(0xffffffffffffffff, 0x1)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x48000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r7 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r8 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r8, &(0x7f0000000480)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x164, 0x2c, 0xd27, 0x70bd27, 0x2, {0x0, 0x0, 0x0, r9, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x134, 0x2, [@TCA_FLOWER_ACT={0x130, 0x3, [@m_sample={0x12c, 0x10, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x40}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x101, 0x7, 0x68}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3c}]}, {0xce, 0x6, "f5811391475827a78ed2332860b174a8fc82f1655f0fafa4c5188931256928fac85cfbbb03060e7e8788779a7c493410cf654e1ac7315b5c60c72d57aa5ce369efc9611e60ce38d70e87700167c32810d1ed232d3b5b0165aafca6fbc99b7bc3c1361e17db6f09cd5ee9af1a48bcc03a57886f38ebec7ec07de1c97f1c8cd1577fd25194fec2db153699eca565ea6c33d64edd5b16fedac2ac704dad821d8b0a6f29f4496ebc3d1923901d9ed0a669626c66908d193910e2a7ce9cd2d27d6bfbcaf61d69045071f659aa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
listen(r6, 0x6)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x18, 0x5a, 0x1, 0x0, 0x2, {0x2}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$nl_generic(r10, &(0x7f0000001a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a40)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x11ac}, 0x1, 0x0, 0x0, 0x40004}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r11=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000080)={r11, 0x4, 0x20, 0x3}, &(0x7f0000000840)=0x18)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
r13 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={<r14=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r12, 0x84, 0x71, &(0x7f0000000000)={r14, 0xd}, &(0x7f0000000040)=0x8)

1.118282102s ago: executing program 0 (id=1498):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x800, 0x2, 0x20000000, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x200}, {0xff, 0x7, 0x101, 0x8, 0x810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff3, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xe42, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x6, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x7, 0x9, 0x4, 0x3, 0x1}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x80006e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x37, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xae, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x5, 0x9, 0x6}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x3, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0xfffffffc, 0x2}, {0x8, 0x7, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0xc0, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x6, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x79d}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0x0, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x9}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc2c}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x0, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x7, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x4006, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xc5, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x9, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0x40000ea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0xc, 0x7ff}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x6, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0xf, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7f, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(r9, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
recvmmsg(r9, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000080)={0xa, 0x4e21, 0x10, @private2, 0xfffffffb}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT=r8, @ANYBLOB="bf76a6df0117f6935f9d3173dcb1c5559e957b0945c6fae12044201b397c0dc6c7ea5ef133466d801b9f37bc77e84dc1c44508b763739a9024bf6332c0825b50a738cc728e7746bced6e9d712e31c3b85917c3dfc8ded018c0a220cf9d1279417a4408bc6504afdf5b0d242b0652a2b3a0490d0916e09bad945c7e560d4dfcea3c83b789ebc03df28628921f89ed68bb2e398624c5648fab93bc430252a6db7cb7fddd4c0cd2e8a00f4246e892250e884d3ca198d84b5411113d50b2c6da0ceaa7a01e2a5abccf7b6c0dfaa5d1d9f15f08c60b2a72075022e3c22cf8bca98acc422f1654ce0f06dda6a28a13b8cf80b343bc9337", @ANYBLOB="40c3272edf097d1fd66f7e9d5bced55022"], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

303.930108ms ago: executing program 2 (id=1506):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a80), 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, &(0x7f00000000c0)}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d74259922042c2500b813569c8654a9ac0416be1051d51bdf6fb4941fb23525a8096c7fe7a969739f06a59fbde0a51f3ccfd4cfee87982586554a5793039fe6ac9efd793da82ad4b0e5c82ff4fec880498d6dff4ef2fff0000000000000000000002000000"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r2, &(0x7f0000000a80), 0x0}, 0x20)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8)
close(0x3)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@private2, @private=0xa010102, 0x12, 0x8}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000300)={@local, <r4=>0x0}, &(0x7f0000000340)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x8, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xe, 0xe}, {0x3, 0xfff1}, {0xfff3, 0xb}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x2000001)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000005000128009000100766c616e000000004000028006000100fe0f00000400048028000380d8fd010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="08000500", @ANYRES64=r1, @ANYRESDEC=r1, @ANYRESOCT=r0], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0)

234.134388ms ago: executing program 1 (id=1507):
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r3], 0x54}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0xffa, &(0x7f0000001400)=""/4090, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000808000000000000000000000052362ef4c1abeaf92bfd1d2f27b3e402e6cbaa5ca32669818901402f2883cdbb06d647de73c6e54f1a1414136baa1b8d8aeef350bd7f83", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRESHEX=r1, @ANYRES8=r2], 0x34}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4044)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'pimreg0\x00', <r9=>0x0})
r10 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000000f76123f43006ee2756959b00010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r11, r9, 0x25, 0x9, @void}, 0xa)
close(r12)
r13 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r13, 0x28)
poll(&(0x7f0000000040)=[{r13, 0x20}], 0x1, 0x404)

233.796977ms ago: executing program 2 (id=1508):
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000380)={<r0=>0xffffffffffffffff, &(0x7f0000000240)='syzkaller0\x00', 0x6000, &(0x7f0000000280)={@align, {0x1, 0x8, 0x2, 0x8}}, 0x5, &(0x7f00000002c0), &(0x7f0000000340)=0x8})
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x9c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_LABELS_MASK={0x10, 0x17, [0x8c, 0x10, 0x54]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x5, 0x0]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40801}, 0x20000000) (async)
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x7, 0x7}, {}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x810) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'gre0\x00', <r4=>0x0, 0x10, 0x40, 0x6, 0x10000, {{0xe, 0x4, 0x1, 0x3f, 0x38, 0x67, 0x0, 0x7f, 0x4, 0x0, @loopback, @broadcast, {[@generic={0x86, 0xf, "6c0345228b85dd8169da00b9b1"}, @generic={0x7, 0xb, "147f3093fdd807196d"}, @lsrr={0x83, 0x7, 0x8a, [@rand_addr=0x64010100]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', r4, 0x20, 0x10, 0x8, 0x2, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @multicast2}}}})
r5 = socket$netlink(0x10, 0x3, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @private=0xa010101}, 0x10) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x3d, 0x0, 0x2}, {0x4, 0x0, 0x0, 0xe4ff}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', 0x0})
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@RTM_GETMDB={0x18, 0x56, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x24002040)

134.098198ms ago: executing program 2 (id=1509):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0x1b, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x40000)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071124f000000000095"], 0x0, 0x6, 0x0, 0x0, 0xd42c142798a188e2, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbc9df252500a4000e0001006e650400000e000000000000e1b7f0006e6574646576736965300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, 0x0, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4044045)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r7)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000700)={'wpan1\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x40, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xaaf6}]}, 0x40}}, 0x4004850)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4810)
sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
close(r5)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8840}, 0x8000)

132.383265ms ago: executing program 0 (id=1510):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)={0x100, 0x0, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x2d, 0x9, 0xfffffff6, 0x6, 0x3]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x80}}}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @broadcast}, {0x0, 0x2, @local}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1804}]}, 0x100}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="250000003600010000000000ffdbdf2504000080"], 0x14}], 0x1}, 0x0)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000480)={<r2=>0xffffffffffffffff})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002c7000fbdbdf2530000000"], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0)
setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000180), 0x4)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x91)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r5 = socket$kcm(0xa, 0x2, 0x0)
gettid()
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delqdisc={0x2c, 0x25, 0x200, 0x70bd29, 0x100, {0x0, 0x0, 0x0, r8, {0xe, 0xfff3}, {0xb, 0x10}, {0xfff2, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x6, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x1e}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x2)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000380)={'wpan0\x00'})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), 0x4)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

70.67636ms ago: executing program 2 (id=1511):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10101, 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000040)=0x2ec00000)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r3=>0x0})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={<r4=>r0, 0x6, 0x400, 0xffffffffffffffff})
bind$xdp(r2, &(0x7f0000000140)={0x2c, 0x1, r3, 0x3f, r4}, 0x10)
bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10)
r5 = socket(0x3, 0x2, 0x8000)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000200)={0x0, 0x10, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0]})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000240)="7d8e2e79cc448f798bfed75f066922328d931c80545b73c8035a2b1793275fe44b143fe32417ca0bbe402f6ea34b84b67a6ce856db944a8b96ec0310aa6640ff", &(0x7f0000000280)=@buf="99e4a28ad358161a840d75ca11b6f9028de2684a276b00915ec08c95d734212c8f746b21f55e5bee9e365203ff545fd9e980b62c3f3348cb63cf90f32b9853ce04b01d32e8168fd7436c68da812e43df8af960c05b8e569d4375796928bf12c647807be91a5dc97db4140a85a1cc62f5cb6ccbfb61eb43c552b7a924d74a443c4cef75e6e6e5707880c33b6c7886138994443926ee7b2a27274e10c03398ccc1", 0x2}, 0x20)
sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x0, 0x6, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x6, @media='ib\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x201, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}]}, 0x28}}, 0x55)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r1)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r7, 0x2, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
recvmmsg(r4, &(0x7f0000005900)=[{{&(0x7f0000000700)=@sco={0x1f, @none}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000780)=""/248, 0xf8}], 0x1, &(0x7f00000008c0)=""/16, 0x10}, 0xa28f}, {{&(0x7f0000000900)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000980)=""/101, 0x65}, {&(0x7f0000000a00)=""/159, 0x9f}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)}, {&(0x7f0000001b00)=""/187, 0xbb}, {&(0x7f0000001bc0)=""/106, 0x6a}, {&(0x7f0000001c40)=""/104, 0x68}, {&(0x7f0000001cc0)=""/226, 0xe2}], 0x8, &(0x7f0000001e40)=""/198, 0xc6}, 0x6}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000001f40)=""/228, 0xe4}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/36, 0x24}, {&(0x7f0000003080)=""/142, 0x8e}, {&(0x7f0000003140)=""/153, 0x99}, {&(0x7f0000003200)=""/173, 0xad}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/191, 0xbf}], 0x8, &(0x7f0000004400)=""/219, 0xdb}, 0x5}, {{0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f0000004500)=""/37, 0x25}, {&(0x7f0000004540)=""/30, 0x1e}, {&(0x7f0000004580)=""/22, 0x16}, {&(0x7f00000045c0)=""/193, 0xc1}, {&(0x7f00000046c0)=""/61, 0x3d}, {&(0x7f0000004700)=""/173, 0xad}], 0x6}, 0x10000}, {{&(0x7f0000004840)=@pppol2tpin6={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff}}, 0x80, &(0x7f0000004980)=[{&(0x7f00000048c0)=""/182, 0xb6}], 0x1, &(0x7f00000049c0)=""/181, 0xb5}, 0xd0}, {{&(0x7f0000004a80)=@caif, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004b00)=""/196, 0xc4}], 0x1, &(0x7f0000004c40)=""/183, 0xb7}, 0x7ff}, {{&(0x7f0000004d00)=@pppol2tpv3={0x18, 0x1, {0x0, <r9=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004d80)=""/76, 0x4c}], 0x1, &(0x7f0000004e40)=""/199, 0xc7}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000004f40)=""/141, 0x8d}, {&(0x7f0000005000)=""/239, 0xef}, {&(0x7f0000005100)=""/159, 0x9f}, {&(0x7f00000051c0)=""/39, 0x27}, {&(0x7f0000005200)=""/34, 0x22}, {&(0x7f0000005240)=""/73, 0x49}, {&(0x7f00000052c0)=""/127, 0x7f}, {&(0x7f0000005340)=""/130, 0x82}], 0x8, &(0x7f0000005480)=""/153, 0x99}, 0x2}, {{0x0, 0x0, &(0x7f00000057c0)=[{&(0x7f0000005540)=""/245, 0xf5}, {&(0x7f0000005640)=""/70, 0x46}, {&(0x7f00000056c0)=""/233, 0xe9}], 0x3, &(0x7f0000005800)=""/234, 0xea}, 0x3a9}], 0x9, 0x10000, 0x0)
readv(r8, &(0x7f0000005b80)=[{&(0x7f0000005b40)}], 0x1)
r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x8, &(0x7f0000005bc0)=0x3, 0x4)
sendmsg$nl_route(r9, &(0x7f0000005cc0)={&(0x7f0000005c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000005c80)={&(0x7f0000005c40)=@ipv4_getrule={0x1c, 0x22, 0x800, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x10, 0x7, 0xc, 0x0, 0x0, 0x3, 0x10002}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000003)
r11 = bpf$ITER_CREATE(0x21, &(0x7f0000005d00)={r1}, 0x8)
ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000005d40)={'ip6tnl0\x00', @broadcast})
getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000005d80), &(0x7f0000005dc0)=0x4)
sendmsg$OSF_MSG_ADD(r2, &(0x7f0000006cc0)={&(0x7f0000005e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006c80)={&(0x7f0000005e40)={0xe0c, 0x0, 0x5, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [{{0x254, 0x1, {{0x1, 0xd}, 0x4d, 0x1, 0xd90, 0x7, 0x19, 'syz1\x00', "88b5cb484a29e837fcfd4e30bde96ffe544f9999e7d55a13cc48cbeea3275a4e", "1c41aa0d32067f85cf580f6d24647cdd846dd80a86cc1acbc71983396b7ef447", [{0x8, 0x755e, {0x2, 0xffffffff}}, {0x53, 0x7, {0x2, 0x7}}, {0x1, 0x5, {0x1, 0x7f}}, {0x6, 0x8, {0x1, 0x1}}, {0x6, 0xfffe, {0x2}}, {0x7, 0xc00, {0x2, 0x6}}, {0x4, 0x0, {0x0, 0xaa7}}, {0xfff5, 0x4, {0x2, 0x1ff}}, {0x2, 0x5, {0x0, 0x6}}, {0xa0, 0xfff, {0x0, 0xd4}}, {0x4, 0x40, {0x1, 0xc13}}, {0x5, 0x2, {0x2, 0x10}}, {0x2, 0x10, {0x2, 0xb565}}, {0x1, 0x9, {0x3, 0x7}}, {0x6, 0xfffe, {0x2, 0x3}}, {0x2, 0x3, {0x2, 0x1000}}, {0x3, 0x1ff, {0x0, 0x8}}, {0x1000, 0xfff, {0x2, 0x2}}, {0x9, 0xb, {0x3}}, {0x3, 0x4, {0x2, 0x4}}, {0x1, 0x1, {0x3, 0x1de}}, {0x3, 0xfffe, {0x3, 0x100}}, {0x40, 0x1, {0x2, 0x805f}}, {0xff, 0x7ff, {0x2}}, {0x1, 0x3ff, {0x0, 0x8}}, {0x6, 0x10, {0x2, 0x3}}, {0x2, 0xd1b, {0x1, 0x866}}, {0x2, 0x5, {0x1, 0x8a4f}}, {0x638, 0x1, {0x2, 0x4}}, {0x9, 0x6, {0x2}}, {0x0, 0x6, {0x1, 0x9}}, {0x7750, 0x101, {0x2, 0xe53}}, {0x9, 0x200, {0x0, 0xf}}, {0x8, 0x9, {0x1, 0x55}}, {0x7, 0x7, {0x0, 0xdb}}, {0x4, 0x7, {0x2, 0xc}}, {0x2a8, 0x9, {0x2, 0x6}}, {0x401, 0x2800, {0x1, 0x4}}, {0x373, 0xd, {0x2, 0x5}}, {0x7, 0x8, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0xfb, 0x80, 0x401, 0x4f, 0x25, 'syz0\x00', "c40caf5af86a0bf066f7803bd831665a1d81bbeaa11fc802c75a81598a67485c", "74a463cae4dc4e872b4b3e9939d8cf22ae0189bcdda79a4d1188483b129b24df", [{0x5, 0x5, {0x1, 0x7}}, {0xe, 0x6d}, {0xfe00, 0xb2, {0x3, 0x9}}, {0x6, 0x4, {0x0, 0xfffffff7}}, {0x6, 0x5, {0x3, 0x9}}, {0x8, 0x1, {0x3, 0x3}}, {0x0, 0x3, {0x3, 0x5}}, {0x8, 0x1, {0x2, 0x1}}, {0x4, 0x3, {0x1, 0xbfff}}, {0x5f, 0x2, {0x0, 0x9}}, {0xffff, 0x0, {0x1, 0x8c}}, {0x800, 0x4, {0x3, 0x2}}, {0x9, 0x8000, {0x3, 0x3}}, {0x6, 0x400, {0x2, 0x1}}, {0x7, 0x4, {0x3, 0xd}}, {0x4, 0x1f, {0x0, 0x1}}, {0x81, 0x4, {0x0, 0x6}}, {0xfff, 0xc4, {0x0, 0x6}}, {0x4, 0x5, {0x3, 0x6}}, {0xe28, 0x8, {0x2, 0xde8}}, {0x3, 0x3, {0x1, 0x706}}, {0x20d1, 0x0, {0x2, 0x7}}, {0x0, 0x7, {0x2, 0x1}}, {0x6, 0x9, {0x0, 0x1}}, {0x1, 0xfffc, {0x2}}, {0x3, 0x8, {0x3, 0x1000}}, {0x2, 0xfffd, {0x0, 0x4e2}}, {0x9, 0xffff, {0x2, 0x8}}, {0xe, 0x1, {0x1, 0xffffd9ba}}, {0x8, 0x5f, {0x0, 0x2}}, {0x3, 0xc, {0x1, 0x5}}, {0x11, 0xf383, {0x2, 0x4}}, {0xffae, 0x5836, {0x1}}, {0x48, 0x8, {0x0, 0x8000}}, {0x1000, 0x4, {0x2, 0x7}}, {0xfffb, 0x9, {0x1, 0x8}}, {0x85a2, 0xbc, {0x3, 0x4}}, {0x0, 0xff7f, {0x1, 0x6}}, {0x33, 0x4, {0x3, 0xe}}, {0x40, 0x423c, {0x3, 0xc0db}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x1, 0x5, 0x9, 0x9, 0x20, 'syz0\x00', "35afbc5db9686a1e50beaa65e5969d13f4568167afa2a9a6dba13d18366c5dc8", "af0bd86c4d48f2a5d3b2abee8bb0ee6650dd307f5f155990a52983d170846bae", [{0xc, 0x5, {0x0, 0x4}}, {0x3ff, 0x9, {0x2, 0x5}}, {0x1, 0x1, {0x1, 0x8001}}, {0x7, 0x1}, {0x7, 0x7, {0x3, 0x8000}}, {0xff00, 0x5, {0x2, 0x4eb}}, {0x0, 0x4f, {0x0, 0x8}}, {0x5, 0x9, {0x2, 0xa7}}, {0x6, 0x4004, {0x1, 0xc}}, {0xe3f3, 0x8001, {0x2, 0xe2e}}, {0x2000, 0x3, {0x1, 0xc}}, {0x2, 0x9d, {0x2}}, {0x8000, 0xfff8, {0x1, 0x4}}, {0x801, 0xffff, {0x1, 0xcd}}, {0x9, 0x2, {0x1, 0xfffffff7}}, {0x0, 0x48, {0x3, 0xfffffffe}}, {0x1, 0x9, {0x1, 0x8}}, {0x6, 0x7f, {0x0, 0x2}}, {0xd, 0x8001, {0x3, 0x9}}, {0x0, 0x87, {0x2}}, {0x8, 0x74f6, {0x3, 0x5}}, {0x4, 0x0, {0x2, 0x4}}, {0x4, 0x1, {0x2, 0x7fffffff}}, {0x7fff, 0xff, {0x0, 0x1}}, {0x7, 0x6, {0x0, 0x1}}, {0x1ca, 0xd58b, {0x0, 0x7}}, {0x5, 0x4, {0x0, 0xfffffff1}}, {0x3, 0x0, {0x0, 0x10b8}}, {0x5, 0x4, {0x2, 0xcb}}, {0x7, 0x7, {0x3, 0x9}}, {0xfffa, 0x5, {0x5447b7b2a9ad8bd6, 0x10001}}, {0x8001, 0xc3, {0x3, 0x8}}, {0x2, 0x8000, {0x2}}, {0x3, 0x2, {0x1, 0x3c}}, {0xffff, 0x29e, {0x1, 0x7}}, {0x274d, 0xf, {0x2}}, {0x1, 0x4, {0x0, 0x8}}, {0x9, 0x0, {0x3, 0x7fffffff}}, {0xc9ef, 0x8, {0x2, 0x6c6b}}, {0x7ff, 0x6, {0x0, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x3, 0x0, 0xcca, 0xd, 0x1b, 'syz1\x00', "67580bbfbc23028ed6aff122668e883e79e197d626ce86c1808d2bebbb821d2f", "6f6b4059f5ea12fbc5ffe0d97df4abb39aec3ddfdf974ae17bf6a0a528e5d214", [{0x4, 0x0, {0x1, 0x4}}, {0x7, 0x6, {0x0, 0x24}}, {0x9, 0x8000, {0x3, 0x4}}, {0x5, 0x8, {0x1}}, {0x7, 0x3, {0x3, 0x4}}, {0x8001, 0x640, {0x1, 0x8}}, {0xc, 0x8, {0x1, 0x6}}, {0x8, 0xcab4, {0x1, 0x8}}, {0x3, 0x5, {0x1, 0x4}}, {0x8, 0x70, {0x2, 0x2}}, {0xd940, 0x2a39, {0x3, 0x8}}, {0x4, 0x81, {0x0, 0x1}}, {0x2, 0x0, {0x0, 0x56000000}}, {0x2, 0x8, {0x2, 0x7}}, {0x4, 0x80, {0x1, 0x7}}, {0x6, 0x543, {0x3, 0x4}}, {0x5, 0xefa7, {0x0, 0x7}}, {0x9, 0x8, {0x1, 0x7}}, {0xf, 0x9, {0x0, 0x101}}, {0x2, 0x8, {0x0, 0x80}}, {0x5, 0xe, {0x3, 0x528}}, {0x9, 0x3, {0x2, 0x4}}, {0x5, 0x0, {0x3, 0x10}}, {0x80, 0x100, {0x1, 0x2}}, {0x7fff, 0x10, {0x1, 0x7}}, {0xb, 0x0, {0x0, 0x7f}}, {0x6, 0x2, {0x3, 0x3}}, {0xf910, 0x1, {0x2, 0x3}}, {0x8, 0x7f, {0x2, 0x1}}, {0x2, 0x3, {0x1, 0x200040}}, {0x88, 0x5, {0x1, 0x3}}, {0x4, 0x4, {0x2, 0x5}}, {0x6, 0x101, {0x0, 0x1}}, {0x80, 0x0, {0x1, 0x6a6}}, {0x37c, 0x3, {0x3, 0x6}}, {0x2, 0x4, {0x1, 0x400}}, {0x7, 0x3, {0x0, 0xd9b}}, {0x4a, 0x1, {0x3, 0x70}}, {0x3, 0x938, {0x0, 0x8}}, {0x100, 0x3, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0x40}, 0x3, 0x8, 0x0, 0x7baa, 0xe, 'syz1\x00', "f6949e11fe27ac073f6b451a8caebd0f30a32b1fe862451c9d9b8d1fd54e101b", "7267915c93161a782d0979a406b80b3b0569b2a09a391a0c487f2389d407c113", [{0x7, 0x9, {0x0, 0x6}}, {0x699a, 0xd954, {0x2, 0xfffffff9}}, {0x2, 0x768d, {0x3, 0x8}}, {0x2, 0x8000, {0x0, 0xf1}}, {0xe8, 0x6, {0x1, 0x7ff}}, {0x3, 0x2, {0x2, 0x7ff}}, {0x81, 0xffff, {0x2, 0x3}}, {0x7, 0xc5, {0x1, 0x4}}, {0xfffb, 0x0, {0x2, 0xffffff2f}}, {0xe9, 0x1, {0x1, 0x80}}, {0x5, 0x2, {0x0, 0x2}}, {0xffff, 0x10, {0x5, 0x5}}, {0xc3, 0x5, {0x1, 0x305}}, {0xf0, 0x80, {0x1, 0x6}}, {0x7, 0xdf7, {0x1, 0x93a}}, {0xffff, 0x0, {0x3, 0x3}}, {0x1, 0x1, {0x1, 0x7fffffff}}, {0x401, 0x8, {0x0, 0x4}}, {0x8, 0x8, {0x3, 0x4}}, {0x8001, 0x4, {0x3, 0x9}}, {0x6, 0x7ff, {0x1, 0x3}}, {0x6a80, 0x28d, {0x2, 0x6}}, {0x10, 0x101, {0x0, 0x5}}, {0x4, 0x7, {0x3, 0x3}}, {0x1, 0xc8, {0x3, 0x8}}, {0x4, 0x1ff, {0x2, 0x800}}, {0x800, 0x0, {0x3, 0x1}}, {0xd1f, 0x8, {0x3, 0x7ff}}, {0xfffe, 0x5, {0x2, 0x5}}, {0x7ff, 0xfff0, {0x0, 0x1}}, {0x0, 0xa, {0x2, 0x8001}}, {0x4f3, 0x5, {0x2}}, {0x9, 0xf, {0x1, 0x4}}, {0x9c5d, 0x4, {0x0, 0xc8}}, {0x6, 0x0, {0x2, 0x14b320b7}}, {0x0, 0x6, {0x0, 0x5}}, {0x5, 0x4, {0x2, 0x1}}, {0x74, 0x9, {0x2, 0x57}}, {0x1, 0x1, {0x2, 0x7f}}, {0x0, 0xff, {0x0, 0x81}}]}}}, {{0x254, 0x1, {{0x1, 0xb2}, 0x1, 0x9, 0x7, 0x6, 0x1d, 'syz1\x00', "efa0e49f1c376308cb00a9c4f83d6060e064e5a7524d2f95b2db1907cf829ae9", "cc7d180740bd9060e40eab859c6b0072db931937b421ee7180ee9e8cd222d42d", [{0x40, 0xc02, {0x0, 0x2d4d152d}}, {0x6d1d, 0xf258, {0x0, 0x4}}, {0xfff7, 0x5, {0x2, 0xfffffc00}}, {0x2, 0xf, {0x3, 0x3}}, {0xa0, 0x3, {0x2, 0x1086}}, {0x2, 0x7, {0x3, 0x9}}, {0xfffb, 0x9, {0x2, 0xbcc}}, {0x53, 0x8, {0x2, 0xfffffffc}}, {0x7, 0x800, {0x2, 0xff}}, {0x80, 0xee6, {0x3, 0xffffff7f}}, {0x1000, 0x5, {0x1, 0x5}}, {0x6, 0x4, {0x3, 0x3}}, {0x400, 0x7f, {0x3, 0x4}}, {0x36, 0x8, {0x3, 0x1}}, {0x1000, 0x3, {0x3, 0x2}}, {0x8000, 0x2, {0x2, 0x40}}, {0x9, 0x3, {0x3, 0x6}}, {0x1000, 0x504, {0x0, 0x3}}, {0x5, 0xb41, {0x3, 0x5}}, {0x2828, 0x92, {0x1, 0x4}}, {0x5, 0x200, {0x1, 0xffffffba}}, {0x2, 0x531, {0x0, 0x200}}, {0x81, 0x4, {0x1, 0x200}}, {0x2, 0xb0e, {0x3, 0x10}}, {0x8, 0x9, {0x0, 0x5}}, {0x81, 0xff, {0x2, 0x1ff}}, {0xfff8, 0x401, {0x3, 0x2}}, {0xc, 0x4, {0x3, 0xb4}}, {0x5, 0x9, {0x3, 0x7}}, {0x0, 0x2, {0x1, 0x5}}, {0x4f6, 0x2, {0x2, 0x88}}, {0x7ff, 0xba07, {0x3, 0x5bf}}, {0xb, 0x3d, {0x0, 0x1}}, {0x3, 0x0, {0x0, 0x60000000}}, {0x0, 0x1, {0x0, 0x800}}, {0x1, 0x7, {0x3, 0x2}}, {0x9, 0x9, {0x3, 0x1d4f71dc}}, {0x401, 0xffff, {0x2, 0x96}}, {0xf43, 0x7fff, {0x1, 0x7}}, {0x9, 0xed2, {0x0, 0x2f7}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x4000}, 0x40004)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0)
r13 = openat$cgroup_ro(r2, &(0x7f0000006d00)='cpuacct.usage_sys\x00', 0x0, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(r13, &(0x7f0000006e00)={&(0x7f0000006d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006dc0)={&(0x7f0000006d80)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_COMPAT_TYPE={0x8}]}, 0x1c}}, 0x4000000)
ioctl$XFS_IOC_PATH_TO_HANDLE(r12, 0xc0385869, &(0x7f0000006f40)={<r14=>0xffffffffffffffff, &(0x7f0000006e40)='ip6tnl0\x00', 0x20000, &(0x7f0000006e80)={@align=0x8000000000000001, {0x2, 0x3, 0x7, 0x99dd}}, 0x1, &(0x7f0000006ec0)={@_ha_fsid}, &(0x7f0000006f00)=0xb4})
sendmsg$BATADV_CMD_SET_MESH(r14, &(0x7f0000007040)={&(0x7f0000006f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000007000)={&(0x7f0000006fc0)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x98827000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000008)

1.054985ms ago: executing program 2 (id=1512):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x44597}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x402}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r5], 0x1c}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x48, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x100]}, @NL80211_ATTR_CQM_TXE_RATE={0x0, 0x5, 0x1d}]}]}, 0x30}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x44597}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x402}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'bridge_slave_1\x00'}) (async)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r5], 0x1c}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x48, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x100]}, @NL80211_ATTR_CQM_TXE_RATE={0x0, 0x5, 0x1d}]}]}, 0x30}}, 0x0) (async)

692.86µs ago: executing program 2 (id=1513):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
unshare(0x22020600)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x4004af07, &(0x7f0000000000)=0x4)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="00fbe30000000180c200000086dd6012000800183a0000"], 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x26}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48)

0s ago: executing program 0 (id=1514):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113a00000000008510000002000000850000004900000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x7c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{<r2=>r0, &(0x7f0000000040)=')\x00', 0x90480, &(0x7f0000000080)={@align=0x400, {0x0, 0x8, 0xfffffffc, 0xb}}, 0x3, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x1}, {[0x5a, 0xffff, 0x1, 0x80000000]}, 0x3, 0xf7, &(0x7f0000000140)=""/247}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={<r3=>r0})
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x1)

kernel console output (not intermixed with test programs):

g attributes in process `syz.1.253'.
[   84.018277][ T6872] netlink: 'syz.1.253': attribute type 30 has an invalid length.
[   84.088755][ T6879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.255'.
[   84.208338][ T6889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.217673][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'.
[   84.235266][ T6894] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.328416][ T6896] netlink: 44 bytes leftover after parsing attributes in process `syz.2.259'.
[   84.485490][ T6907] IPVS: length: 42 != 8
[   84.487214][ T6907] IPVS: length: 42 != 8
[   84.488919][ T6907] IPVS: length: 42 != 8
[   84.490535][ T6907] IPVS: length: 42 != 8
[   84.492180][ T6907] IPVS: length: 42 != 8
[   84.493846][ T6907] IPVS: length: 42 != 8
[   84.496550][ T6907] IPVS: length: 42 != 8
[   84.498197][ T6907] IPVS: length: 42 != 8
[   84.499817][ T6907] IPVS: length: 42 != 8
[   84.501485][ T6907] IPVS: length: 42 != 8
[   84.503145][ T6907] IPVS: length: 42 != 8
[   84.504810][ T6907] IPVS: length: 42 != 8
[   84.507197][ T6907] IPVS: length: 42 != 8
[   84.508835][ T6907] IPVS: length: 42 != 8
[   84.510481][ T6907] IPVS: length: 42 != 8
[   84.512150][ T6907] IPVS: length: 42 != 8
[   84.513757][ T6907] IPVS: length: 42 != 8
[   84.515939][ T6907] IPVS: length: 42 != 8
[   84.517193][ T6907] IPVS: length: 42 != 8
[   84.518549][ T6907] IPVS: length: 42 != 8
[   84.520184][ T6907] IPVS: length: 42 != 8
[   84.521881][ T6907] IPVS: length: 42 != 8
[   84.523575][ T6907] IPVS: length: 42 != 8
[   84.526030][ T6907] IPVS: length: 42 != 8
[   84.527728][ T6907] IPVS: length: 42 != 8
[   84.529372][ T6907] IPVS: length: 42 != 8
[   84.531015][ T6907] IPVS: length: 42 != 8
[   84.532624][ T6907] IPVS: length: 42 != 8
[   84.534251][ T6907] IPVS: length: 42 != 8
[   84.537719][ T6907] IPVS: length: 42 != 8
[   84.539405][ T6907] IPVS: length: 42 != 8
[   84.541044][ T6907] IPVS: length: 42 != 8
[   84.542718][ T6907] IPVS: length: 42 != 8
[   84.581114][ T6914] netlink: 'syz.2.262': attribute type 15 has an invalid length.
[   84.584153][ T6914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.262'.
[   84.621654][ T6916] netlink: 32 bytes leftover after parsing attributes in process `syz.2.263'.
[   84.624473][ T6916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.263'.
[   84.838639][ T6924] syz_tun: entered allmulticast mode
[   84.842943][ T6924] tipc: Started in network mode
[   84.849616][ T6924] tipc: Node identity 080211000001, cluster identity 4711
[   84.852638][ T6924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.858892][ T6924] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   84.861831][ T6924] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   84.865641][ T6924] tipc: Resetting bearer <eth:syzkaller0>
[   84.873558][ T6923] syz_tun: left allmulticast mode
[   84.910671][  T974] cfg80211: failed to load regulatory.db
[   84.921245][ T6918] netlink: 132 bytes leftover after parsing attributes in process `syz.2.263'.
[   85.053885][ T6937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.267'.
[   85.188602][ T6948] macsec2: entered promiscuous mode
[   85.288918][   T24] lo speed is unknown, defaulting to 1000
[   85.291646][ T5840] lo speed is unknown, defaulting to 1000
[   85.293865][ T5840] syz2: Port: 1 Link DOWN
[   85.391334][ T6963] tipc: Failed to remove unknown binding: 66,0,0/0:1952331297/1952331299
[   85.394285][ T6963] tipc: Failed to remove unknown binding: 66,0,0/0:1952331297/1952331298
[   85.398649][ T6963] tipc: Failed to remove unknown binding: 66,0,0/0:1952331297/1952331299
[   85.401231][ T6963] tipc: Failed to remove unknown binding: 66,0,0/0:1952331297/1952331298
[   85.540587][ T6973] bond7: entered promiscuous mode
[   85.542975][ T6973] 8021q: adding VLAN 0 to HW filter on device bond7
[   85.548166][ T6970] netlink: 'syz.2.277': attribute type 3 has an invalid length.
[   85.558328][ T6973] bridge7: entered promiscuous mode
[   85.560992][ T6973] bond7: (slave bridge7): Enslaving as an active interface with an up link
[   85.564647][ T6970] netlink: 'syz.2.277': attribute type 3 has an invalid length.
[   85.594181][ T6973] bridge8: entered promiscuous mode
[   85.597772][ T6973] bond7: (slave bridge8): Enslaving as an active interface with an up link
[   85.714299][ T6982] Bluetooth: MGMT ver 1.23
[   85.775467][   T84] tipc: Resetting bearer <eth:syzkaller0>
[   85.843705][ T6989] syzkaller0: entered promiscuous mode
[   85.847161][ T6989] syzkaller0: entered allmulticast mode
[   85.916487][    T9] tipc: Node number set to 134418688
[   85.949210][ T7005] netlink: 'syz.2.286': attribute type 1 has an invalid length.
[   85.952022][ T7005] netlink: 'syz.2.286': attribute type 2 has an invalid length.
[   86.800032][ T7016] : renamed from veth0_to_bond
[   86.820174][ T7017] netlink: 'syz.2.287': attribute type 1 has an invalid length.
[   86.857260][ T7017] 8021q: adding VLAN 0 to HW filter on device bond3
[   86.884158][ T7017] bond3: (slave veth3): Enslaving as an active interface with a down link
[   86.908784][ T7017] 8021q: adding VLAN 0 to HW filter on device batadv1
[   86.912177][ T7017] bond3: (slave batadv1): making interface the new active one
[   86.917779][ T7017] batadv1: entered promiscuous mode
[   86.920123][ T7017] bond3: (slave batadv1): Enslaving as an active interface with an up link
[   86.966378][ T7017] bond3 (unregistering): (slave veth3): Releasing active interface
[   86.978256][ T7017] bond3 (unregistering): (slave batadv1): Releasing active interface
[   86.984327][ T7017] bond3 (unregistering): Released all slaves
[   86.998901][ T7035] netlink: 'syz.1.291': attribute type 1 has an invalid length.
[   87.009970][ T7035] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[   87.057738][ T7040] netlink: 'syz.1.293': attribute type 1 has an invalid length.
[   87.087403][ T7040] veth3: entered promiscuous mode
[   87.089440][ T7040] veth3: entered allmulticast mode
[   87.148708][ T7048] 8021q: adding VLAN 0 to HW filter on device bond5
[   87.163258][ T7048] dummy0: entered promiscuous mode
[   87.230003][ T7060] netlink: 'syz.2.299': attribute type 11 has an invalid length.
[   87.259731][ T5881] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.266230][ T5881] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.272243][ T5881] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.277488][ T5881] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.302838][ T7056] bond6: entered allmulticast mode
[   87.305019][ T7056] 8021q: adding VLAN 0 to HW filter on device bond6
[   87.413892][ T7070] bond8: Invalid ad_actor_system MAC address.
[   87.416783][ T7070] bond8: option ad_actor_system: invalid value (7)
[   87.420895][ T7070] bond8 (unregistering): Released all slaves
[   87.603544][ T7086] sctp: [Deprecated]: syz.2.307 (pid 7086) Use of struct sctp_assoc_value in delayed_ack socket option.
[   87.603544][ T7086] Use struct sctp_sack_info instead
[   87.651088][ T7088] bond3: entered promiscuous mode
[   87.653258][ T7088] bond3: entered allmulticast mode
[   87.655872][ T7088] 8021q: adding VLAN 0 to HW filter on device bond3
[   87.663750][ T7088] erspan1: entered allmulticast mode
[   87.669949][ T7088] bond3: (slave erspan1): making interface the new active one
[   87.672459][ T7088] erspan1: entered promiscuous mode
[   87.676536][ T7088] bond3: (slave erspan1): Enslaving as an active interface with an up link
[   87.692107][ T7088] syz.2.308 (7088) used greatest stack depth: 18592 bytes left
[   87.941350][ T7100] syzkaller1: entered promiscuous mode
[   87.943338][ T7100] syzkaller1: entered allmulticast mode
[   88.076332][ T7102] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[   88.081789][ T7102] bond7 (unregistering): Released all slaves
[   88.588535][ T7125] 8021q: adding VLAN 0 to HW filter on device bond8
[   88.595426][ T7126] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[   88.612406][ T7125] bond8: (slave veth7): Enslaving as an active interface with a down link
[   89.102232][ T7153] macsec3: entered promiscuous mode
[   89.104119][ T7153] virt_wifi0: entered promiscuous mode
[   89.107781][ T7153] __nla_validate_parse: 21 callbacks suppressed
[   89.107788][ T7153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.323'.
[   89.112739][ T7153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.323'.
[   89.253021][ T7160] openvswitch: netlink: Key type 15622 is out of range max 32
[   89.256821][ T7160] pim6reg1: entered promiscuous mode
[   89.259064][ T7160] pim6reg1: entered allmulticast mode
[   90.285003][ T5199] Bluetooth: hci2: command 0x0405 tx timeout
[   91.653366][ T7137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   91.746401][ T7171] syzkaller1: tun_chr_ioctl cmd 1074025677
[   91.748908][ T7171] syzkaller1: linktype set to 270
[   91.755163][ T7171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.328'.
[   91.767260][ T7171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.771445][ T7170] syzkaller0: entered promiscuous mode
[   91.773195][ T7170] syzkaller0: entered allmulticast mode
[   91.888447][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'.
[   91.952084][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'.
[   91.955815][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'.
[   91.959317][ T7184] validate_nla: 6 callbacks suppressed
[   91.959329][ T7184] netlink: 'syz.0.332': attribute type 14 has an invalid length.
[   91.964786][ T7184] netlink: 'syz.0.332': attribute type 11 has an invalid length.
[   92.014775][ T7186] netlink: 44 bytes leftover after parsing attributes in process `syz.0.333'.
[   92.146594][ T7198] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993
[   92.368409][ T7207] syzkaller0: entered promiscuous mode
[   92.370397][ T7207] syzkaller0: entered allmulticast mode
[   92.382265][ T7207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.340'.
[   92.397723][ T7200] netlink: 868 bytes leftover after parsing attributes in process `syz.0.339'.
[   92.400629][ T7200] netlink: 5720 bytes leftover after parsing attributes in process `syz.0.339'.
[   92.502062][ T7215] vcan1: entered promiscuous mode
[   92.503778][ T7215] vcan1: entered allmulticast mode
[   92.520742][ T7218] tipc: Started in network mode
[   92.522827][ T7218] tipc: Node identity 7613e4dacad7, cluster identity 4711
[   92.526355][ T7218] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.529472][ T7219] tipc: Resetting bearer <eth:syzkaller0>
[   92.545238][ T7218] tipc: Disabling bearer <eth:syzkaller0>
[   92.574394][ T7222] netlink: 'syz.0.344': attribute type 1 has an invalid length.
[   92.587499][ T7222] bond9: entered promiscuous mode
[   92.589396][ T7222] 8021q: adding VLAN 0 to HW filter on device bond9
[   92.596797][ T7222] bond9: entered allmulticast mode
[   92.626287][ T7227] x_tables: duplicate underflow at hook 1
[   92.701334][ T7239] x_tables: duplicate underflow at hook 3
[   92.746211][ T7242] lo speed is unknown, defaulting to 1000
[   92.802614][ T7246] netlink: 'syz.2.350': attribute type 1 has an invalid length.
[   92.805124][ T7246] netlink: 'syz.2.350': attribute type 1 has an invalid length.
[   92.808092][ T7246] netlink: 'syz.2.350': attribute type 1 has an invalid length.
[   92.810812][ T7246] netlink: 'syz.2.350': attribute type 1 has an invalid length.
[   92.862151][ T7252] netlink: 'syz.2.352': attribute type 1 has an invalid length.
[   92.903585][ T7252] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[   92.910383][ T7252] bond4: (slave vxcan3): Error -95 calling set_mac_address
[   92.959826][ T7256] bond4: (slave gretap2): making interface the new active one
[   92.962760][ T7256] bond4: (slave gretap2): Enslaving as an active interface with an up link
[   92.971506][ T7256] macvlan0: entered promiscuous mode
[   92.973629][ T7256] macvlan0: entered allmulticast mode
[   92.976101][ T7256] bond4: entered promiscuous mode
[   92.978014][ T7256] gretap2: entered promiscuous mode
[   92.981086][ T7256] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   92.985334][ T7256] bond4: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2
[   92.990115][ T7256] bond4: left promiscuous mode
[   92.991754][ T7256] gretap2: left promiscuous mode
[   93.003549][ T5840] hid-generic 0005:04F3:0A11.0001: item fetching failed at offset 0/1
[   93.008307][ T5840] hid-generic 0005:04F3:0A11.0001: probe with driver hid-generic failed with error -22
[   93.176155][ T7269] bond8 (unregistering): Released all slaves
[   93.247805][ T7272] netlink: 'syz.1.359': attribute type 61 has an invalid length.
[   93.250433][ T7272] netlink: 'syz.1.359': attribute type 62 has an invalid length.
[   93.266304][ T7272] veth7: entered promiscuous mode
[   93.443387][ T7284] vlan2: entered allmulticast mode
[   93.445167][ T7284] macvtap0: entered allmulticast mode
[   93.525991][ T7288] xfrm0: Caught tx_queue_len zero misconfig
[   94.067565][ T7330] sctp: [Deprecated]: syz.2.372 (pid 7330) Use of int in maxseg socket option.
[   94.067565][ T7330] Use struct sctp_assoc_value instead
[   96.514591][ T7288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   96.518637][ T7321] __nla_validate_parse: 16 callbacks suppressed
[   96.518650][ T7321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.370'.
[   96.591984][ T7336] erspan0: entered promiscuous mode
[   96.619827][ T7336] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.622817][ T7336] 8021q: adding VLAN 0 to HW filter on device team0
[   96.627735][ T7336] dummy0: left promiscuous mode
[   96.631605][ T7336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.656216][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'.
[   96.711539][ T7352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.376'.
[   96.723225][ T7354] rdma_rxe: rxe_newlink: failed to add ip6_vti0
[   96.741657][ T7356] netlink: 32 bytes leftover after parsing attributes in process `syz.0.379'.
[   96.750450][ T7356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.379'.
[   96.754214][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'.
[   96.761216][ T7358] hsr_slave_0: left promiscuous mode
[   96.763221][ T7358] hsr_slave_1: left promiscuous mode
[   96.823583][ T7362] lo speed is unknown, defaulting to 1000
[   96.843123][ T7364] netlink: 320 bytes leftover after parsing attributes in process `syz.2.383'.
[   96.961355][ T7362] syzkaller1: entered promiscuous mode
[   96.963167][ T7362] syzkaller1: entered allmulticast mode
[   97.187734][ T7376] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.384'.
[   97.191848][ T7376] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.384'.
[   97.231042][ T7375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.385'.
[   97.802740][ T7408] syzkaller1: entered allmulticast mode
[   97.953793][ T7369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   98.092059][ T7434] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   98.101736][ T7434] bond5: (slave lo): Enslaving as an active interface with an up link
[   98.105238][ T7434] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   98.111029][    T9] lo speed is unknown, defaulting to 1000
[   98.113207][   T10] lo speed is unknown, defaulting to 1000
[   98.117389][   T10] syz2: Port: 1 Link ACTIVE
[   98.138704][ T7445] IPVS: length: 35 != 24
[   98.141697][ T7445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   98.195238][ T7454] validate_nla: 1 callbacks suppressed
[   98.195271][ T7454] netlink: 'syz.1.396': attribute type 1 has an invalid length.
[   98.217225][ T7454] bond8: entered promiscuous mode
[   98.219581][ T7454] 8021q: adding VLAN 0 to HW filter on device bond8
[   98.226294][ T7454] bond8: entered allmulticast mode
[   98.239871][ T7454] bond8: (slave bridge3): making interface the new active one
[   98.243144][ T7454] bridge3: entered promiscuous mode
[   98.245939][ T7454] bridge3: entered allmulticast mode
[   98.249492][ T7454] bond8: (slave bridge3): Enslaving as an active interface with an up link
[   98.276269][ T7457] netlink: 'syz.2.400': attribute type 1 has an invalid length.
[   98.448602][ T7477] netlink: 'syz.2.405': attribute type 1 has an invalid length.
[   98.525882][ T7484] netlink: 'syz.2.407': attribute type 1 has an invalid length.
[   98.551191][ T7484] bond7: (slave bridge3): Enslaving as a backup interface with an up link
[   98.565366][ T7484] macvlan0: entered promiscuous mode
[   98.567514][ T7484] macvlan0: entered allmulticast mode
[   98.569991][ T7484] bond7: entered promiscuous mode
[   98.572010][ T7484] bridge3: entered promiscuous mode
[   98.576151][ T7484] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   98.579622][ T7484] bond7: left promiscuous mode
[   98.581508][ T7484] bridge3: left promiscuous mode
[   98.619194][ T7487] pim6reg: entered allmulticast mode
[   98.623208][ T7487] pim6reg: left allmulticast mode
[   98.688151][ T7494] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   98.694727][ T7494] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   98.750450][ T7501] netlink: 'syz.0.412': attribute type 10 has an invalid length.
[   99.106536][ T7541] Driver unsupported XDP return value 0 on prog  (id 75) dev N/A, expect packet loss!
[   99.124139][ T7541] netlink: 'syz.2.415': attribute type 1 has an invalid length.
[   99.154056][ T7541] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[   99.157687][ T7541] bond8: (slave vxcan3): Error -95 calling set_mac_address
[   99.505922][ T5199] Bluetooth: hci2: link tx timeout
[   99.508333][ T5199] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   99.510310][ T7565] team0: Port device team_slave_0 removed
[   99.576443][ T7574] netlink: 'syz.1.425': attribute type 16 has an invalid length.
[   99.582006][ T7574] netlink: zone id is out of range
[   99.586461][ T7574] netlink: zone id is out of range
[   99.590830][ T7574] netlink: zone id is out of range
[   99.598184][ T7574] netlink: zone id is out of range
[   99.604270][ T7574] netlink: zone id is out of range
[   99.610279][ T7574] netlink: zone id is out of range
[   99.718722][ T5813] Bluetooth: hci2: link tx timeout
[   99.720501][ T5813] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  100.197242][ T7607] bond9: entered promiscuous mode
[  100.199599][ T7607] 8021q: adding VLAN 0 to HW filter on device bond9
[  100.210858][ T5813] Bluetooth: hci2: link tx timeout
[  100.213098][ T5813] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  100.423002][ T7620] netlink: 'syz.2.435': attribute type 1 has an invalid length.
[  100.428311][ T7620] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  100.851773][ T7677] syzkaller0: entered promiscuous mode
[  100.861475][ T7677] syzkaller0: entered allmulticast mode
[  100.871716][ T7673] xt_l2tp: invalid flags combination: 8
[  100.888122][ T7672] netlink: 'syz.2.447': attribute type 1 has an invalid length.
[  100.893431][ T7672] gre0: entered promiscuous mode
[  100.895239][ T7672] gre0: entered allmulticast mode
[  101.050421][ T7695] 8021q: adding VLAN 0 to HW filter on device bond11
[  101.068660][ T7695] bond11: entered promiscuous mode
[  101.070716][ T7695] bond11: entered allmulticast mode
[  101.073543][ T7695] 8021q: adding VLAN 0 to HW filter on device bond11
[  101.076795][ T7695] team0: Port device bond11 added
[  101.132760][ T7698] bridge10: entered promiscuous mode
[  101.135820][ T7698] bridge10: entered allmulticast mode
[  101.139577][ T7698] team0: Port device bridge10 added
[  101.153753][ T7701] netlink: 'syz.2.453': attribute type 1 has an invalid length.
[  101.175817][ T7698] bridge11: entered promiscuous mode
[  101.177533][ T7698] bridge11: entered allmulticast mode
[  101.180332][ T7698] team0: Port device bridge11 added
[  101.183092][ T7698] bridge0: port 4(team0) entered blocking state
[  101.186716][ T7698] bridge0: port 4(team0) entered disabled state
[  101.188694][ T7698] team0: entered allmulticast mode
[  101.190279][ T7698] team_slave_1: entered allmulticast mode
[  101.193017][ T7698] team0: entered promiscuous mode
[  101.194627][ T7698] team_slave_1: entered promiscuous mode
[  101.270642][ T7711] veth0: entered promiscuous mode
[  101.280795][ T7714] IPv6: Can't replace route, no match found
[  101.315968][ T7710] veth0: left promiscuous mode
[  101.550965][ T7737] pim6reg1: entered promiscuous mode
[  101.553352][ T7737] pim6reg1: entered allmulticast mode
[  101.557522][   T24] IPVS: starting estimator thread 0...
[  101.564750][ T7734] __nla_validate_parse: 28 callbacks suppressed
[  101.564763][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'.
[  101.571584][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'.
[  101.575673][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'.
[  101.579312][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'.
[  101.580169][ T5813] Bluetooth: hci2: command 0x0405 tx timeout
[  101.583008][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'.
[  101.589439][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'.
[  101.593208][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'.
[  101.598333][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'.
[  101.602623][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'.
[  101.606938][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'.
[  101.616047][ T7734] hsr0: entered promiscuous mode
[  101.618553][ T7733] hsr0: left promiscuous mode
[  101.655155][ T7739] IPVS: using max 85 ests per chain, 204000 per kthread
[  101.806315][ T7758] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  101.809285][ T7758] tipc: Resetting bearer <eth:syzkaller0>
[  101.815228][ T7758] tipc: Resetting bearer <eth:syzkaller0>
[  101.980838][ T7770] bond12: entered promiscuous mode
[  101.986113][ T7770] 8021q: adding VLAN 0 to HW filter on device bond12
[  102.049034][ T7773] veth0_macvtap: left promiscuous mode
[  102.073128][ T7770] bond12: (slave bridge4): making interface the new active one
[  102.076346][ T7770] bridge4: entered promiscuous mode
[  102.079208][ T7770] bond12: (slave bridge4): Enslaving as an active interface with an up link
[  102.255642][ T7786] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  102.258564][ T7786] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  102.373954][ T7798] syzkaller1: entered promiscuous mode
[  102.376401][ T7798] syzkaller1: entered allmulticast mode
[  102.498134][ T5840] lo speed is unknown, defaulting to 1000
[  102.640103][ T7821] lo speed is unknown, defaulting to 1000
[  102.799599][ T7816] ip6erspan0: entered allmulticast mode
[  103.036102][ T7837] bond10: entered allmulticast mode
[  103.037919][ T7837] 8021q: adding VLAN 0 to HW filter on device bond10
[  103.089333][ T7846] virt_wifi0 (unregistering): left promiscuous mode
[  103.187736][ T7857] veth9: entered promiscuous mode
[  103.278442][ T7862] validate_nla: 33 callbacks suppressed
[  103.278458][ T7862] netlink: 'syz.2.493': attribute type 13 has an invalid length.
[  103.290672][ T7862] netlink: 'syz.2.493': attribute type 17 has an invalid length.
[  103.297470][ T7862] gre0: left promiscuous mode
[  103.299508][ T7862] gre0: left allmulticast mode
[  103.312066][ T7862] net_ratelimit: 17 callbacks suppressed
[  103.312074][ T7862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.599835][ T7878] netlink: 'syz.0.499': attribute type 1 has an invalid length.
[  103.631478][ T7878] bond11: entered promiscuous mode
[  103.633937][ T7878] 8021q: adding VLAN 0 to HW filter on device bond11
[  103.704342][ T7889] syzkaller0: entered promiscuous mode
[  103.715243][ T7889] syzkaller0: entered allmulticast mode
[  103.723521][ T7889] TC_ACT_REPEAT abuse ?
[  103.786226][ T7891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  103.790087][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  103.834721][ T7894] netlink: 'syz.2.504': attribute type 1 has an invalid length.
[  103.854133][ T7894] 8021q: adding VLAN 0 to HW filter on device bond13
[  103.877348][ T7894] bond13: (slave veth11): Enslaving as an active interface with a down link
[  103.936167][ T7904] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  103.938903][ T7904] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  103.941845][ T7904] tipc: Resetting bearer <eth:syzkaller0>
[  104.034468][ T7915] syzkaller0: entered promiscuous mode
[  104.036383][ T7915] syzkaller0: entered allmulticast mode
[  104.218036][ T7930] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  104.223026][ T7933] 0: renamed from hsr_slave_1
[  104.227462][ T7933] 0: entered allmulticast mode
[  104.229283][ T7933] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  104.277990][ T7935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.979218][ T7955] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  105.050617][ T7955] pim6reg1: entered promiscuous mode
[  105.052406][ T7955] pim6reg1: entered allmulticast mode
[  105.258971][ T7963] dvmrp1: entered allmulticast mode
[  105.282302][ T7963] lo speed is unknown, defaulting to 1000
[  105.688702][ T7989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.275300][ T7935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  107.280448][ T7989] netlink: 'syz.1.530': attribute type 1 has an invalid length.
[  107.283531][ T7989] __nla_validate_parse: 109 callbacks suppressed
[  107.283540][ T7989] netlink: 228 bytes leftover after parsing attributes in process `syz.1.530'.
[  107.290586][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'.
[  107.323402][ T7992] netlink: 45 bytes leftover after parsing attributes in process `syz.1.532'.
[  107.344286][ T7995] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.354795][ T7994] IPVS: sh: FWM 3 0x00000003 - no destination available
[  107.382319][ T7999] netlink: 'syz.0.533': attribute type 13 has an invalid length.
[  107.427552][ T8005] netlink: 'syz.1.535': attribute type 1 has an invalid length.
[  107.498535][ T8011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.535'.
[  107.570755][ T8014] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  107.610200][ T8017] syzkaller1: entered promiscuous mode
[  107.612217][ T8017] syzkaller1: entered allmulticast mode
[  107.617390][ T8018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.537'.
[  107.911600][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'.
[  107.941650][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'.
[  107.944451][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'.
[  108.027894][ T8031] pim6reg: entered allmulticast mode
[  108.031623][ T8031] pim6reg: left allmulticast mode
[  108.095766][ T8033] pim6reg1: entered promiscuous mode
[  108.098053][ T8033] pim6reg1: entered allmulticast mode
[  108.352989][ T8050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.547'.
[  108.380672][ T8050] veth9: entered allmulticast mode
[  108.385476][ T8050] bond11: (slave veth9): Enslaving as an active interface with an up link
[  108.412188][ T8053] netlink: 'syz.0.549': attribute type 3 has an invalid length.
[  108.453164][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.550'.
[  108.469179][ T8057] xt_TCPMSS: Only works on TCP SYN packets
[  108.496404][ T8064] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  108.512418][ T8064] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  108.514665][ T8064] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  108.519531][ T8064] tipc: Resetting bearer <eth:syzkaller0>
[  108.522399][ T8064] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  108.560148][ T8057] team0: left allmulticast mode
[  108.561763][ T8057] team_slave_1: left allmulticast mode
[  108.563565][ T8057] team0: left promiscuous mode
[  108.565524][ T8057] team_slave_1: left promiscuous mode
[  108.567804][ T8057] bridge0: port 4(team0) entered disabled state
[  108.572061][ T8057] vlan0: left allmulticast mode
[  108.573955][ T8057] geneve0: left allmulticast mode
[  108.576515][ T8057] vlan0: left promiscuous mode
[  108.578221][ T8057] geneve0: left promiscuous mode
[  108.580046][ T8057] bridge0: port 3(vlan0) entered disabled state
[  108.583268][ T8057] bridge_slave_1: left allmulticast mode
[  108.585460][ T8057] bridge_slave_1: left promiscuous mode
[  108.588007][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.593917][ T8057] bridge_slave_0: left allmulticast mode
[  108.596124][ T8057] bridge_slave_0: left promiscuous mode
[  108.598447][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.826196][ T8087] netlink: 'syz.1.558': attribute type 10 has an invalid length.
[  108.834007][ T8087] team0: Failed to send options change via netlink (err -105)
[  108.837497][ T8087] team0: Port device dummy0 added
[  108.839307][ T8087] netlink: 'syz.1.558': attribute type 10 has an invalid length.
[  108.843191][ T8087] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  108.848567][ T8087] team0: Failed to send options change via netlink (err -105)
[  108.851058][ T8087] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  108.854587][ T8087] team0: Port device dummy0 removed
[  108.858716][ T8087] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  108.892117][ T8092] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  108.900760][ T8092] vlan1: entered promiscuous mode
[  108.902653][ T8092] vlan1: entered allmulticast mode
[  108.904636][ T8092] veth0_vlan: entered allmulticast mode
[  109.052896][ T8102] netlink: 'syz.1.562': attribute type 1 has an invalid length.
[  109.073001][ T8102] bond12: (slave vxcan5): The slave device specified does not support setting the MAC address
[  109.077755][ T8102] bond12: (slave vxcan5): Error -95 calling set_mac_address
[  109.163300][ T8110] netlink: 'syz.2.564': attribute type 2 has an invalid length.
[  109.178701][ T8102] 8021q: adding VLAN 0 to HW filter on device bond12
[  109.187186][ T8102] macvlan3: entered promiscuous mode
[  109.188940][ T8102] macvlan3: entered allmulticast mode
[  109.191012][ T8102] bond12: entered promiscuous mode
[  109.193081][ T8102] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  109.197884][ T8102] bond12: left promiscuous mode
[  109.209004][ T8112] syzkaller0: entered promiscuous mode
[  109.210786][ T8112] syzkaller0: entered allmulticast mode
[  109.220704][ T8112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.224755][ T8111] tipc: Resetting bearer <eth:syzkaller0>
[  109.233247][ T8111] tipc: Disabling bearer <eth:syzkaller0>
[  109.261114][ T8114] netlink: 'syz.1.566': attribute type 1 has an invalid length.
[  109.278547][ T8114] 8021q: adding VLAN 0 to HW filter on device bond13
[  109.322706][ T8114] bond13: (slave veth13): Enslaving as an active interface with a down link
[  109.330846][ T8118] netlink: 'syz.2.567': attribute type 27 has an invalid length.
[  109.342276][ T8114] 8021q: adding VLAN 0 to HW filter on device batadv1
[  109.346560][ T8114] bond13: (slave batadv1): making interface the new active one
[  109.350561][ T8114] batadv1: entered promiscuous mode
[  109.352880][ T8114] bond13: (slave batadv1): Enslaving as an active interface with an up link
[  109.361723][ T8115] 8021q: adding VLAN 0 to HW filter on device batadv2
[  109.367122][ T8115] bond13: (slave batadv2): Enslaving as an active interface with an up link
[  109.370129][ T8118] wg1 speed is unknown, defaulting to 1000
[  109.376112][ T8114] bond13 (unregistering): (slave veth13): Releasing active interface
[  109.380257][ T8114] bond13 (unregistering): (slave batadv1): Releasing active interface
[  109.386656][ T8114] bond13 (unregistering): (slave batadv2): Releasing active interface
[  109.393825][ T8114] bond13 (unregistering): Released all slaves
[  109.415080][ T8118] wg1 speed is unknown, defaulting to 1000
[  109.417450][ T8118] wg1 speed is unknown, defaulting to 1000
[  109.427046][ T8118] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  109.449907][ T8118] wg1 speed is unknown, defaulting to 1000
[  109.457529][ T8118] wg1 speed is unknown, defaulting to 1000
[  109.463050][ T8118] wg1 speed is unknown, defaulting to 1000
[  109.568098][ T8139] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  109.584670][ T8140] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  109.623052][ T8136] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  109.640608][ T8145] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  109.660491][ T8136] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  109.684364][ T8149] netlink: 'syz.1.577': attribute type 13 has an invalid length.
[  109.688790][ T8149] netlink: 'syz.1.577': attribute type 11 has an invalid length.
[  109.719360][ T8151] netlink: 'syz.2.578': attribute type 1 has an invalid length.
[  109.732389][ T8151] bond14: entered promiscuous mode
[  109.734299][ T8151] 8021q: adding VLAN 0 to HW filter on device bond14
[  109.759633][ T8151] 8021q: adding VLAN 0 to HW filter on device bond14
[  109.762012][ T8151] bond14: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  109.765485][ T8151] bond14: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  109.770479][ T8151] bond14: (slave ip6gre1): making interface the new active one
[  109.772943][ T8151] ip6gre1: entered promiscuous mode
[  109.776513][ T8151] bond14: (slave ip6gre1): Enslaving as an active interface with an up link
[  109.823878][   T24] hid-generic 0005:4C4A:0A11.0002: item fetching failed at offset 0/1
[  109.851481][   T24] hid-generic 0005:4C4A:0A11.0002: probe with driver hid-generic failed with error -22
[  109.888978][ T8162] af_packet: tpacket_rcv: packet too big, clamped from 7306 to 3966. macoff=82
[  110.135991][ T8187] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  110.138557][ T8187] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  110.140893][ T8187] tipc: Resetting bearer <eth:syzkaller0>
[  110.147381][ T8191] 8021q: VLANs not supported on ip_vti0
[  110.460986][ T8222] syz_tun: entered allmulticast mode
[  110.487377][ T8221] syz_tun: left allmulticast mode
[  110.652045][ T8236] pim6reg: entered allmulticast mode
[  110.659119][ T8236] pim6reg: left allmulticast mode
[  110.718445][ T8036] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.728499][ T8036] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.731156][ T8036] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.737843][ T8036] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.757989][ T8244] ipip0: entered promiscuous mode
[  110.811411][ T8248] bond12: entered promiscuous mode
[  110.813383][ T8248] 8021q: adding VLAN 0 to HW filter on device bond12
[  110.848714][ T8254] tls_set_device_offload_rx: netdev not found
[  110.852390][ T8254] x_tables: duplicate underflow at hook 1
[  111.124353][ T8273] bond13: entered promiscuous mode
[  111.127075][ T8273] 8021q: adding VLAN 0 to HW filter on device bond13
[  111.151602][ T8273] 8021q: adding VLAN 0 to HW filter on device bond14
[  111.156974][ T8273] bond13: (slave bond14): making interface the new active one
[  111.159419][ T8273] bond14: entered promiscuous mode
[  111.161522][ T8273] bond13: (slave bond14): Enslaving as an active interface with an up link
[  111.321671][ T8287] bridge6: entered promiscuous mode
[  111.323542][ T8287] bridge6: entered allmulticast mode
[  111.328142][ T8287] team0: Port device bridge6 added
[  111.336894][ T8287] bridge7: entered promiscuous mode
[  111.338712][ T8287] bridge7: entered allmulticast mode
[  111.342656][ T8287] team0: Port device bridge7 added
[  111.346511][ T8287] bridge0: port 3(team0) entered blocking state
[  111.348678][ T8287] bridge0: port 3(team0) entered disabled state
[  111.350743][ T8287] team0: entered allmulticast mode
[  111.352510][ T8287] team_slave_0: entered allmulticast mode
[  111.354671][ T8287] team_slave_1: entered allmulticast mode
[  111.357918][ T8287] team0: entered promiscuous mode
[  111.359612][ T8287] team_slave_0: entered promiscuous mode
[  111.361499][ T8287] team_slave_1: entered promiscuous mode
[  111.398786][ T8291] bond0: (slave dummy0): Releasing backup interface
[  111.404133][ T8291] dummy0: entered promiscuous mode
[  111.406391][ T8291] dummy0: entered allmulticast mode
[  111.408489][ T8291] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  111.411245][ T8291] team0: Failed to send options change via netlink (err -105)
[  111.413740][ T8291] team0: Port device dummy0 added
[  111.415772][ T5813] Bluetooth: hci2: command 0x0405 tx timeout
[  111.419988][ T8291] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  111.425867][ T8291] dummy0: left promiscuous mode
[  111.427896][ T8291] dummy0: left allmulticast mode
[  111.429946][ T8291] team0: Failed to send options change via netlink (err -105)
[  111.432476][ T8291] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  111.436104][ T8291] team0: Port device dummy0 removed
[  111.439902][ T8291] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  111.793269][ T8319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.903888][ T8328] netlink: del zone limit has 8 unknown bytes
[  111.906963][ T8328] netlink: del zone limit has 8 unknown bytes
[  111.910164][ T8328] netlink: del zone limit has 8 unknown bytes
[  111.912601][ T8328] netlink: del zone limit has 8 unknown bytes
[  111.914728][ T8328] netlink: del zone limit has 8 unknown bytes
[  111.918187][ T8328] netlink: del zone limit has 8 unknown bytes
[  111.920453][ T8328] netlink: del zone limit has 8 unknown bytes
[  112.086023][ T8341] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  112.088627][ T8341] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  112.206793][ T8351] vlan1: entered promiscuous mode
[  112.208428][ T8351] geneve1: entered promiscuous mode
[  112.210145][ T8351] vlan1: entered allmulticast mode
[  112.211756][ T8351] geneve1: entered allmulticast mode
[  112.252649][ T8353] gretap2: entered allmulticast mode
[  112.256816][ T8353] bond15: (slave gretap2): making interface the new active one
[  112.259671][ T8353] bond15: (slave gretap2): Enslaving as an active interface with an up link
[  112.288008][ T8356] __nla_validate_parse: 28 callbacks suppressed
[  112.288017][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'.
[  112.418912][ T8358] bond16: option fail_over_mac: invalid value (127)
[  112.423113][ T8358] bond16 (unregistering): Released all slaves
[  112.520102][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'.
[  112.523344][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'.
[  112.526709][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'.
[  112.529723][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'.
[  112.532698][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'.
[  112.537853][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'.
[  112.541665][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'.
[  112.545696][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'.
[  112.549621][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'.
[  112.559804][ T8366] hsr0: entered promiscuous mode
[  112.564515][ T8365] hsr0: left promiscuous mode
[  112.610476][ T8368] veth1_to_hsr: entered promiscuous mode
[  112.613023][ T8368] veth1_to_hsr: entered allmulticast mode
[  112.709352][ T8370] 8021q: adding VLAN 0 to HW filter on device bond16
[  112.727587][ T8370] bond16: (slave veth15): Enslaving as an active interface with a down link
[  112.742183][ T8370] 8021q: adding VLAN 0 to HW filter on device batadv2
[  112.747076][ T8370] bond16: (slave batadv2): making interface the new active one
[  112.750995][ T8370] batadv2: entered promiscuous mode
[  112.753579][ T8370] bond16: (slave batadv2): Enslaving as an active interface with an up link
[  112.772044][ T8370] bond16 (unregistering): (slave veth15): Releasing active interface
[  112.777400][ T8370] bond16 (unregistering): (slave batadv2): Releasing active interface
[  112.782106][ T8370] bond16 (unregistering): Released all slaves
[  112.869523][ T8373] bond15: (slave vxcan5): The slave device specified does not support setting the MAC address
[  112.874725][ T8373] bond15: (slave vxcan5): Error -95 calling set_mac_address
[  112.887621][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.892233][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.900193][ T8379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.921319][ T8380] bond15: (slave bridge5): Enslaving as an active interface with a down link
[  112.931855][ T8380] 8021q: adding VLAN 0 to HW filter on device bond15
[  113.070632][ T8390] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  113.341419][ T8397] IPv6: NLM_F_CREATE should be specified when creating new route
[  113.463055][ T8415] team1: entered promiscuous mode
[  113.466204][ T8415] team1: entered allmulticast mode
[  113.469075][ T8415] 8021q: adding VLAN 0 to HW filter on device team1
[  113.472792][ T8417] validate_nla: 52 callbacks suppressed
[  113.472805][ T8417] netlink: 'syz.1.656': attribute type 1 has an invalid length.
[  113.487680][ T8417] gretap2: entered allmulticast mode
[  113.588510][ T8421] lo speed is unknown, defaulting to 1000
[  113.591127][ T8421] wg1 speed is unknown, defaulting to 1000
[  113.659268][ T8424] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  113.694737][ T8429] netlink: 'syz.1.659': attribute type 13 has an invalid length.
[  113.705344][ T8429] netlink: 'syz.1.659': attribute type 17 has an invalid length.
[  113.737947][ T8429] net_ratelimit: 59 callbacks suppressed
[  113.737955][ T8429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.098295][ T8404] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  116.181584][ T8443] netlink: 'syz.0.662': attribute type 4 has an invalid length.
[  116.182552][ T8446] netlink: 'syz.0.662': attribute type 4 has an invalid length.
[  116.185565][ T8443] netlink: 'syz.0.662': attribute type 4 has an invalid length.
[  116.188644][ T8446] netlink: 'syz.0.662': attribute type 4 has an invalid length.
[  116.209872][ T5833] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.212874][ T5833] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.228326][ T5833] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.235390][ T5833] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.273192][ T8459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  116.569248][ T8485] syzkaller0: entered promiscuous mode
[  116.571466][ T8485] syzkaller0: entered allmulticast mode
[  116.606194][ T8488] lo speed is unknown, defaulting to 1000
[  116.610195][ T8488] wg1 speed is unknown, defaulting to 1000
[  116.610345][ T8487] lo speed is unknown, defaulting to 1000
[  116.623234][ T8487] wg1 speed is unknown, defaulting to 1000
[  116.991519][ T8495] bridge0: port 4(vlan1) entered blocking state
[  116.996306][ T8495] bridge0: port 4(vlan1) entered disabled state
[  117.005736][ T8495] vlan1: entered allmulticast mode
[  117.008338][ T8495] geneve0: entered allmulticast mode
[  117.012506][ T8495] vlan1: entered promiscuous mode
[  117.014379][ T8495] geneve0: entered promiscuous mode
[  117.046181][ T8500] tipc: Enabling of bearer <eth:macvlan1> rejected, failed to enable media
[  117.085743][ T8507] raw_sendmsg: syz.2.682 forgot to set AF_INET. Fix it!
[  117.307700][ T8526] __nla_validate_parse: 44 callbacks suppressed
[  117.307710][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'.
[  118.166425][ T8537] tipc: Resetting bearer <eth:syzkaller0>
[  118.175475][ T8544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.179834][ T8544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.183745][ T8544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.191090][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'.
[  118.207933][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'.
[  118.211172][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'.
[  118.214423][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'.
[  118.222309][ T5881] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.228627][ T5881] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.231151][ T8544] bridge0: port 1(veth0_to_bridge) entered blocking state
[  118.245510][ T8544] bridge0: port 1(veth0_to_bridge) entered disabled state
[  118.247813][ T8544] veth0_to_bridge: entered allmulticast mode
[  118.250546][ T8544] veth0_to_bridge: entered promiscuous mode
[  118.260122][ T5881] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.262845][ T5881] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.278539][ T8550] ip6gre3: entered promiscuous mode
[  118.282752][ T8550] ip6gre3: entered allmulticast mode
[  118.323393][ T8553] sock: sock_timestamping_bind_phc: sock not bind to device
[  118.326221][ T8553] sctp: [Deprecated]: syz.0.694 (pid 8553) Use of int in maxseg socket option.
[  118.326221][ T8553] Use struct sctp_assoc_value instead
[  118.331357][ T8553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.334031][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.506880][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.700'.
[  118.542975][ T8571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.548995][ T8574] netlink: 36 bytes leftover after parsing attributes in process `syz.2.700'.
[  118.584574][ T8577] netlink: 'syz.2.701': attribute type 4 has an invalid length.
[  118.592999][ T8577] netlink: 'syz.2.701': attribute type 4 has an invalid length.
[  118.641560][ T8579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.702'.
[  118.772351][ T8584] netlink: 'syz.2.704': attribute type 1 has an invalid length.
[  118.787738][ T8584] bond15: entered promiscuous mode
[  118.789661][ T8584] 8021q: adding VLAN 0 to HW filter on device bond15
[  118.803697][ T8585] bond15: (slave bridge9): making interface the new active one
[  118.806941][ T8585] bridge9: entered promiscuous mode
[  118.809976][ T8585] bond15: (slave bridge9): Enslaving as an active interface with an up link
[  119.163496][ T8618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.170305][ T8618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.173963][ T8618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.182156][ T5816] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  119.184732][ T5816] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  119.205104][    T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  119.211067][ T8618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.214624][ T8618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.222095][ T8618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.228833][ T8618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.265032][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.268859][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.272522][ T8623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.333038][ T8627] netlink: 'syz.2.713': attribute type 1 has an invalid length.
[  119.341538][ T8624] bond16: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  119.347136][ T8624] bond16: (slave lo): Enslaving as an active interface with an up link
[  119.364612][   T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  119.392371][ T8627] bond17: entered promiscuous mode
[  119.398419][ T8630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.714'.
[  119.401354][ T8627] 8021q: adding VLAN 0 to HW filter on device bond17
[  119.401828][ T8630] netlink: 'syz.1.714': attribute type 9 has an invalid length.
[  119.406946][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'.
[  119.426050][ T8633] netlink: 'syz.0.715': attribute type 1 has an invalid length.
[  119.449946][ T8633] bond17: entered promiscuous mode
[  119.451625][ T8633] bond17: entered allmulticast mode
[  119.453925][ T8633] 8021q: adding VLAN 0 to HW filter on device bond17
[  119.464331][ T8633] erspan2: entered allmulticast mode
[  119.475614][ T8633] bond17: (slave erspan2): making interface the new active one
[  119.478129][ T8633] erspan2: entered promiscuous mode
[  119.480492][ T8633] bond17: (slave erspan2): Enslaving as an active interface with an up link
[  119.490265][ T8633] syz.0.715 (8633) used obsolete PPPIOCDETACH ioctl
[  119.491532][ T8640] vlan3: entered promiscuous mode
[  119.494449][ T8640] bridge0: entered promiscuous mode
[  119.533289][ T8644] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.627670][ T8654] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  119.642422][ T8654] bond17: option miimon: invalid value (18446744073709551607)
[  119.647199][ T8654] bond17: option miimon: allowed values 0 - 2147483647
[  119.650030][ T8654] bond17 (unregistering): Released all slaves
[  119.761612][ T8664] bond18: ARP target 9.0.0.0 is already present
[  119.763866][ T8664] bond18: option arp_ip_target: invalid value (9)
[  119.767270][   T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  119.771311][ T8664] bond18 (unregistering): Released all slaves
[  119.799213][ T8667] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  119.967291][ T8671] netlink: 'syz.2.725': attribute type 13 has an invalid length.
[  119.969994][ T8671] netlink: 'syz.2.725': attribute type 17 has an invalid length.
[  120.102548][ T8671] bridge0: left promiscuous mode
[  120.106345][ T8671] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.110924][ T8671] 8021q: adding VLAN 0 to HW filter on device team0
[  120.115644][ T5881] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.118412][ T5881] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.131887][ T5881] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.134753][ T5881] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.147857][ T5881] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.150861][ T5881] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.153624][ T5881] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.157191][ T5881] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.194988][ T8685] netlink: 'syz.2.727': attribute type 1 has an invalid length.
[  120.208318][ T8685] 8021q: adding VLAN 0 to HW filter on device bond18
[  120.323198][ T8685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  120.372154][ T8699] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.375996][ T8699] 8021q: adding VLAN 0 to HW filter on device team0
[  120.490119][ T8706] pim6reg1: entered promiscuous mode
[  120.494647][ T8706] pim6reg1: entered allmulticast mode
[  120.647271][ T8680] tipc: Node number set to 3167020250
[  120.693692][ T8725] netlink: 'syz.0.738': attribute type 13 has an invalid length.
[  120.718748][ T8727] bond0: (slave dummy0): Releasing backup interface
[  120.728143][ T8727] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  120.731988][ T8727] team0: Failed to send options change via netlink (err -105)
[  120.735151][ T8727] team0: Port device dummy0 added
[  121.566553][ T8722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.572024][ T8722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.577929][ T8722] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  121.582747][ T8722] bond0 (unregistering): Released all slaves
[  121.628713][ T8730] team0: Port device dummy0 removed
[  121.632531][ T8730] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  121.636315][ T8731] macvlan1: entered allmulticast mode
[  121.880157][ T8749] 8021q: adding VLAN 0 to HW filter on device bond19
[  121.898973][ T8749] bond19 (unregistering): Released all slaves
[  122.074286][ T8763] bond19: (slave vxcan1): The slave device specified does not support setting the MAC address
[  122.091108][ T8763] bond19: (slave vxcan1): Error -95 calling set_mac_address
[  122.112557][ T8768] syzkaller0: entered promiscuous mode
[  122.114329][ T8768] syzkaller0: entered allmulticast mode
[  122.145491][ T8774] macvlan0: entered promiscuous mode
[  122.150707][ T8774] macvlan0: entered allmulticast mode
[  122.359144][ T8779] __nla_validate_parse: 13 callbacks suppressed
[  122.359153][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.754'.
[  122.364691][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'.
[  122.378839][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'.
[  122.381705][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'.
[  122.385354][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'.
[  122.388095][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'.
[  122.390899][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'.
[  122.393693][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'.
[  122.397055][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'.
[  122.400344][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'.
[  122.490537][ T8803] bond5: (slave lo): Releasing backup interface
[  122.492858][ T8803] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  122.501350][ T8803] team0: left allmulticast mode
[  122.503916][ T8803] team_slave_0: left allmulticast mode
[  122.506841][ T8803] team_slave_1: left allmulticast mode
[  122.508705][ T8803] team0: left promiscuous mode
[  122.510191][ T8803] team_slave_0: left promiscuous mode
[  122.511914][ T8803] team_slave_1: left promiscuous mode
[  122.513951][ T8803] bridge0: port 3(team0) entered disabled state
[  122.518444][ T8803] bridge_slave_0: left allmulticast mode
[  122.520269][ T8803] bridge_slave_0: left promiscuous mode
[  122.522056][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.525562][ T8796] block nbd0: server does not support multiple connections per device.
[  122.530983][ T8796] block nbd0: shutting down sockets
[  122.536174][ T8803] bridge_slave_1: left allmulticast mode
[  122.537935][ T8803] bridge_slave_1: left promiscuous mode
[  122.539719][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.546600][ T8803] vlan1: left promiscuous mode
[  122.548102][ T8803] geneve0: left promiscuous mode
[  122.551829][ T8803] team0: Port device team_slave_0 removed
[  122.555629][ T8803] team0: Port device team_slave_1 removed
[  122.557535][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.560006][   T60] lo speed is unknown, defaulting to 1000
[  122.561724][   T60] syz2: Port: 1 Link DOWN
[  122.563055][ T5866] lo speed is unknown, defaulting to 1000
[  123.338660][ T8853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  123.446337][ T8866] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  123.613486][ T8879] lo speed is unknown, defaulting to 1000
[  123.616123][ T8879] wg1 speed is unknown, defaulting to 1000
[  123.842911][ T8906] pim6reg: entered allmulticast mode
[  123.852784][ T8906] pim6reg: left allmulticast mode
[  123.890638][ T8911] ip6gre2: entered promiscuous mode
[  123.892435][ T8911] ip6gre2: entered allmulticast mode
[  123.900074][ T8911] validate_nla: 29 callbacks suppressed
[  123.900083][ T8911] netlink: 'syz.1.792': attribute type 6 has an invalid length.
[  123.912244][ T8911] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  123.915369][ T8911] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  123.963083][ T8914] sit1: entered promiscuous mode
[  124.216614][ T8934] netlink: 'syz.0.799': attribute type 1 has an invalid length.
[  124.228462][ T8934] bond19: entered promiscuous mode
[  124.230378][ T8934] 8021q: adding VLAN 0 to HW filter on device bond19
[  124.240775][ T8934] 8021q: adding VLAN 0 to HW filter on device bond19
[  124.243160][ T8934] bond19: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  124.246684][ T8934] bond19: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  124.251748][ T8934] bond19: (slave ip6gre2): making interface the new active one
[  124.254126][ T8934] ip6gre2: entered promiscuous mode
[  124.256819][ T8934] bond19: (slave ip6gre2): Enslaving as an active interface with an up link
[  125.004178][ T8962] netlink: 'syz.2.807': attribute type 1 has an invalid length.
[  125.099755][ T8962] veth15: entered promiscuous mode
[  125.147810][ T8965] 8021q: adding VLAN 0 to HW filter on device bond20
[  125.393773][ T8992] netlink: 'syz.2.814': attribute type 20 has an invalid length.
[  125.408341][ T8992] netlink: 'syz.2.814': attribute type 20 has an invalid length.
[  125.411349][ T5881] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  125.414413][ T5881] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  125.423532][ T5881] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  125.427812][ T5881] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  125.606956][ T9006] net_ratelimit: 150 callbacks suppressed
[  125.606968][ T9006] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  125.838045][ T9029] netlink: 'syz.0.824': attribute type 1 has an invalid length.
[  125.919871][ T9029] veth17: entered promiscuous mode
[  125.924420][ T9029] 8021q: adding VLAN 0 to HW filter on device bond21
[  126.088599][ T9048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  126.139844][ T9055] pim6reg10: entered allmulticast mode
[  126.202067][ T9058] bridge0: port 2(erspan0) entered blocking state
[  126.204746][ T9058] bridge0: port 2(erspan0) entered disabled state
[  126.207547][ T9058] erspan0: entered allmulticast mode
[  126.214691][ T9058] erspan0: entered promiscuous mode
[  126.219160][ T9058] bridge0: port 2(erspan0) entered blocking state
[  126.221696][ T9058] bridge0: port 2(erspan0) entered forwarding state
[  126.239665][ T9058] erspan0: left allmulticast mode
[  126.241505][ T9058] erspan0: left promiscuous mode
[  126.243308][ T9058] bridge0: port 2(erspan0) entered disabled state
[  126.288242][ T9067] netlink: 'syz.1.838': attribute type 1 has an invalid length.
[  126.303521][ T9067] 8021q: adding VLAN 0 to HW filter on device bond17
[  126.307894][ T9065] netlink: 'syz.2.837': attribute type 10 has an invalid length.
[  126.336586][ T9075] netlink: 'syz.1.841': attribute type 10 has an invalid length.
[  126.376960][ T9081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  126.389210][ T9083] macsec4: entered promiscuous mode
[  126.390911][ T9083] erspan0: entered promiscuous mode
[  126.395778][ T9083] erspan0: left promiscuous mode
[  126.537212][ T9094] netlink: 'syz.1.847': attribute type 1 has an invalid length.
[  126.590855][ T9094] 8021q: adding VLAN 0 to HW filter on device bond18
[  127.266854][ T9101] : renamed from bond0 (while UP)
[  127.437993][ T9121] tipc: Resetting bearer <eth:syzkaller0>
[  127.462729][ T9123] xt_hashlimit: size too large, truncated to 1048576
[  127.475382][ T9127] team0: Port device dummy0 added
[  127.514617][ T9129] veth0_to_bridge (unregistering): left allmulticast mode
[  127.521735][ T9129] veth0_to_bridge (unregistering): left promiscuous mode
[  127.523966][ T9129] bridge0: port 1(veth0_to_bridge) entered disabled state
[  127.540481][ T9127] veth0: entered promiscuous mode
[  127.558041][ T9126] veth0: left promiscuous mode
[  127.567511][ T9123] __nla_validate_parse: 38 callbacks suppressed
[  127.567522][ T9123] netlink: 224 bytes leftover after parsing attributes in process `syz.0.856'.
[  127.619241][ T9129] netlink: 68 bytes leftover after parsing attributes in process `syz.0.856'.
[  127.854256][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'.
[  127.864488][ T9141] netlink: 60 bytes leftover after parsing attributes in process `syz.1.861'.
[  127.971041][ T9149] netlink: 14 bytes leftover after parsing attributes in process `syz.1.861'.
[  128.509343][ T9144] 8021q: adding VLAN 0 to HW filter on device bond19
[  128.523204][ T9148] bond0: (slave dummy0): Releasing backup interface
[  128.532763][ T1106] tipc: Resetting bearer <eth:syzkaller0>
[  128.671874][ T9168] netlink: 124 bytes leftover after parsing attributes in process `syz.1.868'.
[  128.676807][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'.
[  128.685881][ T5816] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.689058][ T8036] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.693488][ T8036] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.703307][ T8036] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.728605][ T9161] bridge16: entered promiscuous mode
[  128.730979][ T9161] bridge16: entered allmulticast mode
[  128.736312][ T9161] team0: Port device bridge16 added
[  128.793133][ T9161] bridge17: entered promiscuous mode
[  128.798697][ T9161] bridge17: entered allmulticast mode
[  128.801962][ T9161] team0: Port device bridge17 added
[  128.823569][ T9174] bond20: entered promiscuous mode
[  128.825696][ T9174] 8021q: adding VLAN 0 to HW filter on device bond20
[  128.830434][ T9161] bridge0: port 1(team0) entered blocking state
[  128.832637][ T9161] bridge0: port 1(team0) entered disabled state
[  128.834752][ T9161] team0: entered allmulticast mode
[  128.840830][ T9161] team_slave_1: entered allmulticast mode
[  128.843587][ T9161] team0: entered promiscuous mode
[  128.845837][ T9161] team_slave_1: entered promiscuous mode
[  128.853877][ T9174] 8021q: adding VLAN 0 to HW filter on device bond20
[  128.856583][ T9174] bond20: (slave ip6gre3): The slave device specified does not support setting the MAC address
[  128.860104][ T9174] bond20: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode
[  128.866275][ T9174] bond20: (slave ip6gre3): making interface the new active one
[  128.874993][ T9174] ip6gre3: entered promiscuous mode
[  128.877481][ T9174] bond20: (slave ip6gre3): Enslaving as an active interface with an up link
[  128.904432][ T9177] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  128.906291][ T9179] netlink: 28 bytes leftover after parsing attributes in process `syz.1.872'.
[  128.913400][ T9179] netlink: 48 bytes leftover after parsing attributes in process `syz.1.872'.
[  128.956756][ T9186] validate_nla: 6 callbacks suppressed
[  128.956766][ T9186] netlink: 'syz.1.875': attribute type 1 has an invalid length.
[  128.962730][ T9183] bond22 (unregistering): Released all slaves
[  128.991759][ T9186] 8021q: adding VLAN 0 to HW filter on device bond21
[  129.018639][ T9186] bond21: (slave geneve3): making interface the new active one
[  129.025568][ T9186] bond21: (slave geneve3): Enslaving as an active interface with an up link
[  129.029191][ T8036] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.032601][ T8036] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.035563][ T8036] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.044767][ T8036] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.112628][ T9194] lo: Caught tx_queue_len zero misconfig
[  129.181737][ T9200] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  129.405080][ T9231] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  129.502321][ T9242] lo speed is unknown, defaulting to 1000
[  129.505603][ T9242] wg1 speed is unknown, defaulting to 1000
[  130.199406][ T9279] syzkaller0: entered promiscuous mode
[  130.201192][ T9279] syzkaller0: entered allmulticast mode
[  130.210528][ T9279] netlink: 76 bytes leftover after parsing attributes in process `syz.0.893'.
[  130.665018][ T9316] netlink: 'syz.2.895': attribute type 13 has an invalid length.
[  130.668390][ T9316] netlink: 'syz.2.895': attribute type 17 has an invalid length.
[  130.751977][ T9316] 8021q: adding VLAN 0 to HW filter on device team0
[  130.757728][ T9316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  130.763721][ T5866] lo speed is unknown, defaulting to 1000
[  130.766562][ T5866] syz2: Port: 1 Link ACTIVE
[  130.809929][ T9327] 5n: entered promiscuous mode
[  130.859260][ T9332] mac80211_hwsim hwsim6 wlan0: Caught tx_queue_len zero misconfig
[  131.011863][ T9345] macvtap1: entered promiscuous mode
[  131.014550][ T9345] macvtap1: entered allmulticast mode
[  131.019690][ T9345] veth1_vlan: entered allmulticast mode
[  131.030702][ T9345] macvtap2: entered promiscuous mode
[  131.032895][ T9345] macvtap2: entered allmulticast mode
[  131.136932][ T9347] netlink: 'syz.1.904': attribute type 11 has an invalid length.
[  131.139450][ T9347] netlink: 'syz.1.904': attribute type 23 has an invalid length.
[  131.179858][ T9349] netlink: 'syz.1.905': attribute type 1 has an invalid length.
[  131.214691][ T9350] bond22: (slave vxcan1): The slave device specified does not support setting the MAC address
[  131.219961][ T9350] bond22: (slave vxcan1): Error -95 calling set_mac_address
[  131.359764][ T9366] netlink: 'syz.1.908': attribute type 10 has an invalid length.
[  131.379171][ T9366] team0 (unregistering): Port device team_slave_0 removed
[  131.390632][ T9366] team0 (unregistering): Port device team_slave_1 removed
[  131.533985][ T9383] netlink: 'syz.0.911': attribute type 10 has an invalid length.
[  131.543226][ T9383] dummy0: entered promiscuous mode
[  131.545753][ T9383] dummy0: entered allmulticast mode
[  131.548990][ T9383] team0: Port device dummy0 added
[  131.552272][ T9383] netlink: 'syz.0.911': attribute type 10 has an invalid length.
[  131.561354][   T52] bridge0: port 1(team0) entered blocking state
[  131.563954][   T52] bridge0: port 1(team0) entered forwarding state
[  131.586794][ T9383] dummy0: left promiscuous mode
[  131.588996][ T9383] dummy0: left allmulticast mode
[  131.592310][ T9383] team0: Port device dummy0 removed
[  131.596764][ T9383] : (slave dummy0): Enslaving as an active interface with an up link
[  131.600256][   T52] bridge0: port 1(team0) entered disabled state
[  131.606666][ T9383] netlink: 'syz.0.911': attribute type 1 has an invalid length.
[  131.712838][ T9394] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  131.795872][ T9402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.820249][ T9399] netlink: 'syz.2.917': attribute type 5 has an invalid length.
[  134.618585][ T9389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  134.888230][ T9425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.930974][ T9428] netlink: 'syz.1.924': attribute type 1 has an invalid length.
[  135.018162][ T9439] netlink: 'syz.0.928': attribute type 5 has an invalid length.
[  135.044341][ T9441] __nla_validate_parse: 10 callbacks suppressed
[  135.044350][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.930'.
[  135.051930][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'.
[  135.114371][ T9447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  135.163211][ T9451] netlink: 'syz.1.933': attribute type 1 has an invalid length.
[  135.182039][ T9453] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  135.198709][ T9455] netlink: 'syz.2.935': attribute type 1 has an invalid length.
[  135.213637][ T9455] bond21: entered promiscuous mode
[  135.215797][ T9455] bond21: entered allmulticast mode
[  135.217605][ T9455] 8021q: adding VLAN 0 to HW filter on device bond21
[  135.233017][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'.
[  135.245479][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'.
[  135.300080][ T9458] netlink: 36 bytes leftover after parsing attributes in process `syz.1.936'.
[  135.395861][ T9466] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  135.490276][ T9479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  135.516969][ T9483] netlink: 68 bytes leftover after parsing attributes in process `syz.0.941'.
[  135.541469][ T9495] Cannot find del_set index 14804 as target
[  135.633761][ T9502] netlink: 14 bytes leftover after parsing attributes in process `syz.2.945'.
[  135.658125][ T9502] team0: Port device dummy0 removed
[  135.741570][ T9514] netlink: 276 bytes leftover after parsing attributes in process `syz.0.949'.
[  135.755503][ T9514] netlink: 80 bytes leftover after parsing attributes in process `syz.0.949'.
[  135.763332][ T9524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.951'.
[  135.886660][ T9526] block nbd0: server does not support multiple connections per device.
[  135.896145][ T9526] block nbd0: shutting down sockets
[  136.025896][ T9547] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  136.030716][ T9547] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  136.083834][ T9549] hmac(sha224: entered promiscuous mode
[  136.172877][ T9562] netlink: 'syz.2.962': attribute type 1 has an invalid length.
[  136.199088][ T9562] bond22: (slave bridge12): Enslaving as a backup interface with an up link
[  136.207879][ T9562] macvlan1: entered promiscuous mode
[  136.209614][ T9562] macvlan1: entered allmulticast mode
[  136.211646][ T9562] bond22: entered promiscuous mode
[  136.213353][ T9562] bridge12: entered promiscuous mode
[  136.216052][ T9562] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  136.218593][ T9562] bond22: left promiscuous mode
[  136.220138][ T9562] bridge12: left promiscuous mode
[  136.313348][ T9567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.356708][ T9569] tipc: Resetting bearer <eth:syzkaller0>
[  136.372502][ T8679] lo speed is unknown, defaulting to 1000
[  136.374681][ T8036] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.377815][ T8679] syz2: Port: 1 Link DOWN
[  136.379335][ T8036] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.382138][ T8036] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.385621][ T8036] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.459111][ T9581] netlink: 'syz.2.968': attribute type 3 has an invalid length.
[  136.740782][ T9585] netlink: 'syz.0.969': attribute type 1 has an invalid length.
[  136.753233][ T9585] 8021q: adding VLAN 0 to HW filter on device bond22
[  136.808423][ T9590] batadv0: entered promiscuous mode
[  136.810584][ T9590] gretap0: entered promiscuous mode
[  136.813039][ T9590] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network
[  136.816990][ T9590] hsr1: entered allmulticast mode
[  136.818608][ T9590] batadv0: entered allmulticast mode
[  136.820262][ T9590] gretap0: entered allmulticast mode
[  136.912775][ T9600] netlink: 'syz.1.973': attribute type 16 has an invalid length.
[  136.958601][ T9603] netlink: 'syz.1.974': attribute type 1 has an invalid length.
[  136.981192][ T9603] bond24: (slave vxcan1): The slave device specified does not support setting the MAC address
[  136.987814][ T9603] bond24: (slave vxcan1): Error -95 calling set_mac_address
[  137.106316][ T9619] netlink: 'syz.1.978': attribute type 21 has an invalid length.
[  137.112572][ T9622] tunl0: Caught tx_queue_len zero misconfig
[  137.161288][ T9626] : entered promiscuous mode
[  137.327499][ T9634] vlan0: entered promiscuous mode
[  137.930452][ T9688] bond27: ARP target 9.0.0.0 is already present
[  137.932578][ T9688] bond27: option arp_ip_target: invalid value (9)
[  137.937765][ T9688] bond27 (unregistering): Released all slaves
[  137.977646][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  137.983170][ T9693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  137.983853][ T9694] can: request_module (can-proto-0) failed.
[  138.000282][ T9691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  138.098563][ T9698] bridge0: port 1(team0) entered disabled state
[  138.130002][ T5816] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.133057][ T5816] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.137402][ T8678] syz1: Port: 1 Link DOWN
[  138.137502][ T5816] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.141828][ T5816] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.271517][ T9713] lo speed is unknown, defaulting to 1000
[  138.274793][ T9713] wg1 speed is unknown, defaulting to 1000
[  138.319844][ T9713] lo speed is unknown, defaulting to 1000
[  138.322446][ T9713] wg1 speed is unknown, defaulting to 1000
[  138.460281][ T9718] bond24: (slave vxcan1): The slave device specified does not support setting the MAC address
[  138.466912][ T9718] bond24: (slave vxcan1): Error -95 calling set_mac_address
[  138.483359][ T9719] bond24: (slave vxcan1): The slave device specified does not support setting the MAC address
[  138.506912][ T9719] bond24: (slave vxcan1): Error -95 calling set_mac_address
[  138.524341][ T9718] macvlan1: entered promiscuous mode
[  138.526369][ T9718] macvlan1: entered allmulticast mode
[  138.528681][ T9718] bond24: (slave macvlan1): Error -98 calling set_mac_address
[  138.631799][ T9738] bridge18: the hash_elasticity option has been deprecated and is always 16
[  138.638970][ T9738] bridge18: entered allmulticast mode
[  138.694390][ T9749] bridge19: the hash_elasticity option has been deprecated and is always 16
[  138.701459][ T9749] bridge19: entered allmulticast mode
[  138.733587][ T9759] syzkaller0: mtu less than device minimum
[  138.769207][ T9764] IPVS: Error connecting to the multicast addr
[  138.959169][ T9788] bond25: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  138.963473][ T9788] bond25 (unregistering): Released all slaves
[  139.129186][ T9809] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  139.242405][ T9828] nbd: must specify a size in bytes for the device
[  139.443180][ T9854] xfrm0: left allmulticast mode
[  139.452134][ T9854] vlan0: left promiscuous mode
[  139.454205][ T9854] vlan1: left promiscuous mode
[  139.462232][ T9854] vlan1: left allmulticast mode
[  139.464124][ T9854] veth0_vlan: left allmulticast mode
[  139.472324][ T9854] macvlan1: left allmulticast mode
[  139.474458][ T9854] vxlan0: left promiscuous mode
[  139.484992][ T9854] vxlan0: left allmulticast mode
[  139.487852][ T9854] macsec2: left promiscuous mode
[  139.489857][ T9854] veth3: left promiscuous mode
[  139.491711][ T9854] veth3: left allmulticast mode
[  139.493831][ T9854] bond6: left allmulticast mode
[  139.497831][ T9854] veth7: left promiscuous mode
[  139.499665][ T9854] vlan2: left allmulticast mode
[  139.501400][ T9854] macvtap0: left allmulticast mode
[  139.503247][ T9854] bond8: left promiscuous mode
[  139.505336][ T9854] bridge3: left promiscuous mode
[  139.506983][ T9854] bond8: left allmulticast mode
[  139.508667][ T9854] bridge3: left allmulticast mode
[  139.510604][ T9854] ip6erspan0: left allmulticast mode
[  139.512811][ T9854] veth9: left allmulticast mode
[  139.515926][ T9854] ipip0: left promiscuous mode
[  139.518658][ T9854] gretap2: left allmulticast mode
[  139.521119][ T9854] ip6gre2: left promiscuous mode
[  139.522945][ T9854] ip6gre2: left allmulticast mode
[  139.532791][ T9854] bond20: left promiscuous mode
[  139.535347][ T9854] ip6gre3: left promiscuous mode
[  139.544325][ T9854] veth1_vlan: left allmulticast mode
[  139.547461][ T9854] macvtap1: left promiscuous mode
[  139.549721][ T9854] macvtap1: left allmulticast mode
[  139.595037][ T9858] 8021q: adding VLAN 0 to HW filter on device bond25
[  139.612840][ T9860] veth15: entered allmulticast mode
[  139.617954][ T9860] bond25: (slave veth15): Enslaving as an active interface with a down link
[  139.620682][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.624555][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.630988][ T9862] bond25 (unregistering): (slave veth15): Releasing active interface
[  139.676173][ T9862] bond25 (unregistering): Released all slaves
[  139.689440][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.694911][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.701004][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.708805][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.713788][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.716813][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.739658][ T9868] bond27: (slave bridge12): making interface the new active one
[  139.743123][ T9868] bond27: (slave bridge12): Enslaving as an active interface with an up link
[  139.755954][ T9868] bond27: (slave gretap3): Enslaving as an active interface with an up link
[  139.803482][ T9874] 8021q: adding VLAN 0 to HW filter on device bond28
[  139.822823][ T9879] tipc: New replicast peer: 255.255.255.255
[  139.826263][ T9879] tipc: Enabled bearer <udp:syz1>, priority 10
[  139.913335][ T9881] syzkaller1: entered promiscuous mode
[  139.915360][ T9881] syzkaller1: entered allmulticast mode
[  139.919272][ T8036] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  139.922350][ T8036] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  139.925319][ T8036] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  139.927832][ T8036] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  139.980177][ T9889] validate_nla: 10 callbacks suppressed
[  139.980187][ T9889] netlink: 'syz.2.1043': attribute type 14 has an invalid length.
[  140.033794][ T9896] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  140.146722][ T9910] tipc: Resetting bearer <eth:syzkaller0>
[  140.188045][ T9918] __nla_validate_parse: 25 callbacks suppressed
[  140.188087][ T9918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1051'.
[  140.227389][ T9916] bridge13: entered promiscuous mode
[  140.229633][ T9916] bridge13: entered allmulticast mode
[  140.270661][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1049'.
[  140.285312][ T9923] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1052'.
[  140.302973][ T9923] sctp: [Deprecated]: syz.2.1052 (pid 9923) Use of struct sctp_assoc_value in delayed_ack socket option.
[  140.302973][ T9923] Use struct sctp_sack_info instead
[  140.326993][ T9930] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1049'.
[  140.343266][ T9924] bridge13: entered promiscuous mode
[  140.345895][ T9924] bridge13: entered allmulticast mode
[  140.386457][ T9935] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1054'.
[  140.392139][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1050'.
[  140.467534][ T9939] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  140.470814][ T9939] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  140.477577][ T9939] tipc: Resetting bearer <eth:syzkaller0>
[  140.558650][ T9949] netlink: 'syz.2.1058': attribute type 29 has an invalid length.
[  140.561513][ T9949] netlink: 'syz.2.1058': attribute type 29 has an invalid length.
[  140.568214][ T9949] netlink: 524 bytes leftover after parsing attributes in process `syz.2.1058'.
[  140.616037][ T9954] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  140.618390][ T9954] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  140.620854][ T9954] tipc: Resetting bearer <eth:syzkaller0>
[  140.665516][ T9957] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1060'.
[  140.673852][ T9962] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1060'.
[  140.698732][ T9965] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.1062'.
[  140.700171][ T9966] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  140.703997][ T9966] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  140.707922][ T9966] tipc: Resetting bearer <eth:syzkaller0>
[  140.945175][ T8680] tipc: Node number set to 1200745496
[  141.040398][ T9976] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  141.154026][ T9993] ip6tnl2: entered allmulticast mode
[  141.412535][T10015] wg2: entered allmulticast mode
[  141.439756][T10019] openvswitch: netlink: Missing key (keys=40, expected=100)
[  141.454693][T10019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  141.497414][T10025] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  141.511343][T10025] bridge_slave_0: Caught tx_queue_len zero misconfig
[  141.580036][T10032] pimreg: entered allmulticast mode
[  141.680110][T10049] netlink: 'syz.1.1082': attribute type 1 has an invalid length.
[  141.698234][T10049] 8021q: adding VLAN 0 to HW filter on device bond29
[  141.816201][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.819088][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.953243][T10080] bridge0: entered allmulticast mode
[  141.958422][T10080] pim6reg: entered allmulticast mode
[  141.965741][T10080] pim6reg: left allmulticast mode
[  141.972657][T10080] bridge0: left allmulticast mode
[  141.990796][T10083] netlink: 'syz.1.1090': attribute type 1 has an invalid length.
[  141.993995][T10083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  142.112512][T10100] netlink: 'syz.0.1096': attribute type 1 has an invalid length.
[  142.151270][T10104] netlink: 'syz.1.1097': attribute type 10 has an invalid length.
[  142.157019][T10104] netlink: 'syz.1.1097': attribute type 10 has an invalid length.
[  142.649782][T10149] netlink: 'syz.0.1110': attribute type 4 has an invalid length.
[  142.653669][T10149] netlink: 'syz.0.1110': attribute type 4 has an invalid length.
[  142.731621][T10152] bond24 (unregistering): Released all slaves
[  142.916327][T10170] lo speed is unknown, defaulting to 1000
[  142.919500][T10170] wg1 speed is unknown, defaulting to 1000
[  155.125020][T10181] __nla_validate_parse: 88 callbacks suppressed
[  155.125035][T10181] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1118'.
[  155.133094][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'.
[  155.153389][T10182] IPv6: sit1: Disabled Multicast RS
[  155.187866][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'.
[  155.221520][T10184] bond0: entered promiscuous mode
[  155.235075][T10184] bond0: left promiscuous mode
[  155.256329][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'.
[  155.363002][T10192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1122'.
[  155.453657][T10197] lo speed is unknown, defaulting to 1000
[  155.459392][T10197] wg1 speed is unknown, defaulting to 1000
[  155.480859][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'.
[  155.522718][T10194] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1123'.
[  155.529225][T10205] validate_nla: 64 callbacks suppressed
[  155.529239][T10205] netlink: 'syz.0.1126': attribute type 7 has an invalid length.
[  155.534439][T10205] netlink: 'syz.0.1126': attribute type 8 has an invalid length.
[  155.584208][T10211] netlink: 'syz.1.1127': attribute type 13 has an invalid length.
[  155.611047][T10211] tipc: Resetting bearer <eth:syzkaller0>
[  155.625046][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'.
[  155.675624][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'.
[  155.678392][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'.
[  155.734049][T10233] netlink: 'syz.1.1133': attribute type 1 has an invalid length.
[  155.737524][T10236] netlink: 'syz.0.1134': attribute type 13 has an invalid length.
[  155.738000][T10236] IPVS: set_ctl: invalid protocol: 12 10.1.1.2:20003
[  155.780743][T10233] bond30: (slave bridge13): Enslaving as a backup interface with an up link
[  155.889582][T10253] syzkaller1: entered promiscuous mode
[  155.891856][T10253] syzkaller1: entered allmulticast mode
[  156.119371][T10264] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  156.122213][T10264] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  156.245800][T10272] netlink: 'syz.0.1144': attribute type 1 has an invalid length.
[  156.264013][T10272] bond16: (slave lo): Releasing backup interface
[  156.267338][T10272] bond16: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  156.271214][T10272] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  156.335892][T10279] syzkaller1: entered promiscuous mode
[  156.337699][T10279] syzkaller1: entered allmulticast mode
[  156.345448][T10279] veth1_to_hsr: left promiscuous mode
[  156.347088][T10279] veth1_to_hsr: left allmulticast mode
[  156.348798][T10279] 0: left allmulticast mode
[  156.351140][T10279] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  156.354078][T10279] bond2: left promiscuous mode
[  156.355908][T10279] bridge2: left promiscuous mode
[  156.357754][T10279] veth3: left allmulticast mode
[  156.359373][T10279] bridge4: left allmulticast mode
[  156.361253][T10279] bridge5: left allmulticast mode
[  156.363204][T10279] bond7: left promiscuous mode
[  156.364661][T10279] bridge7: left promiscuous mode
[  156.368181][T10279] bridge8: left promiscuous mode
[  156.370310][T10279] bond9: left promiscuous mode
[  156.371835][T10279] bond9: left allmulticast mode
[  156.374010][T10279] bond10: left allmulticast mode
[  156.375872][T10279] bond11: left promiscuous mode
[  156.377481][T10279] bond12: left promiscuous mode
[  156.379152][T10279] bond13: left promiscuous mode
[  156.380776][T10279] bond14: left promiscuous mode
[  156.382563][T10279] vlan1: left promiscuous mode
[  156.384057][T10279] geneve1: left promiscuous mode
[  156.386475][T10279] vlan1: left allmulticast mode
[  156.388044][T10279] geneve1: left allmulticast mode
[  156.389801][T10279] gretap2: left allmulticast mode
[  156.391647][T10279] team1: left promiscuous mode
[  156.393311][T10279] team1: left allmulticast mode
[  156.395326][T10279] bond17: left promiscuous mode
[  156.397034][T10279] erspan2: left promiscuous mode
[  156.398750][T10279] bond17: left allmulticast mode
[  156.400549][T10279] erspan2: left allmulticast mode
[  156.402430][T10279] bond19: left promiscuous mode
[  156.404087][T10279] ip6gre2: left promiscuous mode
[  156.406498][T10279] veth17: left promiscuous mode
[  156.409259][T10279] hsr1: left allmulticast mode
[  156.411293][T10279] batadv0: left allmulticast mode
[  156.413147][T10279] gretap0: left allmulticast mode
[  156.415130][T10279] bridge18: left allmulticast mode
[  156.417249][T10279] bridge19: left allmulticast mode
[  156.419644][T10279] syzkaller1: left promiscuous mode
[  156.421352][T10279] syzkaller1: left allmulticast mode
[  156.951412][   T33] audit: type=1107 audit(1778493626.151:2): pid=10305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' H\h>q~bCn{\}̄w=ERUw;K;~WRW(IT%@x!}B@Va3dkqh'0<	vWc?q~s%%Vk߄Кdǀ9 &}f5>U
[  156.951412][   T33] eJ}6OpCx;gA,z#"6hm,xmn<5@t!Ujv)zfgT'j?LI]s"*ض
[  156.951412][   T33] mAye[lF@6*!QKBo
[  156.951412][   T33] n'
[  157.092170][T10320] pim6reg1: entered promiscuous mode
[  157.093797][T10320] pim6reg1: entered allmulticast mode
[  157.271233][T10341] netlink: 'syz.0.1162': attribute type 1 has an invalid length.
[  157.478596][T10354] netlink: 'syz.2.1167': attribute type 1 has an invalid length.
[  157.488042][T10346] netlink: 'syz.0.1164': attribute type 1 has an invalid length.
[  157.496748][T10354] bond26: entered promiscuous mode
[  157.498566][T10354] bond26: entered allmulticast mode
[  157.500556][T10354] 8021q: adding VLAN 0 to HW filter on device bond26
[  157.510200][T10363] macvlan1: entered promiscuous mode
[  157.512141][T10363] macvlan1: entered allmulticast mode
[  157.515380][T10363] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  157.547991][T10346] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  157.695381][T10388] netlink: 'syz.0.1174': attribute type 1 has an invalid length.
[  157.709785][T10388] 8021q: adding VLAN 0 to HW filter on device bond26
[  157.719188][T10388] vlan2: entered allmulticast mode
[  157.720976][T10388] bond26: entered allmulticast mode
[  158.391793][T10402] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  160.696250][T10388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  160.751015][T10405] tc_dump_action: action bad kind
[  160.777147][T10408] netlink: 'syz.0.1179': attribute type 2 has an invalid length.
[  160.783261][T10408] netlink: 'syz.0.1179': attribute type 1 has an invalid length.
[  160.785864][T10408] __nla_validate_parse: 10 callbacks suppressed
[  160.785872][T10408] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1179'.
[  160.798280][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1180'.
[  160.869968][T10419] 8021q: adding VLAN 0 to HW filter on device 
[  160.878393][T10419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  161.031088][T10429] IPVS: Error connecting to the multicast addr
[  161.075718][T10433] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  161.148669][T10437] IPVS: ip_vs_add_dest(): server weight less than zero
[  161.152005][T10437] IPVS: rr: FWM 3 0x00000003 - no destination available
[  161.163227][T10437] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1185'.
[  161.169916][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1188'.
[  161.206938][T10442] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1189'.
[  161.749718][T10450] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1192'.
[  161.757857][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1192'.
[  161.780530][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1192'.
[  161.784341][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1192'.
[  161.790491][T10451] bond27 (unregistering): Released all slaves
[  161.893155][T10459] mac80211_hwsim hwsim5 wlan1: Caught tx_queue_len zero misconfig
[  161.972825][T10461] netlink: 'syz.0.1195': attribute type 1 has an invalid length.
[  161.976485][T10461] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1195'.
[  162.266122][T10485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.363285][T10498] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  162.367980][T10498] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  162.414796][T10498] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  162.425520][T10498] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  162.545757][T10506] netlink: 'syz.1.1211': attribute type 10 has an invalid length.
[  162.548551][T10506] netlink: 'syz.1.1211': attribute type 10 has an invalid length.
[  162.701008][T10516] netlink: 'syz.1.1214': attribute type 3 has an invalid length.
[  162.715704][T10516] xfrm1: entered allmulticast mode
[  162.790124][T10526] IPVS: persistence engine module ip_vs_pe_ not found
[  162.813835][T10532] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[  162.862233][T10537] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  162.868987][T10537] batman_adv: batadv0: Adding interface: ip6gretap1
[  162.872140][T10537] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem.
[  162.887641][T10537] batman_adv: batadv0: Interface activated: ip6gretap1
[  162.893871][T10537] tipc: Resetting bearer <eth:syzkaller0>
[  162.901764][T10537] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  162.904083][T10537] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  162.912578][T10537] xfrm1: left allmulticast mode
[  162.914353][T10537] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  163.150079][T10562] 8021q: adding VLAN 0 to HW filter on device bond27
[  163.173617][T10563] 8021q: adding VLAN 0 to HW filter on device bond28
[  163.181306][T10563] bond27: (slave bond28): Enslaving as an active interface with an up link
[  163.198544][T10562] bond27 (unregistering): (slave bond28): Releasing backup interface
[  163.208664][T10562] bond27 (unregistering): Released all slaves
[  163.683711][T10602] syzkaller1: entered promiscuous mode
[  163.686194][T10602] syzkaller1: entered allmulticast mode
[  163.976147][T10636] bond27: entered promiscuous mode
[  163.978182][T10636] 8021q: adding VLAN 0 to HW filter on device bond27
[  163.981642][T10638] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  163.998612][T10636] bridge16: entered promiscuous mode
[  164.000688][T10636] bond27: (slave bridge16): Enslaving as an active interface with an up link
[  164.021315][T10636] bond27 (unregistering): (slave bridge16): Releasing backup interface
[  164.024172][T10636] bridge16: left promiscuous mode
[  164.029423][T10636] bond27 (unregistering): Released all slaves
[  164.205233][T10632] bond31: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  164.209268][T10632] bond31 (unregistering): Released all slaves
[  164.241173][T10648] tipc: Resetting bearer <eth:syzkaller0>
[  164.305769][ T8036] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.309368][ T8036] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.315330][ T8036] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.317999][ T8036] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.495350][T10659] netlink: 'syz.1.1244': attribute type 1 has an invalid length.
[  164.519939][T10659] 8021q: adding VLAN 0 to HW filter on device bond31
[  164.533114][T10659] vlan5: entered promiscuous mode
[  164.535423][T10659] bond31: entered promiscuous mode
[  164.537524][T10659] vlan5: entered allmulticast mode
[  164.539239][T10659] bond31: entered allmulticast mode
[  164.575717][T10662] ip6_vti0: entered promiscuous mode
[  164.612730][T10666] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  164.894581][T10675] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  164.897046][T10675] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  164.899757][T10675] tipc: Resetting bearer <eth:syzkaller0>
[  164.902420][T10675] netlink: 'syz.2.1250': attribute type 12 has an invalid length.
[  164.905669][T10675] netlink: 'syz.2.1250': attribute type 11 has an invalid length.
[  164.949414][T10683] netlink: 'syz.1.1254': attribute type 15 has an invalid length.
[  164.980747][T10685] vlan0: entered promiscuous mode
[  164.982826][T10685] team0: entered promiscuous mode
[  165.003984][T10687] lo: Caught tx_queue_len zero misconfig
[  165.011809][T10687] batadv_slave_1: Caught tx_queue_len zero misconfig
[  165.047045][T10687] tunl0: Caught tx_queue_len zero misconfig
[  165.127635][T10700] xt_hashlimit: size too large, truncated to 1048576
[  165.194031][T10700] bridge_slave_0 (unregistering): left allmulticast mode
[  165.197452][T10700] bridge_slave_0 (unregistering): left promiscuous mode
[  165.199742][T10700] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.260998][T10707] 8021q: adding VLAN 0 to HW filter on device team0
[  165.264237][T10707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  165.270552][ T8680] lo speed is unknown, defaulting to 1000
[  165.273448][ T8680] syz2: Port: 1 Link ACTIVE
[  165.358116][T10717] sock: sock_timestamping_bind_phc: sock not bind to device
[  165.428146][T10724] syzkaller1: entered promiscuous mode
[  165.430211][T10724] syzkaller1: entered allmulticast mode
[  165.832065][T10769] __nla_validate_parse: 37 callbacks suppressed
[  165.832080][T10769] netlink: 176956 bytes leftover after parsing attributes in process `syz.0.1266'.
[  166.138550][T10821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1274'.
[  166.251067][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1274'.
[  166.313233][T10821] bond29: entered promiscuous mode
[  166.316042][T10821] 8021q: adding VLAN 0 to HW filter on device bond29
[  166.327662][T10823] bridge20: entered promiscuous mode
[  166.329788][T10823] bond29: (slave bridge20): Enslaving as an active interface with an up link
[  166.336874][T10824] bond29 (unregistering): (slave bridge20): Releasing backup interface
[  166.340521][T10824] bridge20: left promiscuous mode
[  166.343009][T10824] bond29 (unregistering): Released all slaves
[  166.382714][T10828] validate_nla: 5 callbacks suppressed
[  166.382722][T10828] netlink: 'syz.2.1275': attribute type 1 has an invalid length.
[  166.400298][T10828] bond27: entered promiscuous mode
[  166.405259][T10828] 8021q: adding VLAN 0 to HW filter on device bond27
[  166.459103][T10843] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1278'.
[  166.467031][T10847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1279'.
[  166.473067][T10847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1279'.
[  166.515475][T10844] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  166.604798][T10854] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  166.608024][T10854] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  166.611259][T10854] tipc: Resetting bearer <eth:syzkaller0>
[  166.688342][T10859] vlan0: entered promiscuous mode
[  166.689940][T10859] bridge0: entered promiscuous mode
[  166.691598][T10859] vlan1: entered promiscuous mode
[  166.693144][T10859] geneve0: entered promiscuous mode
[  166.886967][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1285'.
[  166.996212][T10883] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1289'.
[  167.338834][T10905] netlink: 'syz.0.1296': attribute type 1 has an invalid length.
[  167.342030][T10905] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1296'.
[  167.356263][T10905] bridge22: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  167.361484][T10905] netlink: 64114 bytes leftover after parsing attributes in process `syz.0.1296'.
[  167.404173][T10907] vlan3: entered allmulticast mode
[  167.407117][T10907] bond0: entered allmulticast mode
[  167.454412][T10911] netlink: 'syz.0.1298': attribute type 1 has an invalid length.
[  168.000315][T10931] netlink: 'syz.0.1304': attribute type 1 has an invalid length.
[  168.407557][T10934] lo speed is unknown, defaulting to 1000
[  168.410115][T10934] wg1 speed is unknown, defaulting to 1000
[  171.037268][T10961] __nla_validate_parse: 3 callbacks suppressed
[  171.037278][T10961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1314'.
[  171.056335][T10961] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1314'.
[  171.059850][T10961] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1314'.
[  171.068853][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1313'.
[  171.072397][T10963] netlink: 'syz.1.1313': attribute type 11 has an invalid length.
[  171.079006][T10961] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1314'.
[  171.100634][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  171.104190][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1313'.
[  171.112200][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  171.122179][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  171.126202][T10963] netlink: 'syz.1.1313': attribute type 11 has an invalid length.
[  171.129570][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  171.219581][T10979] netlink: 'syz.1.1319': attribute type 4 has an invalid length.
[  171.245746][T10982] IPv6: NLM_F_CREATE should be specified when creating new route
[  171.248192][T10982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  171.250447][T10982] IPv6: NLM_F_CREATE should be set when creating new route
[  171.252584][T10982] IPv6: NLM_F_CREATE should be set when creating new route
[  171.254808][T10982] IPv6: NLM_F_CREATE should be set when creating new route
[  171.266771][T10982] netlink: 'syz.1.1320': attribute type 10 has an invalid length.
[  171.269550][T10982] netlink: 'syz.1.1320': attribute type 10 has an invalid length.
[  171.318323][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'.
[  171.321172][T10992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1323'.
[  171.441720][T10999] sctp: [Deprecated]: syz.2.1324 (pid 10999) Use of int in maxseg socket option.
[  171.441720][T10999] Use struct sctp_assoc_value instead
[  171.496763][T11008] bond32 (unregistering): Released all slaves
[  171.519786][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1326'.
[  171.523407][T11011] hsr_slave_0: left promiscuous mode
[  171.526357][T11011] hsr_slave_1: left promiscuous mode
[  171.649236][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'.
[  171.660345][T11020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  171.705963][T11028] openvswitch: netlink: Key type 29 is not supported
[  171.729529][T11033] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  171.770842][T11040] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.838586][T11048] netlink: 'syz.0.1335': attribute type 1 has an invalid length.
[  171.850723][T11048] 8021q: adding VLAN 0 to HW filter on device bond29
[  171.863447][T11048] bond29: (slave veth24): Enslaving as an active interface with a down link
[  171.870360][T11040] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.882110][T11048] bond29 (unregistering): (slave veth24): Releasing active interface
[  171.885862][T11048] bond29 (unregistering): Released all slaves
[  171.907774][T11040] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.957962][T11040] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.013211][T11053] sit1: entered promiscuous mode
[  172.023044][ T8036] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  172.032197][ T8036] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  172.041413][ T8036] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  172.054683][ T8036] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  172.083415][T11055] syzkaller0: entered promiscuous mode
[  172.085969][T11055] syzkaller0: entered allmulticast mode
[  172.101275][T11057] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  172.103771][T11057] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  172.107122][T11057] tipc: Resetting bearer <eth:syzkaller0>
[  172.121003][T11057] tipc: Resetting bearer <eth:syzkaller0>
[  172.132221][ T5816] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  172.136039][ T5816] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  172.140234][ T5816] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  172.142887][ T5816] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  172.283619][T11067] team0: left allmulticast mode
[  172.286163][T11067] team_slave_1: left allmulticast mode
[  172.288445][T11067] bridge10: left allmulticast mode
[  172.290446][T11067] bridge11: left allmulticast mode
[  172.292359][T11067] bridge16: left allmulticast mode
[  172.294104][T11067] bridge17: left allmulticast mode
[  172.296365][T11067] team0: left promiscuous mode
[  172.298301][T11067] team_slave_1: left promiscuous mode
[  172.300688][T11067] bridge10: left promiscuous mode
[  172.302949][T11067] bridge11: left promiscuous mode
[  172.305478][T11067] bridge16: left promiscuous mode
[  172.307360][T11067] bridge17: left promiscuous mode
[  172.309282][T11067] bridge0: port 1(team0) entered disabled state
[  172.639797][T11074] syzkaller1: entered promiscuous mode
[  172.641740][T11074] syzkaller1: entered allmulticast mode
[  172.711322][T11074] wg2: left allmulticast mode
[  172.717134][T11074] veth0_to_bond: left allmulticast mode
[  172.728106][T11074] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  172.731397][T11074] bond3: left promiscuous mode
[  172.732987][T11074] erspan1: left promiscuous mode
[  172.734759][T11074] bond3: left allmulticast mode
[  172.745602][T11074] erspan1: left allmulticast mode
[  172.751325][T11074] bond9: left promiscuous mode
[  172.757780][T11074] bond11: left allmulticast mode
[  172.763085][T11074] bond12: left promiscuous mode
[  172.769316][T11074] bridge4: left promiscuous mode
[  172.774770][T11074] veth9: left promiscuous mode
[  172.781514][T11074] bond14: left promiscuous mode
[  172.784105][T11074] ip6gre1: left promiscuous mode
[  172.786496][T11074] bridge6: left allmulticast mode
[  172.788368][T11074] bridge7: left allmulticast mode
[  172.790355][T11074] tipc: Resetting bearer <eth:syzkaller0>
[  172.810360][T11074] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  172.817328][T11074] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  172.823454][T11074] ip6gre3: left promiscuous mode
[  172.825688][T11074] ip6gre3: left allmulticast mode
[  172.827634][T11074] bond15: left promiscuous mode
[  172.829309][T11074] bridge9: left promiscuous mode
[  172.831218][T11074] bond17: left promiscuous mode
[  172.833155][T11074] sit1: left promiscuous mode
[  172.835655][T11074] bond21: left promiscuous mode
[  172.837584][T11074] bond21: left allmulticast mode
[  172.839627][T11074] veth15: left allmulticast mode
[  172.841825][T11074] bond26: left promiscuous mode
[  172.843433][T11074] bond26: left allmulticast mode
[  172.850500][T11074] bond27: left promiscuous mode
[  172.854753][T11074] vlan0: left promiscuous mode
[  172.857496][T11074] bridge0: left promiscuous mode
[  172.859176][T11074] vlan1: left promiscuous mode
[  172.860829][T11074] geneve0: left promiscuous mode
[  172.864036][T11074] syzkaller1: left promiscuous mode
[  172.866439][T11074] syzkaller1: left allmulticast mode
[  172.873879][ T8680] lo speed is unknown, defaulting to 1000
[  172.876068][ T8680] syz2: Port: 1 Link DOWN
[  173.048233][T11077] netlink: 'syz.1.1345': attribute type 1 has an invalid length.
[  173.070052][T11077] bond32: entered promiscuous mode
[  173.072020][T11077] 8021q: adding VLAN 0 to HW filter on device bond32
[  173.239949][T11097] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  173.242680][T11092] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  173.252533][T11092] syzkaller0: entered promiscuous mode
[  173.254305][T11092] syzkaller0: entered allmulticast mode
[  174.001542][T11111] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  174.201331][T11128] veth1_to_team: Caught tx_queue_len zero misconfig
[  174.210828][T11128] bond19: entered allmulticast mode
[  174.212439][T11128] ip6gre2: entered allmulticast mode
[  174.217351][T11128] dvmrp8: entered allmulticast mode
[  174.261015][T11137] lo speed is unknown, defaulting to 1000
[  174.263561][T11137] wg1 speed is unknown, defaulting to 1000
[  174.274356][T11127] bond19: left allmulticast mode
[  174.276449][T11127] ip6gre2: left allmulticast mode
[  174.392324][T11149] syzkaller1: entered allmulticast mode
[  174.545109][T11160] netlink: 'syz.1.1365': attribute type 1 has an invalid length.
[  174.580308][T11160] bond33: (slave bridge14): Enslaving as a backup interface with an up link
[  174.623853][T11170] batadv0: Caught tx_queue_len zero misconfig
[  174.705423][T11181] xt_hashlimit: size too large, truncated to 1048576
[  174.732132][T11183] bond34: entered promiscuous mode
[  174.733965][T11183] 8021q: adding VLAN 0 to HW filter on device bond34
[  175.885061][ T5813] Bluetooth: hci1: command 0x0406 tx timeout
[  178.039591][T11203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  178.278904][T11234] m1Ie5n: entered promiscuous mode
[  178.355996][T11249] __nla_validate_parse: 16 callbacks suppressed
[  178.356006][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1384'.
[  178.410149][T11258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1385'.
[  178.418130][T11258] syzkaller1: entered promiscuous mode
[  178.514641][T11275] atomic_op ffff888114cb8198 conn xmit_atomic 0000000000000000
[  178.601923][T11289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1392'.
[  178.626292][T11289] sock: sock_timestamping_bind_phc: sock not bind to device
[  178.687827][T11298] veth0_macvtap: Caught tx_queue_len zero misconfig
[  178.691411][T11298] ip6tnl0: Caught tx_queue_len zero misconfig
[  178.704805][T11302] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1395'.
[  178.739854][T11306] netlink: 'syz.0.1396': attribute type 1 has an invalid length.
[  178.878465][T11318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1398'.
[  178.919217][T11322] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1399'.
[  179.086814][T11342] syzkaller1: entered promiscuous mode
[  179.088986][T11342] syzkaller1: entered allmulticast mode
[  179.095302][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.098096][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.106424][T11345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.503121][T11380] netlink: 'syz.0.1410': attribute type 1 has an invalid length.
[  179.537599][T11380] bond29: entered promiscuous mode
[  179.540027][T11380] 8021q: adding VLAN 0 to HW filter on device bond29
[  179.584045][T11380] macvtap1: entered allmulticast mode
[  179.599422][T11380] bond29: (slave bridge24): making interface the new active one
[  179.603189][T11380] bridge24: entered promiscuous mode
[  179.606950][T11380] bond29: (slave bridge24): Enslaving as an active interface with an up link
[  179.771342][T11409] --map-set only usable from mangle table
[  179.868060][T11416] netlink: 'syz.0.1415': attribute type 1 has an invalid length.
[  179.898846][T11416] 8021q: adding VLAN 0 to HW filter on device bond30
[  179.948900][T11423] netlink: 'syz.0.1416': attribute type 1 has an invalid length.
[  179.962960][T11423] bond31: entered promiscuous mode
[  179.964787][T11423] 8021q: adding VLAN 0 to HW filter on device bond31
[  179.985304][T11423] bond31: (slave bridge26): making interface the new active one
[  179.988303][T11423] bridge26: entered promiscuous mode
[  179.991021][T11423] bond31: (slave bridge26): Enslaving as an active interface with an up link
[  180.058580][T11431] syzkaller0: entered promiscuous mode
[  180.060333][T11431] syzkaller0: entered allmulticast mode
[  180.403469][T11461] syzkaller1: entered promiscuous mode
[  180.410041][T11461] syzkaller1: entered allmulticast mode
[  180.457960][T11461] vlan2: left allmulticast mode
[  180.459444][T11461] bond26: left allmulticast mode
[  180.461938][T11461] vlan3: left allmulticast mode
[  180.463486][T11461] bond0: left allmulticast mode
[  180.465545][T11461] sit1: left promiscuous mode
[  180.469757][T11461] bond29: left promiscuous mode
[  180.471206][T11461] bridge24: left promiscuous mode
[  180.473647][T11461] macvtap1: left allmulticast mode
[  180.478919][T11461] bond31: left promiscuous mode
[  180.480370][T11461] bridge26: left promiscuous mode
[  180.483476][T11461] syzkaller1: left promiscuous mode
[  180.485812][T11461] syzkaller1: left allmulticast mode
[  180.512501][T11465] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  180.513603][T11468] netlink: 'syz.1.1424': attribute type 1 has an invalid length.
[  180.519628][T11465] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  180.527524][T11465] tipc: Resetting bearer <eth:syzkaller0>
[  180.552974][T11468] bond35: (slave vxcan5): The slave device specified does not support setting the MAC address
[  180.557862][T11468] bond35: (slave vxcan5): Error -95 calling set_mac_address
[  180.597004][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1424'.
[  180.615167][T11480] macvlan0: entered promiscuous mode
[  180.617057][T11480] macvlan0: entered allmulticast mode
[  180.622885][T11480] syzkaller1: tun_chr_ioctl cmd 1074025677
[  180.632605][T11480] syzkaller1: Refused to change device type
[  180.924472][T11504] Cannot find add_set index 2 as target
[  181.094271][T11508] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  181.218525][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1433'.
[  181.221316][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1433'.
[  181.318684][T11522] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  181.322724][T11522] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  181.385165][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.388509][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.395594][T11523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.638679][T11536] sit2: entered allmulticast mode
[  181.647668][T11535] netlink: 'syz.2.1438': attribute type 21 has an invalid length.
[  181.650985][T11535] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1438'.
[  181.812319][T11554] netlink: 'syz.0.1446': attribute type 16 has an invalid length.
[  181.816770][T11554] netlink: 'syz.0.1446': attribute type 17 has an invalid length.
[  181.820575][T11554] netlink: 'syz.0.1446': attribute type 27 has an invalid length.
[  181.924039][T11563] syzkaller1: entered promiscuous mode
[  181.935109][T11563] syzkaller1: entered allmulticast mode
[  181.940807][T11563] netlink: 'syz.2.1449': attribute type 1 has an invalid length.
[  181.962946][T11563] 8021q: adding VLAN 0 to HW filter on device bond29
[  181.996008][T11569] dvmrp8: left allmulticast mode
[  182.149534][T11582] bond30: (slave vxcan1): The slave device specified does not support setting the MAC address
[  182.153443][T11582] bond30: (slave vxcan1): Error -95 calling set_mac_address
[  182.235021][T11585] block nbd0: server does not support multiple connections per device.
[  182.244654][T11585] block nbd0: shutting down sockets
[  182.477883][T11594] ipvlan0: entered promiscuous mode
[  182.680176][T11615] veth1_to_team: entered promiscuous mode
[  182.683662][T11615] veth1_to_team: left promiscuous mode
[  182.724623][T11620] batadv2: entered allmulticast mode
[  182.731953][T11620] 8021q: adding VLAN 0 to HW filter on device batadv2
[  182.734442][T11620] bridge0: port 1(batadv2) entered blocking state
[  182.736923][T11620] bridge0: port 1(batadv2) entered disabled state
[  182.739997][T11620] batadv2: entered promiscuous mode
[  182.741915][T11620] vlan1: entered promiscuous mode
[  182.743438][T11620] geneve0: entered promiscuous mode
[  182.779524][T11631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  182.921202][T11647] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  182.924119][T11647] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  182.927341][T11647] tipc: Resetting bearer <eth:syzkaller0>
[  182.954804][T11652] xt_hashlimit: size too large, truncated to 1048576
[  183.227226][ T5816] batman_adv: batadv2: IGMP Querier appeared
[  183.229496][ T5816] batman_adv: batadv2: MLD Querier appeared
[  183.341922][T11693] IPv6: NLM_F_CREATE should be specified when creating new route
[  183.344344][T11693] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  183.346640][T11693] IPv6: NLM_F_CREATE should be set when creating new route
[  183.348859][T11693] IPv6: NLM_F_CREATE should be set when creating new route
[  183.351062][T11693] IPv6: NLM_F_CREATE should be set when creating new route
[  183.361031][T11694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  183.407365][T11703] __nla_validate_parse: 66 callbacks suppressed
[  183.407376][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'.
[  183.416379][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1487'.
[  183.477233][T11711] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1492'.
[  183.482078][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'.
[  183.589999][T11726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1496'.
[  183.807055][T11724] nbd0: detected capacity change from 0 to 63
[  183.812319][T10517] block nbd0: Send control failed (result -32)
[  183.816121][   T55] block nbd0: Receive control failed (result -32)
[  183.819924][T11730] block nbd0: Receive control failed (result -32)
[  183.825535][T10517] block nbd0: Request send failed, requeueing
[  183.832077][   T11] block nbd0: Dead connection, failed to find a fallback
[  183.835784][   T11] block nbd0: shutting down sockets
[  183.838217][   T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  183.845361][   T11] Buffer I/O error on dev nbd0, logical block 0, async page read
[  183.850368][T10517] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  183.854574][T10517] Buffer I/O error on dev nbd0, logical block 1, async page read
[  183.858860][T10517] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  183.862647][T10517] Buffer I/O error on dev nbd0, logical block 2, async page read
[  183.868931][T10517] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  183.872923][T10517] Buffer I/O error on dev nbd0, logical block 3, async page read
[  183.879006][T10517] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  183.883208][T10517] Buffer I/O error on dev nbd0, logical block 0, async page read
[  183.889583][T10517] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  183.900170][T10517] Buffer I/O error on dev nbd0, logical block 1, async page read
[  183.909884][T10517] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  183.917574][T11733] validate_nla: 59 callbacks suppressed
[  183.917588][T11733] netlink: 'syz.1.1497': attribute type 1 has an invalid length.
[  183.925200][T10517] Buffer I/O error on dev nbd0, logical block 2, async page read
[  183.931116][T10517] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  183.937053][T10517] Buffer I/O error on dev nbd0, logical block 3, async page read
[  183.941164][T10517] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  183.946210][T10517] Buffer I/O error on dev nbd0, logical block 0, async page read
[  183.950285][T10517] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  183.955167][T10517] Buffer I/O error on dev nbd0, logical block 1, async page read
[  183.959381][T10517] ldm_validate_partition_table(): Disk read failed.
[  183.960215][T11735] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1498'.
[  183.962922][T10517] Dev nbd0: unable to read RDB block 0
[  183.968692][T10517]  nbd0: unable to read partition table
[  183.970138][T11735] syzkaller0: entered promiscuous mode
[  183.972870][T11735] syzkaller0: entered allmulticast mode
[  183.976973][T10517] ldm_validate_partition_table(): Disk read failed.
[  183.979986][T10517] Dev nbd0: unable to read RDB block 0
[  183.982567][T10517]  nbd0: unable to read partition table
[  184.140393][T11745] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1500'.
[  184.217112][T11747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1501'.
[  184.242262][T11747] bond31: (slave vxcan1): The slave device specified does not support setting the MAC address
[  184.245988][T11747] bond31: (slave vxcan1): Error -95 calling set_mac_address
[  184.415788][T11758] geneve3: entered promiscuous mode
[  184.419133][ T5816] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 38759 - 0
[  184.422667][ T5816] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 38759 - 0
[  184.428382][ T5816] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 38759 - 0
[  184.431813][ T5816] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 38759 - 0
[  184.506973][T11763] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  184.560789][T11765] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  184.564008][T11765] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  184.568062][T11765] tipc: Resetting bearer <eth:syzkaller0>
[  184.674204][T11767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1506'.
[  184.679209][T11767] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1506'.
[  184.688519][T11767] vlan2: entered promiscuous mode
[  184.690764][T11767] gretap0: entered promiscuous mode
[  184.692831][T11767] vlan2: entered allmulticast mode
[  184.694623][T11767] gretap0: entered allmulticast mode
[  184.972388][T11784] xfrm2: entered promiscuous mode
[  185.129465][T11798] 
[  185.130290][T11798] ======================================================
[  185.132573][T11798] WARNING: possible circular locking dependency detected
[  185.135027][T11798] syzkaller #0 Not tainted
[  185.136592][T11798] ------------------------------------------------------
[  185.138836][T11798] syz.0.1515/11798 is trying to acquire lock:
[  185.140751][T11798] ffffffff8e8837a0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x40/0x650
[  185.143686][T11798] 
[  185.143686][T11798] but task is already holding lock:
[  185.146071][T11798] ffff888119ac18e8 (&resv_map->rw_sema){.+.+}-{4:4}, at: hugetlb_fault+0x4c1/0x1670
[  185.149051][T11798] 
[  185.149051][T11798] which lock already depends on the new lock.
[  185.149051][T11798] 
[  185.152328][T11798] 
[  185.152328][T11798] the existing dependency chain (in reverse order) is:
[  185.155171][T11798] 
[  185.155171][T11798] -> #8 (&resv_map->rw_sema){.+.+}-{4:4}:
[  185.157614][T11798]        down_read+0x47/0x2e0
[  185.159117][T11798]        __get_user_pages+0x5e5/0x29d0
[  185.160866][T11798]        populate_vma_page_range+0x2be/0x3c0
[  185.162786][T11798]        __mm_populate+0x25f/0x390
[  185.164565][T11798]        vm_mmap_pgoff+0x3aa/0x4f0
[  185.166224][T11798]        ksys_mmap_pgoff+0x586/0x760
[  185.167874][T11798]        do_syscall_64+0x14d/0xf80
[  185.169501][T11798]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.171576][T11798] 
[  185.171576][T11798] -> #7 (&mm->mmap_lock){++++}-{4:4}:
[  185.174050][T11798]        __might_fault+0xcb/0x130
[  185.175719][T11798]        _copy_from_user+0x28/0xb0
[  185.177280][T11798]        csum_and_copy_from_iter_full+0x1e7/0x1f00
[  185.179338][T11798]        ip_generic_getfrag+0x149/0x2d0
[  185.181095][T11798]        __ip6_append_data+0x36be/0x3c50
[  185.182823][T11798]        ip6_append_data+0x10f/0x280
[  185.184567][T11798]        rawv6_sendmsg+0x12d3/0x18e0
[  185.186242][T11798]        ____sys_sendmsg+0x80a/0x9f0
[  185.187930][T11798]        ___sys_sendmsg+0x2a5/0x360
[  185.189605][T11798]        __x64_sys_sendmsg+0x1bd/0x2a0
[  185.191392][T11798]        do_syscall_64+0x14d/0xf80
[  185.193058][T11798]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.195322][T11798] 
[  185.195322][T11798] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  185.197772][T11798]        lock_sock_nested+0x48/0x100
[  185.199470][T11798]        inet_shutdown+0x6a/0x390
[  185.201124][T11798]        nbd_mark_nsock_dead+0x2e9/0x560
[  185.202920][T11798]        sock_shutdown+0x15e/0x260
[  185.204440][T11798]        nbd_clear_sock+0x24/0x170
[  185.205977][T11798]        nbd_config_put+0x2dd/0x580
[  185.207770][T11798]        nbd_genl_connect+0x19d5/0x1cf0
[  185.209522][T11798]        genl_family_rcv_msg_doit+0x22a/0x330
[  185.211518][T11798]        genl_rcv_msg+0x61c/0x7a0
[  185.213238][T11798]        netlink_rcv_skb+0x232/0x4b0
[  185.215046][T11798]        genl_rcv+0x28/0x40
[  185.216625][T11798]        netlink_unicast+0x80f/0x9b0
[  185.218237][T11798]        netlink_sendmsg+0x813/0xb40
[  185.219791][T11798]        ____sys_sendmsg+0x972/0x9f0
[  185.221491][T11798]        ___sys_sendmsg+0x2a5/0x360
[  185.223081][T11798]        __x64_sys_sendmsg+0x1bd/0x2a0
[  185.224723][T11798]        do_syscall_64+0x14d/0xf80
[  185.226245][T11798]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.228182][T11798] 
[  185.228182][T11798] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  185.230446][T11798]        __mutex_lock+0x19f/0x1300
[  185.232034][T11798]        nbd_queue_rq+0x37b/0x1100
[  185.233550][T11798]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  185.235388][T11798]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  185.237387][T11798]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  185.239300][T11798]        blk_mq_run_hw_queue+0x348/0x4f0
[  185.240936][T11798]        blk_mq_dispatch_list+0xd16/0xe10
[  185.242569][T11798]        blk_mq_flush_plug_list+0x48d/0x570
[  185.244314][T11798]        __blk_flush_plug+0x3ed/0x4d0
[  185.245893][T11798]        __submit_bio+0x28d/0x580
[  185.247350][T11798]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  185.249174][T11798]        block_read_full_folio+0x599/0x830
[  185.250942][T11798]        filemap_read_folio+0x137/0x3b0
[  185.252600][T11798]        do_read_cache_folio+0x358/0x590
[  185.254314][T11798]        read_part_sector+0xb6/0x2b0
[  185.255959][T11798]        adfspart_check_ICS+0xa5/0xa40
[  185.257626][T11798]        bdev_disk_changed+0x7ba/0x1550
[  185.259274][T11798]        blkdev_get_whole+0x380/0x510
[  185.260857][T11798]        bdev_open+0x31e/0xd30
[  185.262303][T11798]        blkdev_open+0x470/0x610
[  185.263782][T11798]        do_dentry_open+0x785/0x14e0
[  185.265337][T11798]        vfs_open+0x3b/0x340
[  185.266722][T11798]        path_openat+0x2e08/0x3860
[  185.268252][T11798]        do_file_open+0x23e/0x4a0
[  185.269775][T11798]        do_sys_openat2+0x113/0x200
[  185.271340][T11798]        __x64_sys_openat+0x138/0x170
[  185.272948][T11798]        do_syscall_64+0x14d/0xf80
[  185.274489][T11798]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.276438][T11798] 
[  185.276438][T11798] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  185.278558][T11798]        __mutex_lock+0x19f/0x1300
[  185.280085][T11798]        nbd_queue_rq+0xc6/0x1100
[  185.281571][T11798]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  185.283360][T11798]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  185.285370][T11798]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  185.287327][T11798]        blk_mq_run_hw_queue+0x348/0x4f0
[  185.288985][T11798]        blk_mq_dispatch_list+0xd16/0xe10
[  185.290664][T11798]        blk_mq_flush_plug_list+0x48d/0x570
[  185.292455][T11798]        __blk_flush_plug+0x3ed/0x4d0
[  185.294063][T11798]        __submit_bio+0x28d/0x580
[  185.295598][T11798]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  185.297496][T11798]        block_read_full_folio+0x599/0x830
[  185.299302][T11798]        filemap_read_folio+0x137/0x3b0
[  185.300965][T11798]        do_read_cache_folio+0x358/0x590
[  185.302824][T11798]        read_part_sector+0xb6/0x2b0
[  185.304402][T11798]        adfspart_check_ICS+0xa5/0xa40
[  185.306062][T11798]        bdev_disk_changed+0x7ba/0x1550
[  185.307724][T11798]        blkdev_get_whole+0x380/0x510
[  185.309349][T11798]        bdev_open+0x31e/0xd30
[  185.310947][T11798]        blkdev_open+0x470/0x610
[  185.312543][T11798]        do_dentry_open+0x785/0x14e0
[  185.314162][T11798]        vfs_open+0x3b/0x340
[  185.315583][T11798]        path_openat+0x2e08/0x3860
[  185.317290][T11798]        do_file_open+0x23e/0x4a0
[  185.319036][T11798]        do_sys_openat2+0x113/0x200
[  185.320719][T11798]        __x64_sys_openat+0x138/0x170
[  185.322560][T11798]        do_syscall_64+0x14d/0xf80
[  185.324113][T11798]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.326017][T11798] 
[  185.326017][T11798] -> #3 (set->srcu){.+.+}-{0:0}:
[  185.328314][T11798]        __synchronize_srcu+0xca/0x300
[  185.330328][T11798]        elevator_switch+0x1e8/0x7a0
[  185.331987][T11798]        elevator_change+0x2cc/0x450
[  185.333552][T11798]        elevator_set_default+0x36c/0x430
[  185.335259][T11798]        blk_register_queue+0x366/0x430
[  185.336873][T11798]        __add_disk+0x677/0xd50
[  185.338305][T11798]        add_disk_fwnode+0xfb/0x480
[  185.339827][T11798]        nbd_dev_add+0x72c/0xb50
[  185.341342][T11798]        nbd_init+0x168/0x1f0
[  185.342921][T11798]        do_one_initcall+0x250/0x8d0
[  185.344474][T11798]        do_initcall_level+0x104/0x190
[  185.346361][T11798]        do_initcalls+0x59/0xa0
[  185.348077][T11798]        kernel_init_freeable+0x2a6/0x3e0
[  185.349878][T11798]        kernel_init+0x1d/0x1d0
[  185.351372][T11798]        ret_from_fork+0x51e/0xb90
[  185.353019][T11798]        ret_from_fork_asm+0x1a/0x30
[  185.354661][T11798] 
[  185.354661][T11798] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  185.356958][T11798]        __mutex_lock+0x19f/0x1300
[  185.358451][T11798]        elevator_change+0x1b3/0x450
[  185.360001][T11798]        elevator_set_none+0xb5/0x140
[  185.361660][T11798]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  185.363542][T11798]        nbd_start_device+0x17f/0xb10
[  185.365122][T11798]        nbd_genl_connect+0x165b/0x1cf0
[  185.366758][T11798]        genl_family_rcv_msg_doit+0x22a/0x330
[  185.368513][T11798]        genl_rcv_msg+0x61c/0x7a0
[  185.370080][T11798]        netlink_rcv_skb+0x232/0x4b0
[  185.371739][T11798]        genl_rcv+0x28/0x40
[  185.373096][T11798]        netlink_unicast+0x80f/0x9b0
[  185.374631][T11798]        netlink_sendmsg+0x813/0xb40
[  185.376179][T11798]        ____sys_sendmsg+0x972/0x9f0
[  185.377741][T11798]        ___sys_sendmsg+0x2a5/0x360
[  185.379260][T11798]        __x64_sys_sendmsg+0x1bd/0x2a0
[  185.380860][T11798]        do_syscall_64+0x14d/0xf80
[  185.382566][T11798]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.384459][T11798] 
[  185.384459][T11798] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  185.387044][T11798]        blk_alloc_queue+0x546/0x680
[  185.388657][T11798]        __blk_mq_alloc_disk+0x197/0x390
[  185.390405][T11798]        nbd_dev_add+0x499/0xb50
[  185.392149][T11798]        nbd_init+0x168/0x1f0
[  185.393611][T11798]        do_one_initcall+0x250/0x8d0
[  185.395275][T11798]        do_initcall_level+0x104/0x190
[  185.396953][T11798]        do_initcalls+0x59/0xa0
[  185.398439][T11798]        kernel_init_freeable+0x2a6/0x3e0
[  185.400189][T11798]        kernel_init+0x1d/0x1d0
[  185.401832][T11798]        ret_from_fork+0x51e/0xb90
[  185.403430][T11798]        ret_from_fork_asm+0x1a/0x30
[  185.405085][T11798] 
[  185.405085][T11798] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  185.407260][T11798]        __lock_acquire+0x15a5/0x2cf0
[  185.408872][T11798]        lock_acquire+0xf0/0x2e0
[  185.410365][T11798]        fs_reclaim_acquire+0x71/0x100
[  185.412081][T11798]        kmem_cache_alloc_noprof+0x40/0x650
[  185.413904][T11798]        __anon_vma_prepare+0xcb/0x4a0
[  185.415597][T11798]        __vmf_anon_prepare+0xe1/0x1b0
[  185.417286][T11798]        hugetlb_no_page+0x399/0x20f0
[  185.418903][T11798]        hugetlb_fault+0x74e/0x1670
[  185.420458][T11798]        handle_mm_fault+0x202b/0x3310
[  185.422199][T11798]        __get_user_pages+0x165b/0x29d0
[  185.423919][T11798]        populate_vma_page_range+0x2be/0x3c0
[  185.425761][T11798]        __mm_populate+0x25f/0x390
[  185.427318][T11798]        vm_mmap_pgoff+0x3aa/0x4f0
[  185.428855][T11798]        ksys_mmap_pgoff+0x586/0x760
[  185.430452][T11798]        do_syscall_64+0x14d/0xf80
[  185.432212][T11798]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.434315][T11798] 
[  185.434315][T11798] other info that might help us debug this:
[  185.434315][T11798] 
[  185.437358][T11798] Chain exists of:
[  185.437358][T11798]   fs_reclaim --> &mm->mmap_lock --> &resv_map->rw_sema
[  185.437358][T11798] 
[  185.441093][T11798]  Possible unsafe locking scenario:
[  185.441093][T11798] 
[  185.443470][T11798]        CPU0                    CPU1
[  185.445153][T11798]        ----                    ----
[  185.446832][T11798]   rlock(&resv_map->rw_sema);
[  185.448272][T11798]                                lock(&mm->mmap_lock);
[  185.450363][T11798]                                lock(&resv_map->rw_sema);
[  185.452670][T11798]   lock(fs_reclaim);
[  185.453928][T11798] 
[  185.453928][T11798]  *** DEADLOCK ***
[  185.453928][T11798] 
[  185.456344][T11798] 3 locks held by syz.0.1515/11798:
[  185.457954][T11798]  #0: ffff888169cce540 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390
[  185.460834][T11798]  #1: ffff8881036f4458 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x3d2/0x1670
[  185.464200][T11798]  #2: ffff888119ac18e8 (&resv_map->rw_sema){.+.+}-{4:4}, at: hugetlb_fault+0x4c1/0x1670
[  185.467158][T11798] 
[  185.467158][T11798] stack backtrace:
[  185.468932][T11798] CPU: 0 UID: 0 PID: 11798 Comm: syz.0.1515 Not tainted syzkaller #0 PREEMPT(full) 
[  185.468943][T11798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  185.468949][T11798] Call Trace:
[  185.468954][T11798]  <TASK>
[  185.468958][T11798]  dump_stack_lvl+0xe8/0x150
[  185.468972][T11798]  print_circular_bug+0x2e1/0x300
[  185.468986][T11798]  check_noncircular+0x12e/0x150
[  185.468998][T11798]  __lock_acquire+0x15a5/0x2cf0
[  185.469009][T11798]  ? unwind_get_return_address+0x4d/0x90
[  185.469022][T11798]  ? xas_start+0x3d4/0x770
[  185.469032][T11798]  ? filemap_get_entry+0xca/0x320
[  185.469041][T11798]  lock_acquire+0xf0/0x2e0
[  185.469050][T11798]  ? kmem_cache_alloc_noprof+0x40/0x650
[  185.469059][T11798]  ? filemap_get_entry+0x2ac/0x320
[  185.469068][T11798]  ? __anon_vma_prepare+0xcb/0x4a0
[  185.469076][T11798]  fs_reclaim_acquire+0x71/0x100
[  185.469086][T11798]  ? kmem_cache_alloc_noprof+0x40/0x650
[  185.469093][T11798]  kmem_cache_alloc_noprof+0x40/0x650
[  185.469102][T11798]  __anon_vma_prepare+0xcb/0x4a0
[  185.469110][T11798]  ? __filemap_get_folio_mpol+0x9b0/0xb00
[  185.469118][T11798]  __vmf_anon_prepare+0xe1/0x1b0
[  185.469134][T11798]  hugetlb_no_page+0x399/0x20f0
[  185.469146][T11798]  ? huge_pte_alloc+0x3f3/0x610
[  185.469155][T11798]  hugetlb_fault+0x74e/0x1670
[  185.469165][T11798]  ? arch_stack_walk+0xfb/0x150
[  185.469176][T11798]  ? __pfx_hugetlb_fault+0x10/0x10
[  185.469187][T11798]  ? __pfx_stack_trace_save+0x10/0x10
[  185.469195][T11798]  ? check_path+0x21/0x40
[  185.469205][T11798]  handle_mm_fault+0x202b/0x3310
[  185.469216][T11798]  ? add_lock_to_list+0xc7/0x100
[  185.469229][T11798]  ? handle_mm_fault+0xee/0x3310
[  185.469240][T11798]  ? __pfx_handle_mm_fault+0x10/0x10
[  185.469252][T11798]  ? __up_read+0x291/0x6b0
[  185.469259][T11798]  ? __pfx___up_read+0x10/0x10
[  185.469266][T11798]  __get_user_pages+0x165b/0x29d0
[  185.469280][T11798]  populate_vma_page_range+0x2be/0x3c0
[  185.469291][T11798]  ? __pfx_populate_vma_page_range+0x10/0x10
[  185.469301][T11798]  ? down_read+0x272/0x2e0
[  185.469311][T11798]  ? __mm_populate+0x173/0x390
[  185.469321][T11798]  __mm_populate+0x25f/0x390
[  185.469331][T11798]  ? __pfx___mm_populate+0x10/0x10
[  185.469342][T11798]  vm_mmap_pgoff+0x3aa/0x4f0
[  185.469353][T11798]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  185.469362][T11798]  ? rcu_is_watching+0x15/0xb0
[  185.469372][T11798]  ? hugetlbfs_get_inode+0x448/0x690
[  185.469382][T11798]  ? hugetlb_file_setup+0x42c/0x630
[  185.469390][T11798]  ksys_mmap_pgoff+0x586/0x760
[  185.469402][T11798]  do_syscall_64+0x14d/0xf80
[  185.469412][T11798]  ? trace_irq_disable+0x3b/0x150
[  185.469418][T11798]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.469426][T11798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.469433][T11798] RIP: 0033:0x7f1e2b99cdd9
[  185.469441][T11798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.469447][T11798] RSP: 002b:00007f1e2c869028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  185.469456][T11798] RAX: ffffffffffffffda RBX: 00007f1e2bc15fa0 RCX: 00007f1e2b99cdd9
[  185.469462][T11798] RDX: 000000000000000b RSI: 0000000000800000 RDI: 0000200000000000
[  185.469467][T11798] RBP: 00007f1e2ba32d69 R08: ffffffffffffffff R09: 0000000000000000
[  185.469473][T11798] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000000
[  185.469478][T11798] R13: 00007f1e2bc16038 R14: 00007f1e2bc15fa0 R15: 00007ffcf2c8a808
[  185.469485][T11798]  </TASK>
