last executing test programs:

1.669988333s ago: executing program 2 (id=352):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r1=>0x0})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000380)={0x1f, 0x0, 0x1}, 0x6)
close(r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x2c, r3, 0x601, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x3}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0)
clock_gettime(0x0, &(0x7f0000003cc0)={<r4=>0x0, <r5=>0x0})
recvmmsg(r0, &(0x7f0000003b80)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000180)=[{&(0x7f0000003dc0)=""/197, 0xc5}], 0x1, &(0x7f00000001c0)=""/102, 0x66}, 0xfff}, {{&(0x7f0000000280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)=""/148, 0x94}, {&(0x7f00000003c0)=""/42, 0x2a}, {&(0x7f0000000400)=""/244, 0xf4}, {&(0x7f0000000500)=""/195, 0xc3}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000600)=""/32, 0x20}], 0x6, &(0x7f00000006c0)=""/135, 0x87}, 0x1}, {{&(0x7f0000000780)=@sco={0x1f, @none}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000800)=""/168, 0xa8}, {&(0x7f00000008c0)=""/236, 0xec}, {&(0x7f00000009c0)=""/165, 0xa5}, {&(0x7f0000000a80)=""/213, 0xd5}, {&(0x7f0000000b80)=""/120, 0x78}, {&(0x7f0000000c00)=""/21, 0x15}, {&(0x7f0000000c40)=""/164, 0xa4}, {&(0x7f0000000d00)=""/98, 0x62}, {&(0x7f0000000d80)=""/172, 0xac}], 0x9, &(0x7f0000000f00)=""/51, 0x33}, 0x3289}, {{&(0x7f0000000f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000fc0)=""/45, 0x2d}, {&(0x7f0000002140)=""/210, 0xd2}, {&(0x7f0000003d40)=""/106, 0x6a}, {&(0x7f0000001080)}, {&(0x7f00000022c0)=""/34, 0x22}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x6, &(0x7f0000003380)=""/139, 0x8b}, 0x6}, {{&(0x7f0000003440)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003a80)=[{&(0x7f00000034c0)=""/254, 0xfe}, {&(0x7f00000035c0)=""/210, 0xd2}, {&(0x7f00000036c0)=""/108, 0x6c}, {&(0x7f0000003740)=""/8, 0x8}, {&(0x7f0000003780)=""/189, 0xbd}, {&(0x7f0000003840)=""/200, 0xc8}, {&(0x7f0000003940)=""/2, 0x2}, {&(0x7f0000003980)=""/59, 0x3b}, {&(0x7f00000039c0)=""/105, 0x69}, {&(0x7f0000003a40)=""/14, 0xe}], 0xa, &(0x7f0000003b40)=""/64, 0x40}, 0x401}], 0x5, 0x2002, &(0x7f0000003d00)={r4, r5+60000000})
socket(0x18, 0x0, 0x7)

1.669676381s ago: executing program 1 (id=353):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e0000040f80ec59acbc0413a1f8480b4a00005e140602", 0x17}], 0x1}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'bond_slave_1\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r7 = socket$isdn_base(0x22, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r8}, 0x10)
r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x458, 0x0, 0xb, 0x148, 0x300, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x10, r5}, 0x18)
poll(&(0x7f0000000200)=[{r3, 0x1000}, {r4, 0xe24e}, {r1, 0x4408}, {r7, 0x200}, {r4, 0x400}, {r1, 0x8010}, {r4, 0x8000}, {r12, 0x6104}, {r1, 0x2000}], 0x9, 0x1)

1.669585888s ago: executing program 2 (id=354):
socket$kcm(0x29, 0x2, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaa9243582579fe63aaaa0086dd60cda90000383a0000000000000000000000ffff0a010102ff020000000000000000000000000001020090780000000060733386bf00641a00023a00ff013e53000000000000000000000001000000000000000000000000000000001e520b4c951ee12e15b7a5a71dbf45d908bbb91e3ddb5f3c2b460c65704349946fd9f233b1a2dbbfb626187f5a211c0033b469a0a16e3ede73dd53a91200c6bc19c95bb64f9e6aa337cd"], 0x0)

1.619601495s ago: executing program 2 (id=355):
syz_emit_ethernet(0x2f, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@arp={0x806, @generic={0x102, 0x805, 0x6, 0x9, 0xe9da94bda0ef4554, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, "620362b304f11a22bd", @remote, "e261028b"}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x57, 0x6, 0xa, 0x409, 0x0, 0x0, {}, [@NFTA_RULE_ID, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x0, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004"], 0x64}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x2f4, 0x20, 0x200, 0x70bd2a, 0x25dfdbfb, {0x17}, [@nested={0x4, 0x14d}, @typed={0x8, 0x46, 0x0, 0x0, @u32}, @nested={0xcb, 0x28, 0x0, 0x1, [@generic="a9aaacba1da79d3bc7b2e9e1440e5f654998c53f236e43c21b1b25bd4de97c9db67f7c8d3bacdbc30093b62481593ecf347659f9f8a5da045fd0d0f52a6cbad098c043b1a10aaf70185b1be49646d0993464dc2dad8404bc8124d85424eb5cb91c95b50b42fc8972326a777c7001c6c3b03deaa10aaef7f535cf1c82d2fddd90566b38b1422cb05656d9343d2a551af4c93ac6dac0deb95f5cdc611a9e7117f7c39e9a76f1ee37c1d0405ceccf487acf1c268114c2291f", @typed={0x8, 0xfc, 0x0, 0x0, @u32=0x44f4}, @typed={0x6, 0x14c, 0x0, 0x0, @str='@\x00'}]}, @typed={0x6, 0xb6, 0x0, 0x0, @str=')\x00'}, @generic="79dfad304d7b293ef7e2d3e2bdb54132271461f1e0ee73b52166ead763b29216d1b0059fc3c12870ad94b7cc4a0d39e79741916f18a62cdbe4a36c4e8677ec58aef05c65de60ac330d32857f553e0cae821fe2e6dafe8308c0eac52c028c7be422", @typed={0x103, 0x2d, 0x0, 0x0, @binary="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"}, @generic="8cc01a15ba21dfa6c23daf4920e18d88a65c3e8d6270c3b73aa671100d1ce63d01c8fe399844310ac38e4bb30b7f8fe5388198a408804d74fe65ab58e0a91d3607c42111854a2eb24ba7f474aa135a839ee04f6d43ab38a73aff69573d3dde3cbeae4780fc8bb84e267f6bd82d3fb97b98d50460b1dd64cdda5bc8a5ed43e1b9000ce683cb6083c3e63a14d709fed89efc49b5891ee4813c"]}, 0x2f4}, 0x1, 0x0, 0x0, 0x20040010}, 0x8040)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="db20b5af8a1b5f187ce9b12c408509965488273d0bd69eb238cabf587131f3baa1713e4258c8e50798f8b399b8821a005aebceee428f844577d5ae6d31e63c6b9ee1f93c7b1ada1ef2d20b7dcf62e5b0a805899540ba227a752808c142d5152ac3636ecc79d7f342d09a31ea2b", @ANYRES8=r0], 0xfe33)
r3 = socket$inet6(0x10, 0x2, 0x0)
unshare(0x22020400)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x29)
socket$inet(0x2, 0x6, 0x7)
sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

1.541472256s ago: executing program 2 (id=356):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000010630118000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c150000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x3, [<r1=>0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r1, 0x20}, 0x8)

1.541296674s ago: executing program 2 (id=357):
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x14, r0, 0x1}, 0x14}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001a00010000000080fbdbdf250a808000000000e2"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000050)
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/93, 0x5d}, {&(0x7f00000002c0)}, {&(0x7f0000000340)=""/73, 0x49}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f0000000580)=""/228, 0xe4}, {&(0x7f0000000800)=""/225, 0xe1}], 0x6}, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000280)=0x62c, 0x4)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r6, @ANYBLOB="002000000000000024001280110001006272696467655f736c617665000000000c000580080022"], 0x44}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

719.375356ms ago: executing program 1 (id=363):
r0 = socket$inet(0x2, 0x4, 0xe)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000b000000080026000816"], 0x40}}, 0x200040b4)
unshare(0x22020400)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000050007000100000008000500", @ANYRES32=r7], 0x54}}, 0x0)
socket$inet(0x2, 0x4, 0xe) (async)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000b000000080026000816"], 0x40}}, 0x200040b4) (async)
unshare(0x22020400) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000050007000100000008000500", @ANYRES32=r7], 0x54}}, 0x0) (async)

659.856067ms ago: executing program 2 (id=364):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
pipe(&(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffe, 0x0, 0x20000000000000}, 0x0, &(0x7f0000000400)={0x3ff, 0x0, 0xfffffffffffffffe, 0x8000009, 0x2, 0x4c, 0x7fffffff, 0x3}, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
tee(r1, r0, 0x80000001, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff}, 0x6)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000080))
ioctl$sock_bt_hci(r3, 0x400448ca, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

579.130337ms ago: executing program 1 (id=366):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r2, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r4, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000400)=0x80, 0x4)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5)
sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000480)={0x0, 0x11, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r5)
syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r3)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x12c, r8, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0xffffffffffffffc1, 0x3, r9}, @void}}}, 0x12c}, 0x1, 0x0, 0x0, 0x20004090}, 0x4080)

509.84264ms ago: executing program 1 (id=368):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'})
socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35"], 0xcfa4)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f"], 0xfdef)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000080)="fc")
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0)
close(0x4)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r4, 0x0, 0x20000000, 0x4}, 0x20)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x66, 0x0, 0x2, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x22}}}}}}}, 0x0)
ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000500)="d7")
ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f00000000c0)="d161b9e3c3499b7c3aded028133bd774efd4cd1c7b5ff296a13c4e")
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x112c}}, 0x880)
r6 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xfffffffe}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES8=r1], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x80000)

461.337434ms ago: executing program 1 (id=369):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000180), 0x0}, 0x20)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000140)={0x77359400}, 0x10)
r3 = socket$unix(0x1, 0x5, 0x0)
mmap(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x1000001, 0x30, r0, 0xc49f6000)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000002b80)={0x6, @broadcast, 0x4e22, 0x0, 'nq\x00', 0x29, 0xb, 0x21}, 0x2c)
close(r4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=<r7=>0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r7, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x3fffffffffffffb3, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x21, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040)

387.799321ms ago: executing program 1 (id=373):
syz_80211_inject_frame(0x0, &(0x7f0000000000)=ANY=[], 0xb5)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x20, &(0x7f0000000140)=""/32, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x3, 0x3, 0xc, 0x1}, {0x2, 0x3, 0x10, 0x7}, {0x4, 0x2, 0x1, 0xc}, {0x0, 0x4, 0xc}, {0x0, 0x3, 0xb, 0x4}, {0x1, 0x4, 0x2, 0x5}], 0x10, 0x4}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x15, 0x1, 0xfc10, &(0x7f0000000380)=[0x0], 0x1, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], <r2=>0x0}, 0x40)
r3 = socket$kcm(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="acfd4331", 0x4}, {&(0x7f0000000200)="e5974f3c00b2c515931fb6d33f46d4e47db5612a6282df6791c7c81d92", 0x1d}, {&(0x7f0000000140)="f8d598772bc0364aa0b34c553897027d", 0x10}], 0x3, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @multicast1}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}], 0x38}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1000"/12, @ANYRES32=r4, @ANYBLOB="dbe187d0f74946a510704d93b6aba5d53d321c606554b993c5bc2519e67778a5a39048910dbb6e054d522cb1b00c97a84522f4bee8e20f7242b4172e7cc828833f85cc7c02e25ba31470579888638139981f827b72b22912ca1b2df598e3db89ed87e86d1c63864eaf94ff30695aeb660b6d514b4a5ee48021c4f8278d32aa36f74d5890d052b608f236d693b824d241eaf74a30f532", @ANYRES64=r2], 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24044884)

219.8695ms ago: executing program 0 (id=375):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x8000000, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)

170.659848ms ago: executing program 0 (id=376):
socket$nl_xfrm(0x10, 0x3, 0x6)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x7)
write$cgroup_int(r0, &(0x7f0000000140), 0xfffffdef)
write$ppp(r0, &(0x7f0000000140)="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", 0x1000)
socket$inet6(0xa, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x60}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0)
sendmsg$nl_route(r1, 0x0, 0xc800)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r8, 0x4)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f640094000500", 0x2c}], 0x1)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x44c, 0x0, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001940)={'wpan0\x00'})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r10, 0x809, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

61.276426ms ago: executing program 0 (id=377):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000084000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)

60.949291ms ago: executing program 0 (id=378):
unshare(0x8040480)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, r1, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "eade3d7b4cd07ec3ee777de774fc7987cca41989251bb817a02d64aed696ea022191ec1d"}}]}]}, 0x64}}, 0x4000000)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x4}, 0x20)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000814, &(0x7f0000000380)={0xa, 0x4e20, 0x6, @remote}, 0x1c)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
listen(r6, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000700)={0x0, 0x1, 0x4c34})
r7 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x4a}})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0)

848.916µs ago: executing program 0 (id=379):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090010000000000000030000000500070000000000080009000000000008000a0000080000060002000000000014001f000000000000000000000000000000000014002000000000ffffe000000000ffffac1414bb06001b004e"], 0x6c}}, 0x0)

0s ago: executing program 0 (id=380):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x10) (async)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x5}]}}]}, 0x40}}, 0x0)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x200, 0x12, 0x10, 0x70bd25, 0x25dfdbfb, {0x5, 0x90, 0x5, 0x10, {0x4e22, 0x4e20, [0xbc, 0x9, 0x3000, 0x4], [0xfffffff4, 0x3, 0x6, 0x3], r5, [0x9, 0xfffffffa]}, 0x442f0e7e, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "b10332fc109fe01fa91fc30bffe48ec7b69f94fbc5a17850ab92aee567b5f1f606805c12cc138d794073cb4556f15f3eabaf4080c6dbd5019ebbd8b0fcb53f3cedbe1dd1d7cf4b45a55d3231f221cc726f59c724bfbe387bc77cf50f9ba6c76bbb25040c05341d9b6ed455f0e168caeae885303ed354076cbe2fafd631e23270df34ce1b40a0f6bc7eed4174bad70535182c2f62660db7c9c92c73b98c6570e5ebbbf2d610dc18370355c01c6d0fd21a203aa54547c57eef637ea8d5"}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "c1f4349881d59e570a"}, @INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "70747755148dba85557b655494b948c3ea66568be7a7e2f1ee7fb1543b7c17e30929a38c8bd4bfb74b9a719847a0608028257277a9fc7d641f363e901e1b114443cf2900bdc550ddf6c2441aabcce2b62dd7f702ba81e8f50c0eef62b8b6c1b7838e09bd6f8a9fb259f863bfd0556116e0d46b8cac3b0c33b83055a76d8d9c41d5bd99490626b35dcc445f5e739eacf79797192ed13fe9ed892fc0bf9d3793d5d31f1659c7d193719ac3b7e1b7740ea900e3936818f823230eadabae21d64fff57db40105bc1473d870b5bb3981ce21c120db5947b2ea71bdbb85ad25fe371"}]}, 0x200}, 0x1, 0x0, 0x0, 0x20048004}, 0xc801) (async)
sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x200, 0x12, 0x10, 0x70bd25, 0x25dfdbfb, {0x5, 0x90, 0x5, 0x10, {0x4e22, 0x4e20, [0xbc, 0x9, 0x3000, 0x4], [0xfffffff4, 0x3, 0x6, 0x3], r5, [0x9, 0xfffffffa]}, 0x442f0e7e, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "b10332fc109fe01fa91fc30bffe48ec7b69f94fbc5a17850ab92aee567b5f1f606805c12cc138d794073cb4556f15f3eabaf4080c6dbd5019ebbd8b0fcb53f3cedbe1dd1d7cf4b45a55d3231f221cc726f59c724bfbe387bc77cf50f9ba6c76bbb25040c05341d9b6ed455f0e168caeae885303ed354076cbe2fafd631e23270df34ce1b40a0f6bc7eed4174bad70535182c2f62660db7c9c92c73b98c6570e5ebbbf2d610dc18370355c01c6d0fd21a203aa54547c57eef637ea8d5"}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "c1f4349881d59e570a"}, @INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "70747755148dba85557b655494b948c3ea66568be7a7e2f1ee7fb1543b7c17e30929a38c8bd4bfb74b9a719847a0608028257277a9fc7d641f363e901e1b114443cf2900bdc550ddf6c2441aabcce2b62dd7f702ba81e8f50c0eef62b8b6c1b7838e09bd6f8a9fb259f863bfd0556116e0d46b8cac3b0c33b83055a76d8d9c41d5bd99490626b35dcc445f5e739eacf79797192ed13fe9ed892fc0bf9d3793d5d31f1659c7d193719ac3b7e1b7740ea900e3936818f823230eadabae21d64fff57db40105bc1473d870b5bb3981ce21c120db5947b2ea71bdbb85ad25fe371"}]}, 0x200}, 0x1, 0x0, 0x0, 0x20048004}, 0xc801)
sendmsg$can_j1939(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x1d, r5, 0x2, {0x27541d4c1d83d905, 0xff, 0x3}, 0xfd}, 0x18, &(0x7f0000000340)={&(0x7f0000000240)="74b4cb794e027665e9d0e85c5449", 0xe}, 0x1, 0x0, 0x0, 0x8001}, 0x24004000)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x7, &(0x7f00000001c0)={<r7=>0x0, <r8=>0x0})
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140)={r7, r8/1000+60000}, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) (async)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async)
r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r13=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x58, r12, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044050}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r10, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) (async)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r10, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
close(r0) (async)
close(r0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:46381' (ED25519) to the list of known hosts.
syzkaller login: [   40.946823][ T5771] cgroup: Unknown subsys name 'net'
[   41.077444][ T5771] cgroup: Unknown subsys name 'cpuset'
[   41.081330][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.352532][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.634098][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.645677][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.648213][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.651022][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.653574][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.667829][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.670534][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.673019][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.676396][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.679042][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.724396][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.727400][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.729835][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.732479][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.735680][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.848120][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   45.907315][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   45.955235][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.957544][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.959924][ T5834] bridge_slave_0: entered allmulticast mode
[   45.962654][ T5834] bridge_slave_0: entered promiscuous mode
[   45.968309][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.970663][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.973262][ T5834] bridge_slave_1: entered allmulticast mode
[   45.976847][ T5834] bridge_slave_1: entered promiscuous mode
[   46.022776][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.026666][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   46.032614][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.073795][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.076570][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.078961][ T5838] bridge_slave_0: entered allmulticast mode
[   46.081681][ T5838] bridge_slave_0: entered promiscuous mode
[   46.084887][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.087575][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.089897][ T5838] bridge_slave_1: entered allmulticast mode
[   46.092585][ T5838] bridge_slave_1: entered promiscuous mode
[   46.104512][ T5834] team0: Port device team_slave_0 added
[   46.125744][ T5834] team0: Port device team_slave_1 added
[   46.129950][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.151415][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.154713][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.157783][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.166311][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.187068][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.189385][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.197584][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.209818][ T5838] team0: Port device team_slave_0 added
[   46.232793][ T5838] team0: Port device team_slave_1 added
[   46.255280][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.258016][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.260768][ T5841] bridge_slave_0: entered allmulticast mode
[   46.263608][ T5841] bridge_slave_0: entered promiscuous mode
[   46.266887][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.269078][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.277603][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.283955][ T5834] hsr_slave_0: entered promiscuous mode
[   46.287237][ T5834] hsr_slave_1: entered promiscuous mode
[   46.290445][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.292737][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.295630][ T5841] bridge_slave_1: entered allmulticast mode
[   46.298330][ T5841] bridge_slave_1: entered promiscuous mode
[   46.300880][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.304449][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.312833][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.353390][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.358364][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.394783][ T5838] hsr_slave_0: entered promiscuous mode
[   46.397286][ T5838] hsr_slave_1: entered promiscuous mode
[   46.399441][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.401856][ T5838] Cannot create hsr debugfs directory
[   46.407947][ T5841] team0: Port device team_slave_0 added
[   46.417705][ T5841] team0: Port device team_slave_1 added
[   46.453749][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.456404][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.464592][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.478315][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.480499][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.490475][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.557311][ T5841] hsr_slave_0: entered promiscuous mode
[   46.559586][ T5841] hsr_slave_1: entered promiscuous mode
[   46.561742][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.564301][ T5841] Cannot create hsr debugfs directory
[   46.622188][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.633400][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.644820][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.658252][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.697682][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.705818][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.716306][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.718667][ T5834] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.721343][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.723740][ T5834] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.727820][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.738232][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.770281][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.776140][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.780635][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.787217][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.800572][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.802944][ T5838] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.805488][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.807867][ T5838] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.827488][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.830514][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.834601][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.839411][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.871373][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.897439][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   46.909800][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.912061][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.929724][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.935825][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.938078][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.950176][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.961958][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   46.971000][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   46.983162][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.985507][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.997697][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.000086][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.003406][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.005756][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.014019][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.016741][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.063299][ T5838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.067508][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.150991][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.186339][ T5834] veth0_vlan: entered promiscuous mode
[   47.200911][ T5834] veth1_vlan: entered promiscuous mode
[   47.205743][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.238277][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.246780][ T5834] veth0_macvtap: entered promiscuous mode
[   47.249725][ T5841] veth0_vlan: entered promiscuous mode
[   47.253571][ T5834] veth1_macvtap: entered promiscuous mode
[   47.259352][ T5841] veth1_vlan: entered promiscuous mode
[   47.280827][ T5841] veth0_macvtap: entered promiscuous mode
[   47.284120][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.292525][ T5841] veth1_macvtap: entered promiscuous mode
[   47.297796][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.311833][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.314805][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.319239][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.322213][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.333047][ T5838] veth0_vlan: entered promiscuous mode
[   47.347634][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.353611][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.357757][ T5838] veth1_vlan: entered promiscuous mode
[   47.377511][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.380245][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.382957][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.386815][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.418223][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.423246][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.432308][ T5838] veth0_macvtap: entered promiscuous mode
[   47.447697][ T5838] veth1_macvtap: entered promiscuous mode
[   47.461817][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.464535][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.473074][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.490763][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.492064][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.493293][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.505692][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.511828][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.514514][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.517987][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.533167][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.536009][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.541304][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.589154][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.597337][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.634716][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.637689][ T5900] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   47.641375][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.642227][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.644278][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.705869][ T5220] Bluetooth: hci1: command tx timeout
[   47.706048][ T5837] Bluetooth: hci0: command tx timeout
[   47.785501][ T5837] Bluetooth: hci2: command tx timeout
[   47.793623][ T5922] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET)
[   47.889018][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'.
[   48.148243][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'.
[   48.186198][ T5964] netlink: 'syz.2.20': attribute type 1 has an invalid length.
[   48.223628][ T5968] IPVS: set_ctl: invalid protocol: 98 10.1.1.2:20002
[   48.229841][ T5966] IPVS: length: 209 != 24
[   48.269665][ T5972] Driver unsupported XDP return value 0 on prog  (id 2) dev N/A, expect packet loss!
[   48.276877][ T5969] veth3: entered promiscuous mode
[   48.331173][ T5979] netlink: 72 bytes leftover after parsing attributes in process `syz.1.25'.
[   48.343387][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'.
[   48.388264][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'.
[   48.391970][ T5983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   48.396977][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'.
[   48.494772][ T5995] netlink: 224 bytes leftover after parsing attributes in process `syz.2.31'.
[   48.500089][ T5995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.31'.
[   48.534583][ T5997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.32'.
[   48.539160][ T5997] netlink: 'syz.2.32': attribute type 7 has an invalid length.
[   48.541699][ T5997] netlink: 'syz.2.32': attribute type 8 has an invalid length.
[   48.544131][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'.
[   48.550135][ T5997] gretap0: entered promiscuous mode
[   48.552520][ T5997] batadv_slave_1: entered promiscuous mode
[   48.555710][ T5997] erspan0: entered promiscuous mode
[   48.642605][ T6002] pimreg: entered allmulticast mode
[   48.783650][ T6008] netlink: 'syz.2.35': attribute type 1 has an invalid length.
[   48.856319][ T6009] veth3: entered promiscuous mode
[   49.023209][ T6011] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.052191][ T6011] Zero length message leads to an empty skb
[   49.310819][ T5992] pimreg: left allmulticast mode
[   49.478125][ T6039] syzkaller1: entered promiscuous mode
[   49.480261][ T6039] syzkaller1: entered allmulticast mode
[   49.661955][ T6064] pimreg: tun_chr_ioctl cmd 2147767506
[   49.666610][ T6064] netlink: 'syz.0.55': attribute type 4 has an invalid length.
[   49.670110][ T6064] tipc: Started in network mode
[   49.671803][ T6064] tipc: Node identity , cluster identity 4711
[   49.673801][ T6064] tipc: Failed to obtain node identity
[   49.677052][ T6064] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   49.680708][ T6064] syzkaller0: entered promiscuous mode
[   49.684993][ T6064] syzkaller0: entered allmulticast mode
[   49.786626][ T5837] Bluetooth: hci0: command tx timeout
[   49.786648][ T5220] Bluetooth: hci1: command tx timeout
[   49.802616][ T6078] netlink: 'syz.2.56': attribute type 1 has an invalid length.
[   49.822478][ T6078] bond1: (slave bridge1): making interface the new active one
[   49.826503][ T6078] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   49.886386][ T5220] Bluetooth: hci2: command tx timeout
[   50.042093][ T6137] pimreg: entered allmulticast mode
[   50.875830][ T6143] ip6tnl1: entered promiscuous mode
[   50.877550][ T6143] ip6tnl1: entered allmulticast mode
[   50.890400][ T6153] x_tables: duplicate underflow at hook 1
[   50.950081][ T6160] netlink: 'syz.0.65': attribute type 1 has an invalid length.
[   50.971662][ T6161] IPv6: Can't replace route, no match found
[   51.014310][ T6168] Cannot find add_set index 0 as target
[   51.015882][ T6170] netlink: 'syz.2.69': attribute type 10 has an invalid length.
[   51.020395][ T6160] veth3: entered promiscuous mode
[   51.038070][ T6170] 8021q: adding VLAN 0 to HW filter on device team0
[   51.046577][ T6170] bond0: (slave team0): Enslaving as an active interface with an up link
[   51.187780][ T6191] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.192319][ T6191] ipt_REJECT: ECHOREPLY no longer supported.
[   51.341991][ T6203] pimreg: left allmulticast mode
[   51.687209][ T6223] tipc: Started in network mode
[   51.689244][ T6223] tipc: Node identity 9ec4b4a3634d, cluster identity 4711
[   51.692348][ T6223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   51.696904][ T6223] syzkaller0: entered promiscuous mode
[   51.698865][ T6223] syzkaller0: entered allmulticast mode
[   51.708906][ T6223] tipc: Resetting bearer <eth:syzkaller0>
[   51.712144][ T6222] tipc: Resetting bearer <eth:syzkaller0>
[   51.719903][ T6222] tipc: Disabling bearer <eth:syzkaller0>
[   51.851101][ T6226] batadv0: entered promiscuous mode
[   51.852941][ T6226] macsec1: entered allmulticast mode
[   51.854644][ T6226] batadv0: entered allmulticast mode
[   51.863727][ T6226] batadv0: left allmulticast mode
[   51.866000][ T5220] Bluetooth: hci1: command tx timeout
[   51.868129][ T6226] batadv0: left promiscuous mode
[   51.875070][ T5220] Bluetooth: hci0: command tx timeout
[   51.946851][ T5220] Bluetooth: hci2: command tx timeout
[   52.129631][ T6237] pimreg: entered allmulticast mode
[   52.136419][ T6237] pimreg: left allmulticast mode
[   52.302434][ T6242] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[   52.326795][ T6244] warning: `syz.0.97' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   52.630788][ T6262] netlink: 'syz.0.102': attribute type 7 has an invalid length.
[   52.633229][ T6262] netlink: 'syz.0.102': attribute type 8 has an invalid length.
[   52.653923][ T6262] gretap0: entered promiscuous mode
[   52.661464][ T6262] batadv_slave_1: entered promiscuous mode
[   52.663998][ T6262] erspan0: entered promiscuous mode
[   52.677309][ T6262] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[   52.679809][ T6262] Cannot create hsr debugfs directory
[   52.875580][ T6279] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   52.913219][ T6279] veth3: entered promiscuous mode
[   52.918221][ T6279] bond2: (slave veth3): Enslaving as a backup interface with a down link
[   52.951440][ T6286] __nla_validate_parse: 32 callbacks suppressed
[   52.951450][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'.
[   52.997488][ T6289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.113'.
[   53.002065][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'.
[   53.063205][ T6298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.114'.
[   53.128365][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'.
[   53.131626][ T6303] netlink: 36 bytes leftover after parsing attributes in process `syz.0.118'.
[   53.139003][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'.
[   53.142356][ T6303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.118'.
[   53.222843][ T6305] validate_nla: 3 callbacks suppressed
[   53.222852][ T6305] netlink: 'syz.0.119': attribute type 1 has an invalid length.
[   53.242473][ T6305] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   53.253863][ T6305] veth3: entered promiscuous mode
[   53.258039][ T6305] bond3: (slave veth3): Enslaving as a backup interface with a down link
[   53.350631][ T6312] netlink: 9 bytes leftover after parsing attributes in process `syz.0.122'.
[   53.353647][ T6312] 0: renamed from hsr_slave_1 (while UP)
[   53.359112][ T6312] 0: entered allmulticast mode
[   53.361051][ T6312] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[   53.866222][ T6318] syzkaller1: entered promiscuous mode
[   53.868282][ T6318] syzkaller1: entered allmulticast mode
[   53.945703][ T5220] Bluetooth: hci0: command tx timeout
[   53.945901][ T5837] Bluetooth: hci1: command tx timeout
[   54.025368][ T5837] Bluetooth: hci2: command tx timeout
[   54.060714][ T6339] netlink: 'syz.2.127': attribute type 13 has an invalid length.
[   54.069530][ T6339] netlink: 'syz.2.127': attribute type 17 has an invalid length.
[   54.109143][ T6339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   54.244815][ T6361] syzkaller1: entered promiscuous mode
[   54.248736][ T6361] syzkaller1: entered allmulticast mode
[   54.251049][ T6363] netlink: 28 bytes leftover after parsing attributes in process `syz.1.135'.
[   54.253962][ T6363] netlink: 'syz.1.135': attribute type 7 has an invalid length.
[   54.262781][ T6363] netlink: 'syz.1.135': attribute type 8 has an invalid length.
[   54.268588][ T6363] gretap0: entered promiscuous mode
[   54.271340][ T6363] batadv_slave_1: entered promiscuous mode
[   54.273615][ T6363] erspan0: entered promiscuous mode
[   54.277100][ T6363] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[   54.279606][ T6363] Cannot create hsr debugfs directory
[   54.414763][ T6379] netlink: 'syz.2.142': attribute type 7 has an invalid length.
[   54.425916][ T6379] netlink: 'syz.2.142': attribute type 8 has an invalid length.
[   54.498086][ T6392] pimreg: entered allmulticast mode
[   54.528170][ T6386] IPVS: length: 148 != 24
[   54.529731][ T6386] IPVS: length: 148 != 24
[   54.662741][ T6408] pimreg: entered allmulticast mode
[   54.687207][ T6411] netlink: 'syz.1.154': attribute type 1 has an invalid length.
[   54.717113][ T6411] veth5: entered promiscuous mode
[   54.720264][ T6411] bond3: (slave veth5): Enslaving as a backup interface with a down link
[   54.765818][ T6416] netlink: 'syz.2.156': attribute type 1 has an invalid length.
[   54.896462][ T6423] tun0: tun_chr_ioctl cmd 1074025677
[   54.898377][ T6423] tun0: linktype set to 773
[   54.910597][ T6425] pimreg: left allmulticast mode
[   55.003339][ T6433] netdevsim netdevsim2: Direct firmware load for 2Q failed with error -2
[   55.008130][ T6433] netdevsim netdevsim2: Falling back to sysfs fallback for: 2Q
[   55.031976][ T6435] netlink: 'syz.1.163': attribute type 1 has an invalid length.
[   55.067269][ T6435] veth7: entered promiscuous mode
[   55.073285][ T6435] bond4: (slave veth7): Enslaving as a backup interface with a down link
[   55.927319][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   55.931846][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   55.935434][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   55.938704][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   55.941943][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   55.946084][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   55.949861][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   55.953527][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   55.957212][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   55.960943][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   55.964137][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   55.969682][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   55.973709][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   55.981699][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   55.988041][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   55.993863][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   55.998040][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.001840][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.018539][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.022108][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.028088][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.038606][ T6467] veth5: entered promiscuous mode
[   56.041771][ T6467] bond4: (slave veth5): Enslaving as a backup interface with a down link
[   56.044468][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.048959][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.052336][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.056128][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.060017][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.064140][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.068590][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.072779][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.078724][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.082448][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.088158][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.091513][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.098172][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.102197][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.106877][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.110820][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.114452][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.115400][ T5837] Bluetooth: hci2: command tx timeout
[   56.118392][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.123107][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.128824][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.132969][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.136963][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.140478][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.144079][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.149086][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.152909][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.160325][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.164529][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.176909][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.180327][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.183851][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.188671][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.192132][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.196123][ T6460] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   56.424362][ T6501] tun0: tun_chr_ioctl cmd 1074025677
[   56.427552][ T6501] tun0: linktype set to 778
[   56.561650][ T6517] ieee802154 phy1 wpan1: encryption failed: -90
[   56.650840][ T6525] pimreg: entered allmulticast mode
[   56.653668][ T6525] pimreg: left allmulticast mode
[   56.808712][ T6531] pimreg: left allmulticast mode
[   57.383647][ T6537] pimreg: entered allmulticast mode
[   57.405520][ T6541] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[   57.408364][ T6541] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.450188][ T6546] pimreg: entered allmulticast mode
[   57.453430][ T6546] pimreg: left allmulticast mode
[   57.456263][ T6548] openvswitch: netlink: Message has 24 unknown bytes.
[   57.460481][ T6547] openvswitch: netlink: Message has 24 unknown bytes.
[   57.463063][ T6548] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.468280][ T6547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.501469][ T6550] veth9: entered promiscuous mode
[   57.505749][ T6550] bond5: (slave veth9): Enslaving as a backup interface with a down link
[   57.562389][ T6557] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   57.619605][ T5840] udevd[5840]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[   57.699444][ T6576] ip6erspan0: entered promiscuous mode
[   57.809442][ T6590] bridge2: entered allmulticast mode
[   57.839934][ T6594] openvswitch: netlink: Flow actions attr not present in new flow.
[   58.073443][ T6605] __nla_validate_parse: 50 callbacks suppressed
[   58.073452][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.212'.
[   58.209317][ T6611] bond0: (slave team0): Releasing backup interface
[   58.215669][ T6611] bridge_slave_0: left allmulticast mode
[   58.217628][ T6611] bridge_slave_0: left promiscuous mode
[   58.220130][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.227156][ T6611] bridge_slave_1: left allmulticast mode
[   58.229333][ T6611] bridge_slave_1: left promiscuous mode
[   58.231386][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.238104][ T6611] bond0: (slave bond_slave_0): Releasing backup interface
[   58.242452][ T6611] bond0: (slave bond_slave_1): Releasing backup interface
[   58.252024][ T6611] team0: Port device team_slave_0 removed
[   58.257867][ T6611] team0: Port device team_slave_1 removed
[   58.260121][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.260980][ T6612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.214'.
[   58.262386][ T6611] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.269396][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.271771][ T6611] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.280089][ T6611] bond1: (slave bridge1): Releasing active interface
[   58.530059][ T6624] validate_nla: 12 callbacks suppressed
[   58.530069][ T6624] netlink: 'syz.1.218': attribute type 1 has an invalid length.
[   58.576909][ T6624] veth11: entered promiscuous mode
[   58.580648][ T6629] xt_hashlimit: invalid rate
[   58.580743][ T6624] bond6: (slave veth11): Enslaving as a backup interface with a down link
[   58.586914][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.220'.
[   58.630350][ T6631] netlink: 'syz.1.221': attribute type 64 has an invalid length.
[   58.638844][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.221'.
[   58.638923][ T6633] netlink: 'syz.0.222': attribute type 49 has an invalid length.
[   58.647986][ T6631] pimreg: left allmulticast mode
[   58.723321][ T6631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.221'.
[   58.727638][ T6631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.221'.
[   59.317607][ T6654] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   59.320052][  T790] IPVS: starting estimator thread 0...
[   59.363727][ T6658] netlink: 48 bytes leftover after parsing attributes in process `syz.0.229'.
[   59.374577][ T6658] dummy0: entered promiscuous mode
[   59.406189][ T6660] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.230'.
[   59.409310][ T6660] netlink: zone id is out of range
[   59.411049][ T6660] netlink: zone id is out of range
[   59.412770][ T6660] netlink: get zone limit has 8 unknown bytes
[   59.415215][ T6656] IPVS: using max 79 ests per chain, 189600 per kthread
[   62.101764][ T6669] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.177087][ T6682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.239'.
[   62.179950][ T6682] netlink: 'syz.1.239': attribute type 7 has an invalid length.
[   62.182481][ T6682] netlink: 'syz.1.239': attribute type 8 has an invalid length.
[   62.183354][ T6669] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.186154][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'.
[   62.223774][ T6669] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.277380][ T6669] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.336826][ T6669] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.344271][ T6669] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.353911][ T6669] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.363499][ T6669] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.514034][ T6707] netlink: 'syz.0.247': attribute type 1 has an invalid length.
[   62.526693][ T6705] netlink: 'syz.1.244': attribute type 21 has an invalid length.
[   62.541794][ T6707] veth7: entered promiscuous mode
[   62.589083][ T6710] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.591584][ T6710] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.604485][ T6710] dummy0: left promiscuous mode
[   62.654355][ T6710] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.664604][ T6710] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.681072][ T6710] 0: left allmulticast mode
[   62.720384][ T6710] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.723086][ T6710] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.726792][ T6710] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.730585][ T6710] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.750519][ T6710] veth3: left promiscuous mode
[   62.752700][ T6710] veth5: left promiscuous mode
[   62.754718][ T6710] ip6erspan0: left promiscuous mode
[   62.758441][ T6710] veth7: left promiscuous mode
[   62.768971][ T6710] dvmrp0: entered allmulticast mode
[   62.772360][ T6710] syz.0.248 (6710) used greatest stack depth: 20056 bytes left
[   63.168218][ T6723] pimreg: entered allmulticast mode
[   63.225414][ T6732] __nla_validate_parse: 7 callbacks suppressed
[   63.225424][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'.
[   63.274030][ T6738] netlink: 40 bytes leftover after parsing attributes in process `syz.0.256'.
[   63.275776][ T6734] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.293328][ T6734] bond0: (slave rose0): Enslaving as an active interface with an up link
[   63.349825][ T6746] xt_CT: You must specify a L4 protocol and not use inversions on it
[   63.354106][ T6746] netlink: 116 bytes leftover after parsing attributes in process `syz.2.260'.
[   63.442489][ T6759] ieee802154 phy1 wpan1: encryption failed: -22
[   63.621448][ T6776] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   63.624868][ T6776] macsec1: entered promiscuous mode
[   63.630554][ T6776] macsec1: entered allmulticast mode
[   63.632285][ T6776] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   63.820348][ T6790] syzkaller1: entered promiscuous mode
[   63.822575][ T6790] syzkaller1: entered allmulticast mode
[   63.934607][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.272'.
[   64.350517][ T6801] netlink: 'syz.1.274': attribute type 12 has an invalid length.
[   64.352969][ T6801] netlink: 'syz.1.274': attribute type 29 has an invalid length.
[   64.356360][ T6801] netlink: 148 bytes leftover after parsing attributes in process `syz.1.274'.
[   64.359773][ T6801] netlink: 59 bytes leftover after parsing attributes in process `syz.1.274'.
[   64.392373][ T6803] pimreg: entered allmulticast mode
[   64.436493][ T6805] netlink: 248 bytes leftover after parsing attributes in process `syz.1.276'.
[   64.439292][ T6805] netlink: 248 bytes leftover after parsing attributes in process `syz.1.276'.
[   64.444406][ T6805] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   64.530907][ T6812] xt_bpf: check failed: parse error
[   64.637245][ T6826] ip6tnl2: entered promiscuous mode
[   64.638900][ T6826] ip6tnl2: entered allmulticast mode
[   64.672367][ T6828] Bluetooth: hci1: Opcode 0x080f failed: -4
[   64.763265][ T6836] syzkaller1: entered promiscuous mode
[   64.765551][ T6836] syzkaller1: entered allmulticast mode
[   64.873658][ T6846] netlink: 52 bytes leftover after parsing attributes in process `syz.2.288'.
[   64.877495][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'.
[   65.125921][ T6872] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   65.128301][ T6872] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.158648][ T6874] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.161112][ T6874] syzkaller0: entered promiscuous mode
[   65.162796][ T6874] syzkaller0: entered allmulticast mode
[   65.167740][ T6874] tipc: Resetting bearer <eth:syzkaller0>
[   65.170702][ T6873] tipc: Resetting bearer <eth:syzkaller0>
[   65.181092][ T6873] tipc: Disabling bearer <eth:syzkaller0>
[   65.259328][ T6882] netlink: 'syz.2.304': attribute type 4 has an invalid length.
[   65.601637][ T6918] pimreg: left allmulticast mode
[   65.636971][ T6913] openvswitch: netlink: IP tunnel dst address not specified
[   65.641624][ T6913] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.755031][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[   66.828603][ T6946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.832142][ T6946] tipc: Resetting bearer <eth:syzkaller0>
[   66.836853][ T6945] tipc: Disabling bearer <eth:syzkaller0>
[   66.896687][ T6948] netlink: 'syz.2.327': attribute type 49 has an invalid length.
[   67.012355][ T6958] netlink: 'syz.2.330': attribute type 7 has an invalid length.
[   67.016524][ T6958] netlink: 'syz.2.330': attribute type 8 has an invalid length.
[   67.313817][ T6970] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   68.129611][ T6980] netlink: 'syz.2.337': attribute type 7 has an invalid length.
[   68.132044][ T6980] netlink: 'syz.2.337': attribute type 8 has an invalid length.
[   68.219888][ T6986] netlink: 'syz.1.340': attribute type 21 has an invalid length.
[   68.241512][ T6986] netlink: 'syz.1.340': attribute type 6 has an invalid length.
[   68.243975][ T6986] __nla_validate_parse: 32 callbacks suppressed
[   68.243982][ T6986] netlink: 64 bytes leftover after parsing attributes in process `syz.1.340'.
[   68.251643][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'.
[   68.258026][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'.
[   68.261196][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'.
[   68.291378][ T6989] geneve0: entered promiscuous mode
[   68.358984][ T6996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.343'.
[   68.424317][ T7001] netlink: 24960 bytes leftover after parsing attributes in process `syz.2.345'.
[   68.433003][ T7001] netlink: 23 bytes leftover after parsing attributes in process `syz.2.345'.
[   68.470093][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'.
[   68.586327][ T7015] tipc: Started in network mode
[   68.587908][ T7015] tipc: Node identity 8a089ceb0801, cluster identity 4711
[   68.590137][ T7015] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.592601][ T7015] syzkaller0: entered promiscuous mode
[   68.594333][ T7015] syzkaller0: entered allmulticast mode
[   68.670311][ T7025] bond_slave_1: entered promiscuous mode
[   68.672614][ T7025] bond_slave_1: entered allmulticast mode
[   68.702281][ T7029] netlink: 67 bytes leftover after parsing attributes in process `syz.2.355'.
[   68.715175][ T7029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   68.750746][ T7029] netlink: 67 bytes leftover after parsing attributes in process `syz.2.355'.
[   68.875479][ T7038] xt_bpf: check failed: parse error
[   69.352825][ T7015] tipc: Resetting bearer <eth:syzkaller0>
[   69.362038][ T7015] tipc: Disabling bearer <eth:syzkaller0>
[   69.620532][ T7050] syzkaller1: entered promiscuous mode
[   69.622236][ T7050] syzkaller1: entered allmulticast mode
[   69.700276][ T7058] netlink: 'syz.0.365': attribute type 1 has an invalid length.
[   69.772335][ T7069] netlink: 'syz.1.366': attribute type 4 has an invalid length.
[   69.909734][ T7079] netlink: 'syz.0.370': attribute type 29 has an invalid length.
[   69.957248][ T7083] syzkaller1: entered promiscuous mode
[   69.959337][ T7083] syzkaller1: entered allmulticast mode
[   69.979693][ T7085] netlink: 'syz.1.373': attribute type 10 has an invalid length.
[   69.989586][ T7085] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   69.996230][ T7084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.396250][ T7101] 
[   70.397100][ T7101] ======================================================
[   70.399268][ T7101] WARNING: possible circular locking dependency detected
[   70.401366][ T7101] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[   70.404387][ T7101] ------------------------------------------------------
[   70.406525][ T7101] syz.0.380/7101 is trying to acquire lock:
[   70.408338][ T7101] ffff88811a441988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   70.411662][ T7101] 
[   70.411662][ T7101] but task is already holding lock:
[   70.413905][ T7101] ffff88811a441a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[   70.416849][ T7101] 
[   70.416849][ T7101] which lock already depends on the new lock.
[   70.416849][ T7101] 
[   70.419926][ T7101] 
[   70.419926][ T7101] the existing dependency chain (in reverse order) is:
[   70.422597][ T7101] 
[   70.422597][ T7101] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[   70.424964][ T7101]        lock_acquire+0x120/0x360
[   70.426504][ T7101]        __mutex_lock+0x182/0xe80
[   70.428045][ T7101]        refcount_dec_and_mutex_lock+0x30/0xa0
[   70.429937][ T7101]        nbd_config_put+0x2c/0x790
[   70.431506][ T7101]        nbd_release+0xfe/0x140
[   70.432997][ T7101]        bdev_release+0x536/0x650
[   70.434552][ T7101]        blkdev_release+0x15/0x20
[   70.436079][ T7101]        __fput+0x44c/0xa70
[   70.437484][ T7101]        fput_close_sync+0x119/0x200
[   70.439085][ T7101]        __x64_sys_close+0x7f/0x110
[   70.440647][ T7101]        do_syscall_64+0xfa/0x3b0
[   70.442188][ T7101]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.444175][ T7101] 
[   70.444175][ T7101] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[   70.446640][ T7101]        lock_acquire+0x120/0x360
[   70.448196][ T7101]        __mutex_lock+0x182/0xe80
[   70.449771][ T7101]        __del_gendisk+0x129/0x9e0
[   70.451322][ T7101]        del_gendisk+0xe8/0x160
[   70.452826][ T7101]        nbd_dev_remove_work+0x47/0xe0
[   70.454499][ T7101]        process_scheduled_works+0xae1/0x17b0
[   70.456356][ T7101]        worker_thread+0x8a0/0xda0
[   70.457974][ T7101]        kthread+0x711/0x8a0
[   70.459385][ T7101]        ret_from_fork+0x3fc/0x770
[   70.460946][ T7101]        ret_from_fork_asm+0x1a/0x30
[   70.462573][ T7101] 
[   70.462573][ T7101] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[   70.465108][ T7101]        validate_chain+0xb9b/0x2140
[   70.466720][ T7101]        __lock_acquire+0xab9/0xd20
[   70.468273][ T7101]        lock_acquire+0x120/0x360
[   70.469811][ T7101]        down_write+0x96/0x1f0
[   70.471294][ T7101]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   70.473199][ T7101]        nbd_start_device+0x16c/0xac0
[   70.474859][ T7101]        nbd_genl_connect+0x1250/0x1930
[   70.476548][ T7101]        genl_family_rcv_msg_doit+0x215/0x300
[   70.478393][ T7101]        genl_rcv_msg+0x60e/0x790
[   70.479953][ T7101]        netlink_rcv_skb+0x208/0x470
[   70.481572][ T7101]        genl_rcv+0x28/0x40
[   70.482966][ T7101]        netlink_unicast+0x75c/0x8e0
[   70.484600][ T7101]        netlink_sendmsg+0x805/0xb30
[   70.486223][ T7101]        __sock_sendmsg+0x21c/0x270
[   70.487810][ T7101]        ____sys_sendmsg+0x505/0x830
[   70.489449][ T7101]        ___sys_sendmsg+0x21f/0x2a0
[   70.491041][ T7101]        __x64_sys_sendmsg+0x19b/0x260
[   70.492728][ T7101]        do_syscall_64+0xfa/0x3b0
[   70.494279][ T7101]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.496274][ T7101] 
[   70.496274][ T7101] other info that might help us debug this:
[   70.496274][ T7101] 
[   70.499413][ T7101] Chain exists of:
[   70.499413][ T7101]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[   70.499413][ T7101] 
[   70.503636][ T7101]  Possible unsafe locking scenario:
[   70.503636][ T7101] 
[   70.505898][ T7101]        CPU0                    CPU1
[   70.507550][ T7101]        ----                    ----
[   70.509220][ T7101]   lock(&nbd->config_lock);
[   70.510654][ T7101]                                lock(&disk->open_mutex);
[   70.512785][ T7101]                                lock(&nbd->config_lock);
[   70.514929][ T7101]   lock(&set->update_nr_hwq_lock);
[   70.516506][ T7101] 
[   70.516506][ T7101]  *** DEADLOCK ***
[   70.516506][ T7101] 
[   70.518944][ T7101] 3 locks held by syz.0.380/7101:
[   70.520508][ T7101]  #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[   70.522986][ T7101]  #1: ffffffff8f583988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[   70.525721][ T7101]  #2: ffff88811a441a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[   70.528750][ T7101] 
[   70.528750][ T7101] stack backtrace:
[   70.530570][ T7101] CPU: 0 UID: 0 PID: 7101 Comm: syz.0.380 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   70.530580][ T7101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   70.530585][ T7101] Call Trace:
[   70.530588][ T7101]  <TASK>
[   70.530592][ T7101]  dump_stack_lvl+0x189/0x250
[   70.530602][ T7101]  ? __pfx_dump_stack_lvl+0x10/0x10
[   70.530610][ T7101]  ? __pfx__printk+0x10/0x10
[   70.530619][ T7101]  ? print_lock_name+0xde/0x100
[   70.530628][ T7101]  print_circular_bug+0x2ee/0x310
[   70.530638][ T7101]  check_noncircular+0x134/0x160
[   70.530648][ T7101]  validate_chain+0xb9b/0x2140
[   70.530660][ T7101]  __lock_acquire+0xab9/0xd20
[   70.530667][ T7101]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   70.530675][ T7101]  lock_acquire+0x120/0x360
[   70.530682][ T7101]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   70.530689][ T7101]  ? __mutex_unlock_slowpath+0x1cd/0x700
[   70.530697][ T7101]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   70.530707][ T7101]  down_write+0x96/0x1f0
[   70.530714][ T7101]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   70.530721][ T7101]  ? __pfx_down_write+0x10/0x10
[   70.530729][ T7101]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   70.530737][ T7101]  ? nbd_add_socket+0x688/0x9a0
[   70.530744][ T7101]  ? nbd_add_socket+0x688/0x9a0
[   70.530751][ T7101]  nbd_start_device+0x16c/0xac0
[   70.530758][ T7101]  ? __nla_parse+0x40/0x60
[   70.530766][ T7101]  nbd_genl_connect+0x1250/0x1930
[   70.530774][ T7101]  ? __pfx_nbd_genl_connect+0x10/0x10
[   70.530782][ T7101]  ? __nla_parse+0x40/0x60
[   70.530788][ T7101]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   70.530800][ T7101]  genl_family_rcv_msg_doit+0x215/0x300
[   70.530812][ T7101]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   70.530825][ T7101]  genl_rcv_msg+0x60e/0x790
[   70.530836][ T7101]  ? __pfx_genl_rcv_msg+0x10/0x10
[   70.530845][ T7101]  ? __pfx_nbd_genl_connect+0x10/0x10
[   70.530853][ T7101]  netlink_rcv_skb+0x208/0x470
[   70.530861][ T7101]  ? __pfx_genl_rcv_msg+0x10/0x10
[   70.530871][ T7101]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   70.530881][ T7101]  ? down_read+0x1ad/0x2e0
[   70.530888][ T7101]  genl_rcv+0x28/0x40
[   70.530897][ T7101]  netlink_unicast+0x75c/0x8e0
[   70.530905][ T7101]  netlink_sendmsg+0x805/0xb30
[   70.530915][ T7101]  ? __pfx_netlink_sendmsg+0x10/0x10
[   70.530923][ T7101]  ? aa_sock_msg_perm+0x94/0x160
[   70.530934][ T7101]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   70.530944][ T7101]  ? __pfx_netlink_sendmsg+0x10/0x10
[   70.530952][ T7101]  __sock_sendmsg+0x21c/0x270
[   70.530959][ T7101]  ____sys_sendmsg+0x505/0x830
[   70.530968][ T7101]  ? __pfx_____sys_sendmsg+0x10/0x10
[   70.530978][ T7101]  ? import_iovec+0x74/0xa0
[   70.530986][ T7101]  ___sys_sendmsg+0x21f/0x2a0
[   70.530995][ T7101]  ? __pfx____sys_sendmsg+0x10/0x10
[   70.531008][ T7101]  ? __fget_files+0x2a/0x420
[   70.531017][ T7101]  ? __fget_files+0x3a0/0x420
[   70.531026][ T7101]  __x64_sys_sendmsg+0x19b/0x260
[   70.531035][ T7101]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   70.531045][ T7101]  ? rcu_is_watching+0x15/0xb0
[   70.531054][ T7101]  ? do_syscall_64+0xbe/0x3b0
[   70.531061][ T7101]  do_syscall_64+0xfa/0x3b0
[   70.531067][ T7101]  ? lockdep_hardirqs_on+0x9c/0x150
[   70.531077][ T7101]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.531084][ T7101]  ? exc_page_fault+0x9f/0xf0
[   70.531094][ T7101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.531100][ T7101] RIP: 0033:0x7f089858e929
[   70.531108][ T7101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.531114][ T7101] RSP: 002b:00007f0899430038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   70.531122][ T7101] RAX: ffffffffffffffda RBX: 00007f08987b5fa0 RCX: 00007f089858e929
[   70.531127][ T7101] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 000000000000000e
[   70.531131][ T7101] RBP: 00007f0898610b39 R08: 0000000000000000 R09: 0000000000000000
[   70.531135][ T7101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   70.531144][ T7101] R13: 0000000000000000 R14: 00007f08987b5fa0 R15: 00007ffdd3d37418
[   70.531150][ T7101]  </TASK>
[   70.685322][ T7102] block nbd0: NBD_DISCONNECT
[   70.686945][ T7102] block nbd0: Disconnected due to user request.
[   70.688875][ T7102] block nbd0: shutting down sockets
[   70.826268][ T1361] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
05:38:26  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000439e710
R8 =ffff888108120237 R9 =1ffff11021024046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98ac R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f08994306c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001200 CR3=000000002b4bc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2beab85478 00007f2beab85450 XMM03=00007f2beab85488 00007f2beab85480
XMM04=00007f2beb6ed100 00007f2beab85440 XMM05=00007f2beab85458 00007f2beab854a0
XMM06=00007f2beab85498 00007f2beab85490 XMM07=00007f2beab85488 00007f2beab85480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2beaa11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ebb90d4d9e790800 RBX=ffffffff81976c78 RCX=ebb90d4d9e790800 RDX=0000000000000001
RSI=ffffffff8be29da0 RDI=ffffffff81976c78 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1f3f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001e000
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f089942efb8 CR3=000000010e81a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2beab85478 00007f2beab85450 XMM03=00007f2beab85488 00007f2beab85480
XMM04=00007f2beb6ed100 00007f2beab85440 XMM05=00007f2beab85458 00007f2beab854a0
XMM06=00007f2beab85498 00007f2beab85490 XMM07=00007f2beab85488 00007f2beab85480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2beaa11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
