last executing test programs:

5m50.825278991s ago: executing program 0 (id=1):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000100)={0xa9c17475d4ced89e})
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x4886)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r7, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x18, r5, 0x2, 0x70bd2f, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0xff07}, 0x2000000)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r8)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r12 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$tun(r11, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14, 0xd}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x33, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r14, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000ffdbdf240065000500350007000000050036008100000005003300050000000500360001000000235c98a69e8227fcbd0df76b4b33794bd79f255262c042d463a6c524ac3a2ddced10ffe60b8887aabb2cad6ef799f63456c4c46dbe5ddfef5c1f0ed8a6a07d6b76d50100a55298d7886425f2654c6d6bafc9e4ed33d6a01acc34b2a400"], 0x34}}, 0x0)

5m50.267768001s ago: executing program 1 (id=15):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x401c5820, &(0x7f0000000080))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x11, r1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)={0x28, r6, 0x50dc85624ea6cf59, 0x70bd27, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x6, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0xffffffffffffff81, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0x17, &(0x7f0000000340)=0x1, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000080)={0x0, {{0x2, 0x4e23, @multicast1}}}, 0x88)

5m50.266011285s ago: executing program 1 (id=16):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000000700)=@raw=[@generic={0x5, 0x0, 0x0, 0x9, 0x80}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb6f5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x1, 0x2, 0x0, 0xb, 0xa, 0x20, 0x4}], &(0x7f0000000800)='GPL\x00', 0x1, 0x31, &(0x7f0000000840)=""/49, 0x41000, 0x10, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x9, 0x68f00000, 0x3}, 0x10, 0xc300, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100}, 0x94)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000a00)=0x7)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900010073797a30000000001400038008000140414500000800024000000003090002"], 0x68}}, 0x24040800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r4=>0x0})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'ipvlan1\x00', {0x3}, 0x5})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x3}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xe, 0x1, 0x1}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={@multicast2, 0x1, 0x0, 0x40, 0x0, [{@remote}, {}, {@initdev}, {@multicast2}]}})
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005140000001100010000000000000000000000000aa86c74c1d6d83440a2f6be982d202d1a5d8181d5796109b596a714f4265798931f8e4ab10b278eb07e89adf7bccfbc98c9ef784419322b0afb7f7d7d66cf446a2366c6b403aeb194bdeff0e669745bda6430c17a01ccab0d233ddfc4fb4c7a98a3664a09b896544b442c0ec58a9eb94d6b5eecb07aabd54ef8bb8f74efca331d1f303b04b99464f08838b73efc8b7439c3ae479ea77296320d945ce00c3b1db3a85073dcd4c271f0f0b987e46fc959edf4daa647c76d1a66e73e7f6948271b8f7a97ef668cd255e98634e7dd3491860044b6688582bd073214ee770df2aa5a55a81b82d2a774cd20aa2e4eeffb11d4ce5c24f061e4f8c940c2"], 0x64}}, 0x0)

5m50.183192366s ago: executing program 1 (id=18):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000440)=""/23, 0x17}, {&(0x7f00000004c0)=""/257, 0x101}, {&(0x7f0000003380)=""/4095, 0xfff}, {&(0x7f0000000080)=""/50, 0x32}], 0x5}}], 0x2, 0x42, 0x0)

5m50.148520256s ago: executing program 1 (id=19):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94)
clock_gettime(0x0, &(0x7f0000000000))
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r3 = socket(0x10, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r5 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050)
recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="02002dbd7000ffdbdf250400000008000200030000000800030000000000"], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x40001)
socket$inet6_tcp(0xa, 0x1, 0x0)

5m48.815640978s ago: executing program 1 (id=21):
r0 = socket(0x10, 0x6, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00540001002cbd7000fedbdf2507000000000000", @ANYRES32=0x0], 0x18}}, 0x0)
accept4(r1, &(0x7f0000000200)=@tipc=@id, &(0x7f0000000280)=0x80, 0x80000)
sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012cbd7000fcdbdf25050000000c00990000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x5, 0xe, 0x0, &(0x7f0000000380)="25a688a800a34400000012f2c834", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x7f}, &(0x7f00000000c0)=0x8)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000000)=ANY=[], 0x78)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e80), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000088c6bc7939d246226f0d6955aa8d02478f6d088b1a1727b1371b5b468534435fa32b5b14d93a37c334d4ccee3c57694bfa88a4fec94dfa320de3e3891039310800000000000000ccbb37a068b7aaa7f5e5997b2d59cbac422c1a1e5c411e6645bbab0e1964efc0d60b7d6a55ae217cc438f7000f6828755e55a318d975208a2761dbbb563bfd06d734fe41d44a34191e81232cd408d676fc32a50b658e0caa6df84bea7260a7362e059096a7fab362f0c08c43a7cf36ec7b5dd533812c821e45ded7d9aefd0fe01bdfda", @ANYRES16=r11, @ANYBLOB="7b1a28bd7000fddbdf25010000000000000001410000001800170000001b000000036574683a6772653000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4044054)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1c42, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000ffffffe04e000000000000005fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
recvmsg(r8, &(0x7f00000008c0)={&(0x7f00000003c0)=@generic, 0x80, &(0x7f0000000780)=[{&(0x7f0000000440)=""/57, 0x39}, {&(0x7f00000005c0)=""/211, 0xd3}, {&(0x7f00000006c0)=""/165, 0xa5}], 0x3, &(0x7f00000007c0)=""/225, 0xe1}, 0x20c0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)
close(0x3)

5m48.716269492s ago: executing program 0 (id=22):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={<r3=>0x0, 0x80}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r3, 0x3}, 0x8)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
r5 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r5, &(0x7f0000000240)={0x11, 0xd, 0x0, 0x1, 0x10, 0x6, @random="9f8d51353919"}, 0x14)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000240)=ANY=[], 0xfdef)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbbe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8891}, 0x40000)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

5m40.47801839s ago: executing program 1 (id=32):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0xfff2}, {0x0, 0xfff1}, {0xffff, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYRES8=r7], 0x48}}, 0x24000800)

5m40.329103183s ago: executing program 32 (id=32):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0xfff2}, {0x0, 0xfff1}, {0xffff, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYRES8=r7], 0x48}}, 0x24000800)

5m40.25423988s ago: executing program 0 (id=33):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="6047f665", @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c00018038000400200001000a004e230000000cff020000000000000000000000000001ff7f00001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x60}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r3, &(0x7f00000002c0)={@void, @void, @llc={@snap={0x55, 0xfe, "93", "1040d9", 0x9100, "e9232a2e3a07898291b1616d72cca7f152cfa35c43b56ae0ae16aa887fed1e9d83443d4d58c5a4c457151aca7bd1017000056ae2ab954b185a5d35e4a5b399bddb9654ce0261d728536e183d9dd740633eb46d467562da4e06bc0089a20541dc3f87fa5ed02b36d52baa4d3de301abf744b999fdc7924ee7350e359525f994be6f85a0e0541c7bb715b82ad1fe6ffcbb33e567b639e3510eac"}}}, 0xa1)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x81}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040)
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)

5m40.21372967s ago: executing program 33 (id=33):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="6047f665", @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c00018038000400200001000a004e230000000cff020000000000000000000000000001ff7f00001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x60}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r3, &(0x7f00000002c0)={@void, @void, @llc={@snap={0x55, 0xfe, "93", "1040d9", 0x9100, "e9232a2e3a07898291b1616d72cca7f152cfa35c43b56ae0ae16aa887fed1e9d83443d4d58c5a4c457151aca7bd1017000056ae2ab954b185a5d35e4a5b399bddb9654ce0261d728536e183d9dd740633eb46d467562da4e06bc0089a20541dc3f87fa5ed02b36d52baa4d3de301abf744b999fdc7924ee7350e359525f994be6f85a0e0541c7bb715b82ad1fe6ffcbb33e567b639e3510eac"}}}, 0xa1)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x81}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040)
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)

954.032864ms ago: executing program 3 (id=4018):
r0 = socket(0x2a, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a001200021cb26f5d4f8db227c274000a0006005ade4a460c89b6ec0cff3959547f507558ba86c902000000004a32000400160005000a0000000000e000e218bb6a8a025a35512040fd08eca03724db225f968ffd4580526adbf7a24f03d0421e29e390", 0x9c, 0x20040880, 0x0, 0x0)

945.757305ms ago: executing program 2 (id=4019):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0xc) (async)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async)
r1 = socket(0x10, 0x803, 0x0) (async)
r2 = socket$tipc(0x1e, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x64, r5, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x1c, 0x2c, 0x107, 0x70bd2c, 0x25dfdbfd, {0xc, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="a2447ea5"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008091}, 0xc010) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000080)={0x2, 0x0, '\x00', [@pad1]}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x4d000, 0x42a69}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044064}, 0x20040094)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000400)={r9, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}}, 0x90) (async)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r9, 0x200}, 0x8)

943.447032ms ago: executing program 3 (id=4020):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_delrule={0x30, 0x21, 0x121, 0x0, 0x0, {0xa, 0x20, 0x14, 0x4, 0x0, 0x0, 0x0, 0x2}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, 0x30}}, 0x0)

943.136817ms ago: executing program 2 (id=4021):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14)

861.97925ms ago: executing program 3 (id=4022):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffc02, 0x81, 0xfffffffc, 0x4}}]}]}}}]}, 0x64}}, 0x0)
sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xfffffffffffffd4a, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040f0}, 0x4890)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffc02, 0x81, 0xfffffffc, 0x4}}]}]}}}]}, 0x64}}, 0x0) (async)
sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xfffffffffffffd4a, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040f0}, 0x4890) (async)

861.581724ms ago: executing program 2 (id=4023):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004200010a20fe0d2c000000fbdbd3"], 0x1c}}, 0x0)
ioctl$NILFS_IOCTL_GET_SUSTAT(r1, 0x80306e85, &(0x7f0000000080))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x11c, 0x3d, 0x1, 0x270bd24, 0x25dfdbf8, {0x11}, [@typed={0x8, 0x14, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="943f7ba6391ca0f24c0bef1fac9563fb4061878e22f696bd5856025a7a21afc19df83e180329bd9d40358b03cdc7e8e3313b10a71404db018fcd5dbf7eba3098ac07f8f7bf1d2e2c00b2ea5768", @typed={0x8, 0x120, 0x0, 0x0, @u32=0x28}, @generic="dffdccf7829fece32fc2e2e161ae11f1f835632271729c3ce25eeb21a691fe2be7be52577fafae1d4717f1bf612c03e149a8ec446c1cfb3917c3ba546a7a1cfd0eaf7e2bd48a046fd0bfe13c1f51ffab75ef11a39a9caf98af170b4cb04dd941ff81ad8233ddb260a9dedb19a35f3d3d8d66a74dee0c14a8bbfe6f67d6a1e4b792f8cb358e67b40b33b1a3790a38e8b173710f96328f9c6db179c3dcd739c5216bc2078a10cf0e9d"]}, 0x11c}}, 0x4000000)
sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="280000002e000300000000000000004e300000801400000000000000000000000000ffff7f000001"], 0x28}], 0x1}, 0x0)

771.77643ms ago: executing program 2 (id=4024):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000e00)=ANY=[@ANYRESOCT=r0, @ANYBLOB="a2228f170ce93685e07e890e0f3e20def39f17d583c70db3ff7829cf87821806ad8b3176b368282f76ae6fb8541512cdc99a2805cfc9bcbfa4f4d06f349e49a12a314a03353a8dcb2b13cf60b48d261ca8f67ffb32deaedf57850de40625b7dbcde34ec437f1978fa786264bc3f903834736105afb5e6ab4e2ac18b7adccc8e73cab5616ca39b5b60279c03d122e51dad919be15a78ec2720a6a21482fa3d7376de867d14cd8d204f3640ee4ff3682b853355b440ff023acc561f4b6126cde12efad2597ec7136a7d4837586077fb7b5d2ef1c2822428d3da3b080ec29b2f1ec5662d063877a0a64ab947517b465f5e16e24baa39e8fc4b4d73c79e0291406c2009b0d4317baf3d240f8439f8a43b2ae66733dd3ad49892a3a7e4efb29bcd2e549a048a15732e2eb55c4f03153506e9cf13491224798d21540b7d65e4086d949cd3c16b9c46fb24346aa9b097bd0de5dbf1aacf010056e9a3499a95983a632c16324da0df7a7579b8323016f9d11e5b9c60534b1da8a7505ba941ae8973bb40ed0a973951e9f3f80cd3a014b7a5e47eaf479b4c1a28c99d019a6435400774b562f25bccc7c2a82ce9cb74a262197d68398db29763408387a8688e3417ad72847db8e18d32ffbc6a579f1a2fa7e7c2d933b43389f57fcea9031a440b92b4c90998c37c771e8939fa6cf8ed9f49b958c3132abc696adc73e8007178b646bc32dd53046c18a2775f6b3278e277a6322ee0fb60701f3849eb345f161e8ca2791f0b88c5bc5ad24ef53b85f6926b8ec3a6a339b5a7c51a5599bff6b930db310a526760aeaba05afce87c88b353f49cfafa8a9c3c7e064f8c5bc957ad347cbefadac807f4e31b8da468b4e19bda7b998a38426607af95ed5045b5613acf388f1b6179245f77ce71a02b9ecb32a4c6efda9087ea9f8af425fda5fe3759eaa36e9c400721b3f7de9fc2f57c5e4e807f8e12694f34dae20efaa2b09da53aa9c504cd972a367e79f6068cb98e001add4a73b7e5a707eece9143299b0a95191a84fc64763693e925902d90db3ed09f2e152e87c2769b24a4d6effab05aa11f1d7089872cdf919997d126f80cb31e415fb8b9bee7c810a8b8ad17a4b21bc141c4539e74134ddbcdb9eee64bb4688c966e7ef49de46c3a7a983e7efb12df768df564f6bde27c0956bbd03ccb0be4694e0abc2190687959bc48d589474835f040515695dd672a845d00bf71fec97fd8ebd72d10ea15c13f3bd22df026371c5cd67b9d1766b89cec7a91b5190b7f0b01b04dd46d8605309c6d71ac47fed18f9a38a888df4d7f2d5babfb174b2121ea58e11a82506c721c08cc72f8dee6bca8c5e8e428a9f14e8f71727bc189701c68dfd541a3a61319339a99b987aebddd053741b956be3f08c2a1af18207b3721a7ee353dc23ae0e3158e3f353fb8e72decc934d46e1ca33d2568e6f17ca998279a2615b17f9a06ef665d54310b11ba8fb51b9c8567662c3355710235fbacd41f09aadb616c4b514d57021f57bf6eb4e4b772c091f123cd978d2fb6f1a6c7b8f58fc8641d4f1e5f70f596c5b026bca0b30c55d2045178547dbb7db5d4fb4ce8a27abee2c80798b4ce528af47c39096d331885e76879962ff59e86fb96a46ce561bd02ff320a60ce09e242843fbc1aa2cb75c4328b7eeecffd75df381dcc99207b5a42fe2d4573d9c80b69d9a24aa396fa79878d5dc97d3b348a10fbe8009d37ab9e3490647da2e243a48711185911df258da39f0dc0bf079c3d8312582b37ca4ca847dc18a9315ec6e3622c934e2e212558f1c8d89c6e7ae814d9860dc502ae638c3b49b4528085f271f05af5ec2f5a35ccd4dfdac64d212125d4d74a4787db488fcff8e7092f4bc33b443fa3791537eea422c5605dd0c197e14027af854049e3b55690d5c078e63432b1d49de1a1781396aed5d4a6d63b2f029f3e96e71ec963d14da59abe00502c9e643662ecafff0463bc7336667bbbf2aa2044e35284bdc5bfaee4666d178a9c30192f2a15af8fc4d84b085438b8433a13390e647c77169724c3ceeead1f47394722180da703d1566baa9454c322eaf44c586a9924496d16c3655eba7ea392fc73c5f319d826c443f864b03d8bd45b7f201f28d6216490da373de1737b56c43828ab04bea02a0949e6d0e064f7f6b08c228f5d43ee7f400b8e4a0c4b3908e096e0d14c7edcbbbf5729752f726e53cf0563f47c2c7f5c4bc305a2167370d95654cbbf9e5ee8f564d08fd1895f9538281e64da6c502eb046dfccd950979b3ec3d726107567686c7e36acfa3b0ef273b60bad29a3413779c91239bc60556ebdb5918c56c049b8a1ae7e8f7dd31d00da43b59d90aa320fb0bf08bf4f2def81b7b91304b9780452077975488040e58a2aaf07bbe71ad5e1ce951f8d3c685772882948d0d8f925112d2a12ed06c82066f18d02b6fcf7134a8fb65c055e629bed77e13d8f40d4a392817c859cbaddd840aea921836f5c9786cd888156f7a6caae59ee3dc1a45ed4e0d420169e79b960623b443a0760b8d157c0a5538ce50e25e8c1bebbe60c3197e77569c9831ba7c5c8644d6ab7ecc95d0c04574d8bc9e99d154097639c850cd53e4e71c97694afe732786593e7de17c986b3420d186bea3290f3ff0b70917dba7e4fe59fc185b1fcf61626d8a0ac1e4a6a16dffa71f6ae9d8f7866380c081f8f6081af85e7198726928feeeb7653a107d183fa2e3e7854dc3c5cad7ef9dd342357379f532b74af7bc0435f9a532c68fd44abeb3edbe966016e706ee1b99084fc7769d23bce63111f2dbda73bd81f7fe043da80fb6092a17620b71e1b76fd5fe3b349941a088884c907997a8b5dd434273850473c3481113aefcb3ad94aa2996237168260dc6f5bef72f183f176c008cb4bf76b54da6d68567fa9748b6c2f6e5fe5292700fe1139c148c3b60b14509555d1549c3d2ee1c616795b60b120ab06a183d0585fb24c07657170cfb782b55b3e39cf28b8f758182b3df6a09e3eec9cb7f39ffd38edf8c0d2294170119addd55c29be4b63e9ddd0eb05e6bd17b9fd1aeaf6296e097f91690ce15e8dca2c78249eebac54a537fd8d07fff8e4aaab04b29a0d36647a0fc7c7ea04647b1259562d62d39e075c3c8c0c4aba841a85bad893c169c2e2882916e85875248c0c0b6cd1bc66307c1be82eb87fcce35f2392a8593881f259006933bfa250646cbbac112f5f946242435926681680c0ac7f34d5d8963ea1c58fbc75669b559ed2f6c055788b20dc361fad34c6ce67ac3a64da7ff529f8761a585b928dcf57fcbc2b785332b8ef9b752c5f60bd17492a01455be90427d75dda28e80cba06b5228ce4208d428d6f1c51bf476906a5bf5fbe816bd18a3c0269d5c722b0c87a568220b7fef7cde48898e38a1dec2ea9a3e7fd561dcc75ccd19377de7f81a3995f435164f4735a26ff5d76e9c3593e8e5d78c21a5f294d62dd6d75cb49e7e4bf80658ccc78c2de394d4f437cd5f9fa58ee036ffba3c700aba2b93dd8e1ee890260d16ccb21c9130dd839cd648ed7a477d0eb5c88141aec424e05c653257f455b0fabcec58743b02abc8c208778ce0febfefde35688e044769733b57dc808a22859e05b0fabadc32d4219e0a1791276d51bc4709c875541ffe50307f472be53e47c1ee812744a50490479717aeafd18be7676183328d836e5f273a58da4e439b4b0b3b55f1990103c782e8a0eb9f937a9d1e00bc796c9ef89a3f17d2e1e934889974351255164acd6337dbea0348b173823db0d8cd76d57a31daf99e19b47bd676d59f311b6a31257116dc0a6c035a82ce4b004821ffb14ddf757bd3935dabeafff1d3044dfaa67872206167d23520322b63103cbb9058ac1d94a782175a6cc139a5e24fac989233a69ee2d17a6b2d98ef91df916c84cb4192736433cf5e7e495d65ea578f038b9d7fe92ab0e50b2874543f45679da39ddbd611106205f40a814506a103cacb64328049e9fe1f9c4436cbc746605e83f6f3ce034a209b8517afbf997c08bf95901a830611ef0133b2e20d7cb427abadd72e24b5d89eabe9aaf7922d331c4444837db4834c70eb41d0aca756d22fa34f2364eee4dbe467420949d38b4d6dc2d1f451055da111a62e561b035d1a82ba5569e955c4dc61a42c24a7f34e00685e00a16473e92dbf952486ef6916eaf4f0abadae9a4fb96b8a38a4c5d4f61a4350f528883ea5906f4924c707e0fad9e9c2669e679e107cd392debdc69a4d6e902c376fa035abcc4961da440600b97a432c73f55f4cde1cc9ca95a5c38c24a82ed8a1273b3769e2006862466321e987904a24dab8735646de4e6457207bad0b0df3cb8632b0cb49dec1a59998617b055b403bd51f5e1327771d082d6b44e194f97df0b3d3776ad9920e15cd94bd7462fe4a6e5ab5fbe06b4447f68863ddca690c9be6b083f7e6be502a8be86ae670639bab498becf0efdb28f07564554aad07cde98081f8858ceef2758faf5a051b9415e216f0f2a236dce93c8b6c9ddcf1de42c7605afa31eddc8b1175b70c0e54d132f6e26f018bae41070ed8c0d1fba46cdc8ef1ae743183efa50a1eb242e4d5b393afefedc2c8557872597ead617b150d2f000d34029e7afb801c44523f034b263c0601b1a07a2f4ae6fdddb0bbdc9feb96ae5d98677629e888cd2417730e8d6cca2e8aee07b0b23c765e144d4654f4eed58af09c4cd9d4bd18146e9682848beac79e4b77a3c7574e61382e67d23e43cbb2f4d26e7bbe40e4a2e34aa01cfc2372007e49314547db9da8f18c5f2afaa8cbf102d50bd99f269051506f6bdda2223107af39c286950749c444350d2d7087732d67107b0c35daeefbc535ab2f1d900e6550df734ffbd0ad89778d3e6ff4822354ab733174f8b426de1cef6e7a1a90188aef9e8e7eaf0a8b8774bb6c493a42711676795f2385d71e2d49df846828cdd4102bb2569d580c6757e7146886cd32427565a341f31f69671ea0b099b0bf9698c78469f68ac77bdb9fac41eb468d03b4853da8652589a7efdf0b83cc1ad2c794db415c0c33b62f9473c172e9ec6a29d0bdc056122cac4122869a261b2e412eddb03b29573a5d56a850f7d13431d0f31b16ff0debac4f93a1af3b7d35678cb987f726ea32ba5ada0aae37880e2d41a5514ba2a58468af29dc060b38ef801382381616dc8e7e30e505deb5a790e68bae2f25d2366b7252dfe50a69ddce6fa976e3b4683d2fd91f5d510b03f2a0ef10b18a8c5503b3ebbad463bb9f4522fce356806dc206282d5464f86dd4a5524b44849cb4719f2285646e5ab6135d2553b99dde1c5f0265501360000fa2ad34cf152f9abd90acaadc2947fedce6976e6ea16247258c5696e32afc52a4aa0d4d76a19ed85f28df642877a306ed15634dfa9b5e35aa67aca9f1d3caaffeb8cb55c7bf3fa322cdf0d03db6a6d49f9273b5cec21ebd7facad18db8225b47b05478796434e5ddebe702bf6b459d6c4944910377df6302218b1ad66dc997a9e8cec381206774f3655bf51a8e44263d7d24ffc1cbaad6f7fd591ac351bec9f3a1a587e44740258c306b2296753eefe194c4c2914727676cd7049da32caa0411d39d0b00cb37529d886d7b9ed1a04ff3556a30f9d1382b208d58749fac6587d5447fe6f1da4af488242cddfc753e4b648dc3f82f56d768b4ced3326b78dad329eeb218b96db2dcb452cdb0e9b2a025bc5444edc52602494eb9d04fca5acd6d1766a240663f0c4b6f398beca8f9750da6f9318876806ba28c8feb65d1332022b7aa882ad883c0c74ac23c7", @ANYBLOB="110026bd7000fddb08000706260000c3ff0f1000575533c3b17b210d3c00000e0000000000000000947f3396d8f1c5223ae378eaecd681cc2b4005c86ac0b529548b7ac010785989cfbc44a44510e2d665d754c0715c1991eb2874ae6bd93f465464c6493fc375a26cf7ef540ec8df4ed89cd084d767ee73b6ea0183f8da08f30765e54187f8521e20ef868806ad05ddf4516f50410a2f352fa76af111ad60b510db090402691c7f8c86eff576f48873706f2100"/190, @ANYBLOB="0c009900fb"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}})
socket$l2tp(0x2, 0x2, 0x73) (async)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x40010, r2, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x40010, r2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
socket$inet6(0xa, 0x2, 0x0) (async)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote}) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote})
setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) (async)
setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
write$tun(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400109"], 0x14)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="400100001000130725bd700000000000fe8000000000000000000000000000bbac1414130000000000000000000000004e22000180000004020000002f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000800600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000050000000000000000f8ffffffffffffff0c000000800000000200000029bd7000000000000a000000ac00000000000000480102006563622d646573335f6564652d61736d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008002900040000004828f6d92f078f946e1ad13a8cf4a32b0053410135925a1d64280671ccbe044785ed3615d381c11848b5bd7440bd1c0e661388ad2b9e8b8cf0c360f09cc37a0d7e3b65a56f90b10e91a6c342f7ad95d47a49309aa0445f37beb06dccc32b54f23a9545f203c26a62617daae5de"], 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="400100001000130725bd700000000000fe8000000000000000000000000000bbac1414130000000000000000000000004e22000180000004020000002f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
socket$qrtr(0x2a, 0x2, 0x0) (async)
socket$qrtr(0x2a, 0x2, 0x0)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x9, &(0x7f0000000500)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000480)={0x0, @private, @multicast2}, &(0x7f0000000240)=0x1)

770.164417ms ago: executing program 3 (id=4025):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000c80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050029bd7000000000002e00000008000300", @ANYRES32, @ANYBLOB="050034002f000000060066008488000004006701"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x810)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
r12 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r12, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4cd0}, 0x20004004)
sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0xd, 0xf}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e0, 0xca0b, 0x8, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x44000)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r14)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r15 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r16=>0x0})
sendmsg$kcm(r15, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r16, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r5, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4004010)
ioctl$XFS_IOC_SET_RESBLKS(r4, 0xc0105872, &(0x7f00000002c0)={0x9, 0x8000})
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x68, r3, 0x400, 0x0, 0x0, {{}, {}, {0xfffffffffffffe79, 0x18, {0x732, @link='syz0\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x41}, 0x4000)

621.626755ms ago: executing program 3 (id=4026):
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan0\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2}, 0x40)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x28000600)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x9c7ab000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x9c7ab000)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x4f, 0x9)
close(r4)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r5}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r5}, 0x38)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

621.034757ms ago: executing program 2 (id=4027):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000180)) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="06001600ea"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) (async)
r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) (async)
r2 = socket$packet(0x11, 0x1, 0x300)
recvfrom(r2, &(0x7f0000000240)=""/80, 0x50, 0x2042, &(0x7f0000000340)=@generic={0x1a, "008e27fdf6f0e6d9fda3d882309d178b402e8099abca9ab3ff094aa9c7a403eb9ada20aaef2621c5e39b1e858e8611d68b0415f7f41a2feafeaf8f91d6006e23936fdeb9d5176df3e813513f8950675b482a9c8cc59614ced7f10a652ca010361a68935a86efd19643b56613de01008a4d68f4129e528799a37b6602a518"}, 0x80) (async)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000140)=@req={0x1, 0xeeb, 0x9, 0x30000}, 0x10) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

544.281958ms ago: executing program 2 (id=4028):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98)
ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, 0x0)
write(r3, 0x0, 0x0)
ioctl$XFS_IOC_FSGROWFSDATA(r2, 0x4010586e, &(0x7f00000000c0)={0x9, 0x3})
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)

520.226195ms ago: executing program 4 (id=4029):
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000780)=[{&(0x7f0000000040)="77680a84a01f8c91457d8bba69d1df48c56e", 0x12}, {&(0x7f00000007c0)="f1dec09ed03987470e057676cff7c90ba7583d28cfa9f685ca74b71f44e0b1f208a340a4e41b8452f514aca093260053b0bcd7abd83264342420d73f75f0b237652aece1c10c665895a3a980d7da8f053c75f43d7ea242c9f243011116d10f6f12a01d99a69cbcd463be4fe9d4cdb4ba6b96ab56e9a5f89ba13ef1eb4c529087153eaae19b509fd9b97fc722238b9854eda97ded33fc62482d1c76014a54cca271e3a3f63a7de3285e", 0xfffffffffffffe97}], 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94)
getsockname$packet(r1, &(0x7f00000009c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a00)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1c, 0x1d, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0xfffffffd}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x2}, @generic={0x8, 0x4, 0x2, 0x7f, 0xffff8c37}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @alu={0x7, 0x0, 0xb, 0x1, 0x2, 0x20, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000980)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x41, '\x00', r2, @fallback=0x27, r0, 0x8, &(0x7f0000000a40)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0xf, 0x9, 0x9}, 0x10, 0x0, r0, 0x7, 0x0, &(0x7f0000000ac0)=[{0x2, 0x3, 0xa, 0x1}, {0x4, 0x5, 0x1, 0x7}, {0x1, 0x1, 0xa, 0x2}, {0x1, 0x1, 0x9, 0x2}, {0x1, 0x5, 0x3, 0x1}, {0x3, 0x1, 0x10, 0x2}, {0x3, 0x1, 0x6, 0x3}], 0x10, 0x3}, 0x94)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x260, 0xffffff7a, 0xffffffff, 0x260, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a54f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000a1602a6800", 0x80, 0x3, {0x4}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x1, 0x3, 0x1, 0x2, 0x4], 0x6}, {0x4, [0x6, 0x4, 0x3, 0x3, 0x1], 0x4, 0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x6, 0x8, [0x31, 0xc, 0x2a, 0x39, 0xa, 0x24, 0x6, 0x4, 0x18, 0x2f, 0x2c, 0x2e, 0x2, 0x3a, 0x2a, 0xd], 0x2, 0x80000000, 0x40}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newlink={0x20, 0x10, 0x439, 0x3, 0x0, {0x0, 0x0, 0x0, r7, 0x49801}}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
splice(r0, 0x0, r3, 0x0, 0x10d00, 0xf)

383.852829ms ago: executing program 4 (id=4030):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000001070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1)
sendmmsg$inet(r1, &(0x7f0000005380)=[{{&(0x7f0000000200)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10}}], 0x1, 0x2000c844)
r4 = socket$inet(0x2b, 0x801, 0x1)
listen(r4, 0x9)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0008"], 0x34}}, 0x400c010)
sendmsg$key(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2, 0xb, 0x6, 0x6, 0x1f, 0x0, 0x70bd2d, 0x25dfdbfd, [@sadb_sa={0x2, 0x1, 0x4d5, 0x80, 0xfb, 0x43, 0x1, 0x1}, @sadb_lifetime={0x4, 0x4, 0x2, 0x5, 0x3}, @sadb_key={0xd, 0x9, 0x2c8, 0x0, "2ce01a7816a2c88a540f3ed99353fcc0259665a8898547a45e1cd46c7167cbcbdd6806043aaace4ec2256e218f7bfad2d601f8a9d81ac4094b5a37d10e6ca503779fe1a24530409784f9699ea9ec5b95f5e3b6fe1d509e8df7"}, @sadb_x_policy={0x8, 0x12, 0x3, 0x0, 0x0, 0x6e6bb5, 0x6, {0x6, 0x3c, 0x5, 0x4, 0x0, 0x1, 0x0, @in=@rand_addr=0x64010101, @in6=@remote}}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d4}]}, 0xf8}}, 0x0)
accept$inet(r4, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x12c0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x127c, 0x4, 0x0, 0x1, [{0x1278, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1264, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1008, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_IMMEDIATE_DATA={0x19c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x9d6208df6dd3479a}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x7a, 0x1, "ad42b15768ed9dab61fc74e0a4a3d00d965dfa1dfe029a02d963b17ebaf70ff6c06f7f74cf74775b6f1235a41837007abbfb482ea115615ad65e32e77ea4bd1372f709aa8d9a23f52fe3383f545a05e58942043a3fb091d6b81f34f7222664697e82a397f041c717e4a1c5074afca5c8a055b94db364"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_IMMEDIATE_DATA={0xac, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}]}], {0x14}}, 0x1334}}, 0x0)

303.601211ms ago: executing program 4 (id=4031):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000430001000000000000000000000000000f000100aaaaaaaaaac437a56d22300005d0b5216335aa2b05b3d4ae00b8da8ac2cb19fcc1208709d386a19fe48fb5ad33eb5234dad49e7dd21728f969e702e6a3a37d12389e2ed45e52ad1646b0a7ed23500e3e0731d670a33fd013fc"], 0x24}}, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x4002}) (async)
socket(0x1e, 0x1, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="00000018030403000700c500"], 0xe7)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async, rerun: 32)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) (rerun: 32)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r4, 0x1, 0x0, 0x80000, {0x3}}, 0x14}}, 0x0) (async, rerun: 64)
syz_emit_ethernet(0x0, 0x0, 0x0) (rerun: 64)
syz_emit_ethernet(0x102, &(0x7f00000003c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x2c, 0x4, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp_addr={0x44, 0x1c, 0x14, 0x1, 0xd, [{@empty, 0x3}, {@multicast1, 0x10}, {@multicast2, 0x3}]}, @timestamp_prespec={0x44, 0x54, 0x5b, 0x3, 0x2, [{@empty, 0x2}, {@empty, 0x6}, {@multicast1, 0x5}, {@private=0xa010100, 0x1}, {@empty, 0x3}, {@empty, 0x8}, {@remote, 0xffff}, {@rand_addr=0x64010100, 0xffff}, {@multicast2, 0x4b6b}, {@local, 0xfffffffc}]}, @lsrr={0x83, 0x27, 0x2b, [@private=0xa010101, @broadcast, @multicast2, @multicast2, @multicast2, @empty, @multicast2, @empty, @broadcast]}]}}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) (async)
r6 = socket(0x10, 0x2, 0x0)
write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async)
recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010002104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0000040002800a00010000000000000000000ee72e0dc3756f3b839ea6c5ce7106185200000000000000000066d73d0f4d5565c0132cf53af4c202736092362f2ec3aec253424b432b38432918bc991b7d776be81c7076b7016624835ca4015cae"], 0x40}}, 0x0)

207.350868ms ago: executing program 4 (id=4032):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r1)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000140)={'syzkaller0\x00', @random="440000004ec6"})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b4000000000"], 0xc4}}, 0x8d0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r5)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x70, r6, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x50, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4d1b7ff2}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}]}]}, 0x70}}, 0x4000040)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00'})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00'})
r8 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r8, 0x6, 0xd, &(0x7f0000000040), 0x2)
sendmsg$kcm(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000)
sendmsg$inet(r8, &(0x7f0000000880)={0x0, 0x0, 0x0, 0xffffffffffffffe4}, 0x4040)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), r9)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r10, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x10}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)

63.668853ms ago: executing program 4 (id=4033):
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000000)=',()+)-{}:^\x00', 0x6a280, &(0x7f0000000040)={@_ha_fsid={[0x7, 0x8]}, {0x2, 0x5, 0x7, 0x2}}, 0x2a31, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x80})
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000140))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000200)={0x470, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x1b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\%+.$:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc83}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '*,{-/)\'/]/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}]}]}, @ETHTOOL_A_BITSET_MASK={0xfc, 0x5, "a6ae1cabe2778fc33a2f09eae9dec217fabf4fe032e2a9c9c9ca1f6ec0f6522c15c291f1607d2799586f0a3b05c4b0435453c4197c6ace6869896085ef75749a8fbb4f250f55d40ef9d3c333e7304534973c6ac3a8ca67ada3d9a44bee25ca0dfc36daa174097df9ced749dd86d0537703142ad24b3271a825ab2ed41c0daeb6c90cadabb2ade84be648c2b2a065da88ae82f5f2359807c2bdcbb04328079077b1ec1c0f2b1157768e44088685f5eabb395d0eac3df58565f32539f3ef620cd00eec4148a6df25ce32087d5684bddc4dfafa6d41ff48f050e29462d8cd760d04d0afb313255c4cffbfbccbfdc9eedb16960827554fbaa7a6"}, @ETHTOOL_A_BITSET_MASK={0x39, 0x5, "31ce6af35695fbb871c78ce7be6e8a499e9a1b9b60254fadbeb8d0a9e7cd23df51cef2862dc7e142eaad9dd438ceba768ae6eb94a9"}]}, @ETHTOOL_A_EEE_MODES_OURS={0xe0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd9, 0x4, "1ee45e49a209794e8c1e2f4eabe1099a024d3591f13ed9d1fa64cdcfadb714663c5761e87dab146f8591b3130fbbc5a68352555b3e5dffc3719e546c75206099f49656aea04b1d251f103fc8a132feb088ca63220a468d96879276d285e0d46b46fbdd95828642f16aa8b71c22ef5118cb79a080b5b766efdb0d2d5f1974fd1a1adb5c26a1e17dffb9bfd5a9880e7f2ec9e7b41007515b692f40807732a58272357a0561664896abf5871dd662518ecc490c60a615a69f5e72dcb9c54228313d58b92dfebf6d696166066a5101270f4b512406dfc1"}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x44, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, ',()+)-{}:^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@+\x00'}]}]}]}, @ETHTOOL_A_EEE_MODES_OURS={0x150, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x86, 0x5, "d0b218d39814e64c9eda265dc90d5ea87be410dc49e91ac71db5ec8e88999f4d91a7724a1786b247199b61a581653a056c101a9fdd3848582a51aa9f0d825b6710151c26c8af7a212ac0e4e8a9e5773da04451911ef087f8ed14eea7df6a047da51b2de593f461bcbaff44b516884229d30a5cfbe3fcfa549ce09e6db352cd198b58"}, @ETHTOOL_A_BITSET_MASK={0xb9, 0x5, "40b7f6d40121c14cc71e1bf891163caafc62efc7592ca444f1891c1c6011472867ffd4507c226d2ec4b5f36bb43e7ccfbb8aa1d01bc3c15d4199f6338016b78417e2856a1b87ef94379031288c42a99a133d5784035932198d1b203d849f262fbdcf1be76223102d6f61b192ad445c778b81742265de7ba4de76e7a470bc4479aaf2786bd62494a13d473cffbe2dbe13c3f13d17a9ba406bd55003f43a938b24416b410abdd74581572ba9bf80a977f021eb96c673"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}]}, 0x470}, 0x1, 0x0, 0x0, 0x400c0}, 0x11)
sendmsg$IPSET_CMD_HEADER(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6400c851}, 0x40800)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e21, 0x536, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd}}, 0x0, 0x0, 0x4b, 0x0, "75a45eee545a5929d96d4543646046de3f1835d7396407448d1bf5a13b009e280bbaa381e9529e8e0d264ea8e1aecab2164e43906c9237f84f3d768003f241c3a17e9c053516275b446aaec4d455a2cf"}, 0xd8)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000980)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xc4, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf, 0x25}}}}, [@NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="402d58c9803785d387caec485e9cd7f4"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9b7357e8dcb0a53117a3fb1aa18159cef005e7f7322dd398"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0c32ce6a6b6a42a504d5337abb0bb16a0a52ddfb10dc6c15"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x74}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fe8a92994ce345f5cd568b8cc846b3909458456729bc38f9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dcd5674247943885"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="816aca8000c9c82a78c9b92a9d067e1a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xb}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000004}, 0x40040)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b80)={'ip_vti0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000c40)={&(0x7f0000000b40), 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@getqdisc={0x28, 0x26, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x5, 0xa}, {0xffff, 0x10}, {0x0, 0x1fffb}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004081)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000cc0)={'lo\x00', &(0x7f0000000c80)=@ethtool_sset_info={0x37, 0x1, 0x9, [0x81, 0x9, 0x8, 0x9f]}})
openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x40000, 0x0)
sendto$inet(r0, &(0x7f0000000d40)="5532a21b88d5cd90bd8a3c0299a54c9498c63eb115cf54bb41a17b227814d55091797cb0c0c453ae32e2538a2020de0674efbad83a82a796b6727e88bf2ed0fa757ef645bc3da4ef97dd50a73d2616dd64c030e77dc54d518239d5fc8c642acdf862d8912e68266bfff6365c466adc503a9b9a87da69f34b4092ab84a5ccb664f8def7a004139185ac976918d2", 0x8d, 0x800, &(0x7f0000000e00)={0x2, 0x4e24, @local}, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000e40)={0x1, {{0xa, 0x4e23, 0x40, @loopback, 0x8}}, {{0xa, 0x4e21, 0x5, @local, 0x8}}}, 0x108)
openat$tun(0xffffffffffffff9c, &(0x7f0000000f80), 0x145400, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x64, 0xb, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x80}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x8000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001100)={'vcan0\x00', <r6=>0x0})
connect$can_bcm(r0, &(0x7f0000001140)={0x1d, r6}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001180)={r0, <r7=>0xffffffffffffffff}, 0x4)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000011c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', r5, r0, 0x4, 0x2, 0x4}, 0x50)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002400)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', r5, r0, 0x5, 0x3, 0x4}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002540)={0x6, 0x1c, &(0x7f0000001240)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @map_val={0x18, 0x1, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x80000000}], &(0x7f0000001340)='GPL\x00', 0x3, 0x1000, &(0x7f0000001380)=""/4096, 0x40f00, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002380)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000023c0)={0x0, 0xb, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000002480)=[0x1, r9], &(0x7f00000024c0)=[{0x3, 0x4, 0xb, 0x1}, {0x2, 0x3, 0x9, 0x3}, {0x3, 0x3, 0xd, 0x1}, {0x5, 0x4, 0x4}, {0x0, 0x2, 0x5, 0x4}, {0x5, 0x3, 0x4, 0x9}, {0x1, 0x1, 0xe, 0xa}], 0x10, 0xf}, 0x94)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000002600)={0x0, 0x0, 0x7, r5, 0x3}, 0xc)
r10 = openat$cgroup_ro(r0, &(0x7f0000002640)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
r11 = openat$cgroup_ro(r0, &(0x7f0000002680)='cgroup.stat\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002a00)={0x6, 0x36, &(0x7f00000026c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf3, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @generic={0x3, 0x2, 0x1, 0x200, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x4, 0xa, 0x8, 0xffffffffffffffc0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002880)='GPL\x00', 0x1000, 0x43, &(0x7f00000028c0)=""/67, 0x40f00, 0xd0, '\x00', r6, 0x25, r0, 0x8, &(0x7f0000002940)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000002980)=[{0x3, 0x4, 0x5, 0x8}, {0x2, 0x3, 0x3, 0xc}, {0x3, 0x4, 0x1}, {0x4, 0x3, 0xe, 0x1}, {0x0, 0x2, 0x6, 0x2}], 0x10, 0xe}, 0x94)
write$nci(r0, &(0x7f0000002ac0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x1, 0x2, 0x1, 0x0, {{0x1, 0x9, 0x3b, "e93ee4c1f614b8178fef970f7dfcb9958d92de683fc139432cd259cbf98c3ea2351355e982a49507c6e6141aebd2dc534d0cab1ee3d7b92146260d"}, {0x1, 0x8, 0x8, 0x8, 0x39, 0x4}}}, 0x4f)

3.137454ms ago: executing program 3 (id=4034):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x20, 0x18, 0x229, 0x0, 0x0, {0x2}, [@nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0)
sendmmsg$inet6(r1, &(0x7f0000002000)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e23, 0x8, @remote}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000001740)="8c", 0x1}], 0x1}}], 0x2, 0x20040140)
r3 = socket$kcm(0x10, 0x2, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000008820000000000700000008000400080000000c800180060005004e230000"], 0x28}}, 0x40000)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x80)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={<r7=>0x0, <r8=>0x0, <r9=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r6, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x20, 0x40044}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="114a", 0x2}], 0x1, 0x0, 0x0, 0x400e815}}], 0x2, 0x4)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r4, 0x40106e80, &(0x7f0000000240)={0x8000000000000000, 0x1})
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r8)

0s ago: executing program 4 (id=4035):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r4, @ANYBLOB="300030802c000180080001"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 64)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000020c0)={0x138, r6, 0x1, 0xfffffffd, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x11c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xfffffffffffffd5e, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555f}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x0, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_ID={0x9c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffff0000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0x7}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x38, r1, 0x701, 0x74bd2b, 0x0, {0x5}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x200440f4}, 0x0)

kernel console output (not intermixed with test programs):

2 family 0 port 32888 - 0
[  288.946351][T15350] netlink: 'syz.2.2514': attribute type 3 has an invalid length.
[  288.955846][T15350] netlink: 'syz.2.2514': attribute type 2 has an invalid length.
[  289.652380][T15413] netlink: 'syz.3.2528': attribute type 13 has an invalid length.
[  289.706917][T15413] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig
[  290.310609][T15451] bond24: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  290.317356][T15451] bond24 (unregistering): Released all slaves
[  290.620245][T15477] netlink: 'syz.4.2539': attribute type 4 has an invalid length.
[  290.647458][T15479] SET target dimension over the limit!
[  290.702818][ T5680] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 32888 - 0
[  290.708325][ T5680] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 32888 - 0
[  290.711149][ T5680] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 32888 - 0
[  290.713941][T15485] netlink: 'syz.4.2543': attribute type 13 has an invalid length.
[  290.716661][ T5680] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 32888 - 0
[  290.771618][T15485] 8021q: adding VLAN 0 to HW filter on device bond0
[  290.774935][T15485] 8021q: adding VLAN 0 to HW filter on device team0
[  290.807267][T15485] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  290.967436][T15502] bridge14: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  291.239012][T15529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  292.274439][T15583] 8021q: adding VLAN 0 to HW filter on device bond1
[  292.274678][T15586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.283779][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.291463][T15586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.295114][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.298997][T15586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.302549][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.307450][T15586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.311014][T15583] 8021q: adding VLAN 0 to HW filter on device bond2
[  292.323919][T15583] 8021q: adding VLAN 0 to HW filter on device bond3
[  292.333146][T15583] 8021q: adding VLAN 0 to HW filter on device bond0
[  292.337883][T15583] 8021q: adding VLAN 0 to HW filter on device bond4
[  292.471962][T15585] veth0_macvtap: left allmulticast mode
[  292.474850][T15585] ip6gre3: left promiscuous mode
[  292.479997][T15585] ip6gre3: left allmulticast mode
[  292.484236][T15585] veth21: left promiscuous mode
[  292.492798][T15585] veth25: left promiscuous mode
[  292.495586][T15585] bond30: left promiscuous mode
[  292.499904][T15585] bond31: left promiscuous mode
[  292.502075][T15585] bridge15: left promiscuous mode
[  292.504385][T15585] bridge16: left promiscuous mode
[  292.507005][T15585] bond31: left allmulticast mode
[  292.509179][T15585] bridge15: left allmulticast mode
[  292.511479][T15585] bridge16: left allmulticast mode
[  292.520906][T15585] ipvlan0: left allmulticast mode
[  292.523036][T15585] vlan1: left allmulticast mode
[  292.525417][T15585] gretap0: left allmulticast mode
[  292.527811][T15585] bond32: left allmulticast mode
[  292.530087][T15585] bond33: left allmulticast mode
[  292.532368][T15585] bond34: left allmulticast mode
[  292.534577][T15585] bond35: left allmulticast mode
[  292.538533][T15585] bond36: left allmulticast mode
[  292.540776][T15585] bond37: left allmulticast mode
[  292.542806][T15585] bond38: left allmulticast mode
[  292.544470][T15585] bond39: left allmulticast mode
[  292.546914][T15585] bond40: left allmulticast mode
[  292.548842][T15585] bond41: left allmulticast mode
[  292.550532][T15585] bond42: left allmulticast mode
[  292.552197][T15585] bond43: left allmulticast mode
[  292.553922][T15585] bond44: left allmulticast mode
[  292.556442][T15585] bond45: left allmulticast mode
[  292.558674][T15585] bond46: left allmulticast mode
[  292.561005][T15585] bond47: left allmulticast mode
[  292.563292][T15585] bond48: left allmulticast mode
[  292.566886][T15585] bond49: left allmulticast mode
[  292.568837][T15585] bond50: left allmulticast mode
[  292.570723][T15585] bond51: left allmulticast mode
[  292.572924][T15585] bond52: left allmulticast mode
[  292.575223][T15585] bond53: left allmulticast mode
[  292.577486][T15585] bond54: left allmulticast mode
[  292.579790][T15585] bond55: left allmulticast mode
[  292.581944][T15585] bond56: left allmulticast mode
[  292.583884][T15585] bond57: left allmulticast mode
[  292.585644][T15585] bond58: left allmulticast mode
[  292.587383][T15585] bond59: left allmulticast mode
[  292.589088][T15585] bond60: left allmulticast mode
[  292.590778][T15585] bond61: left allmulticast mode
[  292.592455][T15585] bond62: left allmulticast mode
[  292.594142][T15585] bond63: left allmulticast mode
[  292.596059][T15585] bond64: left allmulticast mode
[  292.597733][T15585] bond65: left allmulticast mode
[  292.599433][T15585] bond66: left allmulticast mode
[  292.601138][T15585] bond67: left allmulticast mode
[  292.602867][T15585] bond68: left allmulticast mode
[  292.604552][T15585] bond69: left allmulticast mode
[  292.606387][T15585] bond70: left allmulticast mode
[  292.608162][T15585] bond71: left allmulticast mode
[  292.609867][T15585] bond72: left allmulticast mode
[  292.611543][T15585] bond73: left allmulticast mode
[  292.613221][T15585] bond74: left allmulticast mode
[  292.614914][T15585] bond75: left allmulticast mode
[  292.616674][T15585] bond76: left allmulticast mode
[  292.618372][T15585] bond77: left allmulticast mode
[  292.620063][T15585] bond78: left allmulticast mode
[  292.621675][T15585] bond79: left allmulticast mode
[  292.623357][T15585] bond80: left allmulticast mode
[  292.633777][ T5795] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 256 - 0
[  292.639339][ T5795] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 256 - 0
[  292.717174][T15595] __nla_validate_parse: 27 callbacks suppressed
[  292.717192][T15595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'.
[  292.723524][T15595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2571'.
[  292.861376][T15598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2572'.
[  292.885429][    C0] bridge0: port 2(dummy0) entered learning state
[  292.896428][ T5795] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 256 - 0
[  293.008816][T15600] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2572'.
[  293.293872][ T5795] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 256 - 0
[  293.340509][T15604] veth0_macvtap: Caught tx_queue_len zero misconfig
[  293.342778][T15606] validate_nla: 3 callbacks suppressed
[  293.342790][T15606] netlink: 'syz.3.2573': attribute type 3 has an invalid length.
[  293.374627][T15604] syzkaller0: entered promiscuous mode
[  293.377275][T15604] syzkaller0: entered allmulticast mode
[  293.388030][T15604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2574'.
[  293.527042][    C0] bridge0: port 1(bridge_slave_1) entered learning state
[  293.535071][    C1] bridge0: port 3(veth0_virt_wifi) entered learning state
[  294.165832][   T51] net_ratelimit: 51 callbacks suppressed
[  294.165845][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.171319][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.174598][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.178603][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.181689][  T100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.184267][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.229108][T15617] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.2576'.
[  294.807531][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.811069][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.977884][T15619] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  294.981170][T15619] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  295.048483][T15620] tipc: Resetting bearer <eth:syzkaller0>
[  295.243577][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2579'.
[  295.248025][T15630] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2579'.
[  295.284746][T15632] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2580'.
[  295.289333][T15633] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2580'.
[  295.354145][T15643] batadv_slave_1: entered promiscuous mode
[  295.357241][T15641] netlink: 'syz.4.2582': attribute type 1 has an invalid length.
[  295.377171][T15641] 8021q: adding VLAN 0 to HW filter on device bond25
[  295.399270][T15641] bond25: (slave geneve3): making interface the new active one
[  295.404390][T15641] bond25: (slave geneve3): Enslaving as an active interface with an up link
[  295.421663][T15643] batadv_slave_1 (unregistering): left promiscuous mode
[  295.434927][ T5795] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.438812][ T5795] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.444619][ T5795] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.448073][ T5795] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.589501][T15657] netlink: 'syz.4.2585': attribute type 13 has an invalid length.
[  295.748905][ T5482] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  295.771515][T15659] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  295.779007][ T5482] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  295.790223][ T5482] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  295.796003][ T5482] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  295.807588][T15659] tipc: Disabling bearer <eth:syzkaller0>
[  295.909318][T15671] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1
[  296.033270][T15679] netlink: 'syz.2.2593': attribute type 1 has an invalid length.
[  296.214623][T15693] netlink: 'syz.3.2597': attribute type 83 has an invalid length.
[  296.330758][T15708] netlink: 'syz.2.2600': attribute type 13 has an invalid length.
[  296.394291][T15712] x_tables: duplicate underflow at hook 1
[  296.444780][T15715] bridge13: entered promiscuous mode
[  297.259099][T15721] dvmrp6: entered allmulticast mode
[  298.165526][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.262519][T15702] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  299.286053][ T7327] net_ratelimit: 3 callbacks suppressed
[  299.286068][ T7327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.291703][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.422811][  T100] tipc: Resetting bearer <eth:syzkaller0>
[  299.598904][T15748] netlink: 'syz.3.2611': attribute type 13 has an invalid length.
[  299.604655][T15748] netlink: 'syz.3.2611': attribute type 17 has an invalid length.
[  299.608304][T15747] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  299.611428][T15747] bridge0: port 2(dummy0) entered disabled state
[  299.614054][T15747] bridge0: port 1(bridge_slave_1) entered disabled state
[  299.650649][T15752] __nla_validate_parse: 4 callbacks suppressed
[  299.650682][T15752] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2611'.
[  299.983622][T15747] tipc: Resetting bearer <eth:syzkaller0>
[  300.016841][T15747] veth1_vlan: left allmulticast mode
[  300.084067][T15748] bridge0: port 2(dummy0) entered blocking state
[  300.086167][T15748] bridge0: port 2(dummy0) entered listening state
[  300.092604][   T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.095243][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.099160][  T100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.101745][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.106091][   T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.109058][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.112237][  T100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.116068][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.121650][T15748] bridge0: port 1(bridge_slave_1) entered blocking state
[  300.124275][T15748] bridge0: port 1(bridge_slave_1) entered listening state
[  300.144837][T15748] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  300.149054][T15748] bridge0: port 3(veth0_virt_wifi) entered listening state
[  300.152024][T15748] veth1_vlan: left promiscuous mode
[  300.154730][T15748] veth0_vlan: left promiscuous mode
[  300.157191][T15748] veth0_vlan: entered promiscuous mode
[  300.175989][T15748] veth1_vlan: entered promiscuous mode
[  300.185440][T15748] ipvlan0: left allmulticast mode
[  300.187767][T15748] veth0_vlan: left allmulticast mode
[  300.196220][T15748] veth0_macvtap: left promiscuous mode
[  300.199011][T15748] veth0_macvtap: entered promiscuous mode
[  300.219558][T15748] 8021q: adding VLAN 0 to HW filter on device bond1
[  300.229467][T15748] 8021q: adding VLAN 0 to HW filter on device bond2
[  300.237367][T15748] 8021q: adding VLAN 0 to HW filter on device bond3
[  300.248743][T15748] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.253434][T15748] 8021q: adding VLAN 0 to HW filter on device bond4
[  300.262109][T15752] bridge0: port 1(bridge_slave_1) entered disabled state
[  300.277685][ T5680] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  300.280415][ T5680] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  300.287390][ T5680] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  300.290540][ T5680] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  300.470318][T15778] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2620'.
[  300.576466][T15788] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2622'.
[  300.598936][T15783] tipc: MTU too low for tipc bearer
[  300.669207][T15801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2624'.
[  300.680420][T15804] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  300.696027][T15804] bond5: (slave lo): Enslaving as an active interface with an up link
[  300.752749][T15809] netlink: 'syz.4.2626': attribute type 1 has an invalid length.
[  300.873739][T15821] netlink: 'syz.2.2631': attribute type 1 has an invalid length.
[  300.884917][T15819] netlink: 'syz.3.2630': attribute type 10 has an invalid length.
[  300.921045][T15819] veth0_vlan: left promiscuous mode
[  300.927868][T15819] veth0_vlan: entered promiscuous mode
[  300.934129][T15819] team0: Device veth0_vlan failed to register rx_handler
[  300.950354][T15828] netlink: 'syz.3.2630': attribute type 13 has an invalid length.
[  300.954077][T15830] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2631'.
[  300.968450][T15831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2633'.
[  300.971885][T15828] netlink: 'syz.3.2630': attribute type 13 has an invalid length.
[  300.976336][ T5482] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  300.979333][ T5482] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  300.984174][ T5482] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  300.988131][ T5482] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  301.032093][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2633'.
[  301.035555][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2633'.
[  301.040034][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2633'.
[  301.043395][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2633'.
[  301.122365][T15849] bridge0: port 2(dummy0) entered disabled state
[  301.126808][T15849] dummy0 (unregistering): left allmulticast mode
[  301.129036][T15849] dummy0 (unregistering): left promiscuous mode
[  301.133509][T15849] bridge0: port 2(dummy0) entered disabled state
[  301.240082][T15859] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  301.878095][T15875] dvmrp6: left allmulticast mode
[  301.880028][T15875] bond5: left allmulticast mode
[  301.902073][T15875] nbd: must specify a device to reconfigure
[  301.904088][T15876] nbd: must specify a device to reconfigure
[  302.032735][T15880] netlink: 'syz.4.2647': attribute type 1 has an invalid length.
[  302.060462][T15880] bond26: entered promiscuous mode
[  302.062754][T15880] 8021q: adding VLAN 0 to HW filter on device bond26
[  302.073573][T15880] ref_ctr_offset mismatch. inode: 0xb4 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0
[  302.098008][T15880] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  302.113276][T15880] bond26: (slave bridge14): making interface the new active one
[  302.118207][T15880] bridge14: entered promiscuous mode
[  302.121792][T15880] bond26: (slave bridge14): Enslaving as an active interface with an up link
[  302.190898][T15885] netlink: 'syz.2.2650': attribute type 1 has an invalid length.
[  302.213309][T15885] syzkaller1: tun_chr_ioctl cmd 1074025677
[  302.216174][T15885] syzkaller1: Refused to change device type
[  302.404705][T15893] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  302.421954][T15893] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  302.583442][T15911] syzkaller0: entered promiscuous mode
[  302.586233][T15911] syzkaller0: entered allmulticast mode
[  302.790921][T15916] netlink: 'syz.4.2657': attribute type 1 has an invalid length.
[  303.432317][T15953] 8021q: VLANs not supported on ip_vti0
[  303.549125][T15967] xt_limit: Overflow, try lower: 324382443/0
[  303.649560][T15975] nbd: must specify at least one socket
[  303.667903][T15976] macsec0: entered promiscuous mode
[  303.711430][T15975] bond24: option miimon: invalid value (18446744073709551607)
[  303.714025][T15975] bond24: option miimon: allowed values 0 - 2147483647
[  303.720540][T15975] bond24 (unregistering): Released all slaves
[  303.760321][T15979] bond27: option lacp_active: invalid value (8)
[  303.763509][T15979] bond27 (unregistering): Released all slaves
[  303.779289][T15972] macsec0: left promiscuous mode
[  303.871542][T15988] bond24: entered promiscuous mode
[  303.891463][T15989] bond5: (slave lo): Releasing backup interface
[  303.895190][T15989] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  303.914893][T15986] bond24: left promiscuous mode
[  304.053066][T16007] netlink: 'syz.4.2682': attribute type 11 has an invalid length.
[  304.199078][T16026] veth0: entered promiscuous mode
[  304.201691][T16026] veth0: left promiscuous mode
[  304.427995][T16046] block nbd4: NBD_DISCONNECT
[  304.748589][T16059] __nla_validate_parse: 19 callbacks suppressed
[  304.748632][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2697'.
[  304.755552][T16059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2697'.
[  304.766125][T16059] geneve4: entered promiscuous mode
[  304.768473][T16059] geneve4: entered allmulticast mode
[  304.771955][ T5795] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.775987][ T5795] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.779683][ T5795] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.782572][ T5795] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.826684][T16063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2698'.
[  304.999553][T16076] validate_nla: 14 callbacks suppressed
[  304.999569][T16076] netlink: 'syz.3.2703': attribute type 1 has an invalid length.
[  305.043574][T16078] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2702'.
[  305.052169][T16079] netlink: 'syz.3.2704': attribute type 58 has an invalid length.
[  305.058195][T16079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2704'.
[  305.081391][T16074] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  305.333277][T16093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2707'.
[  305.345935][T16093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2707'.
[  305.456501][T16108] net_ratelimit: 13 callbacks suppressed
[  305.456512][T16108] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  305.695548][T16117] netlink: 'syz.4.2715': attribute type 9 has an invalid length.
[  305.699301][T16117] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.2715'.
[  305.941935][T16125] netlink: 'syz.4.2716': attribute type 1 has an invalid length.
[  305.973295][T16127] nft_compat: unsupported protocol 0
[  306.003243][T16129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'.
[  306.030536][T16125] 8021q: adding VLAN 0 to HW filter on device bond27
[  306.078992][T16127] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2717'.
[  306.206870][T16131] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.293124][T16131] veth1_macvtap: left promiscuous mode
[  306.296382][T16131] veth0_macvtap: left promiscuous mode
[  306.299200][T16131] veth0_macvtap: entered promiscuous mode
[  306.307658][T16131] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check.
[  306.352979][T16138] syzkaller1: entered promiscuous mode
[  306.354862][T16138] syzkaller1: entered allmulticast mode
[  306.661374][T16158] netlink: 'syz.2.2726': attribute type 1 has an invalid length.
[  306.788232][T16175] sctp: [Deprecated]: syz.2.2729 (pid 16175) Use of int in max_burst socket option.
[  306.788232][T16175] Use struct sctp_assoc_value instead
[  306.841844][T16175] bond83 (unregistering): Released all slaves
[  307.124747][T10465] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  307.301528][T16224] ip6tnl6: entered promiscuous mode
[  310.037155][T16198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  310.112477][T16237] __nla_validate_parse: 2 callbacks suppressed
[  310.112488][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2744'.
[  310.118872][T16237] netlink: 'syz.3.2744': attribute type 20 has an invalid length.
[  310.159526][T16239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2745'.
[  310.212202][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2747'.
[  310.251178][T16248] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2748'.
[  310.274056][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2746'.
[  310.344603][T16261] netlink: 'syz.4.2750': attribute type 1 has an invalid length.
[  310.413621][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2751'.
[  310.420450][T16267] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  310.563909][T16295] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2758'.
[  311.012298][T16317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2765'.
[  311.015839][T16317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2765'.
[  311.021245][T16317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2765'.
[  311.068139][T16317] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  311.568874][ T7636] syz1: Port: 1 Link DOWN
[  311.571557][T10465] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  311.582096][T10465] netdevsim netdevsim3 eth0: unset [0, 1] type 1 family 0 port 256 - 0
[  311.594140][T10465] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.600794][T10465] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  311.612303][T10465] netdevsim netdevsim3 eth1: unset [0, 1] type 1 family 0 port 256 - 0
[  311.616641][T10465] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.619281][T10465] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  311.621897][T10465] netdevsim netdevsim3 eth2: unset [0, 1] type 1 family 0 port 256 - 0
[  311.624558][T10465] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.657757][T10465] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  311.664930][T10465] netdevsim netdevsim3 eth3: unset [0, 1] type 1 family 0 port 256 - 0
[  311.671515][T10465] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.863254][T16348] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.159188][T16392] : renamed from bond0
[  312.207213][T16400] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  312.215661][T16395] xt_CT: You must specify a L4 protocol and not use inversions on it
[  312.279271][T16409] netlink: 'syz.2.2786': attribute type 3 has an invalid length.
[  312.311989][T16409] 8021q: adding VLAN 0 to HW filter on device 
[  312.318508][T16409] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.339816][T16409] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  312.343209][T16409] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  312.351111][T16409] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  312.430547][T16416] bond28 (unregistering): Released all slaves
[  312.703423][T16450] netlink: 'syz.2.2800': attribute type 10 has an invalid length.
[  312.740424][T16450] smc: removing net device wlan0 with user defined pnetid SYZ0
[  312.883868][T16465] netlink: 'syz.2.2804': attribute type 7 has an invalid length.
[  312.894575][T16465] netlink: 'syz.2.2804': attribute type 8 has an invalid length.
[  313.358849][T16499] 8021q: adding VLAN 0 to HW filter on device bond29
[  313.368872][T16499] bond29 (unregistering): Released all slaves
[  313.453334][T16513] netlink: 'syz.2.2813': attribute type 21 has an invalid length.
[  313.806814][T16533] netlink: 'syz.3.2818': attribute type 1 has an invalid length.
[  313.810163][T16536] netlink: 'syz.4.2819': attribute type 3 has an invalid length.
[  313.842741][T16533] bond25: entered promiscuous mode
[  313.850809][T16533] 8021q: adding VLAN 0 to HW filter on device bond25
[  314.044174][T16556] openvswitch: netlink: Flow actions attr not present in new flow.
[  317.095444][T16587] __nla_validate_parse: 356 callbacks suppressed
[  317.095457][T16587] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2832'.
[  317.100386][T16587] openvswitch: netlink: Flow key attr not present in new flow.
[  317.490332][T16617] sctp: [Deprecated]: syz.3.2839 (pid 16617) Use of struct sctp_assoc_value in delayed_ack socket option.
[  317.490332][T16617] Use struct sctp_sack_info instead
[  318.032242][T16654] netlink: 'syz.4.2848': attribute type 3 has an invalid length.
[  318.044620][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2848'.
[  318.048331][T16654] nbd: must specify a size in bytes for the device
[  320.998136][T16654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  321.125993][T16676] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  321.128627][T16677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2852'.
[  321.158747][T16674] bond26: Unable to set peer notification delay as MII monitoring is disabled
[  321.235696][T16674] bond26 (unregistering): Released all slaves
[  321.294176][T16690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2857'.
[  321.434733][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2865'.
[  321.436663][T16708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2863'.
[  321.563811][T16720] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2869'.
[  321.618900][T16726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2872'.
[  321.638570][T16729] netlink: 'syz.2.2873': attribute type 1 has an invalid length.
[  321.642089][T16729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2873'.
[  321.654266][T16726] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2872'.
[  321.867950][T16742] openvswitch: : Dropping previously announced user features
[  321.889732][T16742] openvswitch: : Dropping previously announced user features
[  322.188059][T16763] __nla_validate_parse: 7 callbacks suppressed
[  322.188071][T16763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2884'.
[  322.220943][T16765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2885'.
[  322.276191][T16765] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  322.279372][T16765] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  322.528065][T16774] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2887'.
[  322.573623][T16774] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2887'.
[  322.847317][T16782] netlink: 'syz.3.2890': attribute type 6 has an invalid length.
[  322.955718][T16788] netlink: 'syz.3.2891': attribute type 3 has an invalid length.
[  322.996315][T16788] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  323.061857][T16795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2893'.
[  323.073805][T10465] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  323.073818][T16795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2893'.
[  323.098595][T10465] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  323.102348][T10465] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  323.109109][T10465] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  323.192795][T16806] netlink: 'syz.3.2897': attribute type 1 has an invalid length.
[  323.226940][T16806] bond26: (slave vxcan1): The slave device specified does not support setting the MAC address
[  323.231659][T16806] bond26: (slave vxcan1): Error -95 calling set_mac_address
[  323.272914][T16806] ip6gretap0: entered promiscuous mode
[  323.275306][T16806] ip6gretap0: entered allmulticast mode
[  323.281853][T16806] bond26: (slave ip6gretap0): making interface the new active one
[  323.285588][T16806] bond26: (slave ip6gretap0): Enslaving as an active interface with an up link
[  323.297884][T16809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2898'.
[  323.302214][T16809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2898'.
[  323.367857][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2900'.
[  323.371312][T16818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2900'.
[  323.374936][T16818] netlink: 'syz.3.2900': attribute type 14 has an invalid length.
[  323.378570][T16818] netlink: 'syz.3.2900': attribute type 11 has an invalid length.
[  324.379271][T16835] 8021q: VLANs not supported on sit0
[  324.384842][T16835] openvswitch: netlink: Flow key attr not present in new flow.
[  324.439480][T16839] IPv6: Can't replace route, no match found
[  324.442548][T16839] IPv6: Can't replace route, no match found
[  324.707830][T16839] nbd2: detected capacity change from 0 to 63
[  324.718428][   T55] block nbd2: Receive control failed (result -104)
[  324.722405][T12579] block nbd2: Receive control failed (result -32)
[  324.726221][ T5628] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  324.769807][T16854] openvswitch: netlink: IP tunnel dst address not specified
[  324.777275][T16853] netlink: 'syz.3.2912': attribute type 1 has an invalid length.
[  324.873796][T16860] syzkaller0: entered promiscuous mode
[  324.875705][T16860] syzkaller0: entered allmulticast mode
[  324.931746][T16862] netlink: 'syz.4.2917': attribute type 1 has an invalid length.
[  324.944928][T16862] 8021q: adding VLAN 0 to HW filter on device bond29
[  324.966806][T16862] bond29: (slave veth37): Enslaving as an active interface with a down link
[  324.976086][T16862] bond29: entered allmulticast mode
[  326.472623][T16932] netlink: 'syz.2.2936': attribute type 1 has an invalid length.
[  326.506152][T16932] bond0: entered promiscuous mode
[  326.509779][T16932] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.532476][T16932] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.535788][T16932] bond0: (slave vcan0): The slave device specified does not support setting the MAC address
[  326.539856][T16932] bond0: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  326.550661][T16932] bond0: (slave vcan0): making interface the new active one
[  326.557003][T16932] vcan0: entered promiscuous mode
[  326.562905][T16932] bond0: (slave vcan0): Enslaving as an active interface with an up link
[  326.572710][T16936] pimreg9: entered allmulticast mode
[  326.618697][T16941] netlink: 'syz.2.2938': attribute type 1 has an invalid length.
[  326.663940][T16939] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  328.963990][T16917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  328.971640][T16943] netlink: 'syz.2.2940': attribute type 1 has an invalid length.
[  328.988742][T16943] __nla_validate_parse: 18 callbacks suppressed
[  328.988759][T16943] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2940'.
[  329.175762][T16964] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2946'.
[  329.211974][T16969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2948'.
[  329.216389][T16969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2948'.
[  329.271898][T16969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2948'.
[  329.279778][T16973] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20000
[  329.293073][T16969] netlink: 'syz.4.2948': attribute type 1 has an invalid length.
[  329.324928][T16969] 8021q: adding VLAN 0 to HW filter on device bond30
[  329.328391][T16966] netlink: 'syz.2.2947': attribute type 2 has an invalid length.
[  329.375522][T16969] bond30: (slave veth39): Enslaving as an active interface with a down link
[  329.398777][T16969] bond30: (slave dummy0): making interface the new active one
[  329.405822][T16987] netlink: 'syz.3.2950': attribute type 1 has an invalid length.
[  329.417586][T16969] dummy0: entered promiscuous mode
[  329.421027][T16969] bond30: (slave dummy0): Enslaving as an active interface with an up link
[  329.508093][T16999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2954'.
[  329.514465][T16999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2954'.
[  329.517684][T16999] netlink: 'syz.2.2954': attribute type 4 has an invalid length.
[  329.536013][T17003] netlink: 'syz.4.2952': attribute type 1 has an invalid length.
[  329.546613][T17003] netlink: 'syz.4.2952': attribute type 4 has an invalid length.
[  329.551956][T17003] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2952'.
[  329.562124][T17003] netlink: 'syz.4.2952': attribute type 1 has an invalid length.
[  329.565838][T17003] netlink: 'syz.4.2952': attribute type 4 has an invalid length.
[  329.569188][T17003] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2952'.
[  329.634240][T17006] netlink: 'syz.3.2956': attribute type 2 has an invalid length.
[  329.665900][T17006] x_tables: ip_tables: icmp match: only valid for protocol 1
[  329.674482][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2956'.
[  329.856803][T17031] openvswitch: netlink: Flow actions attr not present in new flow.
[  330.371519][T17037] bond31: (slave vxcan1): The slave device specified does not support setting the MAC address
[  330.376592][T17037] bond31: (slave vxcan1): Error -95 calling set_mac_address
[  330.422697][T17039] bond31: (slave gretap3): making interface the new active one
[  330.428376][T17039] bond31: (slave gretap3): Enslaving as an active interface with an up link
[  330.443994][T17037] bond31: (slave bridge16): Enslaving as an active interface with a down link
[  330.451627][T17037] macvlan0: entered promiscuous mode
[  330.453434][T17037] macvlan0: entered allmulticast mode
[  330.456296][T17037] bond31: entered promiscuous mode
[  330.457995][T17037] gretap3: entered promiscuous mode
[  330.461714][T17037] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  330.467915][T17037] bond31: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap3
[  330.472771][T17037] bond31: left promiscuous mode
[  330.474741][T17037] gretap3: left promiscuous mode
[  330.557349][T17020] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  330.602152][T17041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  330.674499][T17047] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20003
[  330.824335][T17064] syzkaller0: entered promiscuous mode
[  330.829527][T17064] syzkaller0: entered allmulticast mode
[  331.292237][T17089] pimreg: entered allmulticast mode
[  331.297787][T17089] pimreg: left allmulticast mode
[  331.404471][T17084] bond0: left promiscuous mode
[  331.410269][T17084] vcan0: left promiscuous mode
[  331.623187][T17115] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  331.631505][T17115] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  331.633876][T17115] CPU: 1 UID: 0 PID: 17115 Comm: syz.2.2988 Not tainted syzkaller #0 PREEMPT(full) 
[  331.633888][T17115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  331.633893][T17115] Call Trace:
[  331.633898][T17115]  <TASK>
[  331.633902][T17115]  dump_stack_lvl+0xe8/0x150
[  331.633916][T17115]  sysfs_warn_dup+0x8e/0xa0
[  331.633927][T17115]  sysfs_do_create_link_sd+0xc0/0x110
[  331.633937][T17115]  device_add_class_symlinks+0x1cf/0x240
[  331.633950][T17115]  device_add+0x475/0xbb0
[  331.633960][T17115]  wiphy_register+0x1dc5/0x2dc0
[  331.633981][T17115]  ? __pfx_wiphy_register+0x10/0x10
[  331.633992][T17115]  ? __pfx_netdev_run_todo+0x10/0x10
[  331.634003][T17115]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  331.634013][T17115]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  331.634028][T17115]  ieee80211_register_hw+0x3d82/0x4a70
[  331.634047][T17115]  ? ieee80211_register_hw+0x1931/0x4a70
[  331.634071][T17115]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  331.634083][T17115]  ? __asan_memset+0x22/0x50
[  331.634092][T17115]  ? __hrtimer_setup+0x1b7/0x260
[  331.634111][T17115]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  331.634123][T17115]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  331.634144][T17115]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  331.634152][T17115]  ? kstrndup+0xbf/0x160
[  331.634165][T17115]  hwsim_new_radio_nl+0xf6a/0x1c00
[  331.634183][T17115]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  331.634195][T17115]  ? rcu_is_watching+0x15/0xb0
[  331.634206][T17115]  ? trace_kmalloc+0x2a/0xf0
[  331.634219][T17115]  ? __nla_parse+0x40/0x60
[  331.634232][T17115]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  331.634240][T17115]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  331.634251][T17115]  genl_family_rcv_msg_doit+0x22a/0x330
[  331.634261][T17115]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  331.634273][T17115]  ? bpf_lsm_capable+0x9/0x20
[  331.634280][T17115]  ? security_capable+0x7e/0x2c0
[  331.634292][T17115]  genl_rcv_msg+0x61c/0x7a0
[  331.634326][T17115]  ? __pfx_genl_rcv_msg+0x10/0x10
[  331.634334][T17115]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  331.634350][T17115]  netlink_rcv_skb+0x232/0x4b0
[  331.634362][T17115]  ? __pfx_genl_rcv_msg+0x10/0x10
[  331.634371][T17115]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  331.634388][T17115]  ? down_read+0x270/0x2e0
[  331.634396][T17115]  ? genl_rcv+0xd/0x40
[  331.634404][T17115]  genl_rcv+0x28/0x40
[  331.634411][T17115]  netlink_unicast+0x75c/0x8e0
[  331.634424][T17115]  netlink_sendmsg+0x813/0xb40
[  331.634439][T17115]  ? __pfx_netlink_sendmsg+0x10/0x10
[  331.634451][T17115]  ? aa_sock_msg_perm+0xf1/0x1b0
[  331.634461][T17115]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  331.634472][T17115]  ____sys_sendmsg+0x972/0x9f0
[  331.634481][T17115]  ? __might_fault+0xaf/0x130
[  331.634493][T17115]  ? __pfx_____sys_sendmsg+0x10/0x10
[  331.634505][T17115]  ? import_iovec+0x73/0xa0
[  331.634517][T17115]  ___sys_sendmsg+0x2a5/0x360
[  331.634526][T17115]  ? __lock_acquire+0x6b5/0x2cf0
[  331.634536][T17115]  ? __pfx____sys_sendmsg+0x10/0x10
[  331.634548][T17115]  ? futex_wait+0x2a2/0x390
[  331.634567][T17115]  ? __fget_files+0x2a/0x420
[  331.634575][T17115]  ? __fget_files+0x3a0/0x420
[  331.634587][T17115]  __x64_sys_sendmsg+0x1bd/0x2a0
[  331.634597][T17115]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  331.634610][T17115]  ? rcu_is_watching+0x15/0xb0
[  331.634622][T17115]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.634630][T17115]  do_syscall_64+0x15f/0xf80
[  331.634639][T17115]  ? trace_irq_disable+0x3b/0x140
[  331.634650][T17115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.634657][T17115] RIP: 0033:0x7fafb759ce59
[  331.634665][T17115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  331.634671][T17115] RSP: 002b:00007fafb8477028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  331.634680][T17115] RAX: ffffffffffffffda RBX: 00007fafb7815fa0 RCX: 00007fafb759ce59
[  331.634685][T17115] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  331.634689][T17115] RBP: 00007fafb7632d6f R08: 0000000000000000 R09: 0000000000000000
[  331.634693][T17115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  331.634697][T17115] R13: 00007fafb7816038 R14: 00007fafb7815fa0 R15: 00007ffe398313f8
[  331.634709][T17115]  </TASK>
[  331.881938][T17125] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  331.929854][T17125] vlan2: entered allmulticast mode
[  331.931649][T17125] macvtap0: entered allmulticast mode
[  331.975595][T17135] openvswitch: netlink: IP tunnel dst address not specified
[  332.225691][T17151] syzkaller0: entered promiscuous mode
[  332.228021][T17151] syzkaller0: entered allmulticast mode
[  332.804517][T17156] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.829727][T17156] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.908650][T17156] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.974871][T17159] bond28 (unregistering): Released all slaves
[  333.005706][T17156] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.159512][T10465] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  333.190385][T10465] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  333.236187][ T5680] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  333.257361][ T5680] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  333.270054][T17170] syzkaller1: entered allmulticast mode
[  333.447706][T17176] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  333.663486][T17197] sock: sock_set_timeout: `syz.2.3011' (pid 17197) tries to set negative timeout
[  333.766796][T17203] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  334.131700][T17209] bond84: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  334.169011][T17209] bond84 (unregistering): Released all slaves
[  334.318063][T17212] __nla_validate_parse: 18 callbacks suppressed
[  334.318081][T17212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3017'.
[  334.335344][T17212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3017'.
[  334.340862][T17212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3017'.
[  334.344528][T17212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3017'.
[  334.468631][T17218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3019'.
[  334.522758][T17219] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3019'.
[  334.567384][ T7636] tipc: Node number set to 1044058064
[  334.581109][T17225] dvmrp0: entered allmulticast mode
[  334.584912][T17225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3020'.
[  334.617651][T17227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3022'.
[  334.650245][T17230] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3023'.
[  334.717093][T17228] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  334.774553][T17240] xt_CT: You must specify a L4 protocol and not use inversions on it
[  334.780637][T17241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3026'.
[  335.055210][T17260] openvswitch: netlink: Flow actions attr not present in new flow.
[  335.060833][T17263] openvswitch: netlink: Flow actions attr not present in new flow.
[  335.810219][T17307] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  335.878841][T17311] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  335.927290][T17313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.495762][T17339] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  336.611751][T17357] bond0: ARP target 170.170.170.170 is already present
[  336.613881][T17357] bond0: option arp_ip_target: invalid value (2863311530)
[  336.660793][T17363] validate_nla: 5 callbacks suppressed
[  336.660810][T17363] netlink: 'syz.3.3065': attribute type 4 has an invalid length.
[  336.854701][T17383] netlink: 'syz.2.3069': attribute type 1 has an invalid length.
[  336.997285][T17389] netlink: 'syz.2.3071': attribute type 1 has an invalid length.
[  337.072565][T17401] syzkaller1: entered promiscuous mode
[  337.080856][T17401] syzkaller1: entered allmulticast mode
[  338.471543][T17517] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  338.475745][T17517] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  339.136082][T17537] netlink: 'syz.3.3102': attribute type 1 has an invalid length.
[  339.172465][T17537] bond28: (slave geneve6): making interface the new active one
[  339.175732][T17537] bond28: (slave geneve6): Enslaving as an active interface with an up link
[  339.179479][ T5680] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  339.195236][ T5680] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  339.199939][ T5680] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  339.203805][ T5680] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  339.217033][T17541] syzkaller0: entered promiscuous mode
[  339.221252][T17541] syzkaller0: entered allmulticast mode
[  339.255988][T17543] vlan4: entered promiscuous mode
[  339.342380][T17543] netlink: 'syz.3.3104': attribute type 4 has an invalid length.
[  339.430237][T17558] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  339.433384][T17558] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  339.491523][T17570] __nla_validate_parse: 27 callbacks suppressed
[  339.491533][T17570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3111'.
[  339.539282][T17576] netlink: 'syz.2.3113': attribute type 7 has an invalid length.
[  339.635922][T17586] netlink: 'syz.4.3116': attribute type 1 has an invalid length.
[  339.638418][T17586] netlink: 'syz.4.3116': attribute type 2 has an invalid length.
[  339.641053][T17586] netlink: 'syz.4.3116': attribute type 1 has an invalid length.
[  339.644061][T17586] netlink: 'syz.4.3116': attribute type 3 has an invalid length.
[  339.653071][T17586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3116'.
[  339.687700][T17588] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3117'.
[  339.692038][T17588] syzkaller0: entered promiscuous mode
[  339.693852][T17588] syzkaller0: entered allmulticast mode
[  339.699934][T17588] tcf_pedit_act: 7 callbacks suppressed
[  339.699943][T17588] tc action pedit offset must be on 32 bit boundaries
[  339.705415][T17588] tc action pedit offset must be on 32 bit boundaries
[  339.707692][T17588] tc action pedit offset must be on 32 bit boundaries
[  339.709756][T17588] tc action pedit offset must be on 32 bit boundaries
[  339.711768][T17588] tc action pedit offset must be on 32 bit boundaries
[  339.713797][T17588] tc action pedit offset must be on 32 bit boundaries
[  339.716252][T17588] tc action pedit offset must be on 32 bit boundaries
[  339.718294][T17588] tc action pedit offset must be on 32 bit boundaries
[  339.720451][T17588] tc action pedit offset must be on 32 bit boundaries
[  339.722476][T17588] tc action pedit offset must be on 32 bit boundaries
[  339.724559][T17588] 0: reclassify loop, rule prio 0, protocol 800
[  339.726608][T17589] 0: reclassify loop, rule prio 0, protocol 800
[  339.993616][T17602] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3122'.
[  340.080249][T17614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3124'.
[  340.081013][T17615] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3125'.
[  340.120333][T17618] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3127'.
[  340.181273][T17622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3126'.
[  340.256837][T17627] pim6reg: entered allmulticast mode
[  340.265676][T17627] bridge0: left allmulticast mode
[  340.277294][T17626] pim6reg: left allmulticast mode
[  340.354267][T17637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3134'.
[  340.450351][T17654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3138'.
[  340.515965][ T5482] dummy0: left promiscuous mode
[  341.058405][T17708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  341.063496][T17708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  341.074384][T17708] veth1_vlan: left promiscuous mode
[  341.078040][T17708] veth0_vlan: left promiscuous mode
[  341.081184][T17708] veth0_vlan: entered promiscuous mode
[  341.087561][T17708] veth1_vlan: entered promiscuous mode
[  341.099700][T17708] veth0_macvtap: left promiscuous mode
[  341.107270][T17708] veth0_macvtap: entered promiscuous mode
[  341.114701][T17708] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  341.126910][   T65] bridge0: port 1(bridge_slave_1) entered blocking state
[  341.129872][   T65] bridge0: port 1(bridge_slave_1) entered listening state
[  341.142807][   T65] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  341.145813][   T65] bridge0: port 3(veth0_virt_wifi) entered listening state
[  341.163469][ T5680] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  341.167911][ T5680] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  341.172065][ T5680] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  341.176338][   T10] syz1: Port: 1 Link ACTIVE
[  341.184487][ T5680] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  341.678892][T17695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  342.103568][T17754] tap0: tun_chr_ioctl cmd 1074025680
[  342.180654][T17758] sctp: [Deprecated]: syz.3.3163 (pid 17758) Use of struct sctp_assoc_value in delayed_ack socket option.
[  342.180654][T17758] Use struct sctp_sack_info instead
[  342.314068][T17768] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.431839][T17777] validate_nla: 70 callbacks suppressed
[  342.431851][T17777] netlink: 'syz.3.3169': attribute type 1 has an invalid length.
[  342.447869][T17777] 8021q: adding VLAN 0 to HW filter on device bond29
[  342.460649][T17777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  343.239044][T17806] sctp: [Deprecated]: syz.2.3177 (pid 17806) Use of int in max_burst socket option deprecated.
[  343.239044][T17806] Use struct sctp_assoc_value instead
[  343.284308][ T5482] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  343.290810][ T5482] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  343.296728][ T5482] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  343.300828][ T5482] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  343.573015][ T5482] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  343.682756][T17846] syzkaller0: entered promiscuous mode
[  343.687117][T17846] syzkaller0: entered allmulticast mode
[  343.692305][T17843] netlink: 'syz.3.3184': attribute type 9 has an invalid length.
[  343.791680][T17846] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  343.796939][T17846] tipc: Resetting bearer <eth:syzkaller0>
[  343.799132][T17846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.802983][T17846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.808825][T17845] tipc: Resetting bearer <eth:syzkaller0>
[  343.825782][T17845] tipc: Disabling bearer <eth:syzkaller0>
[  343.874252][T17858] : renamed from bond_slave_0 (while UP)
[  343.913637][T17862] netlink: 'syz.4.3192': attribute type 8 has an invalid length.
[  344.059200][T17873] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  344.062364][T17873] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  344.113891][T17878] syzkaller0: entered promiscuous mode
[  344.117065][T17878] syzkaller0: entered allmulticast mode
[  344.121465][T17880] netlink: 'syz.2.3197': attribute type 13 has an invalid length.
[  344.124055][T17880] netlink: 'syz.2.3197': attribute type 17 has an invalid length.
[  344.207465][T17884] team0: entered promiscuous mode
[  344.240874][T17888] sctp: [Deprecated]: syz.4.3199 (pid 17888) Use of struct sctp_assoc_value in delayed_ack socket option.
[  344.240874][T17888] Use struct sctp_sack_info instead
[  344.988497][T17910] __nla_validate_parse: 152 callbacks suppressed
[  344.988509][T17910] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3203'.
[  345.032643][T17912] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  345.040501][T17912] syzkaller0: entered promiscuous mode
[  345.042980][T17912] syzkaller0: entered allmulticast mode
[  345.054955][T17912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.059119][T17911] tipc: Resetting bearer <eth:syzkaller0>
[  345.077774][T17911] tipc: Disabling bearer <eth:syzkaller0>
[  345.203614][T17917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3206'.
[  345.224413][T17917] geneve4: entered promiscuous mode
[  345.229882][T10465] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.236029][T10465] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.246526][T10465] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.249256][T10465] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.323204][T17928] netlink: 'syz.2.3209': attribute type 4 has an invalid length.
[  345.564259][T17954] syzkaller0: entered promiscuous mode
[  345.566773][T17954] syzkaller0: entered allmulticast mode
[  345.688071][T17964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3219'.
[  345.740590][T17973] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3222'.
[  345.748158][T17973] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3222'.
[  345.760254][T17971] pim6reg: left allmulticast mode
[  345.762516][T17968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3220'.
[  345.765857][T17971] bridge0: left allmulticast mode
[  345.767673][T17968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3220'.
[  345.819587][T17979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3223'.
[  346.016612][T17996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3228'.
[  346.048862][T18000] netlink: 'syz.3.3229': attribute type 7 has an invalid length.
[  346.052897][T18000] netlink: 'syz.3.3229': attribute type 7 has an invalid length.
[  346.056873][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3229'.
[  346.124931][T18006] bond2: entered allmulticast mode
[  346.127364][T18006] ip6gre1: entered allmulticast mode
[  346.145190][T18002] netlink: 'syz.2.3226': attribute type 10 has an invalid length.
[  346.909820][T18035] bond30: (slave bond_slave_1): Device is not bonding slave
[  346.912892][T18035] bond30: option active_slave: invalid value (bond_slave_1)
[  346.934860][T18035] bond30 (unregistering): Released all slaves
[  346.948822][T18043] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1
[  346.970673][T18040] bond0: entered allmulticast mode
[  346.972880][T18040] vcan0: entered allmulticast mode
[  346.998920][T18043] tipc: Resetting bearer <eth:xfrm0>
[  347.005928][T18043] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  347.030310][T18043] veth0_to_bond: default FDB implementation only supports local addresses
[  347.672190][T18087] openvswitch: netlink: Flow actions attr not present in new flow.
[  347.923400][T18109] vlan2: left allmulticast mode
[  347.927896][T18109] macvtap0: left allmulticast mode
[  347.959487][T18109] geneve4: left promiscuous mode
[  347.967869][ T5482] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  347.972541][ T5482] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  347.981455][ T5482] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  347.990979][ T5482] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  348.002449][ T5482] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  348.006363][ T5482] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  348.009877][ T5482] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  348.012597][ T5482] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  348.087286][T18118] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  348.147849][T18125] xt_l2tp: v2 doesn't support IP mode
[  348.150971][T18125] netlink: 'syz.4.3265': attribute type 13 has an invalid length.
[  348.721539][T18151] openvswitch: netlink: Tunnel attr 333 out of range max 16
[  348.782427][T18156] netlink: 'syz.4.3274': attribute type 13 has an invalid length.
[  348.785373][T18156] netlink: 'syz.4.3274': attribute type 17 has an invalid length.
[  348.789715][T18156] gretap0: refused to change device tx_queue_len
[  348.792228][T18156] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  349.029024][T18169] tipc: Enabling of bearer <eth:gre0> rejected, max 3 bearers permitted
[  349.047332][T18175] netlink: 'syz.2.3279': attribute type 3 has an invalid length.
[  349.236580][T18182] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  349.272169][T18187] netlink: 'syz.2.3282': attribute type 1 has an invalid length.
[  349.284318][T18188] netlink: 'syz.2.3282': attribute type 1 has an invalid length.
[  349.450361][T18199] bridge21: entered promiscuous mode
[  349.558305][T18201] sctp: [Deprecated]: syz.2.3286 (pid 18201) Use of struct sctp_assoc_value in delayed_ack socket option.
[  349.558305][T18201] Use struct sctp_sack_info instead
[  349.786041][T18213] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  349.789203][T18213] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  349.792345][T18213] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  349.824592][T18213] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  349.828804][T18213] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  349.832732][T18213] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  349.863778][T18216] netlink: 'syz.2.3289': attribute type 10 has an invalid length.
[  349.882539][T18213] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  349.885884][T18213] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  349.889154][T18213] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  349.928802][T18213] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  349.932749][T18213] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  349.936642][T18213] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  350.010884][ T5482] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  350.014302][ T5482] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  350.017928][ T5482] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  350.028620][ T5482] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  350.032236][ T5482] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  350.036127][ T5482] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  350.044788][ T5482] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  350.048425][ T5482] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  350.051903][ T5482] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  350.060891][ T5482] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  350.064460][ T5482] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  350.068195][ T5482] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  350.616550][T18219] __nla_validate_parse: 15 callbacks suppressed
[  350.616567][T18219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3291'.
[  350.638840][T18219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  350.659748][T18222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3292'.
[  350.776230][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3292'.
[  350.785937][T18226] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3293'.
[  350.880154][T18234] netlink: 'syz.3.3295': attribute type 62 has an invalid length.
[  350.978134][T18232] netlink: 516 bytes leftover after parsing attributes in process `syz.2.3294'.
[  350.981179][T18241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3297'.
[  351.058958][T18248] netlink: 'syz.3.3299': attribute type 29 has an invalid length.
[  351.061564][T18248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3299'.
[  351.075587][T18248] netlink: 'syz.3.3299': attribute type 29 has an invalid length.
[  351.078329][T18248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3299'.
[  351.081365][T18248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3299'.
[  351.084394][T18248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3299'.
[  351.097154][T18248] hsr0: entered promiscuous mode
[  354.045246][T18250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  354.105627][T18289] validate_nla: 52 callbacks suppressed
[  354.105639][T18289] netlink: 'syz.3.3308': attribute type 13 has an invalid length.
[  354.147843][T18289] hsr0: left promiscuous mode
[  354.205268][T18304] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig
[  354.241250][T18308] xt_hashlimit: size too large, truncated to 1048576
[  354.507313][T18329] netlink: 'syz.2.3316': attribute type 29 has an invalid length.
[  354.572189][T18338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.583215][T18338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.978788][   T52] block nbd2: Connection timed out, retrying (0/2 alive)
[  354.983429][   T52] block nbd2: Connection timed out, retrying (0/2 alive)
[  354.985990][   T52] block nbd2: Connection timed out, retrying (0/2 alive)
[  354.988999][   T52] block nbd2: Connection timed out, retrying (0/2 alive)
[  354.992520][   T52] block nbd2: Dead connection, failed to find a fallback
[  354.996133][   T52] block nbd2: shutting down sockets
[  354.998596][   T52] blk_print_req_error: 27 callbacks suppressed
[  354.998606][   T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  355.005408][   T52] buffer_io_error: 27 callbacks suppressed
[  355.005417][   T52] Buffer I/O error on dev nbd2, logical block 0, async page read
[  355.011406][   T52] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  355.015249][   T52] Buffer I/O error on dev nbd2, logical block 3, async page read
[  355.018459][   T52] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  355.022022][   T52] Buffer I/O error on dev nbd2, logical block 2, async page read
[  355.027434][   T52] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  355.031385][   T52] Buffer I/O error on dev nbd2, logical block 1, async page read
[  355.034730][T15523] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  355.041308][T15523] Buffer I/O error on dev nbd2, logical block 0, async page read
[  355.044799][T15523] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  355.050993][T15523] Buffer I/O error on dev nbd2, logical block 1, async page read
[  355.054474][T15523] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  355.059763][T15523] Buffer I/O error on dev nbd2, logical block 2, async page read
[  355.063543][T15523] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  355.067721][T15523] Buffer I/O error on dev nbd2, logical block 3, async page read
[  355.071167][T15523] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  355.074898][T15523] Buffer I/O error on dev nbd2, logical block 0, async page read
[  355.078869][T15523] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  355.082793][T15523] Buffer I/O error on dev nbd2, logical block 1, async page read
[  355.090500][T15523] ldm_validate_partition_table(): Disk read failed.
[  355.096597][T15523] Dev nbd2: unable to read RDB block 0
[  355.100795][T15523]  nbd2: unable to read partition table
[  355.127023][T15523] ldm_validate_partition_table(): Disk read failed.
[  355.131287][T15523] Dev nbd2: unable to read RDB block 0
[  355.136502][T15523]  nbd2: unable to read partition table
[  356.255391][    C0] bridge0: port 3(veth0_virt_wifi) entered learning state
[  356.258500][    C0] bridge0: port 1(bridge_slave_1) entered learning state
[  357.552224][T18336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  357.647549][T18357] __nla_validate_parse: 54 callbacks suppressed
[  357.647560][T18357] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3321'.
[  357.684446][T18359] netlink: 'syz.3.3323': attribute type 1 has an invalid length.
[  357.719256][T18359] 8021q: adding VLAN 0 to HW filter on device bond30
[  357.722516][T18365] batadv_slave_1: entered promiscuous mode
[  357.724118][T18363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3325'.
[  357.734695][T18359] veth23: entered allmulticast mode
[  357.740546][T18359] bond30: (slave veth23): Enslaving as an active interface with an up link
[  357.759912][T18359] bond30 (unregistering): (slave veth23): Releasing backup interface
[  357.765840][T18359] bond30 (unregistering): Released all slaves
[  357.777399][T18362] batadv_slave_1: left promiscuous mode
[  357.871851][T18378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3327'.
[  357.886458][T18386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3329'.
[  357.887083][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3329'.
[  357.923944][T18392] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3330'.
[  357.931672][T18392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3330'.
[  358.013061][T18404] netlink: 'syz.2.3330': attribute type 1 has an invalid length.
[  358.036458][T18404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3330'.
[  358.146411][T18417] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.3336'.
[  358.232128][T18429] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  358.236761][T18429] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  358.250096][T18431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3340'.
[  358.260696][T18431] ip6tnl7: entered allmulticast mode
[  358.303335][T18432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  358.544772][T18448] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  358.961573][T18465] netlink: 'syz.2.3352': attribute type 32 has an invalid length.
[  359.042602][T18470] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  359.153383][T18474] vlan0: entered promiscuous mode
[  359.534472][T18505] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  359.551186][T18505] bond5: (slave lo): Enslaving as an active interface with an up link
[  359.557891][T18505] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  359.564652][T18505] netlink: 'syz.3.3364': attribute type 39 has an invalid length.
[  359.705279][T18523] netlink: 'syz.4.3369': attribute type 4 has an invalid length.
[  359.750708][T18528] ip6gre4: entered promiscuous mode
[  359.754419][T18530] bond5: entered allmulticast mode
[  359.758049][T18528] netlink: 'syz.2.3370': attribute type 30 has an invalid length.
[  361.765232][ T5628] Bluetooth: hci2: command 0x0406 tx timeout
[  361.767203][T18527] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  361.770640][T18527] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  362.656231][T18513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  362.659855][T18527] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  362.663927][T18527] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  362.747547][T18537] __nla_validate_parse: 83 callbacks suppressed
[  362.747558][T18537] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3372'.
[  362.783037][T18542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3374'.
[  362.813783][T18546] xt_policy: output policy not valid in PREROUTING and INPUT
[  362.882589][T18561] x_tables: duplicate underflow at hook 1
[  363.055794][T18569] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  363.064368][T18571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3379'.
[  363.097988][T18569] tipc: Resetting bearer <eth:syzkaller0>
[  363.162839][T18576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3381'.
[  363.196890][T18576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3381'.
[  363.203509][T18576] vlan5: entered allmulticast mode
[  363.206167][T18576] macvtap0: entered allmulticast mode
[  363.207918][T18576] veth0_macvtap: entered allmulticast mode
[  363.277866][T18589] openvswitch: netlink: Missing key (keys=40, expected=80)
[  363.460113][T18603] netlink: 'syz.3.3388': attribute type 1 has an invalid length.
[  363.481139][T18603] bond30: (slave vxcan1): The slave device specified does not support setting the MAC address
[  363.484728][T18603] bond30: (slave vxcan1): Error -95 calling set_mac_address
[  363.526357][T18605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3388'.
[  363.539343][T18605] bond30: (slave bridge20): Enslaving as an active interface with a down link
[  363.546878][T18603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3388'.
[  363.550741][T18603] 8021q: adding VLAN 0 to HW filter on device bond30
[  363.687207][T18609] netlink: 'syz.3.3390': attribute type 1 has an invalid length.
[  363.708529][T18609] bond31: (slave bridge21): Enslaving as a backup interface with an up link
[  363.715821][T18609] macvlan2: entered promiscuous mode
[  363.718495][T18609] macvlan2: entered allmulticast mode
[  363.721534][T18609] bond31: entered promiscuous mode
[  363.723301][T18609] bridge21: entered promiscuous mode
[  363.726319][T18609] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  363.729294][T18609] bond31: left promiscuous mode
[  363.730975][T18609] bridge21: left promiscuous mode
[  363.844235][T18622] IPv6: NLM_F_CREATE should be specified when creating new route
[  363.847105][T18622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3394'.
[  363.850440][T18622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3394'.
[  363.853613][T18622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3394'.
[  364.142376][T18652] netlink: 'syz.3.3403': attribute type 1 has an invalid length.
[  364.158064][T18659] netlink: 'syz.2.3404': attribute type 1 has an invalid length.
[  364.162338][T18652] workqueue: Failed to create a rescuer kthread for wq "bond32": -EINTR
[  364.219675][T18675] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  364.292410][T18687] x_tables: duplicate underflow at hook 2
[  364.308404][T18691] netlink: 'syz.2.3412': attribute type 10 has an invalid length.
[  364.467092][T18702] syzkaller0: entered promiscuous mode
[  364.471535][T18702] syzkaller0: entered allmulticast mode
[  364.479784][T18702] tc action pedit 'at' offset -2147483647 out of bounds
[  364.483382][T18702] tc action pedit 'at' offset -2147483647 out of bounds
[  364.485616][T18702] tc action pedit 'at' offset -2147483647 out of bounds
[  364.487747][T18702] tc action pedit 'at' offset -2147483647 out of bounds
[  364.489893][T18702] tc action pedit 'at' offset -2147483647 out of bounds
[  364.491952][T18702] tc action pedit 'at' offset -2147483647 out of bounds
[  364.493983][T18702] tc action pedit 'at' offset -2147483647 out of bounds
[  364.496219][T18702] tc action pedit 'at' offset -2147483647 out of bounds
[  364.498452][T18702] tc action pedit 'at' offset -2147483647 out of bounds
[  364.500649][T18702] tc action pedit 'at' offset -2147483647 out of bounds
[  364.502828][T18702] 0: reclassify loop, rule prio 0, protocol 800
[  364.513747][T18704] ip6tnl0: Caught tx_queue_len zero misconfig
[  364.514172][T18702] netlink: 'syz.2.3415': attribute type 1 has an invalid length.
[  364.558733][T18706] netlink: 'syz.3.3418': attribute type 1 has an invalid length.
[  364.578420][T18706] 8021q: adding VLAN 0 to HW filter on device bond32
[  364.597573][T18706] macvlan2: entered promiscuous mode
[  364.599815][T18706] macvlan2: entered allmulticast mode
[  364.683558][T18712] bridge22: entered promiscuous mode
[  364.748088][T18714] lo: Caught tx_queue_len zero misconfig
[  365.006112][T18727] bond5: (slave lo): Releasing backup interface
[  365.010414][T18727] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  365.019490][T18727] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  365.317076][T18757] netlink: 'syz.3.3433': attribute type 3 has an invalid length.
[  365.390080][T18761] vlan0: left promiscuous mode
[  365.401895][T18761] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  365.520175][T18767] ip6_vti0: entered promiscuous mode
[  365.560112][T18764] netlink: 'syz.4.3435': attribute type 16 has an invalid length.
[  365.570028][T18764] netlink: 'syz.4.3435': attribute type 17 has an invalid length.
[  365.612831][T18764] team0: left promiscuous mode
[  365.635240][T18764] tipc: Resetting bearer <eth:xfrm0>
[  365.652656][T18764] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  365.687572][T18783] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  365.943325][T18804] gtp4: entered promiscuous mode
[  365.945674][T18804] gtp4: entered allmulticast mode
[  366.131371][   T33] audit: type=1804 audit(1778899484.989:4): pid=18813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3443" name="/newroot/1125/memory.events" dev="tmpfs" ino=5764 res=1 errno=0
[  366.140358][   T33] audit: type=1800 audit(1778899484.999:5): pid=18813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3443" name="memory.events" dev="tmpfs" ino=5764 res=0 errno=0
[  366.144024][T18818] macvtap1: entered promiscuous mode
[  366.154357][T18818] team0: entered promiscuous mode
[  366.159371][T18818] team0: Device macvtap1 is already an upper device of the team interface
[  366.170245][T18818] team0: left promiscuous mode
[  366.189960][T18820] : renamed from lo (while UP)
[  366.214176][T18822] ip6tnl5: entered promiscuous mode
[  366.386278][T18833] netlink: 'syz.4.3450': attribute type 1 has an invalid length.
[  366.836167][T18857] vlan6: entered promiscuous mode
[  367.120500][T18874] netlink: 'syz.4.3460': attribute type 1 has an invalid length.
[  367.200853][T18874] 8021q: adding VLAN 0 to HW filter on device bond32
[  367.237680][T18874] vlan4: entered allmulticast mode
[  367.242788][T18874] bond32: entered allmulticast mode
[  367.281432][T18874] bond32: (slave geneve5): making interface the new active one
[  367.291268][T18874] geneve5: entered allmulticast mode
[  367.308200][T18874] bond32: (slave geneve5): Enslaving as an active interface with an up link
[  367.315399][T18881] : renamed from wg2
[  367.449381][T18888] netlink: 'syz.2.3463': attribute type 1 has an invalid length.
[  367.483003][T18888] bond85: (slave vxcan5): The slave device specified does not support setting the MAC address
[  367.487216][T18888] bond85: (slave vxcan5): Error -95 calling set_mac_address
[  367.545880][T18891] bond85: (slave bridge24): Enslaving as an active interface with a down link
[  367.559136][T18888] ip6gretap2: entered promiscuous mode
[  367.561380][T18888] ip6gretap2: entered allmulticast mode
[  367.568932][T18888] bond85: (slave ip6gretap2): making interface the new active one
[  367.572606][T18888] bond85: (slave ip6gretap2): Enslaving as an active interface with an up link
[  367.603798][T18893] bridge19: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  367.764074][T18899] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  367.771213][T18899] __nla_validate_parse: 56 callbacks suppressed
[  367.771223][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3466'.
[  367.776597][T18901] netlink: 'syz.2.3467': attribute type 4 has an invalid length.
[  367.783044][T18901] netlink: 'syz.2.3467': attribute type 4 has an invalid length.
[  367.783767][T18899] netlink: 'syz.3.3466': attribute type 5 has an invalid length.
[  367.789104][T18899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3466'.
[  367.876468][T18905] team_slave_1: Caught tx_queue_len zero misconfig
[  367.890409][T18905] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3468'.
[  367.966736][T18907] netlink: 296 bytes leftover after parsing attributes in process `syz.3.3469'.
[  368.087788][T18921] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3472'.
[  368.090793][T18921] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3472'.
[  368.123806][T18923] netlink: 'syz.3.3473': attribute type 1 has an invalid length.
[  368.136650][T18923] bond33: entered promiscuous mode
[  368.138606][T18923] 8021q: adding VLAN 0 to HW filter on device bond33
[  368.169054][T18926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3474'.
[  368.241101][T18930] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3476'.
[  368.378361][T18934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3478'.
[  368.381619][T18934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3478'.
[  369.095483][T18993] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  370.092173][T19042] nbd: must specify a size in bytes for the device
[  370.114469][T19039] bond86: (slave bridge25): making interface the new active one
[  370.122236][T19039] bond86: (slave bridge25): Enslaving as an active interface with an up link
[  370.181170][T19051] --map-set only usable from mangle table
[  370.396890][T19055] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  370.400177][T19059] validate_nla: 25 callbacks suppressed
[  370.400187][T19059] netlink: 'syz.2.3509': attribute type 13 has an invalid length.
[  370.412849][T19059] netlink: 'syz.2.3509': attribute type 17 has an invalid length.
[  370.478170][T19059] 8021q: adding VLAN 0 to HW filter on device 
[  370.483675][T19059] 8021q: adding VLAN 0 to HW filter on device batadv0
[  370.523998][T19059] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  370.527496][T19059] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  370.533412][T19059] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  370.610260][T19069] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  370.739403][T19069] block nbd3: server does not support multiple connections per device.
[  370.751113][T19069] block nbd3: shutting down sockets
[  370.765493][T19070] netlink: 'syz.3.3512': attribute type 11 has an invalid length.
[  370.861023][T19080] bond35: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  370.868230][T19080] bond35 (unregistering): Released all slaves
[  370.979460][T19085] netlink: 'syz.3.3517': attribute type 1 has an invalid length.
[  371.002277][T19086] bond35: entered promiscuous mode
[  371.004247][T19086] bond35: entered allmulticast mode
[  371.008400][T19086] 8021q: adding VLAN 0 to HW filter on device bond35
[  371.045958][T19096] netlink: 'syz.3.3519': attribute type 12 has an invalid length.
[  371.054036][T19091] netlink: 'syz.4.3518': attribute type 12 has an invalid length.
[  371.412472][T19130] syzkaller0: entered promiscuous mode
[  371.541810][T19132] team1: entered promiscuous mode
[  371.544105][T19132] team1: entered allmulticast mode
[  371.547768][T19132] 8021q: adding VLAN 0 to HW filter on device team1
[  371.556593][T19132] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  371.578908][T19132] team2: entered promiscuous mode
[  371.581152][T19132] team2: entered allmulticast mode
[  371.583600][T19132] 8021q: adding VLAN 0 to HW filter on device team2
[  371.605181][    C0] bridge0: port 1(bridge_slave_1) entered forwarding state
[  371.608296][    C0] bridge0: topology change detected, propagating
[  371.611257][    C0] bridge0: port 3(veth0_virt_wifi) entered forwarding state
[  371.614258][    C0] bridge0: topology change detected, propagating
[  371.631055][T19134] bond0 (unregistering): Released all slaves
[  372.451243][T19155] 8021q: adding VLAN 0 to HW filter on device bond87
[  372.861758][T19191] __nla_validate_parse: 40 callbacks suppressed
[  372.861770][T19191] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3544'.
[  372.868238][T19193] netlink: 'syz.3.3546': attribute type 12 has an invalid length.
[  372.870758][T19193] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.3546'.
[  373.026188][T19209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3551'.
[  373.064210][T19211] geneve1: entered promiscuous mode
[  373.093534][T19214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3553'.
[  373.105600][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3553'.
[  373.162865][T19215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3553'.
[  373.703857][T19221] netlink: 'syz.4.3555': attribute type 3 has an invalid length.
[  373.912796][T19226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3556'.
[  374.172029][T19256] netlink: 'syz.4.3564': attribute type 1 has an invalid length.
[  374.182911][T19251] tipc: Resetting bearer <eth:xfrm0>
[  374.211934][T19251] veth11: left allmulticast mode
[  374.213665][T19251] ip6erspan1: left allmulticast mode
[  374.215754][T19251] vlan3: left allmulticast mode
[  374.217365][T19251] geneve1: left allmulticast mode
[  374.219802][T19251] gtp0: left allmulticast mode
[  374.221510][T19251] ip6tnl1: left allmulticast mode
[  374.226509][T19251] vlan0: left promiscuous mode
[  374.228146][T19251] erspan0: left promiscuous mode
[  374.230195][T19251] gtp1: left promiscuous mode
[  374.231762][T19251] gtp1: left allmulticast mode
[  374.233367][T19251] vti0: left promiscuous mode
[  374.237006][T19251] bond23: left promiscuous mode
[  374.238470][T19251] bond23: left allmulticast mode
[  374.240045][T19251] geneve2: left promiscuous mode
[  374.243115][T19251] bridge13: left promiscuous mode
[  374.247620][T19251] bond26: left promiscuous mode
[  374.249317][T19251] bridge14: left promiscuous mode
[  374.258971][T19251] geneve4: left promiscuous mode
[  374.261099][T19251] geneve4: left allmulticast mode
[  374.271989][T19251] ip6tnl6: left promiscuous mode
[  374.280175][T19251] bond29: left allmulticast mode
[  374.318473][T19251] vlan4: left allmulticast mode
[  374.320709][T19251] bond32: left allmulticast mode
[  374.322935][T19251] geneve5: left allmulticast mode
[  374.327559][T19251] team1: left promiscuous mode
[  374.329655][T19251] team1: left allmulticast mode
[  374.332806][T19251] team2: left promiscuous mode
[  374.336192][T19251] team2: left allmulticast mode
[  374.360165][ T5795] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  374.369490][ T5795] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  374.376595][ T5795] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  374.384354][ T5795] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  374.530444][T19270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3568'.
[  374.534356][T19270] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3568'.
[  374.538480][T19270] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3568'.
[  374.581588][T19280] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  374.643526][T19286] netlink: 'syz.2.3571': attribute type 4 has an invalid length.
[  374.658258][T19286] netlink: 'syz.2.3571': attribute type 4 has an invalid length.
[  375.031328][T19309] 8021q: adding VLAN 0 to HW filter on device bond88
[  375.043578][T19309] vlan3: entered promiscuous mode
[  375.047492][T19309] bond88: entered promiscuous mode
[  375.049347][T19309] vlan3: entered allmulticast mode
[  375.051085][T19309] bond88: entered allmulticast mode
[  375.540064][T19320] syzkaller0: entered promiscuous mode
[  375.542483][T19320] syzkaller0: entered allmulticast mode
[  375.570015][T19320] bond33: entered promiscuous mode
[  375.572301][T19320] bond33: entered allmulticast mode
[  375.574905][T19320] 8021q: adding VLAN 0 to HW filter on device bond33
[  375.582596][T19320] bond33 (unregistering): Released all slaves
[  375.864666][T19323] 8021q: adding VLAN 0 to HW filter on device bond33
[  375.907001][T19331] syzkaller0: entered promiscuous mode
[  375.909228][T19331] syzkaller0: entered allmulticast mode
[  375.942165][T19331] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  375.954529][T19331] tipc: Resetting bearer <eth:syzkaller0>
[  375.962846][T19331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.967410][T19331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.974175][T19329] tipc: Resetting bearer <eth:syzkaller0>
[  375.986603][T19329] tipc: Disabling bearer <eth:syzkaller0>
[  376.148016][T19348] validate_nla: 1 callbacks suppressed
[  376.148033][T19348] netlink: 'syz.2.3590': attribute type 1 has an invalid length.
[  376.316472][T19355] 8021q: adding VLAN 0 to HW filter on device bond34
[  377.822032][T19363] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0
[  377.906168][T19375] __nla_validate_parse: 15 callbacks suppressed
[  377.906186][T19375] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3595'.
[  377.912369][T19375] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3595'.
[  378.036241][T19390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3599'.
[  378.044026][T19390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3599'.
[  378.054547][T19392] netlink: 'syz.2.3600': attribute type 1 has an invalid length.
[  378.265110][T19390] nbd3: detected capacity change from 0 to 63
[  378.273234][T12579] block nbd3: Receive control failed (result -104)
[  378.278998][   T56] block nbd3: Receive control failed (result -32)
[  378.351935][T19408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3603'.
[  378.387686][T19412] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  378.390672][T19412] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  378.442750][T19416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3604'.
[  378.687194][T19434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3610'.
[  378.967996][T19436] netlink: 'syz.4.3611': attribute type 3 has an invalid length.
[  378.971250][T19436] netlink: 'syz.4.3611': attribute type 3 has an invalid length.
[  379.050949][T19438] 8021q: VLANs not supported on ip_vti0
[  379.065642][T19438] bond35: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  379.069508][T19438] bond35 (unregistering): Released all slaves
[  379.108072][T19440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3612'.
[  379.111850][T19440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3612'.
[  379.301292][T19443] bond30: (slave dummy0): Releasing active interface
[  379.307014][T19443] bond25: (slave geneve3): Releasing active interface
[  379.312176][T19443] bond26: (slave bridge14): Releasing backup interface
[  379.319267][T19443] bond29: (slave veth37): Releasing active interface
[  379.334726][T19443] bond30: (slave veth39): Releasing active interface
[  379.348270][T19443] bond31: (slave gretap3): Releasing active interface
[  379.354566][T19443] bond31: (slave bridge16): Releasing active interface
[  379.363398][T19443] bond32: (slave geneve5): Releasing active interface
[  379.813866][T19456] netlink: 'syz.3.3617': attribute type 1 has an invalid length.
[  379.857349][T19458] netlink: 'syz.3.3618': attribute type 10 has an invalid length.
[  379.883659][T19460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3619'.
[  379.902353][T19460] 8021q: adding VLAN 0 to HW filter on device bond38
[  380.125937][T12579] block nbd5: Receive control failed (result -32)
[  380.209630][T19480] syzkaller0: entered promiscuous mode
[  380.215678][T19480] syzkaller0: entered allmulticast mode
[  380.249704][T19480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  380.257429][T19479] tipc: Resetting bearer <eth:syzkaller0>
[  380.271555][T19479] tipc: Disabling bearer <eth:syzkaller0>
[  380.337867][T19491] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  380.341397][T19489] batadv_slave_1: entered promiscuous mode
[  380.351571][T19489] batadv_slave_1 (unregistering): left promiscuous mode
[  380.394599][T19486] ip6gre2: entered promiscuous mode
[  380.399003][T19486] ip6gre2: entered allmulticast mode
[  380.413466][T19486] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  380.425054][T19486] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  380.460349][T19498] 8021q: adding VLAN 0 to HW filter on device bond39
[  381.462361][T19529] netlink: 'syz.2.3640': attribute type 1 has an invalid length.
[  381.464894][T19529] netlink: 'syz.2.3640': attribute type 3 has an invalid length.
[  381.467595][T19529] NCSI netlink: No device for ifindex 813332851
[  381.606279][T19539] bridge21: left promiscuous mode
[  381.608449][T19539] ip6tnl7: left allmulticast mode
[  381.610697][T19539] ip6gre4: left promiscuous mode
[  381.612869][T19539] ip6gretap2: left promiscuous mode
[  381.614906][T19539] ip6gretap2: left allmulticast mode
[  381.619911][T19539] vlan3: left promiscuous mode
[  381.621495][T19539] bond88: left promiscuous mode
[  381.623415][T19539] vlan3: left allmulticast mode
[  381.625087][T19539] bond88: left allmulticast mode
[  381.720583][T19543] xt_hashlimit: size too large, truncated to 1048576
[  381.805278][T19543] openvswitch: netlink: Flow actions attr not present in new flow.
[  382.068955][T19555] netlink: 'syz.2.3646': attribute type 16 has an invalid length.
[  382.072356][T19555] netlink: 'syz.2.3646': attribute type 17 has an invalid length.
[  382.097679][T19555] 8021q: adding VLAN 0 to HW filter on device 
[  382.104907][T19555] 8021q: adding VLAN 0 to HW filter on device batadv0
[  382.156322][T19555] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  382.160289][T19555] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  382.166636][T19555] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  382.359637][T19568] ip6_vti0: left promiscuous mode
[  382.370632][T19568] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  382.626466][T19593] xt_cgroup: invalid path, errno=-2
[  382.757341][T19603] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  382.921704][T19612] __nla_validate_parse: 17 callbacks suppressed
[  382.921750][T19612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3662'.
[  382.954565][T19614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  383.569836][T19630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3668'.
[  383.577584][T19628] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  383.656238][T19645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3673'.
[  383.787992][T19657] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3676'.
[  384.077340][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3677'.
[  384.491749][T19669] netlink: 'syz.4.3679': attribute type 2 has an invalid length.
[  384.495107][T19669] netlink: 'syz.4.3679': attribute type 9 has an invalid length.
[  384.497669][T19669] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3679'.
[  384.860611][T19695] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3683'.
[  384.934533][T19695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3683'.
[  385.006722][T19699] openvswitch: netlink: Message has 241 unknown bytes.
[  385.192523][T19686] x9: renamed from bridge_slave_0 (while UP)
[  385.300292][T19702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3687'.
[  385.304620][T19702] 8021q: adding VLAN 0 to HW filter on device bond0
[  385.353059][T19704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  385.816339][T19712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3691'.
[  385.881231][T19720] netlink: 'syz.4.3695': attribute type 1 has an invalid length.
[  385.980361][T19727] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  386.074863][T19744] netlink: 'syz.2.3703': attribute type 1 has an invalid length.
[  386.085358][T19744] netlink: 'syz.2.3703': attribute type 3 has an invalid length.
[  386.111502][T19746] x_tables: duplicate underflow at hook 1
[  386.454717][T19771] netlink: 'syz.4.3710': attribute type 12 has an invalid length.
[  386.496543][T19773] netlink: 'syz.4.3711': attribute type 10 has an invalid length.
[  386.505876][T19773] tap0: tun_chr_ioctl cmd 1074025677
[  386.510425][T19773] tap0: linktype set to 773
[  386.612563][T19775] syzkaller0: entered promiscuous mode
[  386.617542][T19775] syzkaller0: entered allmulticast mode
[  386.745163][T19775] nbd4: detected capacity change from 0 to 63
[  386.750643][T19777] block nbd4: NBD_DISCONNECT
[  386.757113][T19777] block nbd4: Disconnected due to user request.
[  386.763356][T19777] block nbd4: shutting down sockets
[  386.769472][    C1] blk_print_req_error: 138 callbacks suppressed
[  386.769485][    C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  386.775904][    C1] buffer_io_error: 138 callbacks suppressed
[  386.775915][    C1] Buffer I/O error on dev nbd4, logical block 0, async page read
[  386.782724][    C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  386.786411][    C1] Buffer I/O error on dev nbd4, logical block 1, async page read
[  386.789849][    C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  386.793589][    C1] Buffer I/O error on dev nbd4, logical block 2, async page read
[  386.796885][    C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  386.800515][    C1] Buffer I/O error on dev nbd4, logical block 3, async page read
[  386.803898][T19585] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  386.808725][T19585] Buffer I/O error on dev nbd4, logical block 0, async page read
[  386.812106][T19585] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  386.816896][T19585] Buffer I/O error on dev nbd4, logical block 1, async page read
[  386.829232][T19585] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  386.832997][T19585] Buffer I/O error on dev nbd4, logical block 2, async page read
[  386.836464][T19585] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  386.840219][T19585] Buffer I/O error on dev nbd4, logical block 3, async page read
[  386.843564][T19585] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  386.847574][T19585] Buffer I/O error on dev nbd4, logical block 0, async page read
[  386.850953][T19585] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  386.854553][T19585] Buffer I/O error on dev nbd4, logical block 1, async page read
[  386.859986][T19585] ldm_validate_partition_table(): Disk read failed.
[  386.864036][T19585] Dev nbd4: unable to read RDB block 0
[  386.866812][T19780] netlink: 'syz.3.3713': attribute type 1 has an invalid length.
[  386.867998][T19585]  nbd4: unable to read partition table
[  386.876888][T19585] ldm_validate_partition_table(): Disk read failed.
[  386.880747][T19585] Dev nbd4: unable to read RDB block 0
[  386.884330][T19585]  nbd4: unable to read partition table
[  387.119612][T19806] block nbd4: Unsupported socket: should be TCP or UNIX.
[  387.999552][T19825] __nla_validate_parse: 8 callbacks suppressed
[  387.999564][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3723'.
[  388.066254][T19836] xt_l2tp: missing protocol rule (udp|l2tpip)
[  388.146142][T19839] team0: entered allmulticast mode
[  388.148611][T19839] bridge1: entered allmulticast mode
[  388.205577][T19843] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3728'.
[  388.209409][T19844] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3728'.
[  388.213479][T19847] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3729'.
[  388.225897][T19845] team0 (unregistering): left allmulticast mode
[  388.228541][T19845] bridge1: left allmulticast mode
[  388.231086][T19845] team0 (unregistering): left promiscuous mode
[  388.233580][T19845] bridge1: left promiscuous mode
[  388.237512][T19845] team0 (unregistering): Port device bridge1 removed
[  388.243386][T19847] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3729'.
[  388.379951][T19857] bridge0: port 1(erspan0) entered blocking state
[  388.384380][T19857] bridge0: port 1(erspan0) entered disabled state
[  388.386830][T19857] erspan0: entered allmulticast mode
[  388.396787][T19857] erspan0: left allmulticast mode
[  388.602174][T19870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3735'.
[  388.672336][T19877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3738'.
[  388.876125][T19881] block nbd4: shutting down sockets
[  389.162760][T19902] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3743'.
[  389.162888][T19901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3745'.
[  389.170516][T19901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3745'.
[  389.462735][T19924] netlink: 'syz.3.3750': attribute type 1 has an invalid length.
[  389.482852][T19924] bond40: entered promiscuous mode
[  389.485418][T19924] 8021q: adding VLAN 0 to HW filter on device bond40
[  389.510343][T19924] bond40: (slave bridge25): making interface the new active one
[  389.513109][T19924] bridge25: entered promiscuous mode
[  389.518115][T19924] bridge25: left promiscuous mode
[  389.577820][T19928] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  389.584489][T19928] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  389.591457][T19928] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  389.608518][T19928] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  389.680200][   T65] smbdirect: ib_dev[syz2] removed
[  389.953867][T19954] IPVS: set_ctl: invalid protocol: 4 100.1.1.0:20002
[  390.008455][T19954] netlink: 'syz.4.3758': attribute type 8 has an invalid length.
[  390.653995][T19971] sctp: [Deprecated]: syz.3.3765 (pid 19971) Use of struct sctp_assoc_value in delayed_ack socket option.
[  390.653995][T19971] Use struct sctp_sack_info instead
[  390.659769][T19971] sctp: [Deprecated]: syz.3.3765 (pid 19971) Use of struct sctp_assoc_value in delayed_ack socket option.
[  390.659769][T19971] Use struct sctp_sack_info instead
[  391.043058][T19990] netlink: 'syz.2.3770': attribute type 1 has an invalid length.
[  391.055985][T19990] erspan2: entered allmulticast mode
[  391.116531][T19990] syz.2.3770 (19990) used obsolete PPPIOCDETACH ioctl
[  391.123372][T19992] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  392.045872][T20045] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  392.069048][T20045] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  392.210131][T20065] IPVS: set_ctl: invalid protocol: 59 10.1.1.0:20004
[  392.285316][T20070] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  392.407265][T20079] bond35: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3)
[  392.412292][T20079] bond35 (unregistering): Released all slaves
[  392.511186][T20084] tc_dump_action: action bad kind
[  393.393688][T20133] __nla_validate_parse: 14 callbacks suppressed
[  393.393707][T20133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3810'.
[  393.409655][T20133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3810'.
[  393.412981][T20133] nbd: must specify at least one socket
[  393.420372][T20133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3810'.
[  393.521488][T20136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3811'.
[  393.525303][T20136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3811'.
[  393.994722][T20139] netlink: 'syz.3.3812': attribute type 4 has an invalid length.
[  394.001303][T20139] netlink: 'syz.3.3812': attribute type 4 has an invalid length.
[  394.295929][T20149] tap0: tun_chr_ioctl cmd 1074025677
[  394.298318][T20149] tap0: linktype set to 777
[  394.318952][T20149] netlink: 'syz.2.3815': attribute type 1 has an invalid length.
[  394.323444][T20149] veth1_to_bond: entered allmulticast mode
[  394.327373][T20149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3815'.
[  394.336435][T20149] veth1_to_bond (unregistering): left allmulticast mode
[  394.378568][T20151] tap0: tun_chr_ioctl cmd 1074025680
[  394.382894][T20153] tap0: tun_chr_ioctl cmd 1074025673
[  394.868676][T20172] netlink: 'syz.4.3820': attribute type 1 has an invalid length.
[  394.873051][T20172] netlink: 'syz.4.3820': attribute type 3 has an invalid length.
[  394.877069][T20172] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3820'.
[  394.949373][T20179] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  394.954353][T20179] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  394.968834][T20178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3821'.
[  394.996632][T20185] netlink: 'syz.3.3823': attribute type 1 has an invalid length.
[  395.209916][T20202] Cannot find del_set index 14804 as target
[  395.214286][T20202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3828'.
[  395.216491][T20199] bond41: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  395.222286][T20199] bond41 (unregistering): Released all slaves
[  396.179584][T20239] netlink: 'syz.4.3838': attribute type 3 has an invalid length.
[  396.235771][T20239] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3838'.
[  396.281315][T20247] netlink: 'syz.2.3839': attribute type 21 has an invalid length.
[  396.359048][T20255] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  396.362110][T20255] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  396.902618][T20280] netlink: 'syz.3.3846': attribute type 3 has an invalid length.
[  397.077036][T20285] wg2: Caught tx_queue_len zero misconfig
[  397.328343][T20304] tap0: tun_chr_ioctl cmd 1074025677
[  397.335338][T20304] tap0: linktype set to 778
[  397.547477][T20314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  397.660508][T20323] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0
[  397.723227][T20320] infiniband syz0: set active
[  397.727220][T20320] infiniband syz0: added ipvlan1
[  397.750938][T20320] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  397.758167][T20320] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  397.767250][T20320] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  397.790693][T20320] RDS/IB: syz0: added
[  397.792208][T20320] smc: adding ib device syz0 with port count 1
[  397.794291][T20320] smc:    ib device syz0 port 1 has no pnetid
[  397.874785][T20336] syzkaller0: entered promiscuous mode
[  397.879384][T20336] syzkaller0: entered allmulticast mode
[  397.963998][T20336] bond36: Invalid ad_actor_system MAC address.
[  397.968765][T20336] bond36: option ad_actor_system: invalid value (7)
[  397.980061][T20336] bond36 (unregistering): Released all slaves
[  398.392086][T20424] netlink: 'syz.4.3868': attribute type 1 has an invalid length.
[  398.419338][T20424] 8021q: adding VLAN 0 to HW filter on device bond36
[  398.425721][T20424] __nla_validate_parse: 9 callbacks suppressed
[  398.425734][T20424] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3868'.
[  398.432729][T20424] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3868'.
[  398.477269][T20424] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3868'.
[  398.495657][T20424] 8021q: adding VLAN 0 to HW filter on device batadv0
[  398.521964][T20424] bond36: (slave batadv0): making interface the new active one
[  398.552455][T20424] bond36: (slave batadv0): Enslaving as an active interface with an up link
[  398.622959][T20449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3869'.
[  399.258213][T20460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3873'.
[  399.310814][T20463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3874'.
[  399.483157][T20472] netlink: 'syz.2.3876': attribute type 4 has an invalid length.
[  399.692852][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3879'.
[  399.832702][T20507] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  399.911130][T20507] vlan0: entered promiscuous mode
[  399.913397][T20507] geneve1: entered promiscuous mode
[  399.957483][T20519] netlink: 272 bytes leftover after parsing attributes in process `syz.3.3887'.
[  400.037613][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3888'.
[  400.233246][T20531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3891'.
[  400.274692][T20535] netlink: 'syz.4.3892': attribute type 1 has an invalid length.
[  400.281538][T20535] netlink: 'syz.4.3892': attribute type 3 has an invalid length.
[  400.636222][T20543] bridge25: entered promiscuous mode
[  400.638811][T20543] bridge25: entered allmulticast mode
[  400.802815][T20546] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode
[  400.806267][T20546] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode
[  401.559311][T20572] sch_tbf: peakrate 67108864 is lower than or equals to rate 4294966141 !
[  401.568025][T20575] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  401.659663][T20583] netlink: 'syz.4.3906': attribute type 13 has an invalid length.
[  401.686116][T20577] netlink: 'syz.3.3904': attribute type 10 has an invalid length.
[  401.705881][   T10] syz0: Port: 1 Link DOWN
[  401.758041][T20587] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  401.762451][T20587] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  402.063077][T20604] netlink: 'syz.4.3912': attribute type 1 has an invalid length.
[  402.107450][T20604] 8021q: adding VLAN 0 to HW filter on device bond37
[  402.141952][T20604] bond37: (slave gretap6): making interface the new active one
[  402.148756][T20604] bond37: (slave gretap6): Enslaving as an active interface with an up link
[  402.367092][T20630] sch_tbf: burst 19872 is lower than device lo mtu (32783) !
[  402.473396][T20635] netlink: 'syz.4.3921': attribute type 1 has an invalid length.
[  403.040565][T20637] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode
[  403.043340][T20637] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode
[  403.047157][T20637] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  403.049796][T20638] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  403.159833][T20644] netlink: 'syz.3.3924': attribute type 33 has an invalid length.
[  403.198076][T20644] 8021q: adding VLAN 0 to HW filter on device bond41
[  403.272767][T20656] 8021q: adding VLAN 0 to HW filter on device bond42
[  403.433784][T20673] netlink: 'syz.2.3931': attribute type 9 has an invalid length.
[  403.499725][T20685] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.563100][T20694] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  403.643768][T20703] netlink: 'syz.3.3940': attribute type 12 has an invalid length.
[  403.696841][T20710] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  403.699674][T20710] tipc: New replicast peer: 224.0.0.1
[  403.748309][T20715] xt_hashlimit: size too large, truncated to 1048576
[  403.800680][T20724] veth1: entered promiscuous mode
[  403.802382][T20724] veth1: entered allmulticast mode
[  403.901411][T20729] veth1: left promiscuous mode
[  403.904690][T20729] ip6gre2: left promiscuous mode
[  403.908833][T20729] mac80211_hwsim hwsim45 syzkaller0: left promiscuous mode
[  404.021723][T20738] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode
[  404.098143][T20742] ipt_ECN: cannot use operation on non-tcp rule
[  404.132085][T20741] bond38: (slave vxcan1): The slave device specified does not support setting the MAC address
[  404.136185][T20741] bond38: (slave vxcan1): Error -95 calling set_mac_address
[  404.173042][T20742] __nla_validate_parse: 11 callbacks suppressed
[  404.173061][T20742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3952'.
[  404.192450][T20742] bond38: (slave bridge22): Enslaving as an active interface with a down link
[  404.244617][T20746] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  404.256381][T20746] CPU: 0 UID: 0 PID: 20746 Comm: syz.4.3953 Not tainted syzkaller #0 PREEMPT(full) 
[  404.256400][T20746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  404.256407][T20746] Call Trace:
[  404.256413][T20746]  <TASK>
[  404.256420][T20746]  dump_stack_lvl+0xe8/0x150
[  404.256444][T20746]  sysfs_warn_dup+0x8e/0xa0
[  404.256460][T20746]  sysfs_do_create_link_sd+0xc0/0x110
[  404.256504][T20746]  device_add_class_symlinks+0x1cf/0x240
[  404.256523][T20746]  device_add+0x475/0xbb0
[  404.256540][T20746]  wiphy_register+0x1dc5/0x2dc0
[  404.256567][T20746]  ? __pfx_wiphy_register+0x10/0x10
[  404.256580][T20746]  ? __pfx_netdev_run_todo+0x10/0x10
[  404.256595][T20746]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  404.256612][T20746]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  404.256632][T20746]  ieee80211_register_hw+0x3d82/0x4a70
[  404.256660][T20746]  ? ieee80211_register_hw+0x1931/0x4a70
[  404.256695][T20746]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  404.256717][T20746]  ? __asan_memset+0x22/0x50
[  404.256733][T20746]  ? __hrtimer_setup+0x1b7/0x260
[  404.256746][T20746]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  404.256761][T20746]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  404.256792][T20746]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  404.256806][T20746]  ? kstrndup+0xbf/0x160
[  404.256823][T20746]  hwsim_new_radio_nl+0xf6a/0x1c00
[  404.256852][T20746]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  404.256893][T20746]  ? rcu_is_watching+0x15/0xb0
[  404.256909][T20746]  ? trace_kmalloc+0x2a/0xf0
[  404.256926][T20746]  ? __nla_parse+0x40/0x60
[  404.256942][T20746]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  404.256955][T20746]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  404.256970][T20746]  genl_family_rcv_msg_doit+0x22a/0x330
[  404.256984][T20746]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  404.257001][T20746]  ? bpf_lsm_capable+0x9/0x20
[  404.257010][T20746]  ? security_capable+0x7e/0x2c0
[  404.257025][T20746]  genl_rcv_msg+0x61c/0x7a0
[  404.257040][T20746]  ? __pfx_genl_rcv_msg+0x10/0x10
[  404.257049][T20746]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  404.257071][T20746]  netlink_rcv_skb+0x232/0x4b0
[  404.257086][T20746]  ? __pfx_genl_rcv_msg+0x10/0x10
[  404.257105][T20746]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  404.257133][T20746]  ? down_read+0x270/0x2e0
[  404.257146][T20746]  ? genl_rcv+0xd/0x40
[  404.257158][T20746]  genl_rcv+0x28/0x40
[  404.257169][T20746]  netlink_unicast+0x75c/0x8e0
[  404.257193][T20746]  netlink_sendmsg+0x813/0xb40
[  404.257213][T20746]  ? __pfx_netlink_sendmsg+0x10/0x10
[  404.257230][T20746]  ? aa_sock_msg_perm+0xf1/0x1b0
[  404.257248][T20746]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  404.257265][T20746]  ____sys_sendmsg+0x972/0x9f0
[  404.257280][T20746]  ? __might_fault+0xaf/0x130
[  404.257298][T20746]  ? __pfx_____sys_sendmsg+0x10/0x10
[  404.257321][T20746]  ? import_iovec+0x73/0xa0
[  404.257341][T20746]  ___sys_sendmsg+0x2a5/0x360
[  404.257354][T20746]  ? __lock_acquire+0x6b5/0x2cf0
[  404.257371][T20746]  ? __pfx____sys_sendmsg+0x10/0x10
[  404.257389][T20746]  ? futex_wait+0x2a2/0x390
[  404.257446][T20746]  ? __fget_files+0x2a/0x420
[  404.257463][T20746]  ? __fget_files+0x3a0/0x420
[  404.257512][T20746]  __x64_sys_sendmsg+0x1bd/0x2a0
[  404.257531][T20746]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  404.257554][T20746]  ? rcu_is_watching+0x15/0xb0
[  404.257578][T20746]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.257593][T20746]  do_syscall_64+0x15f/0xf80
[  404.257609][T20746]  ? trace_irq_disable+0x3b/0x140
[  404.257630][T20746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.257642][T20746] RIP: 0033:0x7fc85fd9ce59
[  404.257657][T20746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  404.257670][T20746] RSP: 002b:00007fc860b9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  404.257685][T20746] RAX: ffffffffffffffda RBX: 00007fc860015fa0 RCX: 00007fc85fd9ce59
[  404.257693][T20746] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  404.257702][T20746] RBP: 00007fc85fe32d6f R08: 0000000000000000 R09: 0000000000000000
[  404.257709][T20746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  404.257717][T20746] R13: 00007fc860016038 R14: 00007fc860015fa0 R15: 00007ffe916aebd8
[  404.257738][T20746]  </TASK>
[  404.499165][T20750] tipc: Enabling of bearer <eth:xfrm0> rejected, already enabled
[  404.588929][T20755] validate_nla: 2 callbacks suppressed
[  404.588939][T20755] netlink: 'syz.4.3956': attribute type 16 has an invalid length.
[  404.694856][T20764] x_tables: duplicate underflow at hook 2
[  404.714740][T20764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3959'.
[  404.721026][T20764] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3959'.
[  404.725665][T20764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3959'.
[  404.753242][T20764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3959'.
[  404.756585][T20764] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3959'.
[  404.759693][T20764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3959'.
[  405.099581][T20788] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3964'.
[  405.163034][T20792] netlink: 'syz.3.3966': attribute type 1 has an invalid length.
[  405.177713][T20792] bond43: entered promiscuous mode
[  405.179439][T20792] bond43: entered allmulticast mode
[  405.181362][T20792] 8021q: adding VLAN 0 to HW filter on device bond43
[  405.197174][T20792] macvlan2: entered promiscuous mode
[  405.199427][T20792] macvlan2: entered allmulticast mode
[  405.202252][T20792] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  405.246681][T20794] netlink: 'syz.3.3966': attribute type 1 has an invalid length.
[  405.492385][T20802] bond44: (slave bond_slave_1): Device is not bonding slave
[  405.497442][T20802] bond44: option active_slave: invalid value (bond_slave_1)
[  405.502364][T20802] bond44 (unregistering): Released all slaves
[  405.773136][T20808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3970'.
[  405.841493][T20808] bond39: entered promiscuous mode
[  405.845481][T20808] 8021q: adding VLAN 0 to HW filter on device bond39
[  405.887067][T20813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3972'.
[  405.928019][T20815] 8021q: adding VLAN 0 to HW filter on device bond39
[  405.933954][T20815] bond39: (slave ip6gre3): The slave device specified does not support setting the MAC address
[  405.939321][T20815] bond39: (slave ip6gre3): Error -95 calling set_mac_address
[  406.145185][T20827] netlink: 'syz.4.3975': attribute type 4 has an invalid length.
[  406.151169][T20830] netlink: 'syz.4.3975': attribute type 4 has an invalid length.
[  406.199373][T20835] vlan0: entered promiscuous mode
[  406.201149][T20835] erspan0: entered promiscuous mode
[  406.358343][T20839] bond40: option miimon: invalid value (18446744073709551607)
[  406.361283][T20839] bond40: option miimon: allowed values 0 - 2147483647
[  406.369270][T20839] bond40 (unregistering): Released all slaves
[  406.433860][   T56] block nbd4: Receive control failed (result -32)
[  406.617907][T20860] netlink: 'syz.4.3986': attribute type 4 has an invalid length.
[  406.629192][T20860] netlink: 'syz.4.3986': attribute type 4 has an invalid length.
[  406.840533][T20878] netlink: 'syz.4.3992': attribute type 3 has an invalid length.
[  406.957393][T20894] netlink: 'syz.4.3996': attribute type 1 has an invalid length.
[  406.993693][T20894] 8021q: adding VLAN 0 to HW filter on device bond40
[  407.035995][T20894] bond40: (slave veth43): Enslaving as an active interface with a down link
[  407.067477][T20894] bond40: entered allmulticast mode
[  407.161679][T20915] bridge0: port 1(batadv3) entered blocking state
[  407.166088][T20915] bridge0: port 1(batadv3) entered disabled state
[  407.168290][T20915] batadv3: entered allmulticast mode
[  407.171023][T20915] batadv3: entered promiscuous mode
[  407.275488][T20919] netlink: 'syz.3.4003': attribute type 31 has an invalid length.
[  407.610159][   T56] block nbd6: Receive control failed (result -1)
[  407.666087][ T5482] batman_adv: batadv3: IGMP Querier appeared
[  407.671847][ T5482] batman_adv: batadv3: MLD Querier appeared
[  407.785553][T20954] 8021q: adding VLAN 0 to HW filter on device bond44
[  407.811104][T20954] vlan7: entered allmulticast mode
[  407.815141][T20954] bond44: entered allmulticast mode
[  408.273305][T21001] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  408.276841][T21001] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  408.524011][T21013] Cannot find del_set index 4 as target
[  408.599968][T21016] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  408.706836][T21023] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  408.740896][   T52] block nbd3: Connection timed out, retrying (0/2 alive)
[  408.743903][   T52] block nbd3: Connection timed out, retrying (0/2 alive)
[  408.748636][   T52] block nbd3: Connection timed out, retrying (0/2 alive)
[  408.749774][T21025] syzkaller0: mtu less than device minimum
[  408.751653][   T52] block nbd3: Connection timed out, retrying (0/2 alive)
[  408.757327][   T52] block nbd3: Dead connection, failed to find a fallback
[  408.762881][   T52] block nbd3: shutting down sockets
[  408.768369][   T52] blk_print_req_error: 138 callbacks suppressed
[  408.768380][   T52] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  408.773968][   T52] buffer_io_error: 138 callbacks suppressed
[  408.773975][   T52] Buffer I/O error on dev nbd3, logical block 3, async page read
[  408.782013][   T52] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  408.785758][   T52] Buffer I/O error on dev nbd3, logical block 2, async page read
[  408.789194][   T52] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  408.792438][   T52] Buffer I/O error on dev nbd3, logical block 1, async page read
[  408.795196][   T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  408.798372][   T52] Buffer I/O error on dev nbd3, logical block 0, async page read
[  408.804818][T19342] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  408.808289][T19342] Buffer I/O error on dev nbd3, logical block 0, async page read
[  408.811208][T19342] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  408.814385][T19342] Buffer I/O error on dev nbd3, logical block 1, async page read
[  408.817247][T19342] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  408.820565][T19342] Buffer I/O error on dev nbd3, logical block 2, async page read
[  408.823483][T19342] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  408.827170][T19342] Buffer I/O error on dev nbd3, logical block 3, async page read
[  408.830031][T19342] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  408.833313][T19342] Buffer I/O error on dev nbd3, logical block 0, async page read
[  408.836246][T19342] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  408.839660][T19342] Buffer I/O error on dev nbd3, logical block 1, async page read
[  408.843278][T19342] ldm_validate_partition_table(): Disk read failed.
[  408.847173][T19342] Dev nbd3: unable to read RDB block 0
[  408.850568][T19342]  nbd3: unable to read partition table
[  408.856950][T19342] ldm_validate_partition_table(): Disk read failed.
[  408.860330][T19342] Dev nbd3: unable to read RDB block 0
[  408.863072][T19342]  nbd3: unable to read partition table
[  409.026275][T21038] 
[  409.027189][T21038] ======================================================
[  409.029634][T21038] WARNING: possible circular locking dependency detected
[  409.031856][T21038] syzkaller #0 Not tainted
[  409.033365][T21038] ------------------------------------------------------
[  409.035617][T21038] syz.3.4036/21038 is trying to acquire lock:
[  409.037621][T21038] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650
[  409.040611][T21038] 
[  409.040611][T21038] but task is already holding lock:
[  409.042935][T21038] ffff888117965588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  409.046273][T21038] 
[  409.046273][T21038] which lock already depends on the new lock.
[  409.046273][T21038] 
[  409.049698][T21038] 
[  409.049698][T21038] the existing dependency chain (in reverse order) is:
[  409.052629][T21038] 
[  409.052629][T21038] -> #8 (vm_lock){++++}-{0:0}:
[  409.054866][T21038]        __vma_start_exclude_readers+0x28a/0x940
[  409.056898][T21038]        __vma_start_write+0xdc/0x290
[  409.058668][T21038]        mprotect_fixup+0x785/0xb60
[  409.060284][T21038]        setup_arg_pages+0x664/0xbd0
[  409.061951][T21038]        load_elf_binary+0xc5e/0x2980
[  409.063611][T21038]        bprm_execve+0x94a/0x1510
[  409.065209][T21038]        kernel_execve+0x844/0x930
[  409.066859][T21038]        try_to_run_init_process+0x13/0x60
[  409.068666][T21038]        kernel_init+0xad/0x1d0
[  409.070212][T21038]        ret_from_fork+0x514/0xb70
[  409.071813][T21038]        ret_from_fork_asm+0x1a/0x30
[  409.073490][T21038] 
[  409.073490][T21038] -> #7 (&mm->mmap_lock){++++}-{4:4}:
[  409.075814][T21038]        __might_fault+0xcb/0x130
[  409.077393][T21038]        _copy_from_user+0x28/0xb0
[  409.079173][T21038]        csum_and_copy_from_iter_full+0x1e7/0x1f00
[  409.081261][T21038]        ip_generic_getfrag+0x149/0x2d0
[  409.083289][T21038]        __ip6_append_data+0x39cd/0x3f60
[  409.085216][T21038]        ip6_append_data+0x10f/0x280
[  409.086988][T21038]        rawv6_sendmsg+0x12d3/0x18e0
[  409.088650][T21038]        ____sys_sendmsg+0x80a/0x9f0
[  409.090260][T21038]        ___sys_sendmsg+0x2a5/0x360
[  409.091814][T21038]        __x64_sys_sendmsg+0x1bd/0x2a0
[  409.093547][T21038]        do_syscall_64+0x15f/0xf80
[  409.095197][T21038]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.097171][T21038] 
[  409.097171][T21038] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  409.099916][T21038]        lock_sock_nested+0x41/0x100
[  409.101579][T21038]        inet_shutdown+0x6a/0x390
[  409.103344][T21038]        nbd_mark_nsock_dead+0x2e9/0x560
[  409.105440][T21038]        recv_work+0x1c2e/0x1d40
[  409.107190][T21038]        process_scheduled_works+0xb5d/0x1860
[  409.109491][T21038]        worker_thread+0xa53/0xfc0
[  409.111208][T21038]        kthread+0x389/0x470
[  409.112660][T21038]        ret_from_fork+0x514/0xb70
[  409.114224][T21038]        ret_from_fork_asm+0x1a/0x30
[  409.115850][T21038] 
[  409.115850][T21038] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  409.118159][T21038]        __mutex_lock+0x1a3/0x1550
[  409.119720][T21038]        nbd_queue_rq+0x37b/0x1100
[  409.121289][T21038]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  409.123161][T21038]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  409.125234][T21038]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  409.127223][T21038]        blk_mq_run_hw_queue+0x348/0x4f0
[  409.129097][T21038]        blk_mq_dispatch_list+0xd16/0xe10
[  409.130965][T21038]        blk_mq_flush_plug_list+0x48d/0x570
[  409.132824][T21038]        __blk_flush_plug+0x3ed/0x4d0
[  409.134550][T21038]        __submit_bio+0x28d/0x580
[  409.136306][T21038]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  409.138626][T21038]        block_read_full_folio+0x7b7/0x830
[  409.140852][T21038]        filemap_read_folio+0x137/0x3b0
[  409.142944][T21038]        do_read_cache_folio+0x358/0x590
[  409.145066][T21038]        read_part_sector+0xb6/0x2b0
[  409.147176][T21038]        adfspart_check_ICS+0xb1/0x960
[  409.149233][T21038]        bdev_disk_changed+0x817/0x1770
[  409.151321][T21038]        blkdev_get_whole+0x380/0x510
[  409.153526][T21038]        bdev_open+0x31e/0xd30
[  409.155338][T21038]        blkdev_open+0x470/0x610
[  409.157225][T21038]        do_dentry_open+0x785/0x14e0
[  409.159272][T21038]        vfs_open+0x3b/0x340
[  409.160978][T21038]        path_openat+0x2e08/0x3860
[  409.162568][T21038]        do_file_open+0x23e/0x4a0
[  409.164107][T21038]        do_sys_openat2+0x113/0x200
[  409.165777][T21038]        __x64_sys_openat+0x138/0x170
[  409.167766][T21038]        do_syscall_64+0x15f/0xf80
[  409.169500][T21038]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.171619][T21038] 
[  409.171619][T21038] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  409.174131][T21038]        __mutex_lock+0x1a3/0x1550
[  409.175888][T21038]        nbd_queue_rq+0xc6/0x1100
[  409.177523][T21038]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  409.179572][T21038]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  409.181947][T21038]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  409.184088][T21038]        blk_mq_run_hw_queue+0x348/0x4f0
[  409.185830][T21038]        blk_mq_dispatch_list+0xd16/0xe10
[  409.187594][T21038]        blk_mq_flush_plug_list+0x48d/0x570
[  409.189360][T21038]        __blk_flush_plug+0x3ed/0x4d0
[  409.190983][T21038]        __submit_bio+0x28d/0x580
[  409.192499][T21038]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  409.194602][T21038]        block_read_full_folio+0x7b7/0x830
[  409.196600][T21038]        filemap_read_folio+0x137/0x3b0
[  409.198526][T21038]        do_read_cache_folio+0x358/0x590
[  409.200256][T21038]        read_part_sector+0xb6/0x2b0
[  409.202057][T21038]        adfspart_check_ICS+0xb1/0x960
[  409.203833][T21038]        bdev_disk_changed+0x817/0x1770
[  409.205632][T21038]        blkdev_get_whole+0x380/0x510
[  409.207281][T21038]        bdev_open+0x31e/0xd30
[  409.208773][T21038]        blkdev_open+0x470/0x610
[  409.210299][T21038]        do_dentry_open+0x785/0x14e0
[  409.211937][T21038]        vfs_open+0x3b/0x340
[  409.213367][T21038]        path_openat+0x2e08/0x3860
[  409.214945][T21038]        do_file_open+0x23e/0x4a0
[  409.216609][T21038]        do_sys_openat2+0x113/0x200
[  409.218593][T21038]        __x64_sys_openat+0x138/0x170
[  409.220745][T21038]        do_syscall_64+0x15f/0xf80
[  409.222722][T21038]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.225138][T21038] 
[  409.225138][T21038] -> #3 (set->srcu){.+.+}-{0:0}:
[  409.227656][T21038]        __synchronize_srcu+0xca/0x300
[  409.229559][T21038]        elevator_switch+0x1e8/0x7a0
[  409.231429][T21038]        elevator_change+0x2cc/0x450
[  409.233339][T21038]        elevator_set_default+0x36c/0x430
[  409.235540][T21038]        blk_register_queue+0x3e9/0x4e0
[  409.237644][T21038]        __add_disk+0x677/0xd50
[  409.239514][T21038]        add_disk_fwnode+0xfb/0x480
[  409.241488][T21038]        nbd_dev_add+0x72c/0xb50
[  409.243230][T21038]        nbd_init+0x168/0x1f0
[  409.244888][T21038]        do_one_initcall+0x250/0x870
[  409.246805][T21038]        do_initcall_level+0x104/0x190
[  409.248777][T21038]        do_initcalls+0x59/0xa0
[  409.250672][T21038]        kernel_init_freeable+0x2a6/0x3e0
[  409.252883][T21038]        kernel_init+0x1d/0x1d0
[  409.254770][T21038]        ret_from_fork+0x514/0xb70
[  409.256744][T21038]        ret_from_fork_asm+0x1a/0x30
[  409.258800][T21038] 
[  409.258800][T21038] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  409.261577][T21038]        __mutex_lock+0x1a3/0x1550
[  409.263156][T21038]        elevator_change+0x1b3/0x450
[  409.264798][T21038]        elevator_set_none+0xb5/0x140
[  409.266446][T21038]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  409.268368][T21038]        nbd_start_device+0x17f/0xb10
[  409.270010][T21038]        nbd_genl_connect+0x165b/0x1cf0
[  409.271703][T21038]        genl_family_rcv_msg_doit+0x22a/0x330
[  409.273568][T21038]        genl_rcv_msg+0x61c/0x7a0
[  409.275108][T21038]        netlink_rcv_skb+0x232/0x4b0
[  409.276721][T21038]        genl_rcv+0x28/0x40
[  409.278129][T21038]        netlink_unicast+0x75c/0x8e0
[  409.279924][T21038]        netlink_sendmsg+0x813/0xb40
[  409.281744][T21038]        ____sys_sendmsg+0x972/0x9f0
[  409.283737][T21038]        ___sys_sendmsg+0x2a5/0x360
[  409.285510][T21038]        __x64_sys_sendmsg+0x1bd/0x2a0
[  409.287241][T21038]        do_syscall_64+0x15f/0xf80
[  409.288872][T21038]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.291220][T21038] 
[  409.291220][T21038] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  409.294488][T21038]        blk_alloc_queue+0x546/0x680
[  409.296520][T21038]        __blk_mq_alloc_disk+0x197/0x390
[  409.298614][T21038]        nbd_dev_add+0x499/0xb50
[  409.300523][T21038]        nbd_init+0x168/0x1f0
[  409.302334][T21038]        do_one_initcall+0x250/0x870
[  409.304433][T21038]        do_initcall_level+0x104/0x190
[  409.306536][T21038]        do_initcalls+0x59/0xa0
[  409.308360][T21038]        kernel_init_freeable+0x2a6/0x3e0
[  409.310488][T21038]        kernel_init+0x1d/0x1d0
[  409.312178][T21038]        ret_from_fork+0x514/0xb70
[  409.313901][T21038]        ret_from_fork_asm+0x1a/0x30
[  409.315860][T21038] 
[  409.315860][T21038] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  409.318257][T21038]        __lock_acquire+0x15a5/0x2cf0
[  409.320335][T21038]        lock_acquire+0x106/0x350
[  409.322269][T21038]        fs_reclaim_acquire+0x71/0x100
[  409.324397][T21038]        prepare_alloc_pages+0x152/0x650
[  409.326380][T21038]        __alloc_frozen_pages_noprof+0x12f/0x380
[  409.328312][T21038]        alloc_pages_mpol+0x235/0x490
[  409.329976][T21038]        alloc_pages_noprof+0xac/0x2a0
[  409.331802][T21038]        pte_alloc_one+0x22/0x370
[  409.333459][T21038]        __pte_alloc+0x25/0x1a0
[  409.335349][T21038]        insert_pages+0x877/0xa50
[  409.337331][T21038]        tcp_zerocopy_vm_insert_batch+0xc3/0x1f0
[  409.339724][T21038]        tcp_zerocopy_receive+0x16f5/0x21f0
[  409.341870][T21038]        do_tcp_getsockopt+0x2079/0x2940
[  409.344012][T21038]        tcp_getsockopt+0x83/0x130
[  409.345956][T21038]        do_sock_getsockopt+0x51d/0x7e0
[  409.347926][T21038]        __x64_sys_getsockopt+0x1a4/0x240
[  409.349723][T21038]        do_syscall_64+0x15f/0xf80
[  409.351351][T21038]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.353527][T21038] 
[  409.353527][T21038] other info that might help us debug this:
[  409.353527][T21038] 
[  409.356816][T21038] Chain exists of:
[  409.356816][T21038]   fs_reclaim --> &mm->mmap_lock --> vm_lock
[  409.356816][T21038] 
[  409.360606][T21038]  Possible unsafe locking scenario:
[  409.360606][T21038] 
[  409.363208][T21038]        CPU0                    CPU1
[  409.365141][T21038]        ----                    ----
[  409.366922][T21038]   rlock(vm_lock);
[  409.368290][T21038]                                lock(&mm->mmap_lock);
[  409.370928][T21038]                                lock(vm_lock);
[  409.373312][T21038]   lock(fs_reclaim);
[  409.374913][T21038] 
[  409.374913][T21038]  *** DEADLOCK ***
[  409.374913][T21038] 
[  409.377875][T21038] 2 locks held by syz.3.4036/21038:
[  409.379547][T21038]  #0: ffff8881154bb860 (sk_lock-AF_INET6){+.+.}-{0:0}, at: do_tcp_getsockopt+0x2066/0x2940
[  409.383207][T21038]  #1: ffff888117965588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  409.386108][T21038] 
[  409.386108][T21038] stack backtrace:
[  409.388058][T21038] CPU: 0 UID: 0 PID: 21038 Comm: syz.3.4036 Not tainted syzkaller #0 PREEMPT(full) 
[  409.388068][T21038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  409.388074][T21038] Call Trace:
[  409.388080][T21038]  <TASK>
[  409.388086][T21038]  dump_stack_lvl+0xe8/0x150
[  409.388097][T21038]  print_circular_bug+0x2e1/0x300
[  409.388109][T21038]  check_noncircular+0x12e/0x150
[  409.388119][T21038]  __lock_acquire+0x15a5/0x2cf0
[  409.388128][T21038]  ? __up_read+0x291/0x6b0
[  409.388139][T21038]  ? __pfx___up_read+0x10/0x10
[  409.388149][T21038]  ? prepare_alloc_pages+0x152/0x650
[  409.388160][T21038]  lock_acquire+0x106/0x350
[  409.388167][T21038]  ? prepare_alloc_pages+0x152/0x650
[  409.388179][T21038]  fs_reclaim_acquire+0x71/0x100
[  409.388188][T21038]  ? prepare_alloc_pages+0x152/0x650
[  409.388196][T21038]  prepare_alloc_pages+0x152/0x650
[  409.388206][T21038]  __alloc_frozen_pages_noprof+0x12f/0x380
[  409.388217][T21038]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  409.388227][T21038]  ? __pfx_policy_nodemask+0x10/0x10
[  409.388238][T21038]  alloc_pages_mpol+0x235/0x490
[  409.388248][T21038]  alloc_pages_noprof+0xac/0x2a0
[  409.388258][T21038]  pte_alloc_one+0x22/0x370
[  409.388267][T21038]  __pte_alloc+0x25/0x1a0
[  409.388276][T21038]  ? walk_to_pmd+0x2b8/0x450
[  409.388286][T21038]  insert_pages+0x877/0xa50
[  409.388293][T21038]  ? reacquire_held_locks+0x104/0x190
[  409.388302][T21038]  ? __pfx_insert_pages+0x10/0x10
[  409.388307][T21038]  ? lock_vma_under_rcu+0x116/0x500
[  409.388315][T21038]  ? vm_insert_pages+0x288/0x410
[  409.388325][T21038]  tcp_zerocopy_vm_insert_batch+0xc3/0x1f0
[  409.388337][T21038]  ? __pfx_tcp_zerocopy_vm_insert_batch+0x10/0x10
[  409.388346][T21038]  ? tcp_recv_skb+0x35a/0x3c0
[  409.388354][T21038]  tcp_zerocopy_receive+0x16f5/0x21f0
[  409.388366][T21038]  ? __pfx_tcp_zerocopy_receive+0x10/0x10
[  409.388374][T21038]  ? __lock_acquire+0x6b5/0x2cf0
[  409.388387][T21038]  ? do_tcp_getsockopt+0x2066/0x2940
[  409.388395][T21038]  ? __local_bh_enable_ip+0xd0/0x130
[  409.388403][T21038]  do_tcp_getsockopt+0x2079/0x2940
[  409.388448][T21038]  ? __pfx_do_tcp_getsockopt+0x10/0x10
[  409.388475][T21038]  ? sock_recv_errqueue+0x530/0x590
[  409.388483][T21038]  ? update_se+0x91/0x610
[  409.388493][T21038]  ? rcu_is_watching+0x15/0xb0
[  409.388502][T21038]  ? aa_label_sk_perm+0x532/0x6e0
[  409.388516][T21038]  ? __pfx___resched_curr+0x10/0x10
[  409.388525][T21038]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  409.388532][T21038]  ? wakeup_preempt_fair+0x745/0xb10
[  409.388544][T21038]  ? __lock_acquire+0x6b5/0x2cf0
[  409.388552][T21038]  ? preempt_schedule_thunk+0x16/0x30
[  409.388567][T21038]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  409.388574][T21038]  tcp_getsockopt+0x83/0x130
[  409.388582][T21038]  ? sock_recv_errqueue+0x530/0x590
[  409.388588][T21038]  ? sock_recv_errqueue+0x530/0x590
[  409.388595][T21038]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  409.388601][T21038]  do_sock_getsockopt+0x51d/0x7e0
[  409.388612][T21038]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  409.388623][T21038]  ? __fget_files+0x3a0/0x420
[  409.388631][T21038]  ? __fget_files+0x2a/0x420
[  409.388639][T21038]  __x64_sys_getsockopt+0x1a4/0x240
[  409.388649][T21038]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.388655][T21038]  do_syscall_64+0x15f/0xf80
[  409.388665][T21038]  ? trace_irq_disable+0x3b/0x140
[  409.388676][T21038]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.388683][T21038] RIP: 0033:0x7f65e899ce59
[  409.388692][T21038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  409.388699][T21038] RSP: 002b:00007f65e97e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  409.388708][T21038] RAX: ffffffffffffffda RBX: 00007f65e8c15fa0 RCX: 00007f65e899ce59
[  409.388713][T21038] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000005
[  409.388717][T21038] RBP: 00007f65e8a32d6f R08: 00002000000000c0 R09: 0000000000000000
[  409.388722][T21038] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000
[  409.388726][T21038] R13: 00007f65e8c16038 R14: 00007f65e8c15fa0 R15: 00007ffdf20633b8
[  409.388734][T21038]  </TASK>
[  409.544197][T21040] pim6reg1: entered promiscuous mode
[  409.546819][T21040] pim6reg1: entered allmulticast mode
