last executing test programs:

2.374814357s ago: executing program 2 (id=328):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c0c0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010027bd7000ffdbdf25280000000a0001007770616e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4004850)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000100001002cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10080400000000001c002b80080003001100000008000100", @ANYRES32, @ANYBLOB="1538f983", @ANYRES32, @ANYBLOB="14003500626f6e645f736c6176655f30"], 0x50}}, 0x0)

2.294178882s ago: executing program 2 (id=329):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x12, 0x0, 0x0, @binary}]}, 0x18}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = socket(0x2d, 0x2, 0x0)
sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000740)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={0x0, 0xda}, 0x1, 0x0, 0x0, 0xc094}, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f00000002c0)=0x1, 0x4)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)={0x288, r7, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0xffffffffffffff57, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="06ac0f0001ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]})
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@getchain={0x54, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0xfff3}, {0x8}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0xbc}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

2.214508276s ago: executing program 0 (id=332):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', <r1=>0x0, 0x2, 0x9, 0x0, 0x7, 0x18, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x10, 0xfffffffc, 0xa}})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12c, 0x12c, 0x3, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x64, 0x2}, @enum64={0x8, 0x5, 0x0, 0x13, 0x0, 0xb, [{0xa, 0xffff, 0x3}, {0x6, 0x176, 0x100000}, {0x9, 0x6, 0x5}, {0x8, 0x4, 0x1000}, {0xe, 0xfffffffb}]}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x5}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x1, 0xa}, @var={0xf, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xe}, {0x4}, {0x9, 0x3}]}, @union={0x7, 0xa, 0x0, 0x5, 0x1, 0xe61, [{0xd, 0x2, 0x6}, {0x3, 0x5, 0x5}, {0x6, 0x0, 0x2}, {0x9, 0x2, 0x8}, {0x9, 0x3, 0x7f}, {0xa, 0x2, 0x800}, {0xe, 0x3, 0x7}, {0x6, 0x3, 0x6ffff835}, {0x0, 0x0, 0xfb8f}, {0x0, 0x4, 0x9}]}]}, {0x0, [0x61]}}, &(0x7f0000000540)=""/238, 0x147, 0xee, 0x1, 0x9}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', r1, r2, 0x5, 0x4, 0x4}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x34, 0x12, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_DATA={0x20, 0x4, 0x0, 0x1, [@NFTA_CT_TIMEOUT_DATA={0xc, 0x3, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2c7}]}, @NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x84}, @NFTA_CT_TIMEOUT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x43f4}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={<r4=>0x0, 0x5}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0x59e1, 0x8, 0x1, 0x7, 0x7, 0x4, 0x4, 0xbc, r4}, &(0x7f0000000200)=0x20)

2.15722476s ago: executing program 0 (id=333):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'})
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x8800)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000001c0)={0x4, "775b98"}, 0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_DELFLOWTABLE={0x84, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0xe8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x9fc1f8865577757d, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x888e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x4c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xda}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}}}]}]}, @NFT_MSG_NEWSET={0xfc, 0x9, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_USERDATA={0x4f, 0xd, 0x1, 0x0, "14981726748968d160a6f1b4331496c7d14a8dcd9cde93c0f585a9c2beb224699e46fa33358dda86af39b5205ae5a1f7c099ca9c3f4b6fa573f5924eb6a8a95d0dec489eb7f914ccbd81a0"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_USERDATA={0x81, 0xd, 0x1, 0x0, "39c2e0e09d84c9179902747a68a770d29ea7a9c674b3a7dd8067d0f5c6ad59acaf2e3fc76bc8a0a4ff6d8c1cbb3357566a97dae46ea77f9508d23a7650e602ac6d93826ecbb6bca1bc7ca29e9292e2a2b1bdcea3df9e1b546d79be9bc744c15ea4d3de3956cc25bb9778af46826d5d69c126a0d00a2ee85c5ff3aa5f69"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2b0}, 0x1, 0x0, 0x0, 0x4}, 0x4000001)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=<r5=>0x0)
sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000700)={0x0, 0xb7, 0x6, [0x1000, 0x33af, 0x4, 0x7fff, 0x4, 0x40]}, 0x14)
getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000740)=@assoc_value={0x0, 0x7ff}, &(0x7f0000000780)=0x8)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000007c0)={<r7=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000800)='veno', 0x4)
getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f0000000840)=0x4, &(0x7f0000000880)=0x2)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000900))
sendmsg(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000940)="1ce0dd8baad169a187abb44891248539bf0a8765cfe437f582d02561c0ce0fba3e0e8c31e899a856dd04cffcf84567807587c411f673c0f817e13b3f7e957bfc395626f51c6031f338ac0e6f4b4b098ae8cfe255", 0x54}, {&(0x7f00000009c0)="2b19d24da4a435e906", 0x9}, {&(0x7f0000000a00)="4e1115ea186d59f5fe5412d6ad37ad5b59221dc2c3ca749692fa25543ec711657ec049a4ef23db4781c570e6e17a159fa0d9b882a08f7b3729c6f4605303e7803634e42c3537a43a89eac5e2b78de6ccc635622934c8f217a09c585eb04bcea117e67ef0eef47ccb23e541fce32df202639c674ba0bd915256044c745d87b855179eca0b89b6b3730d4db3ad9dd7522c09fa01275d9c554a273a12fb2ad3425e755cfba27ace986f475dbdad38cbf0815ecd5055edb157ac0163243565dcfae2bf6b2d3f3e19882548f95419", 0xcc}], 0x3, &(0x7f0000000b40)=[{0xc8, 0x114, 0xc371, "16f64cb6cdb1b7d06c337154103753c1a41f2a33a66f8b1f402c6c79d5d807bec1f2b24cc42d63762b36906250951f1f2ab853f1f6d3d13a13f14b208b11a2b11ae6069edc2dbf655d7118caea70378304f1015ee75f4c2d5f55c27e2f149568444e1f305d2d9a55d0d2819accac5c67476ba4a8281c48afaea79fe8c356646813dc40bb1f4a4b13619d17118061c9dc6210c6d8a38b6f810247e6db74fe04b421e4c87c5e2f7685a90fae89e72a170fb9dc04"}, {0x110, 0x29, 0x80000000, "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"}, {0xa0, 0x104, 0x3, "4f70dc4fa47d060e6dc319f2eed776515a8638914cc1c529c5827b5482fe6d4a2913b786aca2a9c786d68793786a2ce6007cbe942c5090c771efe3095cbeffdfdf71c5e7ce55c968b3c50e3634c6eec9eb5a61305d228451d0c61a496740897cc06f4073634f92617372acbbca767d11fe2437d599188233c31fd7bae568c158ba9abe8a136c2175287f0b0364"}, {0x108, 0x118, 0xc6, "4373b06e8ed5325648fd4b56023b4cca98c96322b4ade8e52334256dbdb8dd23571c79ada7a5768a670b1ccefda263cc4d4c90e7bb253950e20a5ec222cca492cf7b3145f93e4e2650dcc61015cb399e0a9c1448ac32460af25ddcebf3e2f2ad0ac495a6303673cd383daee836f2b9e84531568c3dfe187b3868d46b7681a059ad0e22c165bb244fa2cc238f052793412c258addcc2c5a9e6121a0ad7ca8ba5010d79aa36ca98c6d1e137ba7d72acce71545d3e6d069338b60f6f6c64c438bb1e39308d464234872a9b846f0e5a5592ac2359e794d051ffeef38d3054da0a0762a1f23a2cb46dc29dda8345a7702700d0311d526"}], 0x380}, 0x24000880)
ioctl$XFS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000f00))
sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001080), r7)
sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x60, r9, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3ff}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_hsr\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c000}, 0x80)
setsockopt$sock_void(r6, 0x1, 0x1b, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(r8, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x20, r3, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x77}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0xc000)
sendmsg$nl_route_sched(r7, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)=@newchain={0x34, 0x64, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xe, 0x8}, {0xfff1, 0x2}, {0x5, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x12}]}, 0x34}}, 0x80)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001400)={'geneve0\x00', &(0x7f00000013c0)=@ethtool_sset_info={0x37, 0x3d4a, 0xfd, [0x7, 0xd, 0x8c, 0xfffff000, 0x2, 0x7fff, 0x669b]}})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$nl_route(r7, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x104130}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=@getaddr={0x14, 0x16, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000)

2.084065773s ago: executing program 0 (id=335):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c0c0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010027bd7000ffdbdf25280000000a0001007770616e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4004850)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000100001002cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10080400000000001c002b80080003001100000008000100", @ANYRES32, @ANYBLOB="1538f983", @ANYRES32, @ANYBLOB="14003500626f6e645f736c6176655f30"], 0x50}}, 0x0)

2.082198529s ago: executing program 2 (id=336):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r7 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000180)={0x10000000})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

1.933644959s ago: executing program 2 (id=338):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0071743daa82010412dad671a74d000000", @ANYRES16=r0, @ANYBLOB="020026bd7000fcdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900050000007b000000"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x1)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001000a010100080002"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000)

1.868265165s ago: executing program 2 (id=339):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = socket(0xd, 0x24762835ca35593, 0xffffffff)
r2 = socket$pptp(0x18, 0x1, 0x2)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r5, 0x4008941a, &(0x7f0000000100))
r7 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r7, &(0x7f0000000180)='THAWED\x00', 0x7)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
mkdirat$cgroup(r5, &(0x7f0000000200)='syz0\x00', 0x1ff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000280))
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000002c0)={<r10=>0x0, 0x70, "edb92af5310a856e66f6215c5433a8beaa56d5cb39f2806d16234b2abda23985bcf6a29b3d62ea760c2ccbf0a2ce6165d9f86887df9b42362e34d09e24ed375f2de233fff84e9f86f6e52cda53f532aaea01519b66baaae4d3c652f65d5c69ef505e3062665597714a12d65313b8f6ac"}, &(0x7f0000000340)=0x78)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000400)={r10, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x4, @remote, 0xfffffffd}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x1, @loopback, 0x3}, @in6={0xa, 0x4e20, 0x2, @loopback, 0x8000}]}, &(0x7f0000000440)=0x10)
ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000480)={0xc023, 0x3})
sendto(r3, &(0x7f00000004c0)="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", 0xfa, 0x1, &(0x7f00000005c0)=@in={0x2, 0x4e23, @private=0xa010100}, 0x80)
ioctl$XFS_IOC_GETBMAP(r2, 0xc0205826, &(0x7f0000000640)={0x5, 0x1, 0x1a, 0x400, 0x400000})
sendmmsg$sock(r2, &(0x7f00000009c0)=[{{&(0x7f0000000680)=@phonet={0x23, 0x1, 0xee, 0x7}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000700)="c98b4d77b8d9b7886ae8be18dca749ce7b4acb759053a36bda8c82ede97f5f7fa63d36b38e52bf4c9293e48e46ec8dfb1743be545649d541fcd1580539e25061800dc76434c1bd0449df345db147254a6ef2eeb653712c41d94ba7a6e04dd1288b7165fa26d645ae9c0e8b7abb39d70f851c384d2c37b1976b9dc97860617cb2e7e8e0e751c958a595bcbf9dd4f80072ce68fb1cc1015bb98354fbb683fd1de2ce06cfffe960c59700363c56c149524c3e0d3cf2a06aea948e14bbc3a0e5d1802679cf1d32ed17313b27", 0xca}, {&(0x7f0000000800)="15940e4a746fe7e3aed33324935cbc23e982ec61d4b70497b5b67289e4e628f04628610cefcf00c83f1353", 0x2b}, {&(0x7f0000000840)="9238a6b63d941406cafd52014b1babf3ce83add53595a263c224d3a4ed3742262e7769d183eca6daaa5cfc063bdcc72549582e587be81a60a782a765a6f5a797f9644ae96b213716b7475c218795aa8cb15ff8df8d22a7787690bd7ca26ab9f63234c9b4cd66b02b5269d736c42282df203b2fdcf21abbad73b27337d3af", 0x7e}, {&(0x7f00000008c0)="38476361a3e441779cffcd8ccd15827820033733a480e4af23e8fc138ec8af648999abfbbee97e0a5e8dce799439927a2746ae96de424d0a0361cea052dccd88f671a18c518c412504b1e0a2312c20270da8e2b80f7264deccf3af0c9ee29f5ef4ae939ed804cf1bab2ae814588702a0e359866e2519d86c04e6a3feb376a0", 0x7f}], 0x4, &(0x7f0000000980)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x30}}], 0x1, 0x200080c3)
ioctl$FITHAW(r4, 0xc0045878)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000a00)=0x3, 0x2)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000dc0)={r3, 0x20, &(0x7f0000000d80)={&(0x7f0000000c40)=""/177, 0xb1, <r11=>0x0, &(0x7f0000000d00)=""/99, 0x63}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xe, 0x13, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x3, 0x0, 0x2, 0x9, 0x5, 0x18, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0xa, 0x5, 0x7, 0x40, 0x10}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b00)='GPL\x00', 0xa, 0x5a, &(0x7f0000000b40)=""/90, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1b, r4, 0x8, &(0x7f0000000bc0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x1, 0xd, 0x6, 0xfff}, 0x10, r11, 0xffffffffffffffff, 0x4, &(0x7f0000000e00)=[r3, r2, r4, r4, r3, r3, r4], &(0x7f0000000e40)=[{0x5, 0x3, 0xf, 0x1}, {0x2, 0x2, 0xa, 0xa}, {0x4, 0x2, 0x5, 0x5}, {0x2, 0x3, 0x4, 0xe}], 0x10, 0xb190}, 0x94)
r12 = accept(r3, &(0x7f0000000f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000fc0)=0x80)
ioctl$SIOCSIFMTU(r12, 0x8922, &(0x7f0000001000)={'geneve0\x00', 0x4})
r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001040), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r13, 0x0, 0x35, 0xc0, &(0x7f0000001080)="6f6a669ce2da5ac20c256695ade9a152c153a9cb77ce5740948debdac7f2e0b0763ac8014eb41da1f83868afd6f295eb7c4a687b72", &(0x7f00000010c0)=""/192, 0x9, 0x0, 0x62, 0xa7, &(0x7f0000001180)="1fc0a47a64849f73582b088882518647cf687f9d4cb4c77b14d1e1f837d99ead298c4ba9ab9efef37e5e898a3ea317538f2817198592bde1b984298c77e418f67ee931bd1cd30e80d1bccfd8c290957cf1d4a416ecc4a0959b6efbb650271bdb64f3", &(0x7f0000001200)="e485525c5fca5513a0d2854482c1e8aef49f3d7b7dd037e878fd6b2d9d105f8aea2bea33d86fb9f11bde8beb575a0aed9446b4866f975f3a86a05fd435e166320619aed78b3b8f5596dfc2f482ded70208b6bcd86e01552a940b12e0761d7fa85cadc54b2d53bca754ce0990fb83a4c647c3164baa0396ea3f1747da157695f6728c3061f0ba83b081b30d9442a4d6debbe9f2b65f5161e805f1820a65d1533b580a5ff7df5f95", 0x2, 0x0, 0xffffffff}, 0x50)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000001440)={<r14=>r0, &(0x7f0000001340)='syz0\x00', 0x226101, &(0x7f0000001380)={@_ha_fsid={[0xb8b, 0x7]}, {0x5, 0x40, 0x0, 0x5}}, 0x937, &(0x7f00000013c0), &(0x7f0000001400)})
sendmsg$nl_route(r14, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)=@ipv6_newaddrlabel={0x2c, 0x48, 0x200, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x1, 0x0, 0x0, 0xffffff29}, [@IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60015}, 0x2)

1.866785064s ago: executing program 0 (id=340):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c00000010004b0402000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000018100200280012800b00010067656e65766500001800028014000700fc0100000000000000000000000000011400030067656e657665300000000000"], 0x5c}}, 0x80)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000080), 0x0}}, @fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}], 0xb0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, <r2=>0x0}, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
socket(0x10, 0x803, 0x0)
socket(0x1, 0x803, 0x0)
recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

1.865442214s ago: executing program 2 (id=341):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x20, 0x10, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xde7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r8=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_DOWN(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

1.707818962s ago: executing program 0 (id=342):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r0, 0x952de000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0) (async)
r2 = accept4(r1, 0x0, 0x0, 0x800) (async, rerun: 32)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x48) (rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{r3}, 0x0, &(0x7f0000000e80)='%pB    \x00'}, 0x20) (async)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r6)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500))
syz_emit_ethernet(0x4b, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffff00000000000086dd67001b0100153afffe880000000000000000000000000201ff02000000000000000000000000000186009078ff0203000100ddfff5ffffff0500c89600"], 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x5f0}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})

1.642052988s ago: executing program 0 (id=343):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x64, r3, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000000180), &(0x7f0000000240)=0x10)
write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r5, @ANYRES16], 0x14)
read$nci(r4, &(0x7f0000000ac0)=""/152, 0x98)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r9, 0x8b2a, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
write$tun(r10, 0x0, 0xfdef)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_int(r11, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4)
setsockopt$inet_int(r11, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4)
getsockopt$inet_opts(r11, 0x0, 0x9, &(0x7f0000000300)=""/19, &(0x7f0000000340)=0x13)
socket$packet(0x11, 0x3, 0x300)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r12, 0x0, 0x0, 0x800, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

755.226373ms ago: executing program 1 (id=346):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001500010300000000f8000000"], 0x14}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$inet_sctp(r5, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="b086f7d602de2fe34e218331f0bea800ad25874c8c41446ff1f532ecc94c9c629930df0c9539321ec37794ff39db5ca15f5c997bca427d8646706aa525bbd09357c6163140e9fa3540af5716f1e6eec645ffc8933935c9a3b52497b9c0f70ecfe076b54771a3e93d10a4d9496601c5874e", 0x71}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x40840)
recvmmsg$unix(r5, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/226, 0xe2}], 0x1}}], 0x1, 0x40012102, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900210073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000140c0009800800014000000081480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001140000001100010000000000000000001100000a"], 0xc0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000280)={&(0x7f0000000100)=[{0x2, 0x0, 0x2}], 0x1, 0x10, 0x3, 0x9})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004004}, 0x88c0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000003600000018110000", @ANYRES32=r10, @ANYBLOB="0000010000000000000000000000000085000000860000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

633.500739ms ago: executing program 1 (id=347):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)
socket(0x10, 0x803, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c0c0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010027bd7000ffdbdf25280000000a0001007770616e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4004850)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000100001002cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10080400000000001c002b80080003001100000008000100", @ANYRES32, @ANYBLOB="1538f983", @ANYRES32, @ANYBLOB="14003500626f6e645f736c6176655f30"], 0x50}}, 0x0)

245.011512ms ago: executing program 1 (id=348):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0xffffffffffffffff, 0x9, 0x6, 0xfffffffffffffff9, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x3, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8881}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newsa={0x210, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0xa0, 0x0, 0x4}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0xca, 0x2, {{'salsa20-generic\x00'}, 0x410, "c8cf29ea454884cd09b513adcde246f1b71da6339926afa870fdd9502b968652891e74c6923f9abd4e2ab25e49aca686291ca9bca1e1776998a71ac3d60c504c7f25525872453e602809f6d033ace55029fd1775d63a4e22cb43730bd2483efd4f83bc252220a0ef8667b957e8ce8e9bc123bc6f530326b9254e18fb279d34b92856"}}, @lastused={0xc, 0xf, 0x4}]}, 0x210}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000200)={'tunl0\x00', <r3=>0x0, 0x1, 0x80, 0x8, 0x9, {{0xe, 0x4, 0x0, 0x12, 0x38, 0x68, 0x0, 0x3, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1f, 0xc2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @multicast2, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end]}}}}})
setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f00000001c0)={0x0, 0x0, 0xc, r3, 0x4}, 0xc)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
r9 = socket(0x10, 0x3, 0x0)
write(r9, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r9, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x14, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000008638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_icmp(0x2, 0x2, 0x1)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="24000000360007010300000000000002017c000010"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)

133.223874ms ago: executing program 1 (id=349):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x8, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES32=0x0], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffe}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3af, 0xe)
close(0xffffffffffffffff)
r3 = socket$kcm(0x2d, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x32600)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000780)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3})
write(r2, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24004840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900", @ANYRES32], 0x4c}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5})
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
listen(r7, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0109000000ff"})

4.120879ms ago: executing program 1 (id=350):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x9, 0x4) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000040)=""/28, &(0x7f00000000c0)=0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async)
mmap(&(0x7f00004b4000/0x2000)=nil, 0x2000, 0x7, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000180)={r5, 0xa1}, 0x8) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000080)={r5, 0x3}, &(0x7f00000000c0)=0x8) (async)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@enum={0x6, 0x4, 0x0, 0x6, 0x4, [{0x9, 0x7d01}, {0xf, 0x9}, {0x7, 0x2}, {0x4, 0x6}]}, @const={0x7, 0x0, 0x0, 0xa, 0x5}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x61, 0x5f, 0x61, 0x2e, 0x30, 0x5f]}}, &(0x7f0000000180)=""/141, 0x64, 0x8d, 0x1}, 0x28)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8, 0xffffffffffffffff, 0x6000}, 0xc) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='nv', 0x2) (async)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001840)=ANY=[@ANYBLOB="4400000010000104299d70000200000000000200", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c000280060002003000000008001f0002"], 0x44}}, 0x20040000)

0s ago: executing program 1 (id=351):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000380)='g', 0x1, 0x8812, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000002c0)=""/131, 0x83}], 0x1}, 0x2}], 0x1, 0x10122, 0x0)
shutdown(r0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:10242' (ED25519) to the list of known hosts.
syzkaller login: [   57.677996][ T5594] cgroup: Unknown subsys name 'net'
[   57.789528][ T5594] cgroup: Unknown subsys name 'cpuset'
[   57.795194][ T5594] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.246067][ T5594] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.854790][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.860270][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.863352][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.866705][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.868162][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.869839][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.874006][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.874772][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.878836][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.883073][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.908410][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.912812][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.916493][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.921515][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.926550][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.531301][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.534263][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.537472][ T5614] bridge_slave_0: entered allmulticast mode
[   64.541256][ T5614] bridge_slave_0: entered promiscuous mode
[   64.565952][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.568987][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.572055][ T5614] bridge_slave_1: entered allmulticast mode
[   64.576161][ T5614] bridge_slave_1: entered promiscuous mode
[   64.579839][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.582018][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.584443][ T5610] bridge_slave_0: entered allmulticast mode
[   64.587135][ T5610] bridge_slave_0: entered promiscuous mode
[   64.609497][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.612021][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.614410][ T5610] bridge_slave_1: entered allmulticast mode
[   64.617364][ T5610] bridge_slave_1: entered promiscuous mode
[   64.642230][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.664882][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.670327][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.677550][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.742760][ T5610] team0: Port device team_slave_0 added
[   64.747991][ T5610] team0: Port device team_slave_1 added
[   64.750379][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.752670][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.755320][ T5619] bridge_slave_0: entered allmulticast mode
[   64.758408][ T5619] bridge_slave_0: entered promiscuous mode
[   64.762406][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.765806][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.768938][ T5619] bridge_slave_1: entered allmulticast mode
[   64.772899][ T5619] bridge_slave_1: entered promiscuous mode
[   64.777719][ T5614] team0: Port device team_slave_0 added
[   64.781179][ T5614] team0: Port device team_slave_1 added
[   64.808727][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.810913][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.819104][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.846538][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.849755][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.860059][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.867750][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.873680][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.877869][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.880237][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.887968][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.903319][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.906760][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.914831][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.928034][ T5619] team0: Port device team_slave_0 added
[   64.936193][ T5619] team0: Port device team_slave_1 added
[   64.968150][ T5610] hsr_slave_0: entered promiscuous mode
[   64.970951][ T5610] hsr_slave_1: entered promiscuous mode
[   64.989279][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.991540][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.999787][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.013598][ T5614] hsr_slave_0: entered promiscuous mode
[   65.016767][ T5614] hsr_slave_1: entered promiscuous mode
[   65.018949][ T5614] debugfs: 'hsr0' already exists in 'hsr'
[   65.020785][ T5614] Cannot create hsr debugfs directory
[   65.022886][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.025917][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.034808][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.141049][ T5619] hsr_slave_0: entered promiscuous mode
[   65.144414][ T5619] hsr_slave_1: entered promiscuous mode
[   65.147337][ T5619] debugfs: 'hsr0' already exists in 'hsr'
[   65.149753][ T5619] Cannot create hsr debugfs directory
[   65.368870][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.381259][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.385122][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.391402][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.402771][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.407959][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.411631][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.416613][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.464808][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.477926][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.482720][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.491534][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.496969][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.506592][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.510521][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.517361][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.619947][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.626888][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.633267][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.638449][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.645225][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.650938][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.655458][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.658297][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.664738][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.700936][ T5610] 8021q: adding VLAN 0 to HW filter on device team0
[   65.721443][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.724859][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.741910][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.744787][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.798553][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.850473][ T5614] 8021q: adding VLAN 0 to HW filter on device team0
[   65.871248][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.874277][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.908398][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.911461][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.920068][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.934549][ T5612] Bluetooth: hci1: command tx timeout
[   65.948332][ T5612] Bluetooth: hci0: command tx timeout
[   65.967715][ T5619] 8021q: adding VLAN 0 to HW filter on device team0
[   65.990780][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.993640][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.012624][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.015525][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.024255][ T5612] Bluetooth: hci2: command tx timeout
[   66.336431][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.382221][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.415661][ T5610] veth0_vlan: entered promiscuous mode
[   66.445508][ T5610] veth1_vlan: entered promiscuous mode
[   66.468994][ T5614] veth0_vlan: entered promiscuous mode
[   66.494047][ T5614] veth1_vlan: entered promiscuous mode
[   66.523709][ T5610] veth0_macvtap: entered promiscuous mode
[   66.532951][ T5610] veth1_macvtap: entered promiscuous mode
[   66.550178][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.571345][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.575610][ T5614] veth0_macvtap: entered promiscuous mode
[   66.588357][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.592943][ T5614] veth1_macvtap: entered promiscuous mode
[   66.611623][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.627171][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.630558][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.633349][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.645511][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.656929][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.699652][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.703117][ T5619] veth0_vlan: entered promiscuous mode
[   66.717625][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.727799][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.732618][   T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.734613][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.739596][   T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.756155][ T5619] veth1_vlan: entered promiscuous mode
[   66.789307][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.795574][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.838989][ T5619] veth0_macvtap: entered promiscuous mode
[   66.859741][ T5610] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.871550][ T5619] veth1_macvtap: entered promiscuous mode
[   66.875480][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.886041][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.955649][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.962471][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.969770][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.978149][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.988209][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.991221][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.006226][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.009003][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.064734][ T5725] Driver unsupported XDP return value 0 on prog  (id 2) dev N/A, expect packet loss!
[   67.115318][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.122499][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.149582][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.152969][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.200862][ T5730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4'.
[   67.314751][ T5738] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET)
[   67.336574][ T5735] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.379849][ T5743] netlink: 'syz.1.6': attribute type 13 has an invalid length.
[   67.382460][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.383381][ T5743] netlink: 'syz.1.6': attribute type 17 has an invalid length.
[   67.386853][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.476674][ T5740] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.485792][ T5740] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.511325][ T5747] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.647511][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.650734][ T5743] 8021q: adding VLAN 0 to HW filter on device team0
[   67.657314][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.678774][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.681309][ T5743] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.686808][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.689149][ T5743] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.701034][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.706819][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.722714][ T5743] veth1_vlan: left promiscuous mode
[   67.726686][ T5743] veth0_vlan: left promiscuous mode
[   67.728980][ T5743] veth0_vlan: entered promiscuous mode
[   67.733177][ T5743] veth1_vlan: entered promiscuous mode
[   67.738891][ T5743] veth1_macvtap: left promiscuous mode
[   67.741903][ T5743] veth0_macvtap: left promiscuous mode
[   67.746114][ T5743] veth0_macvtap: entered promiscuous mode
[   67.755564][ T5743] veth1_macvtap: entered promiscuous mode
[   67.761245][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   67.767733][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   67.773524][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   67.780620][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   68.014631][   T54] Bluetooth: hci1: command tx timeout
[   68.017315][ T5612] Bluetooth: hci0: command tx timeout
[   68.049447][ T5735] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.066401][ T5763] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.10'.
[   68.095525][ T5612] Bluetooth: hci2: command tx timeout
[   68.101330][ T5765] syz_tun: entered allmulticast mode
[   68.115127][ T5765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11'.
[   68.159262][ T5767] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12'.
[   68.167336][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'.
[   68.198086][ T5767] syz_tun (unregistering): left allmulticast mode
[   68.232039][ T5768] ip6tnl1: entered allmulticast mode
[   68.243637][ T5770] syz_tun: entered allmulticast mode
[   68.249510][ T5770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13'.
[   68.294805][ T5774] Zero length message leads to an empty skb
[   68.454610][ T5782] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.680089][ T5735] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.063625][ T5735] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.097655][ T5782] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.204182][ T5782] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.258587][ T5669] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.266668][ T5669] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.284598][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.293223][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.298611][ T5669] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   69.301329][ T5669] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   69.324109][ T5693] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   69.391425][ T5791] netlink: 52 bytes leftover after parsing attributes in process `syz.2.19'.
[   69.404219][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.408341][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.414432][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   69.419600][ T5791] netlink: 52 bytes leftover after parsing attributes in process `syz.2.19'.
[   69.425648][ T5791] netlink: 52 bytes leftover after parsing attributes in process `syz.2.19'.
[   69.565449][ T5798] netlink: 'syz.2.21': attribute type 1 has an invalid length.
[   69.712662][ T5804] lo: entered allmulticast mode
[   69.796381][ T5808] netlink: 'syz.2.24': attribute type 62 has an invalid length.
[   70.094009][   T54] Bluetooth: hci1: command tx timeout
[   70.096493][ T5612] Bluetooth: hci0: command tx timeout
[   70.140105][ T5828] syz_tun: entered allmulticast mode
[   70.174536][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   70.184178][ T5612] Bluetooth: hci2: command tx timeout
[   70.290157][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.293627][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.343071][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.350684][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.402844][ T5669] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.410885][ T5669] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.416729][ T5669] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.421994][ T5669] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.552147][ T5782] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.563749][ T5841] x_tables: unsorted underflow at hook 2
[   70.658165][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.661279][ T5845] netlink: 'syz.0.36': attribute type 3 has an invalid length.
[   70.671917][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.701530][ T5847] veth1_vlan: entered allmulticast mode
[   70.704113][ T5847] veth1_vlan: left promiscuous mode
[   70.706674][ T5847] team0: Device veth1_vlan failed to register rx_handler
[   70.711771][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.720951][ T5847] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[   70.744073][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.792417][ T5854] erspan1: entered allmulticast mode
[   70.828498][ T5858] nbd: must specify a device to reconfigure
[   70.838936][ T5861] syz.0.40 (5861) used obsolete PPPIOCDETACH ioctl
[   70.890241][ T5865] netlink: 'syz.2.44': attribute type 1 has an invalid length.
[   70.907003][ T5865] vlan2: entered allmulticast mode
[   70.908749][ T5865] hsr_slave_1: entered allmulticast mode
[   71.019364][ T5867] syzkaller1: entered promiscuous mode
[   71.021778][ T5867] syzkaller1: entered allmulticast mode
[   71.151926][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   71.156044][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   71.160415][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   71.165632][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   71.720737][ T5873] bond1 (unregistering): Released all slaves
[   71.952783][ T5887] nbd: must specify a device to reconfigure
[   71.992407][ T5890] netlink: 'syz.0.51': attribute type 2 has an invalid length.
[   71.996058][ T5891] netlink: 'syz.0.51': attribute type 2 has an invalid length.
[   72.173985][ T5612] Bluetooth: hci1: command tx timeout
[   72.184233][ T5612] Bluetooth: hci0: command tx timeout
[   72.207241][ T5910] IPv6: NLM_F_CREATE should be specified when creating new route
[   72.255993][ T5612] Bluetooth: hci2: command tx timeout
[   73.373975][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   73.419292][ T5940] __nla_validate_parse: 46 callbacks suppressed
[   73.419306][ T5940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'.
[   73.427939][ T5940] team_slave_1: entered promiscuous mode
[   73.431791][ T5940] team0: Port device team_slave_1 removed
[   73.575850][ T5946] bond1: (slave bond_slave_1): Device is not our slave
[   73.578127][ T5946] bond1: option active_slave: invalid value (bond_slave_1)
[   73.582150][ T5946] bond1 (unregistering): Released all slaves
[   73.653517][ T5949] netlink: 5 bytes leftover after parsing attributes in process `syz.0.64'.
[   73.658479][ T5949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   73.756946][ T5952] x_tables: ip_tables: icmp match: only valid for protocol 1
[   73.920941][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'.
[   73.956020][ T5964] Bluetooth: MGMT ver 1.23
[   74.083710][ T5966] netlink: 76 bytes leftover after parsing attributes in process `syz.1.68'.
[   74.107186][ T5970] lo speed is unknown, defaulting to 1000
[   74.111061][ T5970] lo speed is unknown, defaulting to 1000
[   74.115286][ T5970] lo speed is unknown, defaulting to 1000
[   74.246406][ T5974] netlink: 'syz.1.71': attribute type 1 has an invalid length.
[   74.292238][  T797] lo speed is unknown, defaulting to 1000
[   74.292241][ T5970] infiniband sqz0: set active
[   74.298052][ T5970] infiniband sqz0: added lo
[   74.306830][ T5975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.71'.
[   74.339361][ T5970] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   74.345694][ T5970] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   74.353416][ T5970] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   74.370120][ T5974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.71'.
[   74.394783][ T5970] RDS/IB: sqz0: added
[   74.396792][ T5970] smc: adding ib device sqz0 with port count 1
[   74.399582][ T5970] smc:    ib device sqz0 port 1 has no pnetid
[   74.405701][   T32] lo speed is unknown, defaulting to 1000
[   74.413076][ T5970] lo speed is unknown, defaulting to 1000
[   74.573044][ T5970] lo speed is unknown, defaulting to 1000
[   74.646893][ T5980] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.73'.
[   74.743251][ T5970] lo speed is unknown, defaulting to 1000
[   74.748434][ T5987] syzkaller1: entered promiscuous mode
[   74.754423][ T5987] syzkaller1: entered allmulticast mode
[   74.776236][ T5987] openvswitch: netlink: IPv4 tun info is not correct
[   75.210333][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'.
[   75.474431][ T6001] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[   75.582473][ T6010] netlink: 32 bytes leftover after parsing attributes in process `syz.2.82'.
[   75.649080][ T6013] netlink: 48 bytes leftover after parsing attributes in process `syz.2.84'.
[   75.712847][ T6016] Cannot find set identified by id 0 to match
[   76.417109][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[   76.419991][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[   76.420987][ T6059] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   76.451317][ T6060] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   76.656915][ T6074] netlink: 'syz.2.101': attribute type 1 has an invalid length.
[   76.792173][ T6087] netlink: 'syz.0.103': attribute type 16 has an invalid length.
[   76.800211][ T6087] netlink: 'syz.0.103': attribute type 17 has an invalid length.
[   76.907926][ T6087] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.911562][ T6087] 8021q: adding VLAN 0 to HW filter on device team0
[   76.918911][ T6087] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.947013][ T6087] team_slave_1: left promiscuous mode
[   76.949747][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.953395][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.958470][ T6087] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   76.961878][ T6087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   76.968705][ T6087] veth1_vlan: left allmulticast mode
[   76.970932][ T6087] veth0_vlan: left promiscuous mode
[   76.973322][ T6087] veth0_vlan: entered promiscuous mode
[   76.979245][ T6087] veth1_vlan: entered promiscuous mode
[   76.984589][ T6087] veth1_macvtap: left promiscuous mode
[   76.986938][ T6087] veth0_macvtap: left promiscuous mode
[   76.989263][ T6087] veth0_macvtap: entered promiscuous mode
[   76.991616][ T6087] veth1_macvtap: entered promiscuous mode
[   76.999274][ T6087] 8021q: adding VLAN 0 to HW filter on device eth0
[   77.002763][ T6087] 8021q: adding VLAN 0 to HW filter on device eth1
[   77.007212][ T6087] 8021q: adding VLAN 0 to HW filter on device eth2
[   77.011105][ T6087] 8021q: adding VLAN 0 to HW filter on device eth3
[   77.020763][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.023570][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.027859][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.030707][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.067237][ T6095] bond2 (unregistering): Released all slaves
[   77.079023][ T5669] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.087546][ T5669] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.091122][ T5669] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.098902][ T5669] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.192488][ T6102] netlink: 'syz.2.109': attribute type 1 has an invalid length.
[   77.226738][ T6102] bond2: (slave geneve2): making interface the new active one
[   77.230236][ T6102] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   77.233100][   T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   77.237133][   T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   77.242219][   T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   77.246766][   T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   78.390694][ T6156] netlink: 'syz.0.121': attribute type 11 has an invalid length.
[   78.443480][ T6158] batadv_slave_1: entered promiscuous mode
[   78.575905][ T6158] batadv_slave_1: left promiscuous mode
[   78.586638][ T6167] __nla_validate_parse: 19 callbacks suppressed
[   78.586651][ T6167] netlink: 40 bytes leftover after parsing attributes in process `syz.2.123'.
[   78.759304][ T6182] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[   78.766725][ T6182] bond3 (unregistering): Released all slaves
[   78.860642][ T6189] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   78.863571][ T6189] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   78.902153][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.128'.
[   78.917261][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.128'.
[   78.930637][ T6189] netlink: 58 bytes leftover after parsing attributes in process `syz.0.128'.
[   78.967882][ T6194] netlink: 32 bytes leftover after parsing attributes in process `syz.2.130'.
[   79.016447][ T6189] team0 (unregistering): Port device team_slave_0 removed
[   79.087235][ T6201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.132'.
[   79.239051][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.242230][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.252784][ T6210] nbd: couldn't find a device at index 8192
[   79.392998][ T6205] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.407842][ T6205] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.469212][ T5648] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.471095][ T6220] netlink: 'syz.0.138': attribute type 1 has an invalid length.
[   79.479461][ T5648] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.487670][ T5648] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.495132][ T5648] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.537057][ T6209] syzkaller0: entered promiscuous mode
[   79.539143][ T6209] syzkaller0: entered allmulticast mode
[   79.860427][ T6232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.139'.
[   80.630989][ T6235] syzkaller1: entered promiscuous mode
[   80.632760][ T6235] syzkaller1: entered allmulticast mode
[   80.701025][ T6242] tipc: Started in network mode
[   80.704688][ T6242] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[   80.710531][ T6242] tipc: Enabled bearer <eth:vlan0>, priority 10
[   80.958288][ T6264] netlink: 'syz.2.147': attribute type 1 has an invalid length.
[   80.981474][ T6264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.147'.
[   80.988810][ T6264] 8021q: adding VLAN 0 to HW filter on device bond3
[   81.001173][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.146'.
[   81.064753][ T6275] netlink: 32 bytes leftover after parsing attributes in process `syz.2.148'.
[   81.336171][ T6294] syzkaller0: entered promiscuous mode
[   81.338140][ T6294] syzkaller0: entered allmulticast mode
[   81.533955][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   81.740623][ T5678] tipc: Node number set to 10005162
[   81.838065][ T6309] netlink: 'syz.2.160': attribute type 1 has an invalid length.
[   81.882408][ T6313] netlink: 'syz.2.162': attribute type 13 has an invalid length.
[   81.955114][ T5678] lo speed is unknown, defaulting to 1000
[   81.975536][   T32] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   82.734344][   T32] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   82.803553][ T6323] xt_CT: You must specify a L4 protocol and not use inversions on it
[   82.811804][ T6324] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[   82.837316][ T6325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.490954][ T6349] tipc: Started in network mode
[   83.496403][ T6349] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711
[   83.507135][ T6349] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   83.640587][ T6363] __nla_validate_parse: 8 callbacks suppressed
[   83.640605][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'.
[   83.808068][ T6371] ip6t_REJECT: ECHOREPLY is not supported
[   83.966833][ T6386] nbd: couldn't find a device at index 2097152
[   84.005703][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'.
[   84.081180][ T6391] raw_sendmsg: syz.1.184 forgot to set AF_INET. Fix it!
[   84.344791][ T6411] xt_hashlimit: size too large, truncated to 1048576
[   84.466011][ T6415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.190'.
[   84.491115][ T6413] netlink: 68 bytes leftover after parsing attributes in process `syz.2.189'.
[   84.679266][ T6423] syzkaller1: entered promiscuous mode
[   84.681943][ T6423] syzkaller1: entered allmulticast mode
[   84.779253][ T6428] netlink: 'syz.0.194': attribute type 10 has an invalid length.
[   84.783570][ T6428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.194'.
[   85.116382][ T6451] netlink: 'syz.1.201': attribute type 12 has an invalid length.
[   85.271199][ T6468] netlink: 3 bytes leftover after parsing attributes in process `syz.2.205'.
[   85.336496][ T2357] IPVS: starting estimator thread 0...
[   85.346655][ T6468] tipc: Enabled bearer <udp:s>, priority 10
[   85.426769][ T6471] IPVS: using max 84 ests per chain, 201600 per kthread
[   85.526387][ T6500] syzkaller0: entered promiscuous mode
[   85.530126][ T6500] syzkaller0: entered allmulticast mode
[   85.700589][ T6513] syzkaller0: entered promiscuous mode
[   85.703729][ T6513] syzkaller0: entered allmulticast mode
[   85.750516][ T6515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.218'.
[   85.756114][ T6515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.218'.
[   85.767870][ T6513] netlink: 196 bytes leftover after parsing attributes in process `syz.1.217'.
[   85.800458][ T6517] bond4 (unregistering): Released all slaves
[   85.808518][ T6520] netlink: 'syz.0.220': attribute type 8 has an invalid length.
[   85.820692][ T6512] netlink: 'syz.1.217': attribute type 1 has an invalid length.
[   85.928434][ T6528] lo speed is unknown, defaulting to 1000
[   85.938652][ T6532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.223'.
[   85.971977][ T6536] syzkaller0: entered promiscuous mode
[   85.975987][ T6536] syzkaller0: entered allmulticast mode
[   86.035599][ T6538] netlink: 'syz.1.225': attribute type 4 has an invalid length.
[   86.220878][ T6552] vlan3: entered promiscuous mode
[   86.222545][ T6552] geneve1: entered promiscuous mode
[   86.225544][ T6552] vlan3: entered allmulticast mode
[   86.227429][ T6552] geneve1: entered allmulticast mode
[   86.608801][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.611186][ T6559] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.614032][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.616988][ T6559] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.633489][ T6559] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   86.659591][   T10] cfg80211: failed to load regulatory.db
[   86.661652][ T6559] 8021q: adding VLAN 0 to HW filter on device bond1
[   86.668915][ T6559] 8021q: adding VLAN 0 to HW filter on device bond2
[   86.672418][ T6559] ip6gretap0: entered promiscuous mode
[   86.677362][   T33] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   87.009167][ T6577] lo speed is unknown, defaulting to 1000
[   87.241384][ T6595] syzkaller0: entered promiscuous mode
[   87.243286][ T6595] syzkaller0: entered allmulticast mode
[   87.463106][ T6607] syzkaller0: entered promiscuous mode
[   87.465922][ T6607] syzkaller0: entered allmulticast mode
[   87.553184][ T6617] block nbd0: not configured, cannot reconfigure
[   87.694660][   T32] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   87.716208][ T6628] netlink: 'syz.0.248': attribute type 30 has an invalid length.
[   87.837250][ T6638] netlink: 'syz.0.252': attribute type 21 has an invalid length.
[   87.841959][ T6639] netlink: 'syz.0.252': attribute type 21 has an invalid length.
[   87.881662][ T6638] netlink: 'syz.0.252': attribute type 21 has an invalid length.
[   87.891603][ T6639] netlink: 'syz.0.252': attribute type 21 has an invalid length.
[   87.895413][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.903722][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.910984][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   87.932367][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   88.094355][ T6655] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   88.099475][ T6655] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   88.124213][ T6663] dummy0: entered promiscuous mode
[   88.128263][ T6663] dummy0: entered allmulticast mode
[   88.134260][ T6663] bridge0: port 3(dummy0) entered blocking state
[   88.138212][ T6663] bridge0: port 3(dummy0) entered disabled state
[   88.142778][ T6663] bridge0: port 3(dummy0) entered blocking state
[   88.145216][ T6663] bridge0: port 3(dummy0) entered forwarding state
[   88.248619][ T6669] tipc: Resetting bearer <eth:vlan0>
[   88.284951][   T32] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   88.744113][ T5723] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   88.951011][ T6672] __nla_validate_parse: 14 callbacks suppressed
[   88.951029][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'.
[   89.016442][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'.
[   89.193600][ T6678] bond1: entered promiscuous mode
[   89.196302][ T6678] bond1: entered allmulticast mode
[   89.198317][ T6678] 8021q: adding VLAN 0 to HW filter on device bond1
[   89.206942][ T6678] erspan1: entered allmulticast mode
[   89.211180][ T6678] bond1: (slave erspan1): making interface the new active one
[   89.213743][ T6678] erspan1: entered promiscuous mode
[   89.218334][ T6678] bond1: (slave erspan1): Enslaving as an active interface with an up link
[   89.234352][ T6673] nbd0: detected capacity change from 0 to 63
[   89.246866][ T6680] block nbd0: Receive control failed (result -32)
[   89.247343][ T5624] block nbd0: Send control failed (result -32)
[   89.249593][   T55] block nbd0: Receive control failed (result -32)
[   89.251736][ T5624] block nbd0: Request send failed, requeueing
[   89.264797][  T854] block nbd0: Dead connection, failed to find a fallback
[   89.267280][  T854] block nbd0: shutting down sockets
[   89.269847][  T854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.274656][  T854] Buffer I/O error on dev nbd0, logical block 0, async page read
[   89.278644][ T5624] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.288286][ T5624] Buffer I/O error on dev nbd0, logical block 1, async page read
[   89.299239][ T5624] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.307743][ T5624] Buffer I/O error on dev nbd0, logical block 2, async page read
[   89.310849][ T5624] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.313749][ T5624] Buffer I/O error on dev nbd0, logical block 3, async page read
[   89.316492][ T5624] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.320136][ T5624] Buffer I/O error on dev nbd0, logical block 0, async page read
[   89.322969][ T5624] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.326514][ T5624] Buffer I/O error on dev nbd0, logical block 1, async page read
[   89.329181][ T5624] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.332578][ T5624] Buffer I/O error on dev nbd0, logical block 2, async page read
[   89.336355][ T5624] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.339316][ T5624] Buffer I/O error on dev nbd0, logical block 3, async page read
[   89.342160][ T5624] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.345558][ T5624] Buffer I/O error on dev nbd0, logical block 0, async page read
[   89.348606][ T5624] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.351592][ T5624] Buffer I/O error on dev nbd0, logical block 1, async page read
[   89.357228][ T5624] ldm_validate_partition_table(): Disk read failed.
[   89.360562][ T6686] netlink: 20 bytes leftover after parsing attributes in process `syz.2.263'.
[   89.364413][ T5624] Dev nbd0: unable to read RDB block 0
[   89.367347][ T5624]  nbd0: unable to read partition table
[   89.384755][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'.
[   89.390240][ T5624] ldm_validate_partition_table(): Disk read failed.
[   89.393008][ T5624] Dev nbd0: unable to read RDB block 0
[   89.403533][ T5624]  nbd0: unable to read partition table
[   89.448685][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'.
[   89.455929][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'.
[   89.538788][ T6703] : renamed from wg2 (while UP)
[   89.734851][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'.
[   89.795486][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'.
[   89.958050][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'.
[   90.757960][ T6729] syzkaller0: entered promiscuous mode
[   90.764567][ T6729] syzkaller0: entered allmulticast mode
[   90.819621][ T6733] netlink: 45 bytes leftover after parsing attributes in process `syz.1.278'.
[   90.857878][ T6726] dvmrp0: entered allmulticast mode
[   91.109293][ T6746] block nbd0: reconnected socket
[   91.115001][   T56] block nbd0: Receive control failed (result -32)
[   91.359075][ T6761] validate_nla: 4 callbacks suppressed
[   91.359093][ T6761] netlink: 'syz.1.288': attribute type 13 has an invalid length.
[   91.374197][ T6761] netlink: 'syz.1.288': attribute type 17 has an invalid length.
[   91.441298][ T6761] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.448304][ T6761] 8021q: adding VLAN 0 to HW filter on device team0
[   91.457839][ T6761] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.500840][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.506073][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.513670][ T6761] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   91.518339][ T6761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   91.524276][ T6761] veth1_vlan: left promiscuous mode
[   91.526679][ T6761] veth0_vlan: left promiscuous mode
[   91.528762][ T6761] veth0_vlan: entered promiscuous mode
[   91.537096][ T6761] veth1_vlan: entered promiscuous mode
[   91.543073][ T6761] veth1_macvtap: left promiscuous mode
[   91.546506][ T6761] veth0_macvtap: left promiscuous mode
[   91.548843][ T6761] veth0_macvtap: entered promiscuous mode
[   91.551274][ T6761] veth1_macvtap: entered promiscuous mode
[   91.560545][ T6761] 8021q: adding VLAN 0 to HW filter on device eth0
[   91.577534][ T6761] 8021q: adding VLAN 0 to HW filter on device eth1
[   91.591894][ T6761] 8021q: adding VLAN 0 to HW filter on device eth2
[   91.601610][ T6761] 8021q: adding VLAN 0 to HW filter on device eth3
[   91.613678][ T6761] bond1: left promiscuous mode
[   91.616229][ T6761] erspan1: left promiscuous mode
[   91.618114][ T6761] bond1: left allmulticast mode
[   91.623059][ T6761] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.627764][ T6761] erspan1: left allmulticast mode
[   91.640117][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.642463][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.654217][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.656672][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.680736][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.684811][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.696893][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.702144][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.922384][ T6783] bond1: (slave bond_slave_1): Device is not our slave
[   91.925578][ T6783] bond1: option active_slave: invalid value (bond_slave_1)
[   91.930291][ T6783] bond1 (unregistering): Released all slaves
[   92.274885][ T6805] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   92.279376][   T32] team_slave_0: entered promiscuous mode
[   92.282460][   T32] team_slave_1: entered promiscuous mode
[   92.320637][ T6805] 8021q: adding VLAN 0 to HW filter on device macvlan4
[   92.534538][ T6827] lo speed is unknown, defaulting to 1000
[   92.609025][ T6839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.733095][ T6850] netlink: 'syz.0.312': attribute type 1 has an invalid length.
[   93.248631][ T6890] bond4: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[   93.256569][   T10] IPVS: starting estimator thread 0...
[   93.261579][ T6886] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   93.263041][ T6890] bond4: entered promiscuous mode
[   93.272506][ T6890] 8021q: adding VLAN 0 to HW filter on device bond4
[   93.354466][ T6893] IPVS: using max 85 ests per chain, 204000 per kthread
[   93.509992][ T6902] hsr0: entered promiscuous mode
[   93.527986][ T6904] block nbd0: reconnected socket
[   93.532049][   T56] block nbd0: Receive control failed (result -32)
[   93.593587][ T6909] hsr_slave_0: left promiscuous mode
[   93.598329][ T6909] hsr_slave_1: left promiscuous mode
[   93.609322][ T6909] hsr0 (unregistering): left promiscuous mode
[   93.715113][ T6920] netlink: 'syz.2.336': attribute type 1 has an invalid length.
[   93.729547][ T6920] bond5: entered promiscuous mode
[   93.731530][ T6920] 8021q: adding VLAN 0 to HW filter on device bond5
[   93.749913][ T6920] vlan4: entered allmulticast mode
[   93.752390][ T6920] bond5: entered allmulticast mode
[   93.792797][ T6920] bond5: (slave bridge1): making interface the new active one
[   93.798128][ T6920] bridge1: entered promiscuous mode
[   93.803237][ T6920] bridge1: entered allmulticast mode
[   93.809182][ T6920] bond5: (slave bridge1): Enslaving as an active interface with an up link
[   93.842145][ T6925] netlink: 'syz.2.338': attribute type 2 has an invalid length.
[   93.847604][ T6925] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.897110][ T6932] bridge0: port 3(dummy0) entered disabled state
[   93.907668][ T6932] bridge_slave_0: left allmulticast mode
[   93.909521][ T6932] bridge_slave_0: left promiscuous mode
[   93.912918][ T6932] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.928638][ T6932] bridge_slave_1: left allmulticast mode
[   93.931036][ T6932] bridge_slave_1: left promiscuous mode
[   93.935356][ T6932] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.947334][ T6932] bond0: (slave bond_slave_0): Releasing backup interface
[   93.951233][ T6932] bond0: (slave bond_slave_1): Releasing backup interface
[   93.959124][ T6932] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.962315][ T6932] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.971276][ T6932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.975971][ T6932] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.980210][ T6932] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   93.987158][ T6934] veth1_to_hsr: Caught tx_queue_len zero misconfig
[   94.060067][   T34] audit: type=1800 audit(1778897805.012:2): pid=6946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.342" name="memory.events" dev="tmpfs" ino=690 res=0 errno=0
[   94.070251][   T34] audit: type=1804 audit(1778897805.022:3): pid=6946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.342" name="/newroot/131/memory.events" dev="tmpfs" ino=690 res=1 errno=0
[   94.783369][ T6964] bond0: entered promiscuous mode
[   94.787060][ T6964] bond_slave_0: entered promiscuous mode
[   94.789781][ T6964] bond_slave_1: entered promiscuous mode
[   94.794085][ T6964] batadv0: entered promiscuous mode
[   94.799275][ T6964] 8021q: adding VLAN 0 to HW filter on device hsr1
[   94.816552][ T6964] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   94.866845][ T6966] netlink: 'syz.1.345': attribute type 21 has an invalid length.
[   94.870113][ T6966] __nla_validate_parse: 18 callbacks suppressed
[   94.870123][ T6966] netlink: 128 bytes leftover after parsing attributes in process `syz.1.345'.
[   94.876950][ T6966] netlink: 'syz.1.345': attribute type 4 has an invalid length.
[   94.880073][ T6966] netlink: 'syz.1.345': attribute type 3 has an invalid length.
[   94.883092][ T6966] netlink: 3 bytes leftover after parsing attributes in process `syz.1.345'.
[   94.900507][ T6966] syzkaller0: entered promiscuous mode
[   94.902878][ T6966] syzkaller0: entered allmulticast mode
[   95.189061][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'.
[   95.530281][ T6975] netlink: 280 bytes leftover after parsing attributes in process `syz.1.348'.
[   95.697097][ T6977] warning: `syz.1.349' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   95.868664][ T6984] 
[   95.869709][ T6984] ======================================================
[   95.872487][ T6984] WARNING: possible circular locking dependency detected
[   95.875340][ T6984] syzkaller #0 Not tainted
[   95.877237][ T6984] ------------------------------------------------------
[   95.880070][ T6984] syz.1.351/6984 is trying to acquire lock:
[   95.882485][ T6984] ffff8881012b4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4ed/0x5c0
[   95.886684][ T6984] 
[   95.886684][ T6984] but task is already holding lock:
[   95.889623][ T6984] ffff8881012b4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[   95.893436][ T6984] 
[   95.893436][ T6984] which lock already depends on the new lock.
[   95.893436][ T6984] 
[   95.897575][ T6984] 
[   95.897575][ T6984] the existing dependency chain (in reverse order) is:
[   95.901148][ T6984] 
[   95.901148][ T6984] -> #9 (&root->kernfs_rwsem){++++}-{4:4}:
[   95.904356][ T6984]        down_write+0x96/0x200
[   95.906319][ T6984]        kernfs_add_one+0x41/0x5c0
[   95.908353][ T6984]        kernfs_create_dir_ns+0xde/0x130
[   95.910616][ T6984]        internal_create_group+0x425/0x1180
[   95.913052][ T6984]        cpuhp_invoke_callback+0x445/0x860
[   95.915436][ T6984]        cpuhp_issue_call+0x430/0x7a0
[   95.917612][ T6984]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[   95.920328][ T6984]        __cpuhp_setup_state+0x3f/0x60
[   95.922554][ T6984]        do_one_initcall+0x250/0x870
[   95.924707][ T6984]        do_initcall_level+0x104/0x190
[   95.926932][ T6984]        do_initcalls+0x59/0xa0
[   95.928863][ T6984]        kernel_init_freeable+0x2a6/0x3e0
[   95.931154][ T6984]        kernel_init+0x1d/0x1d0
[   95.933127][ T6984]        ret_from_fork+0x514/0xb70
[   95.935209][ T6984]        ret_from_fork_asm+0x1a/0x30
[   95.937344][ T6984] 
[   95.937344][ T6984] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}:
[   95.940445][ T6984] 
[   95.940445][ T6984] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[   95.943547][ T6984]        cpus_read_lock+0x42/0x160
[   95.945621][ T6984]        static_key_slow_inc+0x12/0x30
[   95.947809][ T6984]        nbd_genl_reconfigure+0x132f/0x1ea0
[   95.950236][ T6984]        genl_family_rcv_msg_doit+0x22a/0x330
[   95.952714][ T6984]        genl_rcv_msg+0x61c/0x7a0
[   95.954760][ T6984]        netlink_rcv_skb+0x232/0x4b0
[   95.956839][ T6984]        genl_rcv+0x28/0x40
[   95.958657][ T6984]        netlink_unicast+0x75c/0x8e0
[   95.960802][ T6984]        netlink_sendmsg+0x813/0xb40
[   95.962984][ T6984]        ____sys_sendmsg+0x972/0x9f0
[   95.965066][ T6984]        ___sys_sendmsg+0x2a5/0x360
[   95.967177][ T6984]        __x64_sys_sendmsg+0x1bd/0x2a0
[   95.969428][ T6984]        do_syscall_64+0x15f/0xf80
[   95.971542][ T6984]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.974127][ T6984] 
[   95.974127][ T6984] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[   95.977257][ T6984]        __mutex_lock+0x1a3/0x1550
[   95.979303][ T6984]        nbd_queue_rq+0x37b/0x1100
[   95.981366][ T6984]        blk_mq_dispatch_rq_list+0xa70/0x1910
[   95.983784][ T6984]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[   95.986536][ T6984]        blk_mq_sched_dispatch_requests+0xd7/0x190
[   95.989062][ T6984]        blk_mq_run_hw_queue+0x348/0x4f0
[   95.991281][ T6984]        blk_mq_dispatch_list+0xd16/0xe10
[   95.993549][ T6984]        blk_mq_flush_plug_list+0x48d/0x570
[   95.995916][ T6984]        __blk_flush_plug+0x3ed/0x4d0
[   95.998154][ T6984]        __submit_bio+0x28d/0x580
[   96.000174][ T6984]        submit_bio_noacct_nocheck+0x2f4/0xa40
[   96.002664][ T6984]        block_read_full_folio+0x599/0x830
[   96.005044][ T6984]        filemap_read_folio+0x137/0x3b0
[   96.007206][ T6984]        do_read_cache_folio+0x358/0x590
[   96.009504][ T6984]        read_part_sector+0xb6/0x2b0
[   96.011672][ T6984]        adfspart_check_ICS+0xb1/0x960
[   96.013961][ T6984]        bdev_disk_changed+0x817/0x1770
[   96.016154][ T6984]        blkdev_get_whole+0x380/0x510
[   96.018349][ T6984]        bdev_open+0x31e/0xd30
[   96.020330][ T6984]        blkdev_open+0x470/0x610
[   96.022271][ T6984]        do_dentry_open+0x785/0x14e0
[   96.024431][ T6984]        vfs_open+0x3b/0x340
[   96.026311][ T6984]        path_openat+0x2e08/0x3860
[   96.028392][ T6984]        do_file_open+0x23e/0x4a0
[   96.030493][ T6984]        do_sys_openat2+0x113/0x200
[   96.032544][ T6984]        __x64_sys_openat+0x138/0x170
[   96.034722][ T6984]        do_syscall_64+0x15f/0xf80
[   96.036857][ T6984]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.039413][ T6984] 
[   96.039413][ T6984] -> #5 (&cmd->lock){+.+.}-{4:4}:
[   96.042343][ T6984]        __mutex_lock+0x1a3/0x1550
[   96.044482][ T6984]        nbd_queue_rq+0xc6/0x1100
[   96.046504][ T6984]        blk_mq_dispatch_rq_list+0xa70/0x1910
[   96.048993][ T6984]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[   96.051642][ T6984]        blk_mq_sched_dispatch_requests+0xd7/0x190
[   96.054303][ T6984]        blk_mq_run_hw_queue+0x348/0x4f0
[   96.056622][ T6984]        blk_mq_dispatch_list+0xd16/0xe10
[   96.058971][ T6984]        blk_mq_flush_plug_list+0x48d/0x570
[   96.061355][ T6984]        __blk_flush_plug+0x3ed/0x4d0
[   96.063448][ T6984]        __submit_bio+0x28d/0x580
[   96.065411][ T6984]        submit_bio_noacct_nocheck+0x2f4/0xa40
[   96.067827][ T6984]        block_read_full_folio+0x599/0x830
[   96.070126][ T6984]        filemap_read_folio+0x137/0x3b0
[   96.072242][ T6984]        do_read_cache_folio+0x358/0x590
[   96.074449][ T6984]        read_part_sector+0xb6/0x2b0
[   96.076481][ T6984]        adfspart_check_ICS+0xb1/0x960
[   96.078558][ T6984]        bdev_disk_changed+0x817/0x1770
[   96.080717][ T6984]        blkdev_get_whole+0x380/0x510
[   96.082952][ T6984]        bdev_open+0x31e/0xd30
[   96.084895][ T6984]        blkdev_open+0x470/0x610
[   96.086862][ T6984]        do_dentry_open+0x785/0x14e0
[   96.089020][ T6984]        vfs_open+0x3b/0x340
[   96.090920][ T6984]        path_openat+0x2e08/0x3860
[   96.092953][ T6984]        do_file_open+0x23e/0x4a0
[   96.095011][ T6984]        do_sys_openat2+0x113/0x200
[   96.097127][ T6984]        __x64_sys_openat+0x138/0x170
[   96.099252][ T6984]        do_syscall_64+0x15f/0xf80
[   96.101372][ T6984]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.103887][ T6984] 
[   96.103887][ T6984] -> #4 (set->srcu){.+.+}-{0:0}:
[   96.106664][ T6984]        __synchronize_srcu+0xca/0x300
[   96.108836][ T6984]        elevator_switch+0x1e8/0x7a0
[   96.111021][ T6984]        elevator_change+0x2cc/0x450
[   96.113178][ T6984]        elevator_set_default+0x36c/0x430
[   96.115485][ T6984]        blk_register_queue+0x3e9/0x4e0
[   96.117754][ T6984]        __add_disk+0x677/0xd50
[   96.119688][ T6984]        add_disk_fwnode+0xfb/0x480
[   96.121818][ T6984]        nbd_dev_add+0x72c/0xb50
[   96.123799][ T6984]        nbd_init+0x168/0x1f0
[   96.125706][ T6984]        do_one_initcall+0x250/0x870
[   96.127891][ T6984]        do_initcall_level+0x104/0x190
[   96.130114][ T6984]        do_initcalls+0x59/0xa0
[   96.132061][ T6984]        kernel_init_freeable+0x2a6/0x3e0
[   96.134370][ T6984]        kernel_init+0x1d/0x1d0
[   96.136393][ T6984]        ret_from_fork+0x514/0xb70
[   96.138478][ T6984]        ret_from_fork_asm+0x1a/0x30
[   96.140625][ T6984] 
[   96.140625][ T6984] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[   96.143800][ T6984]        __mutex_lock+0x1a3/0x1550
[   96.145925][ T6984]        elevator_change+0x1b3/0x450
[   96.148085][ T6984]        elevator_set_none+0xb5/0x140
[   96.150313][ T6984]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[   96.152924][ T6984]        nbd_start_device+0x17f/0xb10
[   96.155067][ T6984]        nbd_genl_connect+0x165b/0x1cf0
[   96.157331][ T6984]        genl_family_rcv_msg_doit+0x22a/0x330
[   96.159830][ T6984]        genl_rcv_msg+0x61c/0x7a0
[   96.161777][ T6984]        netlink_rcv_skb+0x232/0x4b0
[   96.163950][ T6984]        genl_rcv+0x28/0x40
[   96.165833][ T6984]        netlink_unicast+0x75c/0x8e0
[   96.168007][ T6984]        netlink_sendmsg+0x813/0xb40
[   96.170186][ T6984]        ____sys_sendmsg+0x972/0x9f0
[   96.172349][ T6984]        ___sys_sendmsg+0x2a5/0x360
[   96.174424][ T6984]        __x64_sys_sendmsg+0x1bd/0x2a0
[   96.176646][ T6984]        do_syscall_64+0x15f/0xf80
[   96.178704][ T6984]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.181281][ T6984] 
[   96.181281][ T6984] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[   96.184801][ T6984]        blk_alloc_queue+0x546/0x680
[   96.186953][ T6984]        __blk_mq_alloc_disk+0x197/0x390
[   96.189254][ T6984]        nbd_dev_add+0x499/0xb50
[   96.191240][ T6984]        nbd_init+0x168/0x1f0
[   96.193108][ T6984]        do_one_initcall+0x250/0x870
[   96.195274][ T6984]        do_initcall_level+0x104/0x190
[   96.197406][ T6984]        do_initcalls+0x59/0xa0
[   96.199317][ T6984]        kernel_init_freeable+0x2a6/0x3e0
[   96.201576][ T6984]        kernel_init+0x1d/0x1d0
[   96.203500][ T6984]        ret_from_fork+0x514/0xb70
[   96.205613][ T6984]        ret_from_fork_asm+0x1a/0x30
[   96.207762][ T6984] 
[   96.207762][ T6984] -> #1 (fs_reclaim){+.+.}-{0:0}:
[   96.210751][ T6984]        fs_reclaim_acquire+0x71/0x100
[   96.212831][ T6984]        kmem_cache_alloc_noprof+0x40/0x650
[   96.215042][ T6984]        __kernfs_iattrs+0xdf/0x320
[   96.217165][ T6984]        kernfs_iop_setattr+0xea/0x3f0
[   96.219353][ T6984]        notify_change+0xc1a/0xf40
[   96.221439][ T6984]        do_truncate+0x1c2/0x250
[   96.223425][ T6984]        path_openat+0x2f89/0x3860
[   96.225464][ T6984]        do_file_open+0x23e/0x4a0
[   96.227530][ T6984]        do_sys_openat2+0x113/0x200
[   96.229686][ T6984]        __x64_sys_openat+0x138/0x170
[   96.231918][ T6984]        do_syscall_64+0x15f/0xf80
[   96.234027][ T6984]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.236635][ T6984] 
[   96.236635][ T6984] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[   96.240061][ T6984]        __lock_acquire+0x15a5/0x2cf0
[   96.242267][ T6984]        lock_acquire+0x106/0x350
[   96.244341][ T6984]        down_write+0x96/0x200
[   96.246314][ T6984]        kernfs_link_sibling+0x4ed/0x5c0
[   96.248598][ T6984]        kernfs_add_one+0x1ca/0x5c0
[   96.250775][ T6984]        kernfs_create_dir_ns+0xde/0x130
[   96.253072][ T6984]        sysfs_create_dir_ns+0x12f/0x2a0
[   96.255352][ T6984]        kobject_add_internal+0x62b/0xd00
[   96.257695][ T6984]        kobject_add+0x163/0x240
[   96.259744][ T6984]        device_add+0x408/0xbb0
[   96.261749][ T6984]        netdev_register_kobject+0x178/0x310
[   96.264197][ T6984]        register_netdevice+0x1456/0x1ec0
[   96.266531][ T6984]        br_add_bridge+0xa3/0xf0
[   96.268571][ T6984]        br_ioctl_stub+0x588/0xd60
[   96.270679][ T6984]        sock_ioctl+0x523/0x7f0
[   96.272675][ T6984]        __se_sys_ioctl+0xfc/0x170
[   96.274707][ T6984]        do_syscall_64+0x15f/0xf80
[   96.276850][ T6984]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.279469][ T6984] 
[   96.279469][ T6984] other info that might help us debug this:
[   96.279469][ T6984] 
[   96.283520][ T6984] Chain exists of:
[   96.283520][ T6984]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[   96.283520][ T6984] 
[   96.289203][ T6984]  Possible unsafe locking scenario:
[   96.289203][ T6984] 
[   96.292241][ T6984]        CPU0                    CPU1
[   96.294446][ T6984]        ----                    ----
[   96.296651][ T6984]   lock(&root->kernfs_rwsem);
[   96.298647][ T6984]                                lock(cpuhp_state_mutex);
[   96.301559][ T6984]                                lock(&root->kernfs_rwsem);
[   96.304492][ T6984]   lock(&root->kernfs_iattr_rwsem);
[   96.306660][ T6984] 
[   96.306660][ T6984]  *** DEADLOCK ***
[   96.306660][ T6984] 
[   96.309916][ T6984] 3 locks held by syz.1.351/6984:
[   96.311944][ T6984]  #0: ffffffff8fdb0f00 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4fa/0x7f0
[   96.315574][ T6984]  #1: ffffffff8fdd0240 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60
[   96.319178][ T6984]  #2: ffff8881012b4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[   96.323128][ T6984] 
[   96.323128][ T6984] stack backtrace:
[   96.325466][ T6984] CPU: 0 UID: 0 PID: 6984 Comm: syz.1.351 Not tainted syzkaller #0 PREEMPT(full) 
[   96.325481][ T6984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   96.325489][ T6984] Call Trace:
[   96.325497][ T6984]  <TASK>
[   96.325503][ T6984]  dump_stack_lvl+0xe8/0x150
[   96.325519][ T6984]  print_circular_bug+0x2e1/0x300
[   96.325537][ T6984]  check_noncircular+0x12e/0x150
[   96.325552][ T6984]  __lock_acquire+0x15a5/0x2cf0
[   96.325565][ T6984]  ? __lock_acquire+0x6b5/0x2cf0
[   96.325578][ T6984]  ? kernfs_link_sibling+0x4ed/0x5c0
[   96.325591][ T6984]  lock_acquire+0x106/0x350
[   96.325602][ T6984]  ? kernfs_link_sibling+0x4ed/0x5c0
[   96.325619][ T6984]  down_write+0x96/0x200
[   96.325630][ T6984]  ? kernfs_link_sibling+0x4ed/0x5c0
[   96.325643][ T6984]  ? __pfx_down_write+0x10/0x10
[   96.325654][ T6984]  ? kernfs_root+0x1c/0x230
[   96.325666][ T6984]  ? kernfs_root+0x1c/0x230
[   96.325680][ T6984]  ? kernfs_root+0x1ea/0x230
[   96.325693][ T6984]  kernfs_link_sibling+0x4ed/0x5c0
[   96.325712][ T6984]  kernfs_add_one+0x1ca/0x5c0
[   96.325754][ T6984]  kernfs_create_dir_ns+0xde/0x130
[   96.325770][ T6984]  sysfs_create_dir_ns+0x12f/0x2a0
[   96.325784][ T6984]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   96.325798][ T6984]  ? do_raw_spin_unlock+0x4d/0x210
[   96.325813][ T6984]  kobject_add_internal+0x62b/0xd00
[   96.325826][ T6984]  kobject_add+0x163/0x240
[   96.325837][ T6984]  ? __pfx_kobject_add+0x10/0x10
[   96.325847][ T6984]  ? get_device_parent+0x366/0x3a0
[   96.325861][ T6984]  device_add+0x408/0xbb0
[   96.325870][ T6984]  ? device_initialize+0x26a/0x460
[   96.325881][ T6984]  netdev_register_kobject+0x178/0x310
[   96.325894][ T6984]  register_netdevice+0x1456/0x1ec0
[   96.325913][ T6984]  ? __pfx_register_netdevice+0x10/0x10
[   96.325928][ T6984]  ? alloc_netdev_mqs+0xce1/0x1210
[   96.325937][ T6984]  ? __kvmalloc_node_noprof+0x393/0x8a0
[   96.325953][ T6984]  ? alloc_netdev_mqs+0xe00/0x1210
[   96.325964][ T6984]  br_add_bridge+0xa3/0xf0
[   96.325982][ T6984]  br_ioctl_stub+0x588/0xd60
[   96.325994][ T6984]  ? do_vfs_ioctl+0x1166/0x1530
[   96.326009][ T6984]  ? __pfx_br_ioctl_stub+0x10/0x10
[   96.326017][ T6984]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   96.326031][ T6984]  ? sock_ioctl+0x4fa/0x7f0
[   96.326042][ T6984]  ? do_futex+0x333/0x420
[   96.326056][ T6984]  ? __pfx_br_ioctl_stub+0x10/0x10
[   96.326065][ T6984]  sock_ioctl+0x523/0x7f0
[   96.326075][ T6984]  ? __pfx_sock_ioctl+0x10/0x10
[   96.326083][ T6984]  ? __fget_files+0x2a/0x420
[   96.326093][ T6984]  ? __fget_files+0x3a0/0x420
[   96.326105][ T6984]  ? __fget_files+0x2a/0x420
[   96.326117][ T6984]  ? bpf_lsm_file_ioctl+0x9/0x20
[   96.326132][ T6984]  ? __pfx_sock_ioctl+0x10/0x10
[   96.326142][ T6984]  __se_sys_ioctl+0xfc/0x170
[   96.326157][ T6984]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.326169][ T6984]  do_syscall_64+0x15f/0xf80
[   96.326184][ T6984]  ? trace_irq_disable+0x3b/0x140
[   96.326201][ T6984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.326212][ T6984] RIP: 0033:0x7fcd4399ce59
[   96.326225][ T6984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.326234][ T6984] RSP: 002b:00007fcd448ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   96.326255][ T6984] RAX: ffffffffffffffda RBX: 00007fcd43c15fa0 RCX: 00007fcd4399ce59
[   96.326263][ T6984] RDX: 0000200000000040 RSI: 00000000000089a0 RDI: 0000000000000004
[   96.326270][ T6984] RBP: 00007fcd43a32d6f R08: 0000000000000000 R09: 0000000000000000
[   96.326277][ T6984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   96.326283][ T6984] R13: 00007fcd43c16038 R14: 00007fcd43c15fa0 R15: 00007ffcdc089e18
[   96.326294][ T6984]  </TASK>
[   96.920954][ T6934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   98.174041][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
