last executing test programs:

1.239329392s ago: executing program 2 (id=6557):
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001580)={{<r0=>0xffffffffffffffff, &(0x7f0000000000)=')*([\'-,\x00', 0x100000, &(0x7f0000000040)={@_ha_fsid={[0xa5, 0x5]}, {0x8, 0x1e, 0x27, 0x100000001}}, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0xc}, 0x5, &(0x7f00000014c0)=[{0x1, 0x7, &(0x7f0000000140)='/dev/vhost-vsock\x00', &(0x7f0000000180)="11ab86aebd8a20095d1e80cfdc269e59a7752705eba32a427f5e7c02e94deebd9f428a94afb6249817291c4dc64fa47ae714f9b0ab05626afd421b99ab193e5fec3b870b4ede77bf40a4347a7b50dbf2aea087243e87c7d372243afbfab265bcd8271fb0d24964c81d8fd045a292691fdb40309cc7a36f7fa039918f70d6a6336bc4124156856338200ca8b590e6341652ed9e252c5b0f145af232e580ccb6f8f82277c3b817664eba85b2060671d475655b6210afc81bfbe2b255298dce76a7afce1310e3f8fa705db8532b56fc57", 0xcf}, {0x3, 0x0, &(0x7f0000000280)='}\x00', &(0x7f00000002c0), 0x0, 0x2}, {0x3, 0x7ff, &(0x7f0000000300)='/dev/vhost-vsock\x00', &(0x7f0000000340)="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", 0x1000, 0x2}, {0x2, 0x4, &(0x7f0000001340)='\x00', &(0x7f0000001380)="ce659b944cb792f92b2c43732331eb6bd8a6d742d9a60443f4540460867b0cfe", 0x20, 0x8}, {0x3, 0xdef0, &(0x7f00000013c0)='\x00', &(0x7f0000001400)="3c5de46abf98dd2ea9681c36152fc53c74357b4353d791fe8ecbbcd13aac7356b993c3e71af0ad097e50c9ba99ceab6e0d3db39fd614d1db6559212d154cb135972b8e4194227955de0edf74bb4a07119322f9c54cc895563848670627ffa9ff93a40e9455dd66c9fad20e637c8d348ff988defc5824772c530883036339444b00a3b1f6f5c973b01d327da0e647d267a481b047301fde345e4962275e49ae262bc0f08e", 0xa4, 0x8}]})
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40008c5}, 0xc001)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0bf600004e"], 0xfe33)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000001600)=""/241, &(0x7f0000001700)=0xf1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000020603000000000000000000000000060900020073797a3000000000050001000700000014000780080749740800124000000000050005000a00000005000400010000000c000300686173683a69700000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0)
close(r7)
unshare(0x22020600)
write(r5, 0x0, 0x0)
mmap(&(0x7f0000e0b000/0x4000)=nil, 0x4000, 0x100000d, 0x110, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x1, 0xcc, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xc6, &(0x7f00000002c0)=""/198, 0x41000, 0x0, '\x00', 0x0, 0x0, r7}, 0x94)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003980)={r9, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0xfe, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0xc0fe}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)=ANY=[@ANYBLOB="f95aa5380000004a17a55cd493a3ddf9734875edf62e781ffd9305c352ef05b0c0a6fff15bb420c0afffbcdb031e620dd18a30e72f8aa23abad8acc72aeddd6843f1827c58cead1971af3c0322", @ANYRES16=r4, @ANYBLOB="010080ffffff0000000001000000080002000300000014000480050003008000000005000300090000000800010003000000"], 0x38}}, 0x4080)
r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e00001800028005001600020000000800040003000000040012"], 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000b40"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
ioctl$VHOST_SET_OWNER(r12, 0xaf01, 0x0)

1.049264576s ago: executing program 2 (id=6562):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={0x0, 0x200, 0x1, [0xff, 0x5, 0x3ff, 0x5, 0x3], [0xfffffffffffffffa, 0x65, 0x1, 0x8, 0x3, 0x7, 0x7fffffff, 0x8, 0xfffffffffffffff9, 0x8, 0xe, 0x5, 0xef, 0x401, 0x6, 0x7e0, 0x7a19, 0x7, 0x100000000, 0x0, 0x7, 0x0, 0x0, 0x9, 0x3, 0x100, 0x9, 0x80, 0xf, 0xc6d7, 0x0, 0x7, 0x1, 0x2, 0x400, 0x10000, 0x1, 0x4, 0x5, 0x80000000, 0x51c8, 0x7, 0xddc2, 0x9, 0x5, 0x8, 0x4, 0x1, 0x1, 0x5, 0x5a, 0xedb, 0x146, 0xc22, 0x3, 0x7, 0x2, 0x8, 0x7, 0xfffe000000, 0xfffffffffffffffc, 0x100000000, 0x4, 0x5, 0x9, 0x3, 0x9, 0x7, 0xb22, 0x2, 0x4, 0x5, 0x0, 0xcc03, 0x400000, 0xc, 0x80e, 0x2, 0x0, 0x1, 0xc, 0x7, 0xe269, 0x5, 0x1, 0xef1b, 0x7ff, 0xd7, 0x1fd8, 0x3, 0x6, 0x8, 0xa9, 0x2, 0x8, 0x6, 0x7, 0x5, 0xfd3, 0x7f, 0x0, 0x8000000000000001, 0xffbb, 0x8, 0x1, 0xfffffffffffffd32, 0xc, 0x10001, 0xfffffffffffffffb, 0x7, 0x1, 0xffffffffffffffb9, 0x7f, 0x80000001, 0xf7d, 0x9, 0xfffffffffffffffc, 0x1, 0x36c, 0x2f, 0x4]}) (async)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000040)={0x38, 0x140b, 0x0, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0xc100)

1.045453333s ago: executing program 2 (id=6565):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8280}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}, @IFLA_MTU={0x8, 0x3}]}, 0x50}}, 0x4c010)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x10000004}, 0x10)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)={0x1f})

958.350736ms ago: executing program 2 (id=6566):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@gettfilter={0x4c, 0x2e, 0x0, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x2}, {0xffff, 0x8}, {0xc, 0xfff3}}, [{0x8, 0xb, 0xd}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
socket$unix(0x1, 0x5, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
unshare(0x20000400)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r2, 0x26, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0800f2ffffff00000000000000000000001700005a233045244c2aad6a190a77a530643fdb218392bfd364d4f835c067d0a916574c453db7ff836c88112cbbe9d806c36c5c9440a2af3c2473a9fa1a62da8ec35bc418e145cfc24dbabb08ee2db0988bf077c8654ec21a47b47741fad096fa45d38531174852acd04195c1b345c0327e88d1c94dac4d9a4118ce970ce5556302a99f4f2395bb172fbe8b91995bebd020182894bb221a8f2e0ab23bdaee668a0702b14d31369a1abc13863c9b2146880fbef74849607699534c39c778b59e08766b273a535346c03ec4ee485000efb07a5ddaef73f0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3, r3}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000bdff315a8c61f19aab663399437ef63941d0d55ddd21ccff335844581ecba3385ab4a059e6f5f193d0e8c4b409037773bc6b2895926fe07934a47471efb2a5a1a95da0c47fe0fd9947e38db9754c913c83cc37"], 0x50)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20)
socket$inet_mptcp(0x2, 0x1, 0x106)

771.937862ms ago: executing program 2 (id=6572):
write(0xffffffffffffffff, &(0x7f0000000000)="82091468f1407d9702cf4e29591d3594edfc383f19e23db6c2ac47849763ce356e17c2f6183389f72866e71953142e0f36fd261b0cbbaec765f28b9cc916629cea25eaa0ae64dd1026b97e035bb4af74a577bd19f04f1872b7e6323a96476323ef2dfc8e7c08584192711fb13ca01b4f1d7e820180297cb86e8acd18c1151381db72e98778a6c7c1b779a87a3b6c7abac88eaaf5e56e3e2723b535c11cffc1d2f14d3665d362cd5f08e66d27b141fd50322a7ecdb9b496b84c", 0xb9)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4000c800) (async)
ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x200, 0xfffffff8, 0x0, 0x9})
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0)
ioctl$FITHAW(r0, 0xc0045878) (async)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000003c0)={0x0, 0x4, 0x6, 0x3})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x3e1f8ae9bb34d574}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x200, {0x80, 0x401, 0xfa, 0x8}}}, @NL80211_ATTR_PBSS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40011) (async)
sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x80}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc05}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x2, 0x4, 0x8]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xb}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008810}, 0x0) (async)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000680)={<r3=>0x0, 0x14, 0x30, 0x8}, &(0x7f00000006c0)=0x18)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000700)={r3, @in={{0x2, 0x4e23, @local}}, [0x7, 0x9, 0xa, 0x4, 0x2, 0x0, 0x101, 0x200, 0x6, 0xe, 0x7, 0x4, 0x1000, 0xf295, 0x8]}, &(0x7f0000000800)=0x100)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = epoll_create1(0x0)
sendmsg$nl_generic(r0, &(0x7f0000001ac0)={&(0x7f0000000840), 0xc, &(0x7f0000001a80)={&(0x7f0000000880)={0x11e0, 0x25, 0x20, 0x70bd28, 0x25dfdbff, {0x1}, [@typed={0x8, 0x91, 0x0, 0x0, @fd=r4}, @generic="50e4135124d473dfde6e6f39846f3b51ea1d2548eb6f1ad09fbe420fe836ddf1e8ea0d9bc796c877eea827f9feb682c9b49b02248ff405185829501eca6a066773e9", @generic="b549cf882e13e972934c89945ff490f429bacf74b884c226b7248d00cdd34a81f6ae884e8b7e0523e401bddea14dbad3a0cd69b82f7241e36b20df4c4ffeb168663d", @typed={0x8, 0x67, 0x0, 0x0, @fd=r5}, @nested={0x112e, 0x42, 0x0, 0x1, [@nested={0x4, 0x61}, @typed={0x8, 0x13b, 0x0, 0x0, @u32=0x6f77}, @generic="bb674afabb43de48e78b5ab673851cab1d13b5e38a08738f0947b8022264bbd1f1f94bc8a084f9cab1843ab5bf873be5c361c3bf91d122d77881c90ba9cd7a35f25cb478a43cf0", @nested={0x4, 0x8d}, @generic="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", @generic="9242622e51de08d04269173ac7eabcdb828585b65feb36cf98c0a81471c55db1200e98f5b69738fc387de142d96e11ef1ce51c8153cbcb3df604fa9f9a5da75eb8d7c584fd8f785db5259fab0f9b47911d2be21fa6bcd845c239ccd341f8f8394a8edfa74ebf2d86512f0ad068c26270754d0502c6bf0f40f4a11b7d539a8b49c571ad3d3e7e74cf2c7d4073254b49c822f06b25ee4e5f8f1232f0d186a275c550da7bfd8a40e1b4ae78cb2226cd46332562c30b60e0dfd23b1fbca50cc9648b760a88c081c79ece4af702d6dd32296c5ab924"]}, @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, 0x11e0}, 0x1, 0x0, 0x0, 0x50}, 0xc0d0) (async)
r6 = socket$key(0xf, 0x3, 0x2)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000001b00)=0x5) (async)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c00)={0x1, 0x58, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
sendmsg$nl_route(r7, &(0x7f0000001d00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)=@ipv6_newaddr={0x44, 0x14, 0x400, 0x70bd26, 0x25dfdbfe, {0xa, 0x1f, 0x1, 0xfd, r8}, [@IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
r9 = socket$pptp(0x18, 0x1, 0x2)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001d40)={{{@in6=@empty, @in6=@remote, 0x4e21, 0xde74, 0x4e21, 0x8, 0x2, 0xa0, 0xa0, 0x4f, r8}, {0x6fe, 0x4, 0xc, 0x47, 0x3, 0x1ff, 0x1000000020000000, 0x3}, {0xd, 0x1, 0x80000000, 0xf}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in=@multicast2, 0x4d4, 0x6c}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1, 0x2, 0x2, 0x38, 0x0, 0x401}}, 0xe8) (async)
ioctl$F2FS_IOC_GET_PIN_FILE(r9, 0x8004f50e, &(0x7f0000001e40)) (async)
socket$inet6(0xa, 0x80808, 0x7) (async)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), r0)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x24, r10, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4e1}]}, @TIPC_NLA_LINK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async)
pread64(r5, &(0x7f0000001fc0)=""/59, 0x3b, 0x7ff)

720.475535ms ago: executing program 2 (id=6574):
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x389c, 0x7})
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000209500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
bind$llc(r4, &(0x7f0000000000)={0x1a, 0x312, 0x5, 0xd, 0x3, 0x9, @broadcast}, 0x10)
sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4)
r5 = socket(0x11, 0x3, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$FICLONE(r2, 0x40049409, r0)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
close(r7)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000480)="3e314cfc204b39401b3c77c0b48c", 0x0, 0xae8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0)

407.745342ms ago: executing program 0 (id=6586):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa0000000000000150300000a004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x88, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48081}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000084)
clock_gettime(0x0, &(0x7f0000000340))
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r4 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r4, &(0x7f00000000c0)="355eabc213179bacccd12131c482aabccdf8bdefbce5f1dc0146c0c93c47a383251b0e799bef524cb4cb769aad1cc74dac4787ea709fd09ec5fde6dbca89792eb2d1ece080498fbf810e929558b35bd85deaddaa51299f9b0600caf617480f4e391df250760c9a1d023e1c9e4dd6af0d45a260f59125742f9237db5018e0ac0a6e98b3cca02d02e6294501a78f8d34d5f0d343568e49576fcfbf9387196f267d4d20b73d905eae9d54996065af3ffbda4c73ced58ffb4c3ac93299d758f5d39f", 0xc0, 0x0, 0x0, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)={'some', 0x20, 0x7fffffffffffffff, 0x20, 0xffffffffffffffff}, 0x2f)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff05000700008d9c18ed0f6fd2", 0x0, 0xfea, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)={0x1f})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000000)=0x3, &(0x7f00000000c0)=0x4)

309.697527ms ago: executing program 1 (id=6588):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x2)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @multicast2}, 0x2, 0x4, 0x2, 0x1}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f0000000000))

308.884079ms ago: executing program 0 (id=6589):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x84, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0xd, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x2, 0xb56, 0x10a, 0xffffffff, 0x6, 0x9}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x5}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x2, 0x6, 0x234, 0x3ff, 0x3ff}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000000))

249.728002ms ago: executing program 1 (id=6590):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a23673c591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f025"}, {0x3, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf0630af1f98aea6fb3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7596d779b8353aac33a57d79b05613a12328f6101000000634a287570af5e4e12e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e7a94fe18e88605abbbe1a02a326a63ce65f81ed0000000000"}]}}}}}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240009000f00001000000000810000000000000009000000000000000001"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000008bcc3e6f0000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f000000000000000500000000000000fefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002"], 0x140}}, 0x844)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) (async)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/244, 0xf4}], 0x1, 0x0, 0x0) (async)
preadv(r4, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/244, 0xf4}], 0x1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0xfffffff7, @local, 0x9}}, 0x798, 0x9, 0x4, 0xfffffff8, 0x8a, 0x8, 0x6}, 0x9c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0xfffffff7, @local, 0x9}}, 0x798, 0x9, 0x4, 0xfffffff8, 0x8a, 0x8, 0x6}, 0x9c)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4)
sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x90)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000))

249.267982ms ago: executing program 0 (id=6591):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000000280)={r0, 0x0, 0x4, 0x3, 0xffffffff00000000, 0x0, [0x5, 0x0, 0x0, 0x9, 0xfffffffffffffff8, 0x9]})
close(r0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="00f90000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf25030000001c000180060005004e210000060001000200000008000300ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24040001}, 0x40000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r4, 0x205, 0x100, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x10000}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}]}, 0x3c}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r4, 0x205, 0x100, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x10000}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}]}, 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$inet6_int(r7, 0x29, 0x16, 0x0, &(0x7f0000002080)) (async)
getsockopt$inet6_int(r7, 0x29, 0x16, 0x0, &(0x7f0000002080))
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'veth0_virt_wifi\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001400b59504000000000000000a000000a8621a341c960ca06b8177dc9360fea2deaeb9d787fff3f530c4a216e1c5dcb9d70b1f8ac9f68c43322946617b7f561511b639d20335d42ed99bdf0cb3b7", @ANYRES32=r8, @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4811)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0xfc) (async)
sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="40c20000000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4a}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4040040) (async)
sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4a}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4040040)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000150a010200000000000000523daf00000000200900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000011}, 0x2404000a)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000300)={0x1})

236.824774ms ago: executing program 1 (id=6592):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32)
socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32)
unshare(0x20000400) (async)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf250c0000000c0099008100f8"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) (async)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a31000000001400038008"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000000)
r1 = socket$kcm(0x10, 0x2, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x0, 0x0)
preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r5) (async)
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) (async)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r8, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r6, 0x3, 0x70bd29, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)

236.222365ms ago: executing program 0 (id=6593):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)={0x4, 0x0, [{0x50000, 0x5, &(0x7f0000000000)=""/5}, {0xf000, 0x50, &(0x7f0000000500)=""/80}, {0x100000, 0x35, &(0x7f00000000c0)=""/53}, {0xd000, 0x0, &(0x7f0000000040)}]})

169.408393ms ago: executing program 0 (id=6594):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x164, 0x1, 0x1, 0x956559cb310217b9, 0x0, 0x0, {0xd, 0x0, 0x5}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_TUPLE_ORIG={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_NAT_DST={0x7c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1d}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xb21}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x4}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}]}, 0x164}, 0x1, 0x0, 0x0, 0x90}, 0x48090)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000500)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)='\x00\x00\x00\x00', 0x4}], 0x2}, 0x4)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={0x0, 0x200, 0x1, [0xff, 0x5, 0x3ff, 0x5, 0x3], [0xfffffffffffffffa, 0x65, 0x1, 0x8, 0x3, 0x7, 0x7fffffff, 0x8, 0xfffffffffffffff9, 0x8, 0xe, 0x5, 0xef, 0x401, 0x6, 0x7e0, 0x7a19, 0x7, 0x100000000, 0x0, 0x7, 0x0, 0x0, 0x9, 0x3, 0x100, 0x9, 0x80, 0xf, 0xc6d7, 0x0, 0x7, 0x1, 0x2, 0x400, 0x10000, 0x1, 0x4, 0x5, 0x80000000, 0x51c8, 0x7, 0xddc2, 0x9, 0x5, 0x8, 0x4, 0x1, 0x1, 0x5, 0x5a, 0xedb, 0x146, 0xc22, 0x3, 0x7, 0x2, 0x8, 0x7, 0xfffe000000, 0xfffffffffffffffc, 0x100000000, 0x4, 0x5, 0x9, 0x3, 0x9, 0x7, 0xb22, 0x2, 0x4, 0x5, 0x0, 0xcc03, 0x400000, 0xc, 0x80e, 0x2, 0x0, 0x1, 0xc, 0x7, 0xe269, 0x5, 0x1, 0xef1b, 0x7ff, 0xd7, 0x1fd8, 0x3, 0x6, 0x8, 0xa9, 0x2, 0x8, 0x6, 0x7, 0x5, 0xfd3, 0x7f, 0x0, 0x8000000000000001, 0xffbb, 0x8, 0x1, 0xfffffffffffffd32, 0xc, 0x10001, 0xfffffffffffffffb, 0x7, 0x1, 0xffffffffffffffb9, 0x7f, 0x80000001, 0xf7d, 0x9, 0xfffffffffffffffc, 0x1, 0x36c, 0x2f, 0x4]})

168.816132ms ago: executing program 1 (id=6595):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050003000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4)
accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'veth0_to_batadv\x00', @random="0200073bcd1e"})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={0x0, 0x200, 0x1, [0xff, 0x5, 0x3ff, 0x5, 0x3], [0xfffffffffffffffa, 0x65, 0x1, 0x8, 0x3, 0x7, 0x7fffffff, 0x8, 0xfffffffffffffff9, 0x8, 0xe, 0x5, 0xef, 0x401, 0x6, 0x7e0, 0x7a19, 0x7, 0x100000000, 0x0, 0x7, 0x0, 0x0, 0x9, 0x3, 0x100, 0x9, 0x80, 0xf, 0xc6d7, 0x0, 0x7, 0x1, 0x2, 0x400, 0x10000, 0x1, 0x4, 0x5, 0x80000000, 0x51c8, 0x7, 0xddc2, 0x9, 0x5, 0x8, 0x4, 0x1, 0x1, 0x5, 0x5a, 0xedb, 0x146, 0xc22, 0x3, 0x7, 0x2, 0x8, 0x7, 0xfffe000000, 0xfffffffffffffffc, 0x100000000, 0x4, 0x5, 0x9, 0x3, 0x9, 0x7, 0xb22, 0x2, 0x4, 0x5, 0x0, 0xcc03, 0x400000, 0xc, 0x80e, 0x2, 0x0, 0x1, 0xc, 0x7, 0xe269, 0x5, 0x1, 0xef1b, 0x7ff, 0xd7, 0x1fd8, 0x3, 0x6, 0x8, 0xa9, 0x2, 0x8, 0x6, 0x7, 0x5, 0xfd3, 0x7f, 0x0, 0x8000000000000001, 0xffbb, 0x8, 0x1, 0xfffffffffffffd32, 0xc, 0x10001, 0xfffffffffffffffb, 0x7, 0x1, 0xffffffffffffffb9, 0x7f, 0x80000001, 0xf7d, 0x9, 0xfffffffffffffffc, 0x1, 0x36c, 0x2f, 0x4]})
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) (async)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050003000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) (async)
accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10, 0x0) (async)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
socket$kcm(0x2, 0x3, 0x2) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'veth0_to_batadv\x00', @random="0200073bcd1e"}) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={0x0, 0x200, 0x1, [0xff, 0x5, 0x3ff, 0x5, 0x3], [0xfffffffffffffffa, 0x65, 0x1, 0x8, 0x3, 0x7, 0x7fffffff, 0x8, 0xfffffffffffffff9, 0x8, 0xe, 0x5, 0xef, 0x401, 0x6, 0x7e0, 0x7a19, 0x7, 0x100000000, 0x0, 0x7, 0x0, 0x0, 0x9, 0x3, 0x100, 0x9, 0x80, 0xf, 0xc6d7, 0x0, 0x7, 0x1, 0x2, 0x400, 0x10000, 0x1, 0x4, 0x5, 0x80000000, 0x51c8, 0x7, 0xddc2, 0x9, 0x5, 0x8, 0x4, 0x1, 0x1, 0x5, 0x5a, 0xedb, 0x146, 0xc22, 0x3, 0x7, 0x2, 0x8, 0x7, 0xfffe000000, 0xfffffffffffffffc, 0x100000000, 0x4, 0x5, 0x9, 0x3, 0x9, 0x7, 0xb22, 0x2, 0x4, 0x5, 0x0, 0xcc03, 0x400000, 0xc, 0x80e, 0x2, 0x0, 0x1, 0xc, 0x7, 0xe269, 0x5, 0x1, 0xef1b, 0x7ff, 0xd7, 0x1fd8, 0x3, 0x6, 0x8, 0xa9, 0x2, 0x8, 0x6, 0x7, 0x5, 0xfd3, 0x7f, 0x0, 0x8000000000000001, 0xffbb, 0x8, 0x1, 0xfffffffffffffd32, 0xc, 0x10001, 0xfffffffffffffffb, 0x7, 0x1, 0xffffffffffffffb9, 0x7f, 0x80000001, 0xf7d, 0x9, 0xfffffffffffffffc, 0x1, 0x36c, 0x2f, 0x4]}) (async)

76.620717ms ago: executing program 1 (id=6596):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)={0x1f})
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000000040)=0x9, 0x4)

75.852084ms ago: executing program 1 (id=6597):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x20f3000)
unshare(0x62040200) (async)
unshare(0x62040200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xa4, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0x70, 0x2d, 0x0, 0x1, [{0xb, 0x0, @random="250e8aefc3c223"}, {0x5, 0x0, @random='2'}, {0xa, 0x0, @default_ibss_ssid}, {0xe, 0x0, @random="39e00e4f0b9777283ca1"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x1}}]}, 0xa4}}, 0x20040040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, &(0x7f0000000000), 0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async)
r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000780)=ANY=[@ANYBLOB="61202a3a2a20776d0044bb98e2d1691c90b7c64a283c2f7e3ff90d9fc2f8f5ec680aabc3a06bd1224577fa61a38883cb717874426268ece1bde208d2b7c1d5488baeed82352c65a2bdcb74d1cca8119a1eaed43fa3c877f315e6fd3bab23c495dfdce814c9b46a5525f331c9f7b7798c6294c67606d1bf82a187ed04a90d685fd986040046628b96e85179d59be47af1c6378338ca158dc063596dd9861d45ed1bb4e2ef390ee98241e3acbbc92412e135608d1fa5b761539a8aafbbe922d91710f66c5f6a0ec048993e16b155f632a0cd49b5f8bf3a4e2272ab945cb9cf610adb6df5c527c7c1c1a64df5c2cb6e9e223a87da9c"], 0x9)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000280)})
bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
socket(0x28, 0x5, 0x0) (async)
r10 = socket(0x28, 0x5, 0x0)
write$bt_hci(r9, &(0x7f0000000680)=ANY=[@ANYRES16, @ANYRES8=r5, @ANYBLOB="d04d15bb56908cff014da577d680c1cd45077efc3d02ea919e2228a37055a8d1e82c8941c5765f5300d0f6676bb6d94a8179d1f454c4c6bf68a708c2625e815f4ae204c059194c726510f204590890d4e516eae8c314956121f197243bd1ea5d07bbb7b5a1857e54497fdb7a14cd67c10a5f82ab9dcb61498f5276bfd6904f39c08b6fc870f69b51cad053e267a88bca8dd2eb8da6b5ea3d6dc59871b089447a05dd2ab0ae16df0a6a0dd2a646495e76240d86f90f3db1f3669234d5b6472cc07d8b733670abee6d", @ANYRESOCT=r6, @ANYRES8=r7, @ANYRESHEX=r10], 0x6) (async)
write$bt_hci(r9, &(0x7f0000000680)=ANY=[@ANYRES16=<r11=>0xffffffffffffffff, @ANYRES8=r5, @ANYBLOB="d04d15bb56908cff014da577d680c1cd45077efc3d02ea919e2228a37055a8d1e82c8941c5765f5300d0f6676bb6d94a8179d1f454c4c6bf68a708c2625e815f4ae204c059194c726510f204590890d4e516eae8c314956121f197243bd1ea5d07bbb7b5a1857e54497fdb7a14cd67c10a5f82ab9dcb61498f5276bfd6904f39c08b6fc870f69b51cad053e267a88bca8dd2eb8da6b5ea3d6dc59871b089447a05dd2ab0ae16df0a6a0dd2a646495e76240d86f90f3db1f3669234d5b6472cc07d8b733670abee6d", @ANYRESOCT=r6, @ANYRES8=r7, @ANYRESHEX=r10], 0x6)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES64=r11], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000)
socket$nl_route(0x10, 0x3, 0x0) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001e00431b0000000000000000070000", @ANYRES32, @ANYBLOB="000017000000000008000a00", @ANYRESHEX], 0x2c}}, 0x0) (async)
sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001e00431b0000000000000000070000", @ANYRES32, @ANYBLOB="000017000000000008000a00", @ANYRESHEX], 0x2c}}, 0x0)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x25, &(0x7f0000000000)=0x4fd0, 0x4)
bind$inet(r13, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x4)
sendmmsg(r13, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)

0s ago: executing program 0 (id=6598):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000100)={<r2=>0x0, 0xf7, "0c9b818daf15a58d34af3c8c5ca91b3ec110f37d7f55248c7b5608049ad8a3941d0a3dc84941fe8e42fc3f1dd24b94afb13e7cd806f042e92e47601fe31c36ffc5fe934c787262a3b4dea4d26e3a974125657736a055e606fcdb8ec59f4c245ee00713bb175a5e1fd533dd869cca0df4f87f3aaccb076153ed8fd745deb893e7117310387944c7b2791fd4e0f7e3dcb501e714535f00588d7227921aee42a44a9d8d1c8ac4ed2c984b0cc0f2421a64ffd1bd6f7393e33c878d312b9e48ef521c99589f5674dd40395d72733e706062ff039da2a73a0a7af1928ac2abf08b5a36b7e62ed405b39a7b2575506a2da0e6b9091edc862ff227"}, &(0x7f0000000200)=0xff)
r3 = socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, &(0x7f0000000000)="d46792", 0x0}, 0x20) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, &(0x7f0000000000)="d46792", 0x0}, 0x20)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x7f, 0x6, @multicast}, 0x14)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000240)={r2, 0x4}, 0x8)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="44030000100039042c9c7000eaffffff00006ce4181a23b06c8dcc3a37e98f6c2cd00a1cf6d41e32c22cd4bb0bc545d07777a10287b2d7f51b3ac2665162727d6232638f1d7ea26391f0b06a12852325e7ba6bb228f8ff7454c6afefa62c851d300709771c84636ece15456087f9174b6f694e04c9ea328406f06109e5760f03", @ANYRES32=0x0, @ANYBLOB="830004000000000024001280090001007866726d000000001400028008000100020400000800020004000000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4)

kernel console output (not intermixed with test programs):

8788][T16099] batadv_slave_1: left promiscuous mode
[  488.456340][T16150] netlink: 'syz.0.2672': attribute type 6 has an invalid length.
[  488.513049][ T5628] Bluetooth: hci2: link tx timeout
[  488.520142][ T5628] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  488.698784][T16196] netlink: 'syz.2.2684': attribute type 1 has an invalid length.
[  489.492298][T16290] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  490.013428][T16345] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048)
[  490.097714][T16355] netlink: 'syz.1.2728': attribute type 1 has an invalid length.
[  490.114882][T16355] 8021q: adding VLAN 0 to HW filter on device bond10
[  490.440780][T16388] xt_hashlimit: overflow, try lower: 18446744073709551615/32
[  490.460742][T16386] openvswitch: netlink: Missing key (keys=40, expected=80)
[  490.516014][T16396] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  490.525542][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  490.617214][T16419] netlink: 'syz.0.2746': attribute type 6 has an invalid length.
[  490.745940][T16427] ieee802154 phy0 wpan0: encryption failed: -22
[  491.448115][T16452] __nla_validate_parse: 19 callbacks suppressed
[  491.448223][T16452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2752'.
[  491.460985][T16452] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2752'.
[  492.605518][ T5628] Bluetooth: hci2: command 0x0405 tx timeout
[  493.619707][T16419] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  493.673930][T16469] validate_nla: 3 callbacks suppressed
[  493.673940][T16469] netlink: 'syz.0.2756': attribute type 1 has an invalid length.
[  493.694592][T16469] 8021q: adding VLAN 0 to HW filter on device bond7
[  493.739537][T16469] veth11: entered allmulticast mode
[  493.758751][T16469] bond7: (slave veth11): Enslaving as an active interface with an up link
[  493.781076][T16469] bond7 (unregistering): (slave veth11): Releasing backup interface
[  493.790719][T16469] bond7 (unregistering): Released all slaves
[  493.910939][T16498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2761'.
[  493.921690][T16498] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  493.929722][T16498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2761'.
[  493.933696][T16498] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  493.994479][T16512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2766'.
[  494.196302][T16550] syzkaller1: entered promiscuous mode
[  494.198234][T16550] syzkaller1: entered allmulticast mode
[  494.240139][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2775'.
[  494.320511][T16562] syzkaller0: entered promiscuous mode
[  494.325555][T16562] syzkaller0: entered allmulticast mode
[  494.434709][T16592] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  494.450664][T16592] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  495.042689][T16632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2794'.
[  495.121955][T16633] macsec2: entered promiscuous mode
[  495.973206][T16649] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2800'.
[  496.060388][T16656] netlink: 'syz.2.2801': attribute type 1 has an invalid length.
[  496.063030][T16659] netlink: 'syz.2.2801': attribute type 1 has an invalid length.
[  496.494602][T16686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2808'.
[  496.622920][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2811'.
[  496.636469][T16698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2811'.
[  496.950901][T16703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2812'.
[  496.954122][T16703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2812'.
[  497.173923][T16716] netlink: 'syz.2.2814': attribute type 10 has an invalid length.
[  497.448458][T16721] netlink: 'syz.1.2815': attribute type 29 has an invalid length.
[  497.579795][T16741] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2820'.
[  497.612973][T16745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2821'.
[  498.054339][T16763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2827'.
[  498.261211][T16782] 8021q: adding VLAN 0 to HW filter on device macsec1
[  498.333207][T16790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2833'.
[  498.336272][T16791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2833'.
[  498.523321][T16817] netlink: 'syz.2.2837': attribute type 83 has an invalid length.
[  499.571853][T16863] netlink: 'syz.1.2854': attribute type 1 has an invalid length.
[  499.595667][T16873] netlink: 'syz.2.2855': attribute type 1 has an invalid length.
[  499.659965][T16876] bond7: entered promiscuous mode
[  499.678378][T16878] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  499.695132][T16883] netlink: 'syz.1.2858': attribute type 1 has an invalid length.
[  499.703491][T16883] netlink: 'syz.1.2858': attribute type 11 has an invalid length.
[  499.907061][T16911] netlink: 'syz.2.2866': attribute type 1 has an invalid length.
[  503.176471][T16920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  503.348568][T16959] __nla_validate_parse: 12 callbacks suppressed
[  503.348579][T16959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2878'.
[  503.399544][T16959] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2878'.
[  503.523249][T16979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2884'.
[  503.528028][T16979] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2884'.
[  503.576415][T16991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  503.858788][T17055] xt_hashlimit: size too large, truncated to 1048576
[  504.036092][T17078] kvm: user requested TSC rate below hardware speed
[  504.044062][T17078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2911'.
[  504.047580][T17055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  504.172011][T17098] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20000
[  504.241186][T17107] netlink: 'syz.1.2919': attribute type 1 has an invalid length.
[  504.548096][T17160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2932'.
[  504.733980][T17178] bond11: Removing last ns target with arp_interval on
[  504.762814][T17187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2938'.
[  504.767471][T17187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2938'.
[  504.770614][T17187] netlink: 'syz.2.2938': attribute type 18 has an invalid length.
[  504.815933][T17195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2939'.
[  504.843098][T17202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2941'.
[  504.935578][T17213] ipt_rpfilter: unknown options
[  504.990257][T17218] netlink: 'syz.1.2946': attribute type 1 has an invalid length.
[  505.197174][T17239] xt_TPROXY: Can be used only with -p tcp or -p udp
[  505.347589][T17251] syzkaller0: entered promiscuous mode
[  505.349796][T17251] syzkaller0: entered allmulticast mode
[  505.394509][T17257] netlink: 'syz.1.2957': attribute type 3 has an invalid length.
[  505.397247][T17257] netlink: 'syz.1.2957': attribute type 2 has an invalid length.
[  505.400349][T17257] netlink: 'syz.1.2957': attribute type 2 has an invalid length.
[  505.409077][T17257] netlink: 'syz.1.2957': attribute type 3 has an invalid length.
[  505.411916][T17257] netlink: 'syz.1.2957': attribute type 2 has an invalid length.
[  505.414468][T17257] netlink: 'syz.1.2957': attribute type 2 has an invalid length.
[  505.513227][T17268] netlink: 'syz.0.2960': attribute type 1 has an invalid length.
[  505.517471][T17268] netlink: 'syz.0.2960': attribute type 2 has an invalid length.
[  505.694307][T17282] syzkaller0: entered promiscuous mode
[  505.696290][T17282] syzkaller0: entered allmulticast mode
[  506.686460][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  508.981923][T17312] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  508.993857][T17312] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  509.063583][T17322] __nla_validate_parse: 14 callbacks suppressed
[  509.063594][T17322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2971'.
[  509.132456][T17326] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2973'.
[  509.195588][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2974'.
[  509.256545][T17335] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2976'.
[  509.652072][T17373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2985'.
[  509.655064][T17373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2985'.
[  510.123788][T17419] batadv_slave_1: entered promiscuous mode
[  510.126435][T17419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3000'.
[  510.145815][T17419] batadv_slave_1 (unregistering): left promiscuous mode
[  510.218977][T17430] validate_nla: 1 callbacks suppressed
[  510.218988][T17430] netlink: 'syz.1.3002': attribute type 32 has an invalid length.
[  510.223437][T17430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3002'.
[  510.238263][T17430] bond14: option coupled_control: invalid value (12)
[  510.242436][T17430] bond14 (unregistering): Released all slaves
[  510.271264][T17435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3002'.
[  510.275625][T17435] netlink: 'syz.1.3002': attribute type 1 has an invalid length.
[  510.731464][T17488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3017'.
[  511.096373][T17504] netlink: 'syz.2.3021': attribute type 2 has an invalid length.
[  511.415016][T17521] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  512.325401][T17632] netlink: 'syz.2.3051': attribute type 4 has an invalid length.
[  515.415595][T17643] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  515.651774][T17704] can: request_module (can-proto-0) failed.
[  515.806143][T17712] __nla_validate_parse: 6 callbacks suppressed
[  515.806158][T17712] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3073'.
[  515.941745][T17731] ip6tnl1: entered allmulticast mode
[  515.946146][T17310] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  515.950207][T17310] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  515.967413][ T7437] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  516.032487][T17740] syzkaller1: entered promiscuous mode
[  516.034973][T17740] syzkaller1: entered allmulticast mode
[  516.046797][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3078'.
[  516.050983][T17740] netlink: 'syz.0.3082': attribute type 298 has an invalid length.
[  516.147965][   T33] audit: type=1107 audit(1778537455.347:5): pid=17746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='UlaR94Cm%%TZ&ZG#.|Ӱ|ME0'
[  516.245462][ T7437] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  516.269910][T17762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'.
[  516.328509][T17762] netlink: 'syz.0.3087': attribute type 6 has an invalid length.
[  516.331620][T17762] netlink: 'syz.0.3087': attribute type 7 has an invalid length.
[  516.334224][T17762] netlink: 'syz.0.3087': attribute type 8 has an invalid length.
[  516.377103][T17779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3092'.
[  516.380502][T17779] xt_policy: neither incoming nor outgoing policy selected
[  516.383721][T17779] netlink: 'syz.0.3092': attribute type 33 has an invalid length.
[  516.385484][ T7437] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  516.386875][T17779] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3092'.
[  516.392351][T17779] `: renamed from team0
[  516.448841][T17789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3095'.
[  516.537490][T17802] sctp: [Deprecated]: syz.0.3098 (pid 17802) Use of struct sctp_assoc_value in delayed_ack socket option.
[  516.537490][T17802] Use struct sctp_sack_info instead
[  517.838825][T17861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3112'.
[  518.006709][T10187] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  518.010578][T17895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  518.014507][T17909] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004
[  518.017886][T17894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  518.024070][   T33] audit: type=1107 audit(1778537457.227:6): pid=17908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  518.160263][   T33] audit: type=1804 audit(1778537457.367:7): pid=17927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3126" name="/newroot/1017/cgroup.controllers" dev="tmpfs" ino=5220 res=1 errno=0
[  518.173653][   T33] audit: type=1800 audit(1778537457.367:8): pid=17927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3126" name="cgroup.controllers" dev="tmpfs" ino=5220 res=0 errno=0
[  518.502276][T17970] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993
[  518.599621][T17975] smc: net device hsr0 applied user defined pnetid SYZ2
[  518.762037][T17985] syzkaller0: entered promiscuous mode
[  518.764034][T17985] syzkaller0: entered allmulticast mode
[  518.878621][T17991] netlink: 'syz.2.3145': attribute type 1 has an invalid length.
[  518.881894][T17991] netlink: 'syz.2.3145': attribute type 2 has an invalid length.
[  519.114115][T18028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3155'.
[  519.219754][T18037] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3157'.
[  519.476743][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3158'.
[  519.578287][T18047] netlink: 'syz.2.3160': attribute type 1 has an invalid length.
[  519.591101][T18047] bond12: entered promiscuous mode
[  519.593154][T18047] 8021q: adding VLAN 0 to HW filter on device bond12
[  519.602609][T18047] bond12: (slave bridge10): making interface the new active one
[  519.605233][T18047] bridge10: entered promiscuous mode
[  519.608461][T18047] bridge10: left promiscuous mode
[  519.735407][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  519.779079][T18057] openvswitch: netlink: IP tunnel dst address not specified
[  519.869796][T18061] tipc: Started in network mode
[  519.871880][T18061] tipc: Node identity be8f1408c99e, cluster identity 5
[  519.874475][T18061] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  519.887556][T18061] syzkaller0: entered promiscuous mode
[  519.890025][T18061] syzkaller0: entered allmulticast mode
[  519.904195][T18061] tipc: Resetting bearer <eth:syzkaller0>
[  519.931782][T18059] tipc: Resetting bearer <eth:syzkaller0>
[  519.942428][T18059] tipc: Disabling bearer <eth:syzkaller0>
[  520.183113][T18075] netlink: 'syz.2.3165': attribute type 3 has an invalid length.
[  520.356585][T18097] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  521.304840][T18139] __nla_validate_parse: 7 callbacks suppressed
[  521.304854][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3182'.
[  521.314037][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3182'.
[  521.348170][T18145] xt_cgroup: path and classid specified
[  521.913414][ T5682] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x42
[  522.813734][T18168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3189'.
[  522.825382][T18168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3189'.
[  522.868569][T18175] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3190'.
[  522.902908][T18178] can: request_module (can-proto-0) failed.
[  523.064770][T18198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3197'.
[  523.068423][T18198] ipt_ECN: cannot use operation on non-tcp rule
[  523.101395][T18200] netlink: 'syz.2.3196': attribute type 2 has an invalid length.
[  523.103986][T18200] netlink: 'syz.2.3196': attribute type 1 has an invalid length.
[  523.108014][T18200] netlink: 'syz.2.3196': attribute type 1 has an invalid length.
[  523.166453][T18206] netlink: 'syz.2.3199': attribute type 11 has an invalid length.
[  523.512530][T18239] netlink: 'syz.2.3208': attribute type 1 has an invalid length.
[  523.515559][T18239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3208'.
[  524.025425][ T5682] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1
[  524.535454][   T12] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1
[  525.045562][T17310] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1
[  526.542685][T18255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3213'.
[  526.551944][T18255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3213'.
[  526.560626][T18255] netlink: 'syz.1.3213': attribute type 5 has an invalid length.
[  526.586462][T18255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3213'.
[  526.590054][ T5682] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  526.593517][ T5682] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  526.599115][T18255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3213'.
[  526.603017][ T5682] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  526.615535][T18255] netlink: 'syz.1.3213': attribute type 5 has an invalid length.
[  526.618525][ T5682] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  526.628799][T18266] netlink: 'syz.2.3215': attribute type 10 has an invalid length.
[  526.631623][T18266] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3215'.
[  526.702862][T18272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3216'.
[  526.730217][T18272] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1
[  526.801799][T18279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3219'.
[  526.918299][T18302] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3226'.
[  526.928839][T18304] netlink: 'syz.2.3224': attribute type 9 has an invalid length.
[  526.932496][T18304] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.3224'.
[  527.010032][T18310] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  527.101984][T18323] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.3232'.
[  527.104143][T18325] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  527.337002][T18357] netlink: 'syz.0.3242': attribute type 12 has an invalid length.
[  527.805499][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  527.826690][T18401] syzkaller1: entered promiscuous mode
[  527.828974][T18401] syzkaller1: entered allmulticast mode
[  527.947609][T18410] syzkaller0: entered promiscuous mode
[  527.949912][T18410] syzkaller0: entered allmulticast mode
[  528.043121][T18421] syzkaller0: entered promiscuous mode
[  528.045096][T18421] syzkaller0: entered allmulticast mode
[  528.193827][T18437] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  528.438697][T18440] syzkaller0: entered promiscuous mode
[  528.440762][T18440] syzkaller0: entered allmulticast mode
[  530.531748][T18500] netlink: 'syz.1.3284': attribute type 1 has an invalid length.
[  530.553722][T18500] syzkaller1: entered promiscuous mode
[  530.556231][T18500] syzkaller1: entered allmulticast mode
[  530.899463][T18546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  530.996902][T18556] bridge11: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  531.016082][T18556] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  531.020497][T18555] tipc: Disabling bearer <eth:syzkaller0>
[  531.436060][T18627] syzkaller0: entered promiscuous mode
[  531.441804][T18627] syzkaller0: entered allmulticast mode
[  531.448516][T18626] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  531.478026][T18630] tipc: Resetting bearer <eth:syzkaller0>
[  531.509489][T18630] tipc: Disabling bearer <eth:syzkaller0>
[  531.574361][T18648] netlink: 'syz.1.3325': attribute type 5 has an invalid length.
[  531.585047][T18657] __nla_validate_parse: 19 callbacks suppressed
[  531.585057][T18657] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3327'.
[  531.721817][T18682] netlink: 'syz.2.3332': attribute type 9 has an invalid length.
[  531.732120][T18682] netlink: 'syz.2.3332': attribute type 11 has an invalid length.
[  531.735889][T18682] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.3332'.
[  532.675101][T18707] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3340'.
[  532.741524][T18716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3342'.
[  532.752437][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3343'.
[  532.766224][T18707] IPVS: set_ctl: invalid protocol: 50 172.30.1.3:20001
[  532.787593][T18726] netlink: 'syz.0.3344': attribute type 1 has an invalid length.
[  532.792200][T18726] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  532.954451][T18747] gre0: entered promiscuous mode
[  532.960635][T18747] gre0: entered allmulticast mode
[  532.978757][T18750] xt_TCPMSS: Only works on TCP SYN packets
[  533.538721][T18802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3365'.
[  533.618903][T18815] openvswitch: netlink: Actions may not be safe on all matching packets
[  533.632976][T18813] syzkaller0: entered promiscuous mode
[  533.636372][T18813] syzkaller0: entered allmulticast mode
[  533.681527][T18822] netlink: 'syz.1.3372': attribute type 39 has an invalid length.
[  533.708332][T18825] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  533.711217][T18825] syzkaller0: entered promiscuous mode
[  533.713284][T18825] syzkaller0: entered allmulticast mode
[  533.729809][T18825] tipc: Resetting bearer <eth:syzkaller0>
[  533.740641][T18824] tipc: Resetting bearer <eth:syzkaller0>
[  533.783468][T18824] tipc: Disabling bearer <eth:syzkaller0>
[  533.912378][T18840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3378'.
[  533.930372][T18842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3379'.
[  534.186592][T18880] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3389'.
[  534.190667][T18880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3389'.
[  534.297335][T18883] tipc: New replicast peer: 255.255.255.255
[  534.300424][T18883] tipc: Enabled bearer <udp:syz2>, priority 10
[  534.308003][T18892] netlink: 'syz.1.3393': attribute type 1 has an invalid length.
[  534.668973][T18916] bond6: (slave lo): Releasing backup interface
[  534.671872][T18916] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  534.677275][T18916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  535.326769][ T7429] tipc: Node number set to 1997607944
[  535.528051][T18963] syzkaller1: entered promiscuous mode
[  535.530595][T18963] syzkaller1: entered allmulticast mode
[  535.672651][T18979] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  536.298155][T19060] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002
[  536.344009][T19069] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  536.683662][T19099] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  536.742040][T19109] __nla_validate_parse: 7 callbacks suppressed
[  536.742057][T19109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3451'.
[  537.150555][T19118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3454'.
[  537.156458][T19118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3454'.
[  537.272440][T19129] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3457'.
[  537.276423][T19129] tc_dump_action: action bad kind
[  537.332262][T19129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3457'.
[  537.496255][T19147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3462'.
[  537.573160][T19156] netlink: 'syz.1.3464': attribute type 21 has an invalid length.
[  537.577172][T19156] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3464'.
[  537.700209][T19167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3468'.
[  537.739867][T19169] xt_ecn: cannot match TCP bits for non-tcp packets
[  538.004627][T19195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3477'.
[  538.049561][T19201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3478'.
[  538.107976][T19203] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  539.150409][T19314] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  539.153694][T19314] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  539.166493][T19314] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  539.168679][T19314] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  539.531861][T19363] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  539.534567][T19363] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  539.537904][T19363] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  539.541916][T19363] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  539.724256][T19386] syzkaller0: entered promiscuous mode
[  539.729047][T19386] syzkaller0: entered allmulticast mode
[  539.972049][T19403] syzkaller0: entered promiscuous mode
[  539.982307][T19403] syzkaller0: entered allmulticast mode
[  541.579527][T10187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  541.582395][T10187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  541.585825][T10187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  541.589361][T10187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  541.601607][T19478] netlink: 'syz.2.3539': attribute type 1 has an invalid length.
[  541.646990][T19482] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  541.653885][T19482] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  541.753413][T19501] __nla_validate_parse: 6 callbacks suppressed
[  541.753428][T19501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3545'.
[  541.943563][T19532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3552'.
[  542.050443][T19551] netlink: 'syz.1.3556': attribute type 15 has an invalid length.
[  542.053593][T19551] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3556'.
[  542.083025][T19550] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  542.087325][T19550] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.159079][T19550] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  542.162530][T19550] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.253529][T19550] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  542.258927][T19550] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.334781][T19550] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  542.339612][T19550] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.457015][T10187] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  542.462781][T10187] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  542.489376][T10187] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  542.500211][T10187] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  542.511086][T10187] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  542.514078][T10187] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  542.540124][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  542.542973][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  542.558511][T19586] openvswitch: netlink: Duplicate or invalid key (type 0).
[  542.561136][T19586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  542.734880][T19601] x_tables: duplicate entry at hook 2
[  543.165531][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  543.708542][T19615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3573'.
[  544.311927][T19607] macsec0: entered promiscuous mode
[  544.316423][T19608] macsec0: left promiscuous mode
[  544.319580][T19621] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3574'.
[  544.501294][T19638] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  544.557338][T19642] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3580'.
[  544.562092][T19642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3580'.
[  544.657962][T19645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3581'.
[  544.660973][T19645] netlink: 'syz.0.3581': attribute type 5 has an invalid length.
[  544.663587][T19645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3581'.
[  544.670620][T19645] geneve3: entered promiscuous mode
[  544.672457][T19645] geneve3: entered allmulticast mode
[  544.679734][ T5682] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  544.683462][ T5682] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  544.687912][ T5682] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  544.693265][ T5682] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  544.726674][T19645] : entered promiscuous mode
[  544.941683][T19661] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  544.948630][T19661] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.3585'.
[  545.217097][T19678] openvswitch: netlink: Message has 8 unknown bytes.
[  545.377055][T19702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  545.564902][T19733] Cannot find set identified by id 3 to match
[  545.692434][T19754] netlink: 'syz.1.3610': attribute type 2 has an invalid length.
[  545.728812][T19764] pim6reg0: tun_chr_ioctl cmd 1074025675
[  545.730980][T19764] pim6reg0: persist disabled
[  546.099425][T19785] openvswitch: netlink: EtherType 50a is less than min 600
[  546.518283][T19818] SET target dimension over the limit!
[  546.877316][T19850] syzkaller0: entered promiscuous mode
[  546.881878][T19850] syzkaller0: entered allmulticast mode
[  547.036514][T19866] __nla_validate_parse: 10 callbacks suppressed
[  547.036531][T19866] netlink: 660 bytes leftover after parsing attributes in process `syz.2.3636'.
[  547.058605][T19866] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3636'.
[  547.115141][T19879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3640'.
[  547.133095][   T33] audit: type=1804 audit(1778537486.337:9): pid=19879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3640" name="/newroot/1184/memory.events" dev="tmpfs" ino=6073 res=1 errno=0
[  547.146010][   T33] audit: type=1800 audit(1778537486.337:10): pid=19879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3640" name="memory.events" dev="tmpfs" ino=6073 res=0 errno=0
[  547.292420][T19895] : renamed from bond0
[  547.525386][T19909] netlink: 'syz.1.3647': attribute type 11 has an invalid length.
[  548.492254][T19986] netlink: 'syz.2.3669': attribute type 10 has an invalid length.
[  548.569991][T19989] sctp: [Deprecated]: syz.1.3670 (pid 19989) Use of struct sctp_assoc_value in delayed_ack socket option.
[  548.569991][T19989] Use struct sctp_sack_info instead
[  548.578422][T19989] sctp: [Deprecated]: syz.1.3670 (pid 19989) Use of int in max_burst socket option.
[  548.578422][T19989] Use struct sctp_assoc_value instead
[  548.652700][T20011] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  548.693387][T20014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3676'.
[  548.709961][T20016] netlink: 'syz.0.3677': attribute type 6 has an invalid length.
[  548.729041][T20014] tipc: Failed to remove unknown binding: 66,0,0/1997607944:1941783194/1941783196
[  548.734629][T20014] tipc: Failed to remove unknown binding: 66,0,0/1997607944:1941783194/1941783195
[  548.741619][T20013] tipc: Failed to remove unknown binding: 66,0,0/1997607944:1941783194/1941783196
[  548.748663][T20013] tipc: Failed to remove unknown binding: 66,0,0/1997607944:1941783194/1941783195
[  548.823717][T20033] xt_cgroup: invalid path, errno=-2
[  548.966507][T20046] syzkaller0: entered promiscuous mode
[  548.970775][T20046] syzkaller0: entered allmulticast mode
[  551.987761][T20077] netlink: zone id is out of range
[  552.042234][T20089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3698'.
[  552.049059][T20089] syz_tun: left allmulticast mode
[  552.054798][T20089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3698'.
[  552.091097][T20095] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3699'.
[  552.097319][T20095] ip6gre1: entered promiscuous mode
[  552.099100][T20095] ip6gre1: entered allmulticast mode
[  553.234292][T20181] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3723'.
[  553.304055][T20191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3725'.
[  553.307983][T20194] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3727'.
[  553.311190][T20194] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3727'.
[  553.664315][T20225] netlink: 'syz.1.3732': attribute type 3 has an invalid length.
[  553.667922][T20225] netlink: 'syz.1.3732': attribute type 3 has an invalid length.
[  553.690285][T20218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3729'.
[  553.751260][T20229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3733'.
[  554.244663][T20255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3741'.
[  554.248487][T20255] netlink: 'syz.0.3741': attribute type 1 has an invalid length.
[  554.289734][T20257] SET target dimension over the limit!
[  554.774773][T20277] Bluetooth: MGMT ver 1.23
[  554.900962][T20287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3749'.
[  555.146688][T20302] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  555.150202][T20302] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  555.456354][T20322] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  555.459285][T20322] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  555.462325][T20322] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  555.658858][T20330] xt_l2tp: invalid flags combination: 8
[  555.662028][T20330] netlink: 'syz.0.3763': attribute type 1 has an invalid length.
[  555.912971][T20361] syzkaller1: entered promiscuous mode
[  555.916478][T20361] syzkaller1: entered allmulticast mode
[  556.982279][T20456] bond0: (slave bond_slave_1): Releasing backup interface
[  557.237822][T20483] __nla_validate_parse: 11 callbacks suppressed
[  557.237839][T20483] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3803'.
[  557.926534][T20529] netlink: 'syz.0.3817': attribute type 13 has an invalid length.
[  557.929152][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3817'.
[  558.100608][T20546] IPv6: Can't replace route, no match found
[  558.200103][T20560] netlink: 'syz.0.3826': attribute type 11 has an invalid length.
[  558.203082][T20560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3826'.
[  558.513824][T20572] syzkaller0: entered promiscuous mode
[  558.516012][T20572] syzkaller0: entered allmulticast mode
[  558.817904][T20596] xt_hashlimit: max too large, truncated to 1048576
[  558.820282][T20596] xt_hashlimit: Unknown mode mask 300, kernel too old?
[  559.090461][T20635] netlink: 'syz.0.3843': attribute type 1 has an invalid length.
[  559.113863][T20635] bond0: entered promiscuous mode
[  559.116099][T20635] bond0: entered allmulticast mode
[  559.119668][T20635] 8021q: adding VLAN 0 to HW filter on device bond0
[  559.132176][T20635] erspan2: entered allmulticast mode
[  559.141255][T20635] bond0: (slave erspan2): making interface the new active one
[  559.143901][T20635] erspan2: entered promiscuous mode
[  559.146724][T20635] bond0: (slave erspan2): Enslaving as an active interface with an up link
[  559.154818][T20635] syz.0.3843 (20635) used obsolete PPPIOCDETACH ioctl
[  559.209723][T20645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3843'.
[  559.293005][T20649] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3848'.
[  559.302152][T20649] sctp: [Deprecated]: syz.2.3848 (pid 20649) Use of int in maxseg socket option.
[  559.302152][T20649] Use struct sctp_assoc_value instead
[  559.359824][T20653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3849'.
[  559.364091][T20653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3849'.
[  559.396052][T20653] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  559.399284][T20653] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  559.610243][T20675] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3854'.
[  559.646364][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3855'.
[  559.653601][T20680] netlink: 'syz.1.3855': attribute type 20 has an invalid length.
[  559.665331][T20680] netlink: 'syz.1.3855': attribute type 21 has an invalid length.
[  559.813502][T20695] syzkaller1: entered allmulticast mode
[  559.942869][T20635] syz.0.3843 (20635) used greatest stack depth: 20248 bytes left
[  559.974940][T20713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3866'.
[  560.008466][T20719] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  560.019889][T20719] Cannot find del_set index 2 as target
[  561.088875][T20833] syzkaller0: entered promiscuous mode
[  561.090663][T20833] syzkaller0: entered allmulticast mode
[  561.561286][   T33] audit: type=1107 audit(1778537500.767:11): pid=20901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  561.594254][T20906] x_tables: duplicate underflow at hook 2
[  561.600579][T20909] sctp: [Deprecated]: syz.1.3920 (pid 20909) Use of int in max_burst socket option.
[  561.600579][T20909] Use struct sctp_assoc_value instead
[  561.625914][T20909] syzkaller0: entered promiscuous mode
[  561.631467][T20909] syzkaller0: entered allmulticast mode
[  561.654276][T20914] openvswitch: netlink: Invalid VLAN frame
[  561.792218][T20928] 0{X: renamed from gretap0 (while UP)
[  561.795408][T20928] 0{X: entered allmulticast mode
[  561.797681][T20928] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  561.938322][T20944] netlink: 'syz.1.3929': attribute type 83 has an invalid length.
[  562.063102][T20950] netlink: 'syz.1.3931': attribute type 49 has an invalid length.
[  562.177570][T20964] x_tables: duplicate underflow at hook 1
[  562.462307][T20974] __nla_validate_parse: 76 callbacks suppressed
[  562.462318][T20974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3938'.
[  562.918029][T21003] netlink: 'syz.0.3946': attribute type 4 has an invalid length.
[  562.920589][T21003] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3946'.
[  563.292891][T21039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3955'.
[  563.351001][T21038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3953'.
[  564.157596][T21084] syzkaller0: entered promiscuous mode
[  564.159996][T21084] syzkaller0: entered allmulticast mode
[  564.172630][T21087] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3970'.
[  564.176471][T21087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3970'.
[  564.178611][T21084] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3969'.
[  564.439559][T21112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3977'.
[  564.442771][T21112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3977'.
[  564.447433][T21112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3977'.
[  564.514940][T21125] xt_hashlimit: size too large, truncated to 1048576
[  565.239305][T21228] netlink: 'syz.2.4005': attribute type 11 has an invalid length.
[  565.248226][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  565.251533][T21228] netlink: 'syz.2.4005': attribute type 11 has an invalid length.
[  565.254116][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  565.257843][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  565.260545][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  565.305049][T21235] openvswitch: netlink: Flow key attr not present in new flow.
[  566.497562][T21355] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  566.563571][T21363] bond14: entered promiscuous mode
[  566.565811][T21363] bond14: entered allmulticast mode
[  566.718458][T21381] mac80211_hwsim hwsim7 wlan1: Caught tx_queue_len zero misconfig
[  566.814488][T21393] syzkaller0: entered promiscuous mode
[  566.817647][T21393] syzkaller0: entered allmulticast mode
[  567.132467][T21418] netlink: 'syz.0.4053': attribute type 7 has an invalid length.
[  567.139662][T21420] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  567.233716][T21428] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  567.488835][T21457] syzkaller0: entered promiscuous mode
[  567.494118][T21457] syzkaller0: entered allmulticast mode
[  567.501012][T21457] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  567.511912][T21460] tipc: Resetting bearer <eth:syzkaller0>
[  567.527502][T21460] tipc: Disabling bearer <eth:syzkaller0>
[  567.661507][T21469] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  567.745695][T21482] netlink: set zone limit has 8 unknown bytes
[  567.969647][T21520] syzkaller1: entered promiscuous mode
[  567.971566][T21520] syzkaller1: entered allmulticast mode
[  568.127479][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  568.327635][T21569] netlink: 'syz.0.4084': attribute type 1 has an invalid length.
[  568.330300][T21570] netlink: 'syz.0.4084': attribute type 1 has an invalid length.
[  568.333176][T21569] netlink: 'syz.0.4084': attribute type 2 has an invalid length.
[  568.336086][T21570] netlink: 'syz.0.4084': attribute type 2 has an invalid length.
[  568.400496][T21575] --map-set only usable from mangle table
[  568.408019][T21575] __nla_validate_parse: 25 callbacks suppressed
[  568.408034][T21575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4085'.
[  568.660552][T21613] IPv6: NLM_F_CREATE should be specified when creating new route
[  568.663678][T21613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  568.666064][T21613] IPv6: NLM_F_CREATE should be set when creating new route
[  568.668402][T21613] IPv6: NLM_F_CREATE should be set when creating new route
[  568.670743][T21613] IPv6: NLM_F_CREATE should be set when creating new route
[  568.680343][T21613] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4095'.
[  568.868965][T21635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4102'.
[  568.872210][T21635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4102'.
[  568.876524][T21635] netlink: 58 bytes leftover after parsing attributes in process `syz.0.4102'.
[  569.380449][T21695] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  569.439272][T21699] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  569.459011][T21701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4121'.
[  569.563996][T21718] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4125'.
[  569.569415][T21718] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4125'.
[  569.743106][T21731] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4128'.
[  569.773956][T21731] syzkaller0: entered promiscuous mode
[  569.776165][T21731] syzkaller0: entered allmulticast mode
[  570.347852][T21799] syzkaller0: entered promiscuous mode
[  570.350248][T21799] syzkaller0: entered allmulticast mode
[  570.389729][T21799] xt_CT: You must specify a L4 protocol and not use inversions on it
[  570.394928][T21800] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  570.403743][T21798] tipc: Resetting bearer <eth:syzkaller0>
[  570.424291][T21805] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4149'.
[  570.430993][T21798] tipc: Disabling bearer <eth:syzkaller0>
[  570.879090][T21860] 0: renamed from hsr0
[  570.889942][T21860] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  570.896130][T21860] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  570.901858][T21860] 0: entered allmulticast mode
[  570.903510][T21860] hsr_slave_0: entered allmulticast mode
[  570.910908][T21860] hsr_slave_1: entered allmulticast mode
[  570.914601][T21860] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  572.863866][T22016] syzkaller1: entered promiscuous mode
[  572.866339][T22016] syzkaller1: entered allmulticast mode
[  573.373639][T22076] netem: change failed
[  573.467475][T22095] pim6reg: entered allmulticast mode
[  573.473831][T22095] __nla_validate_parse: 12 callbacks suppressed
[  573.473846][T22095] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4225'.
[  573.695452][T22123] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4229'.
[  573.709945][T22123] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4229'.
[  573.758678][T22125] netlink: get zone limit has 4 unknown bytes
[  573.820021][T22131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4233'.
[  573.887197][T22125] pim6reg: left allmulticast mode
[  574.130261][T22140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  574.134956][T22140] nbd: couldn't find a device at index 1
[  574.650757][T22154] netlink: 'syz.0.4238': attribute type 1 has an invalid length.
[  574.818885][T22163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4241'.
[  575.165419][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  575.248903][T22213] macsec0: entered promiscuous mode
[  575.380822][T22235] netlink: 'syz.2.4263': attribute type 1 has an invalid length.
[  575.384541][T22235] netlink: 'syz.2.4263': attribute type 1 has an invalid length.
[  575.386380][T22234] netlink: 'syz.0.4262': attribute type 1 has an invalid length.
[  575.388265][T22235] netlink: 'syz.2.4263': attribute type 1 has an invalid length.
[  575.393329][T22235] netlink: 'syz.2.4263': attribute type 1 has an invalid length.
[  578.480344][T22252] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  578.636041][T22281] set match dimension is over the limit!
[  578.667229][T22286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4277'.
[  578.935908][T22318] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4287'.
[  578.937821][T22320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4288'.
[  578.950495][T22320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4288'.
[  578.954945][T22320] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.4288'.
[  578.962069][T22320] xt_hashlimit: size too large, truncated to 1048576
[  579.012582][T22327] bridge11: entered promiscuous mode
[  579.112276][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4294'.
[  579.118941][T22339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4294'.
[  579.210409][T22345] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4296'.
[  579.224160][T22345] syzkaller1: entered promiscuous mode
[  579.295093][T22359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4299'.
[  579.316334][T22359] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4299'.
[  579.852831][T22419] syzkaller1: entered allmulticast mode
[  579.996941][T22431] xt_CT: You must specify a L4 protocol and not use inversions on it
[  580.184661][T22447] syzkaller0: entered promiscuous mode
[  580.187706][T22447] syzkaller0: entered allmulticast mode
[  580.192623][T22447] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  580.426961][T22478] syzkaller0: entered promiscuous mode
[  580.428959][T22478] syzkaller0: entered allmulticast mode
[  580.515223][T22494] netlink: 'syz.2.4333': attribute type 1 has an invalid length.
[  580.530074][T22494] bond15: entered promiscuous mode
[  580.531944][T22494] bond15: entered allmulticast mode
[  580.533927][T22494] 8021q: adding VLAN 0 to HW filter on device bond15
[  580.545909][T22494] erspan2: entered allmulticast mode
[  580.549544][T22494] bond15: (slave erspan2): making interface the new active one
[  580.552265][T22494] erspan2: entered promiscuous mode
[  580.554720][T22494] bond15: (slave erspan2): Enslaving as an active interface with an up link
[  581.034411][T22544] bridge0: port 3(vlan4) entered blocking state
[  581.036683][T22544] bridge0: port 3(vlan4) entered disabled state
[  581.038906][T22544] vlan4: entered allmulticast mode
[  581.040648][T22544] bridge0: entered allmulticast mode
[  581.043662][T22544] vlan4: left allmulticast mode
[  581.047343][T22544] bridge0: left allmulticast mode
[  581.221921][T22547] netlink: 'syz.0.4349': attribute type 49 has an invalid length.
[  581.782481][T22565] netlink: 'syz.1.4354': attribute type 2 has an invalid length.
[  582.105075][T22618] netlink: 'syz.1.4367': attribute type 21 has an invalid length.
[  582.110694][T22618] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  582.363227][T22656] pim6reg1: entered promiscuous mode
[  582.366841][T22656] pim6reg1: entered allmulticast mode
[  582.674609][T22691] syzkaller0: entered promiscuous mode
[  582.677220][T22691] syzkaller0: entered allmulticast mode
[  582.939330][T22710] netlink: 'syz.1.4391': attribute type 1 has an invalid length.
[  582.960176][T22710] bond15: entered promiscuous mode
[  582.962296][T22710] 8021q: adding VLAN 0 to HW filter on device bond15
[  582.966381][T22710] bridge0: Device is already in use.
[  582.968868][T22713] bridge0: Device is already in use.
[  583.161475][T22728] bond16: option packets_per_slave: invalid value (1048582)
[  583.164084][T22728] bond16: option packets_per_slave: allowed values 0 - 65535
[  583.167737][T22728] bond16 (unregistering): Released all slaves
[  583.231777][T22728] mac80211_hwsim hwsim2 ;: renamed from wlan0
[  583.352495][T22735] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  586.153427][T22728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  586.302091][T22762] __nla_validate_parse: 14 callbacks suppressed
[  586.302100][T22762] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4399'.
[  586.498198][T22783] bond16: option updelay: invalid value (18446744073709518847)
[  586.501425][T22783] bond16: option updelay: allowed values 0 - 2147483647
[  586.510479][T22783] bond16 (unregistering): Released all slaves
[  586.518861][T22791] netlink: 'syz.1.4409': attribute type 3 has an invalid length.
[  586.869197][T22838] netlink: 'syz.2.4421': attribute type 1 has an invalid length.
[  587.042414][T22869] x_tables: ip_tables: ah match: only valid for protocol 51
[  587.045594][T22869] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  587.100891][T22877] geneve4: entered promiscuous mode
[  587.103272][T22877] geneve4: entered allmulticast mode
[  587.110413][T10187] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0
[  587.115463][T10187] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0
[  587.118463][T10187] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0
[  587.124094][T10187] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0
[  587.468513][T22911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4438'.
[  587.589408][T22926] sock: sock_timestamping_bind_phc: sock not bind to device
[  587.700366][T22945] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4445'.
[  587.804087][T22954] netlink: 'syz.0.4447': attribute type 1 has an invalid length.
[  588.091420][   T33] audit: type=1804 audit(1778537527.297:12): pid=22978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4455" name="/newroot/1438/cgroup.controllers" dev="tmpfs" ino=7368 res=1 errno=0
[  588.098672][   T33] audit: type=1800 audit(1778537527.297:13): pid=22978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4455" name="cgroup.controllers" dev="tmpfs" ino=7368 res=0 errno=0
[  588.134059][T22981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4456'.
[  588.360405][T23025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4468'.
[  588.438611][T10187] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96
[  588.504547][T23052] netlink: 'syz.1.4475': attribute type 1 has an invalid length.
[  588.519346][T23052] 8021q: adding VLAN 0 to HW filter on device bond16
[  588.519489][T23056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4476'.
[  588.528803][T23056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4476'.
[  588.532923][T23052] macvlan2: entered promiscuous mode
[  588.534718][T23052] macvlan2: entered allmulticast mode
[  588.539063][T23052] bond16: entered allmulticast mode
[  588.540844][T23052] bond16: entered promiscuous mode
[  588.542955][T23052] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  588.550762][T23052] team0: Port device macvlan2 added
[  588.561827][T23056] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4476'.
[  588.586635][T23052] bond16: (slave ip6gretap0): making interface the new active one
[  588.592589][T23052] ip6gretap0: entered promiscuous mode
[  588.594567][T23052] ip6gretap0: entered allmulticast mode
[  588.600624][T23052] bond16: (slave ip6gretap0): Enslaving as an active interface with an up link
[  588.741528][T23087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4484'.
[  588.801567][T23096] macvlan0: entered promiscuous mode
[  588.803533][T23096] macvlan0: entered allmulticast mode
[  588.805853][T23096] gretap0: entered allmulticast mode
[  588.812440][T23096] netlink: 'syz.2.4488': attribute type 4 has an invalid length.
[  589.308035][T23160] xt_l2tp: v2 doesn't support IP mode
[  589.314565][T23162] wg2: entered allmulticast mode
[  589.364792][T23175] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4504'.
[  589.608105][T23205] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  589.879430][T23246] openvswitch: netlink: IPv6 tunnel dst address is zero
[  589.983750][T23260] openvswitch: netlink: Key type 70 is out of range max 32
[  590.034127][T23263] bond17: option lacp_active: invalid value (8)
[  590.037347][T23263] bond17 (unregistering): Released all slaves
[  590.941732][T23285] syzkaller0: entered promiscuous mode
[  590.944103][T23285] syzkaller0: entered allmulticast mode
[  592.679127][T23288] __nla_validate_parse: 5 callbacks suppressed
[  592.679143][T23288] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4540'.
[  592.777794][T23305] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4543'.
[  592.870454][T23326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4548'.
[  592.982029][T23340] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4552'.
[  593.032454][T23349] netlink: 272 bytes leftover after parsing attributes in process `syz.2.4553'.
[  593.046012][T23351] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  593.084745][T23356] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4557'.
[  593.483571][T23397] syzkaller1: entered promiscuous mode
[  593.485677][T23397] syzkaller1: entered allmulticast mode
[  593.507561][T23397] x_tables: duplicate underflow at hook 2
[  593.609639][T23400] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4569'.
[  594.007076][T23407] ip6_vti0 speed is unknown, defaulting to 1000
[  594.017241][T23407] ip6_vti0 speed is unknown, defaulting to 1000
[  594.020652][T23407] ip6_vti0 speed is unknown, defaulting to 1000
[  594.056967][T23408] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4571'.
[  594.110178][T23407] infiniband syz2: set down
[  594.111788][ T7440] ip6_vti0 speed is unknown, defaulting to 1000
[  594.116536][T23407] infiniband syz2: added ip6_vti0
[  594.123556][T23407] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  594.128611][T23407] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  594.134245][T23407] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  594.158499][T23407] RDS/IB: syz2: added
[  594.161833][T23407] smc: adding ib device syz2 with port count 1
[  594.163843][T23407] smc:    ib device syz2 port 1 has no pnetid
[  594.166039][ T7440] ip6_vti0 speed is unknown, defaulting to 1000
[  594.170250][T23407] ip6_vti0 speed is unknown, defaulting to 1000
[  594.274319][T23407] ip6_vti0 speed is unknown, defaulting to 1000
[  594.357583][T23407] ip6_vti0 speed is unknown, defaulting to 1000
[  594.502837][T23425] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4576'.
[  594.521227][T23425] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4576'.
[  594.533260][T23428] netlink: 'syz.2.4575': attribute type 4 has an invalid length.
[  595.346663][T23468] netlink: 'syz.1.4586': attribute type 3 has an invalid length.
[  595.506799][T23485] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  595.559123][T23490] netlink: 'syz.1.4593': attribute type 1 has an invalid length.
[  595.623213][T23501] netlink: 'syz.2.4596': attribute type 1 has an invalid length.
[  595.959231][T23536] netlink: 'syz.2.4605': attribute type 2 has an invalid length.
[  596.683534][T23605] netlink: 'syz.1.4624': attribute type 1 has an invalid length.
[  596.714474][T23605] 8021q: adding VLAN 0 to HW filter on device bond17
[  596.720987][T23605] macvlan3: entered promiscuous mode
[  596.722909][T23605] macvlan3: entered allmulticast mode
[  596.726905][T23605] bond17: entered promiscuous mode
[  596.729556][T23605] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  596.737496][T23605] bond17: left promiscuous mode
[  596.760506][T23616] syzkaller1: entered promiscuous mode
[  596.762807][T23616] syzkaller1: entered allmulticast mode
[  596.852447][T23628] netlink: 'syz.2.4629': attribute type 13 has an invalid length.
[  597.109509][T23663] netlink: 'syz.0.4642': attribute type 21 has an invalid length.
[  597.112188][T23663] netlink: 'syz.0.4642': attribute type 22 has an invalid length.
[  597.116534][T23663] netlink: 'syz.0.4642': attribute type 23 has an invalid length.
[  597.213226][T23679] Unsupported ieee802154 address type: 0
[  597.220616][T23670] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.223258][T23679] Unsupported ieee802154 address type: 0
[  597.227184][T23670] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  597.231949][T23670] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  597.342403][T23670] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.346295][T23670] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  597.349808][T23670] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  597.409108][T23670] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.412728][T23670] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  597.417434][T23670] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  597.469315][T23670] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.472621][T23670] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  597.476248][T23670] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  597.602219][T17310] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  597.605031][T17310] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  597.613262][T17310] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  597.648060][T17310] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  597.651766][T17310] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  597.667636][T17310] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  597.700066][T17310] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  597.702868][T17310] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  597.705990][T17310] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  597.709246][T17310] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  597.711995][T17310] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  597.714944][T17310] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  597.760883][T23768] xt_bpf: check failed: parse error
[  597.991843][T23798] __nla_validate_parse: 17 callbacks suppressed
[  597.991853][T23798] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.4676'.
[  597.999762][T23798] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4676'.
[  598.106955][T23810] xt_hashlimit: max too large, truncated to 1048576
[  598.109875][T23810] xt_ecn: cannot match TCP bits for non-tcp packets
[  598.229175][T23823] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4681'.
[  598.232114][T23823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4681'.
[  598.268122][T23828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4683'.
[  598.271239][T23828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4683'.
[  600.008639][T23866] syzkaller0: entered promiscuous mode
[  600.011022][T23866] syzkaller0: entered allmulticast mode
[  601.434253][T23841] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  601.438842][T23873] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  601.851313][T23894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4702'.
[  601.857078][T23898] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4703'.
[  601.933736][T23908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4706'.
[  602.035240][T23920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4706'.
[  603.070627][T24005] validate_nla: 1 callbacks suppressed
[  603.070643][T24005] netlink: 'syz.2.4732': attribute type 28 has an invalid length.
[  603.295401][T24032] __nla_validate_parse: 3 callbacks suppressed
[  603.295413][T24032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4735'.
[  603.311767][T24039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4741'.
[  603.319720][T24040] xt_hashlimit: max too large, truncated to 1048576
[  603.409413][T24049] netlink: 'syz.2.4743': attribute type 7 has an invalid length.
[  603.700760][T24075] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20003
[  603.848225][T24085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4751'.
[  603.852790][T24085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4751'.
[  603.856219][T24086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4751'.
[  603.869147][T24085] bond18: entered promiscuous mode
[  603.871210][T24085] 8021q: adding VLAN 0 to HW filter on device bond18
[  603.879307][T24085] bond18 (unregistering): Released all slaves
[  603.892760][T24086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4751'.
[  604.050649][T24099] ieee802154 phy0 wpan0: encryption failed: -22
[  604.052241][T24098] hm3): entered promiscuous mode
[  604.161827][T24127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4761'.
[  613.546716][T24150] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.4766'.
[  613.562345][T24152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4764'.
[  613.567939][T24152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4764'.
[  613.661568][T24157] netlink: 'syz.0.4767': attribute type 3 has an invalid length.
[  613.665953][T24157] netlink: 'syz.0.4767': attribute type 1 has an invalid length.
[  613.669535][T24157] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4767'.
[  613.678501][T24157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4767'.
[  613.891213][T24189] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4775'.
[  613.900774][T24189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4775'.
[  613.993519][T24202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4779'.
[  614.012222][T24202] netlink: 'syz.0.4779': attribute type 1 has an invalid length.
[  614.015583][T24202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4779'.
[  614.019323][T24202] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4779'.
[  614.130808][T24217] ip6gre2: entered promiscuous mode
[  614.132692][T24217] ip6gre2: entered allmulticast mode
[  614.360013][T24228] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  614.363064][T24228] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  614.527692][T24241] openvswitch: netlink: Missing valid actions attribute.
[  614.545773][T24241] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  614.671834][T24251] IPVS: set_ctl: invalid protocol: 103 10.1.1.2:20002
[  615.409363][T24327] netlink: 'syz.0.4810': attribute type 1 has an invalid length.
[  615.430336][T24327] bond11: (slave bridge13): making interface the new active one
[  615.433426][T24327] bond11: (slave bridge13): Enslaving as an active interface with an up link
[  615.620772][T24346] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  615.623569][T24346] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  616.066311][T24417] netlink: 'syz.0.4834': attribute type 4 has an invalid length.
[  616.098382][T24417] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  616.592887][T24481] netlink: 'syz.1.4848': attribute type 12 has an invalid length.
[  618.569255][T24646] __nla_validate_parse: 44 callbacks suppressed
[  618.569272][T24646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4896'.
[  618.732811][T24660] netlink: 'syz.1.4896': attribute type 19 has an invalid length.
[  618.736200][T24660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4896'.
[  618.839146][T24672] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[  618.887146][T24674] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4904'.
[  618.893719][T24674] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4904'.
[  618.971913][T24679] netlink: 'syz.0.4906': attribute type 21 has an invalid length.
[  618.975566][T24679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4906'.
[  618.979238][T24679] netlink: 'syz.0.4906': attribute type 1 has an invalid length.
[  620.041327][T24705] xt_hashlimit: size too large, truncated to 1048576
[  620.133803][T24718] sock: sock_set_timeout: `syz.0.4917' (pid 24718) tries to set negative timeout
[  620.212436][T24711] ip6_vti0 speed is unknown, defaulting to 1000
[  620.351688][T24730] xt_nat: multiple ranges no longer supported
[  620.433030][T24741] xt_hashlimit: size too large, truncated to 1048576
[  620.439967][T24737] syzkaller0: entered promiscuous mode
[  620.442303][T24737] syzkaller0: entered allmulticast mode
[  620.467823][T24737] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  620.473599][T24736] tipc: Resetting bearer <eth:syzkaller0>
[  620.538939][T24736] tipc: Disabling bearer <eth:syzkaller0>
[  620.805116][T24784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4934'.
[  620.872879][T24794] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4935'.
[  621.004546][T24818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4941'.
[  621.015397][T24818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4941'.
[  621.022856][T24818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4941'.
[  621.030755][T24818] netlink: 'syz.0.4941': attribute type 5 has an invalid length.
[  621.066478][T24823] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  621.421666][T24837] netlink: 'syz.0.4947': attribute type 11 has an invalid length.
[  625.124568][T24926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  629.567507][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  629.662930][T24957] ip6_vti0 speed is unknown, defaulting to 1000
[  629.681550][T25001] __nla_validate_parse: 2 callbacks suppressed
[  629.681561][T25001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4990'.
[  629.858197][T25009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4993'.
[  630.094040][T25033] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2
[  630.910533][T25066] ip6_vti0 speed is unknown, defaulting to 1000
[  631.212129][T25107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5016'.
[  631.229180][T25107] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5016'.
[  631.655986][T25158] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5028'.
[  631.688206][T25164] netlink: set zone limit has 8 unknown bytes
[  631.747729][T25164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5030'.
[  631.750785][T25164] veth1_to_batadv: entered allmulticast mode
[  631.806792][T25171] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  631.910027][T25186] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  640.610870][T25208] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5041'.
[  640.799429][T25243] syzkaller0: entered promiscuous mode
[  640.801327][T25243] syzkaller0: entered allmulticast mode
[  640.923513][T25265] openvswitch: netlink: Tunnel attr 2 has unexpected len 8 expected 4
[  640.930511][T25265] openvswitch: netlink: Tunnel attr 2 has unexpected len 8 expected 4
[  641.042399][T25276] netlink: 'syz.1.5057': attribute type 27 has an invalid length.
[  641.046519][T25276] netlink: 'syz.1.5057': attribute type 4 has an invalid length.
[  641.048697][T25281] netlink: 444 bytes leftover after parsing attributes in process `syz.2.5059'.
[  641.050178][T25276] netlink: 'syz.1.5057': attribute type 4 has an invalid length.
[  641.057655][T25281] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  641.063775][T25281] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  641.693006][T25326] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  642.818882][T25437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5095'.
[  642.838473][T25423] ip6_vti0 speed is unknown, defaulting to 1000
[  642.912450][T25444] bond16: entered allmulticast mode
[  642.944005][T25444] macvlan1: entered promiscuous mode
[  642.947957][T25444] macvlan1: entered allmulticast mode
[  642.952280][T25444] bond16: (slave macvlan1): Opening slave failed
[  643.042588][T25453] netlink: 'syz.2.5097': attribute type 1 has an invalid length.
[  643.046172][T25453] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5097'.
[  643.075147][T25453] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  643.457093][T25496] IPVS: set_ctl: invalid protocol: 136 100.1.1.0:20000
[  643.465582][T25491] IPVS: set_ctl: invalid protocol: 136 100.1.1.0:20000
[  643.575024][T25507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5110'.
[  643.590886][T25513] gre2: entered allmulticast mode
[  643.595228][T25513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5111'.
[  643.599332][T25513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5111'.
[  643.866575][T25571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5124'.
[  643.871723][T25571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5124'.
[  643.896182][T25565] tipc: Failed to remove unknown binding: 66,1,1/1997607944:4061899207/4061899209
[  643.961659][T25588] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5129'.
[  643.967187][T25592] tipc: Failed to remove unknown binding: 66,1,1/1997607944:4061899207/4061899209
[  643.970591][T25588] netlink: 'syz.0.5129': attribute type 1 has an invalid length.
[  643.973508][T25592] tipc: Failed to remove unknown binding: 66,1,1/1997607944:4061899207/4061899209
[  644.066202][T25605] netlink: zone id is out of range
[  644.068041][T25605] netlink: zone id is out of range
[  644.070984][T25605] netlink: zone id is out of range
[  644.073005][T25605] netlink: zone id is out of range
[  644.075199][T25605] netlink: zone id is out of range
[  644.078576][T25605] netlink: zone id is out of range
[  644.313286][T25642] netlink: 'syz.0.5144': attribute type 1 has an invalid length.
[  644.687838][T25680] netlink: 'syz.2.5153': attribute type 1 has an invalid length.
[  644.845574][T25695] netlink: 'syz.2.5157': attribute type 30 has an invalid length.
[  644.845665][T25693] netlink: 'syz.2.5157': attribute type 30 has an invalid length.
[  644.925452][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  645.367539][T25757] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  645.371732][T25757] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.445519][T25757] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  645.450926][T25757] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.503068][T25757] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  645.507981][T25757] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.572201][T25757] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  645.578902][T25757] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.673242][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  645.676951][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  645.703241][ T5682] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  645.708562][ T5682] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  645.723384][ T5682] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  645.738255][ T5682] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  645.760111][ T5682] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  645.763632][ T5682] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  645.948303][T25821] __nla_validate_parse: 7 callbacks suppressed
[  645.948321][T25821] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5191'.
[  646.144409][T25843] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5195'.
[  646.159693][T25837] netlink: 'syz.2.5193': attribute type 10 has an invalid length.
[  646.360792][T25863] xt_hashlimit: max too large, truncated to 1048576
[  646.363643][T25863] xt_hashlimit: Unknown mode mask 300, kernel too old?
[  646.596728][T25892] netlink: 13 bytes leftover after parsing attributes in process `syz.2.5209'.
[  646.624009][T25897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5211'.
[  646.772068][T25915] netlink: 'syz.2.5215': attribute type 1 has an invalid length.
[  646.773340][T25914] netlink: 'syz.2.5215': attribute type 1 has an invalid length.
[  647.201927][T25961] xt_addrtype: ipv6 does not support BROADCAST matching
[  647.390656][T25980] syzkaller0: entered promiscuous mode
[  647.393178][T25980] syzkaller0: entered allmulticast mode
[  647.506448][T25990] syzkaller1: entered promiscuous mode
[  647.508372][T25990] syzkaller1: entered allmulticast mode
[  648.407253][T26072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5255'.
[  648.893571][T26108] bridge14: the hash_elasticity option has been deprecated and is always 16
[  648.897388][T26108] bridge14: entered allmulticast mode
[  648.963775][T26110] syzkaller0: entered promiscuous mode
[  648.965904][T26110] syzkaller0: entered allmulticast mode
[  650.814084][T26132] net_ratelimit: 351 callbacks suppressed
[  650.814103][T26132] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  650.923492][T26154] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5278'.
[  651.151877][T26176] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  651.290489][T26191] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  651.296126][T26191] IPVS: Unknown mcast interface: vcan0
[  651.301337][T26193] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  651.306224][T26193] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  651.309465][T26193] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  651.312734][T26193] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  651.316838][T26193] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  651.323674][T26193] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  651.332020][T26193] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  651.336264][T26193] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  651.342697][T26193] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  651.351254][T26193] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  651.368236][T26200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5293'.
[  651.467641][T26210] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000
[  651.651582][T26227] netlink: 'syz.0.5299': attribute type 1 has an invalid length.
[  651.654264][T26227] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5299'.
[  651.700674][T26231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5300'.
[  652.093332][T26268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5311'.
[  652.100915][T26268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5311'.
[  652.107139][T26268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5311'.
[  652.111837][T26268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5311'.
[  652.116852][T26268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5311'.
[  652.121168][T26268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5311'.
[  652.126519][T26268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5311'.
[  652.253583][T26289] ip6tnl1: entered allmulticast mode
[  652.278971][T26275] ip6_vti0 speed is unknown, defaulting to 1000
[  652.519938][T26277] ip6_vti0 speed is unknown, defaulting to 1000
[  653.485148][T26356] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  654.163639][T26456] ieee802154 phy0 wpan0: encryption failed: -22
[  654.200130][T26463] sctp: [Deprecated]: syz.1.5359 (pid 26463) Use of int in maxseg socket option.
[  654.200130][T26463] Use struct sctp_assoc_value instead
[  654.432254][T26491] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  654.769079][T26522] syzkaller0: entered promiscuous mode
[  654.771461][T26522] syzkaller0: entered allmulticast mode
[  654.780098][T26524] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  654.913064][T26524] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  654.983319][T26524] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  655.053732][T26524] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  655.136527][T26535] netlink: 'syz.0.5379': attribute type 1 has an invalid length.
[  655.181392][T17310] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  655.197129][T17310] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  655.213098][T17310] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  655.229347][T17310] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  655.232498][T26542] openvswitch: netlink: Key 6 has unexpected len 318 expected 2
[  655.335894][T26548] openvswitch: netlink: IP tunnel dst address not specified
[  655.339535][T26553] netlink: 'syz.2.5384': attribute type 12 has an invalid length.
[  655.342542][T26553] netlink: 'syz.2.5384': attribute type 13 has an invalid length.
[  656.014516][T26605] openvswitch: netlink: Unknown key attributes 2
[  656.048586][T26608] hmac(sha224: entered promiscuous mode
[  656.514346][T26657] netlink: 'syz.0.5412': attribute type 83 has an invalid length.
[  657.180971][T26676] __nla_validate_parse: 41 callbacks suppressed
[  657.180981][T26676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5418'.
[  657.188360][T26676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5418'.
[  657.192218][T26677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5418'.
[  657.198355][T26677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5418'.
[  657.207847][T26676] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  657.321252][T26682] bond18: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  657.329120][T26682] bond18 (unregistering): Released all slaves
[  657.486957][T26703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5425'.
[  657.490959][T26703] netlink: 'syz.1.5425': attribute type 30 has an invalid length.
[  657.639419][T26723] geneve5: entered promiscuous mode
[  657.644416][T17310] netdevsim netdevsim0 eth0: set [1, 3] type 2 family 0 port 38016 - 0
[  657.649598][T17310] netdevsim netdevsim0 eth1: set [1, 3] type 2 family 0 port 38016 - 0
[  657.659829][T17310] netdevsim netdevsim0 eth2: set [1, 3] type 2 family 0 port 38016 - 0
[  657.668409][T17310] netdevsim netdevsim0 eth3: set [1, 3] type 2 family 0 port 38016 - 0
[  657.754923][T26737] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5432'.
[  657.768495][T26737] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5432'.
[  657.837638][T26737] openvswitch: netlink: Missing valid actions attribute.
[  657.845357][T26737] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  658.016289][T26754] sctp: [Deprecated]: syz.1.5439 (pid 26754) Use of struct sctp_assoc_value in delayed_ack socket option.
[  658.016289][T26754] Use struct sctp_sack_info instead
[  658.752952][T26763] ip6_vti0 speed is unknown, defaulting to 1000
[  661.211738][T10187] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  661.215554][T10187] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  661.219157][T10187] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  661.222734][T10187] netdevsim netdevsim0 eth0: unset [1, 3] type 2 family 0 port 38016 - 0
[  661.226683][T10187] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  661.230239][T10187] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  661.233497][T10187] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  661.236645][T10187] netdevsim netdevsim0 eth1: unset [1, 3] type 2 family 0 port 38016 - 0
[  661.243059][T26793] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5450'.
[  661.244515][T10187] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  661.259075][T10187] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  661.270829][T10187] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  661.285409][T10187] netdevsim netdevsim0 eth2: unset [1, 3] type 2 family 0 port 38016 - 0
[  661.288358][T10187] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  661.291495][T10187] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  661.294998][T10187] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  661.307333][T10187] netdevsim netdevsim0 eth3: unset [1, 3] type 2 family 0 port 38016 - 0
[  661.378051][T26806] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  661.383441][T26802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  662.314145][T26823] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  662.539610][T26861] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5467'.
[  662.831225][T26902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5476'.
[  662.837556][T26902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5476'.
[  662.846393][T26901] IPVS: ip_vs_add_dest(): server weight less than zero
[  662.850369][T26901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5477'.
[  662.898729][   T33] audit: type=1107 audit(1778537602.107:14): pid=26914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='T$P:Am>yGy#oo;0r&qZazwVA{[RD{66zG/	k.\04,(>1e| )T>5o56T*9d59'
[  662.973225][T26924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5482'.
[  663.006031][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  663.008973][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  663.012308][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  663.018930][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  663.075973][T26927] netlink: 'syz.1.5482': attribute type 49 has an invalid length.
[  663.800158][T27033] netlink: 'syz.0.5510': attribute type 12 has an invalid length.
[  663.802783][T27033] netlink: 'syz.0.5510': attribute type 2 has an invalid length.
[  663.805851][T27033] netlink: 444 bytes leftover after parsing attributes in process `syz.0.5510'.
[  663.810513][T27033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5510'.
[  663.813672][T27033] netlink: 'syz.0.5510': attribute type 5 has an invalid length.
[  663.816841][T27033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5510'.
[  663.838256][T27037] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5511'.
[  664.129186][T27077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5521'.
[  664.394914][T27100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  664.399437][T27101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  664.407674][T27112] syz0: rxe_newlink: already configured on bridge_slave_1
[  664.535020][T27118] netlink: 'syz.0.5530': attribute type 5 has an invalid length.
[  664.573590][T27123] xt_hashlimit: max too large, truncated to 1048576
[  664.575932][T27123] xt_ecn: cannot match TCP bits for non-tcp packets
[  664.814907][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x42
[  665.442498][T27203] bridge0: port 1(syz_tun) entered blocking state
[  665.445441][T27203] bridge0: port 1(syz_tun) entered forwarding state
[  665.454144][T27203] 8021q: adding VLAN 0 to HW filter on device bond0
[  665.462685][T27203] 8021q: adding VLAN 0 to HW filter on device team0
[  665.468942][T27203] 8021q: adding VLAN 0 to HW filter on device batadv0
[  665.483614][T27203] wg2: left allmulticast mode
[  665.500862][T27203] batman_adv: batadv0: Interface activated: batadv_slave_0
[  665.504289][T27203] veth1_to_batadv: left allmulticast mode
[  665.509131][T27203] batman_adv: batadv0: Interface activated: batadv_slave_1
[  665.519229][T27203] veth1_macvtap: left promiscuous mode
[  665.522478][T27203] veth0_macvtap: left promiscuous mode
[  665.525963][T27203] veth1_macvtap: entered promiscuous mode
[  665.532054][T27203] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  665.538360][ T7429] ip6_vti0 speed is unknown, defaulting to 1000
[  665.538779][T10187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  665.540952][ T7429] syz2: Port: 1 Link ACTIVE
[  665.550505][T10187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  665.566312][T13562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  665.603951][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  665.610557][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  665.616155][ T7429] ip6_vti0 speed is unknown, defaulting to 1000
[  665.625628][T13562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  665.630408][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  665.633744][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  665.903053][T27266] syzkaller0: entered promiscuous mode
[  665.905170][T27266] syzkaller0: entered allmulticast mode
[  665.943037][T27266] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  665.950775][T27264] tipc: Resetting bearer <eth:syzkaller0>
[  665.978811][T27264] tipc: Disabling bearer <eth:syzkaller0>
[  666.215254][T27300] x_tables: duplicate underflow at hook 1
[  666.448112][T13562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.456433][T27326] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  666.469288][T27328] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  666.821579][T27368] xt_hashlimit: size too large, truncated to 1048576
[  666.876080][T27374] netlink: 'syz.0.5600': attribute type 1 has an invalid length.
[  666.882443][T27374] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  667.469858][T27429] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  667.577032][T27445] 8021q: VLANs not supported on ip6_vti0
[  667.599937][T27447] __nla_validate_parse: 17 callbacks suppressed
[  667.599947][T27447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5622'.
[  667.637106][T27451] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.5623'.
[  667.677313][T27457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5624'.
[  667.681265][T27457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5624'.
[  668.441528][T27475] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  668.446746][T27475] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  669.245506][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.486593][T27507] No such timeout policy "syz0"
[  669.743632][T27536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5645'.
[  669.761576][T27538] tipc: Enabled bearer <eth:vcan0>, priority 10
[  669.812138][T27547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5645'.
[  669.910760][T27566] IPv6: NLM_F_CREATE should be specified when creating new route
[  669.942283][T27573] nbd: must specify an index to disconnect
[  670.039122][T27593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5658'.
[  670.049793][T27593] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5658'.
[  670.275772][T27621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5663'.
[  670.350876][T27410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  670.565176][T27646] netlink: 'syz.0.5669': attribute type 83 has an invalid length.
[  670.875431][T13562] tipc: Node number set to 3758096385
[  671.049594][T27617] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  671.055950][T27617] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  671.367893][T27728] netlink: 'syz.0.5691': attribute type 1 has an invalid length.
[  671.370624][T27728] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5691'.
[  671.506421][T27740] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  671.506421][T27740] Please contact the netfilter-devel mailing list or update your nftables rules.
[  671.659555][T27750] netlink: 'syz.0.5697': attribute type 14 has an invalid length.
[  671.662323][T27750] netlink: 'syz.0.5697': attribute type 13 has an invalid length.
[  672.114405][T27777] syzkaller1: entered promiscuous mode
[  672.116463][T27777] syzkaller1: entered allmulticast mode
[  674.746540][T27766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  674.968024][T27812] __nla_validate_parse: 3 callbacks suppressed
[  674.968035][T27812] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5708'.
[  675.146041][ T7408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.328310][T27841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5717'.
[  675.386028][ T7408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.386978][T27853] netlink: 'syz.0.5721': attribute type 3 has an invalid length.
[  675.392056][T27853] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5721'.
[  675.502051][T27868] netlink: 'syz.1.5724': attribute type 7 has an invalid length.
[  675.505454][T27867] netlink: 'syz.1.5724': attribute type 7 has an invalid length.
[  676.925799][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.440847][T27862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  678.482802][T27901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5731'.
[  678.524026][T27907] ieee802154 phy0 wpan0: encryption failed: -22
[  678.592470][T27920] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  678.599912][T27920] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  678.737614][T27914] ip6_vti0 speed is unknown, defaulting to 1000
[  678.933714][T27931] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5738'.
[  678.937431][T27931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5738'.
[  679.054368][T27944] netlink: 'syz.1.5741': attribute type 1 has an invalid length.
[  679.088326][T27944] 8021q: adding VLAN 0 to HW filter on device bond18
[  679.120329][T27944] bond18: (slave veth17): Enslaving as an active interface with a down link
[  679.129959][T27949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5742'.
[  679.153306][T27944] 8021q: adding VLAN 0 to HW filter on device batadv1
[  679.159041][T27944] bond18: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  679.247317][T27962] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5745'.
[  679.250817][T27962] ipt_REJECT: TCP_RESET invalid for non-tcp
[  679.496262][T27985] openvswitch: netlink: IPv6 tunnel dst address is zero
[  679.578409][T27991] xt_TPROXY: Can be used only with -p tcp or -p udp
[  679.585157][T27991] tipc: Failed to remove unknown binding: 66,1,1/10463914:957503511/957503513
[  679.589768][T27991] tipc: Failed to remove unknown binding: 66,1,1/10463914:957503511/957503513
[  679.592910][T27991] tipc: Failed to remove unknown binding: 66,1,1/10463914:957503511/957503513
[  679.600657][T27998] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5755'.
[  679.712627][T28001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5756'.
[  679.719049][T28001] syzkaller0: entered promiscuous mode
[  679.721470][T28001] syzkaller0: entered allmulticast mode
[  680.024383][T28042] netlink: 'syz.1.5764': attribute type 1 has an invalid length.
[  680.121590][T28048] bond19: option lacp_active: invalid value (8)
[  680.130249][T28048] bond19 (unregistering): Released all slaves
[  680.361342][T28081] syzkaller1: tun_chr_ioctl cmd 35111
[  680.372146][T28081] openvswitch: netlink: IP tunnel dst address not specified
[  680.519865][T28116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5782'.
[  680.546162][T28116] bond18: entered promiscuous mode
[  680.546850][T28120] netlink: 'syz.1.5784': attribute type 1 has an invalid length.
[  680.549714][T28116] 8021q: adding VLAN 0 to HW filter on device bond18
[  680.552370][T28120] nbd: couldn't find device at index -427251215
[  680.562702][T28117] --map-set only usable from mangle table
[  680.569373][T28116] bond18 (unregistering): Released all slaves
[  680.693810][T28136] netlink: 'syz.2.5789': attribute type 1 has an invalid length.
[  680.696659][T28136] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.5789'.
[  680.727757][T28147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.727915][T28149] tls_set_device_offload: netdev not found
[  680.789570][T28157] netlink: 'syz.2.5792': attribute type 1 has an invalid length.
[  680.792684][T28157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  680.808565][T28160] syzkaller0: entered promiscuous mode
[  680.810897][T28160] syzkaller0: entered allmulticast mode
[  680.848278][T28164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5795'.
[  681.239280][T28201] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  681.243258][T28201] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  682.221117][T28241] netlink: 'syz.0.5813': attribute type 7 has an invalid length.
[  682.223983][T28241] netlink: 'syz.0.5813': attribute type 8 has an invalid length.
[  682.226794][T28241] netlink: 'syz.0.5813': attribute type 8 has an invalid length.
[  682.229644][T28241] netlink: 'syz.0.5813': attribute type 4 has an invalid length.
[  682.232305][T28241] netlink: 'syz.0.5813': attribute type 7 has an invalid length.
[  682.234968][T28241] netlink: 207236 bytes leftover after parsing attributes in process `syz.0.5813'.
[  684.470816][T28222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  684.474785][T28240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5813'.
[  684.537664][T28254] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  684.549261][T28245] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  684.563341][T28245] syzkaller0: entered promiscuous mode
[  684.569684][T28245] syzkaller0: entered allmulticast mode
[  684.628906][T28267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5819'.
[  684.648477][T28267] 8021q: adding VLAN 0 to HW filter on device bond18
[  685.136966][T28316] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  685.278309][T28304] ip6_vti0 speed is unknown, defaulting to 1000
[  685.464630][T28339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5838'.
[  685.670744][T28363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5845'.
[  685.677658][T28363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5845'.
[  686.270124][T28418] block nbd5: Unsupported socket: should be TCP or UNIX.
[  686.524270][T28437] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5866'.
[  686.921179][T28473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5877'.
[  686.930850][T28473] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  686.933933][T28473] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  687.077974][T28487] syzkaller1: entered promiscuous mode
[  687.081252][T28487] syzkaller1: entered allmulticast mode
[  687.105971][T21540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  687.111437][T21540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  691.007267][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  691.645509][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.670807][T28498] x_tables: duplicate underflow at hook 3
[  697.852852][T28530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5894'.
[  697.857722][T28530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5894'.
[  697.916216][T28539] bond12: Removing last arp target with arp_interval on
[  697.923419][T28545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5897'.
[  697.930271][T28545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5897'.
[  697.945072][T28545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5897'.
[  697.948717][T28545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5897'.
[  697.952213][T28545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5897'.
[  697.955848][T28545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5897'.
[  697.958872][T28545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5897'.
[  697.962673][T28539] syzkaller0: entered promiscuous mode
[  697.964749][T28539] syzkaller0: entered allmulticast mode
[  698.070975][T28554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  698.104154][T28556] syzkaller1: entered promiscuous mode
[  698.106558][T28556] syzkaller1: entered allmulticast mode
[  698.184927][T28566] xt_hashlimit: size too large, truncated to 1048576
[  698.238988][T28571] netlink: 'syz.1.5905': attribute type 1 has an invalid length.
[  698.244276][T28571] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5905'.
[  698.436864][T28607] netlink: 'syz.0.5912': attribute type 1 has an invalid length.
[  698.450093][T28607] syzkaller0: entered promiscuous mode
[  698.451991][T28607] syzkaller0: entered allmulticast mode
[  698.518154][T28616] netlink: 'syz.0.5913': attribute type 2 has an invalid length.
[  698.521435][T28616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  698.642432][T28627] can: request_module (can-proto-0) failed.
[  699.302666][T10187] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  699.371334][T28761] syzkaller1: entered promiscuous mode
[  699.373622][T28761] syzkaller1: entered allmulticast mode
[  702.248897][T28738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  710.112819][T28804] __nla_validate_parse: 4 callbacks suppressed
[  710.112829][T28804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5960'.
[  710.732991][T28838] ip6_vti0 speed is unknown, defaulting to 1000
[  711.066074][T28850] syzkaller1: entered promiscuous mode
[  711.068658][T28850] syzkaller1: entered allmulticast mode
[  711.079514][T28850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5970'.
[  711.242859][T28853] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  711.281416][T28853] syzkaller0: entered promiscuous mode
[  711.283559][T28853] syzkaller0: entered allmulticast mode
[  711.309200][T28852] tipc: Resetting bearer <eth:syzkaller0>
[  712.073732][T28903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5980'.
[  712.130168][T28904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5980'.
[  712.963781][T28852] tipc: Disabling bearer <eth:syzkaller0>
[  713.341376][T28961] netlink: get zone limit has 4 unknown bytes
[  713.384243][T28964] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  713.445113][T28966] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5998'.
[  713.464603][T28975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6000'.
[  713.468805][T28975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6000'.
[  713.475607][T28975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6000'.
[  713.478486][T28975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6000'.
[  713.483248][T28975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6000'.
[  713.491645][T28977] sctp: [Deprecated]: syz.1.5999 (pid 28977) Use of struct sctp_assoc_value in delayed_ack socket option.
[  713.491645][T28977] Use struct sctp_sack_info instead
[  713.678777][T28998] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  713.682121][T28998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  714.127209][T29029] bond14: option lacp_rate: invalid value (128)
[  714.130261][T29029] bond14 (unregistering): Released all slaves
[  714.778434][T29051] netlink: 'syz.2.6018': attribute type 7 has an invalid length.
[  714.781294][T29051] netlink: 'syz.2.6018': attribute type 8 has an invalid length.
[  714.885514][T29055] ip6_vti0 speed is unknown, defaulting to 1000
[  715.131076][T29075] __nla_validate_parse: 4 callbacks suppressed
[  715.131086][T29075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6024'.
[  715.142224][T29075] netlink: 'syz.0.6024': attribute type 2 has an invalid length.
[  715.270667][T29086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6029'.
[  715.317169][T29097] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6031'.
[  715.323261][T29097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6031'.
[  715.395020][T29104] netlink: 'syz.1.6032': attribute type 25 has an invalid length.
[  715.398481][T29106] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  715.556482][T29117] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6036'.
[  715.741962][T29138] xt_hashlimit: max too large, truncated to 1048576
[  715.830880][T29147] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6045'.
[  716.090177][T29171] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  716.210714][T29184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  716.350207][T29210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6061'.
[  716.360583][T29210] vlan3: entered promiscuous mode
[  716.620380][T29253] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:20002
[  717.169312][T29346] syzkaller0: entered promiscuous mode
[  717.171742][T29346] syzkaller0: entered allmulticast mode
[  717.177199][T29346] xt_ecn: cannot match TCP bits for non-tcp packets
[  717.181382][T29346] 0: reclassify loop, rule prio 0, protocol 800
[  717.187886][T29346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6090'.
[  717.195551][T29346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6090'.
[  717.202712][T29346] netlink: 'syz.0.6090': attribute type 18 has an invalid length.
[  717.344878][T29375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6097'.
[  717.350027][T29375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  717.352472][T29375] IPv6: NLM_F_CREATE should be set when creating new route
[  717.354809][T29375] IPv6: NLM_F_CREATE should be set when creating new route
[  717.399652][T29387] syzkaller0: entered promiscuous mode
[  717.401517][T29387] syzkaller0: entered allmulticast mode
[  717.662664][T29398] ip6_vti0 speed is unknown, defaulting to 1000
[  717.731590][T29422] syzkaller0: entered promiscuous mode
[  717.734083][T29422] syzkaller0: entered allmulticast mode
[  720.854075][T29428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  720.999191][T29492] erspan0: entered promiscuous mode
[  721.005210][T29491] erspan0: left promiscuous mode
[  721.355109][T29538] __nla_validate_parse: 2 callbacks suppressed
[  721.355120][T29538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6138'.
[  721.400401][T29534] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6138'.
[  721.726094][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  721.969832][T29591] netlink: 'syz.2.6150': attribute type 1 has an invalid length.
[  721.973224][T29591] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6150'.
[  722.004778][T29593] netlink: 'syz.0.6149': attribute type 11 has an invalid length.
[  722.095928][T29590] syzkaller1: entered promiscuous mode
[  722.098509][T29590] syzkaller1: entered allmulticast mode
[  722.433826][T29620] x_tables: duplicate underflow at hook 2
[  722.658167][T29664] xt_TCPMSS: Only works on TCP SYN packets
[  722.661327][T29664] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.6168'.
[  722.809320][T29679] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6174'.
[  722.967528][T29695] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6177'.
[  723.121641][T29700] bond19: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  723.129056][T29700] bond19 (unregistering): Released all slaves
[  723.562475][T29735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6188'.
[  723.581417][T29735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6188'.
[  723.771975][T29749] netlink: 'syz.1.6191': attribute type 32 has an invalid length.
[  723.780212][T29749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6191'.
[  723.806157][T29749] bond19: option coupled_control: invalid value (9)
[  723.815920][T29749] bond19 (unregistering): Released all slaves
[  723.862501][T29757] bond19: option arp_all_targets: invalid value (129)
[  723.872010][T29757] bond19 (unregistering): Released all slaves
[  724.057870][T29778] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6198'.
[  724.133901][T29786] netlink: 'syz.1.6201': attribute type 1 has an invalid length.
[  724.179864][T29786] gretap0: entered allmulticast mode
[  724.184644][T29786] bond19: (slave gretap0): making interface the new active one
[  724.190160][T29786] bond19: (slave gretap0): Enslaving as an active interface with an up link
[  724.282189][T29800] syzkaller0: entered promiscuous mode
[  724.286337][T29800] syzkaller0: entered allmulticast mode
[  724.294516][T29803] netlink: 'syz.2.6206': attribute type 1 has an invalid length.
[  724.405759][T29816] netlink: 'syz.2.6208': attribute type 25 has an invalid length.
[  724.408481][T29816] netlink: 'syz.2.6208': attribute type 3 has an invalid length.
[  725.022592][T29869] IPVS: stopping backup sync thread 15730 ...
[  725.062112][T29871] bridge0: port 1(syz_tun) entered disabled state
[  725.094562][T29871] syz_tun (unregistering): left allmulticast mode
[  725.097445][T29871] syz_tun (unregistering): left promiscuous mode
[  725.101927][T29871] bridge0: port 1(syz_tun) entered disabled state
[  726.667461][T29959] netlink: 'syz.1.6248': attribute type 27 has an invalid length.
[  726.712671][T29964] __nla_validate_parse: 10 callbacks suppressed
[  726.712687][T29964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6249'.
[  726.729619][T29964] xt_TCPMSS: Only works on TCP SYN packets
[  727.179021][T29999] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  727.273011][T30003] xt_hashlimit: size too large, truncated to 1048576
[  727.273587][T30004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  727.505054][T30015] sctp: [Deprecated]: syz.0.6262 (pid 30015) Use of int in maxseg socket option.
[  727.505054][T30015] Use struct sctp_assoc_value instead
[  727.560896][T30018] erspan0: entered promiscuous mode
[  727.562796][T30018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6263'.
[  727.868786][T30034] sctp: [Deprecated]: syz.2.6267 (pid 30034) Use of int in maxseg socket option.
[  727.868786][T30034] Use struct sctp_assoc_value instead
[  727.919275][T30041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6269'.
[  727.922946][T30042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6269'.
[  727.927729][T30041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6269'.
[  727.931630][T30042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6269'.
[  728.051924][T30045] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6270'.
[  728.595531][T30101] netlink: 'syz.1.6280': attribute type 49 has an invalid length.
[  728.934757][T30123] nbd: must specify at least one socket
[  728.938309][T30123] block nbd0: NBD_DISCONNECT
[  728.939954][T30123] block nbd0: Send disconnect failed -32
[  728.941776][T30123] block nbd0: Send disconnect failed -32
[  728.978899][T30123] gre0: left promiscuous mode
[  728.980632][T30123] gre0: left allmulticast mode
[  728.985742][T30123] erspan0: left promiscuous mode
[  729.018252][T30123] 8021q: adding VLAN 0 to HW filter on device 
[  729.028543][T30123] 8021q: adding VLAN 0 to HW filter on device `
[  729.051865][T30123] 8021q: adding VLAN 0 to HW filter on device batadv0
[  729.116505][T30123] batman_adv: batadv0: Interface activated: batadv_slave_0
[  729.125001][T30123] batman_adv: batadv0: Interface activated: batadv_slave_1
[  729.140311][T30123] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  729.149943][T30123] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  729.153736][T30123] 0: left allmulticast mode
[  729.156811][T30123] hsr_slave_0: left allmulticast mode
[  729.159074][T30123] hsr_slave_1: left allmulticast mode
[  729.163726][T30123] veth1_vlan: left promiscuous mode
[  729.167065][T30123] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  729.183199][T14139] bridge0: port 1(bridge_slave_0) entered blocking state
[  729.185926][T14139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  729.195360][T14139] bridge0: port 2(bridge_slave_1) entered blocking state
[  729.197939][T14139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  729.371469][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  729.472546][T30143] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6290'.
[  729.476722][    C0] IPv6: veth0_to_bridge: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected!
[  729.773611][T30182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6298'.
[  729.798786][T30182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6298'.
[  729.955874][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  730.295109][T12475] block nbd0: Receive control failed (result -32)
[  731.010468][T30272] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  731.016562][T30272] netlink: 'syz.1.6319': attribute type 10 has an invalid length.
[  731.019210][T30272] netlink: 'syz.1.6319': attribute type 10 has an invalid length.
[  731.255085][T30291] syzkaller0: entered promiscuous mode
[  731.257629][T30291] syzkaller0: entered allmulticast mode
[  733.671627][T30324] __nla_validate_parse: 9 callbacks suppressed
[  733.671639][T30324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6334'.
[  734.093893][T30364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6345'.
[  734.112846][T30363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6345'.
[  734.131342][T30364] gretap0: Device is already in use.
[  734.140776][T30363] gretap0: Device is already in use.
[  734.267886][T30379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6349'.
[  734.381425][T30385] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6351'.
[  734.533062][T30407] netlink: 'syz.1.6356': attribute type 6 has an invalid length.
[  734.619701][T30419] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6359'.
[  734.622961][T30418] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6359'.
[  734.848498][T30447] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  735.050481][T30463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6370'.
[  735.443164][T30470] netlink: 'syz.0.6371': attribute type 10 has an invalid length.
[  735.519907][T30470] ` (unregistering): Port device team_slave_0 removed
[  735.536576][T30470] ` (unregistering): Port device team_slave_1 removed
[  735.897977][T30499] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  735.987422][T30503] netlink: 'syz.2.6379': attribute type 12 has an invalid length.
[  736.001086][T30503] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6379'.
[  736.481357][T30538] syzkaller1: entered promiscuous mode
[  736.491181][T30538] syzkaller1: entered allmulticast mode
[  736.502661][T30538] netem: change failed
[  737.100719][T30553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6393'.
[  737.365938][T30565] sctp: [Deprecated]: syz.1.6397 (pid 30565) Use of struct sctp_assoc_value in delayed_ack socket option.
[  737.365938][T30565] Use struct sctp_sack_info instead
[  737.802293][T30614] netem: change failed
[  738.054472][T30632] netlink: 'syz.1.6412': attribute type 142 has an invalid length.
[  738.930250][T30689] tun0: tun_chr_ioctl cmd 2147767507
[  739.081908][T30717] netlink: 'syz.1.6432': attribute type 1 has an invalid length.
[  739.130871][T30721] __nla_validate_parse: 4 callbacks suppressed
[  739.130882][T30721] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6433'.
[  739.144732][T30721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6433'.
[  739.291828][T30743] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6437'.
[  739.415564][T30754] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20002
[  740.102301][T30792] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6453'.
[  740.377499][T30817] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6462'.
[  740.792230][T30847] IPVS: length: 115 != 8
[  740.811461][T30847] IPVS: length: 115 != 8
[  740.821535][T30847] IPVS: length: 115 != 8
[  740.827293][T30847] IPVS: length: 115 != 8
[  740.834507][T30847] IPVS: length: 115 != 8
[  740.852780][T30847] IPVS: length: 115 != 8
[  740.856699][T30847] IPVS: length: 115 != 8
[  740.858165][T30847] IPVS: length: 115 != 8
[  740.859637][T30847] IPVS: length: 115 != 8
[  740.861078][T30847] IPVS: length: 115 != 8
[  740.862684][T30847] IPVS: length: 115 != 8
[  740.925046][T30868] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6473'.
[  740.980179][T30875] openvswitch: netlink: Actions may not be safe on all matching packets
[  740.990734][T30875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6476'.
[  741.133877][T30882] syzkaller0: entered promiscuous mode
[  741.147487][T30882] syzkaller0: entered allmulticast mode
[  741.194814][T30882] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6479'.
[  741.259134][T30895] netlink: zone id is out of range
[  741.261340][T30895] netlink: zone id is out of range
[  741.263140][T30895] netlink: zone id is out of range
[  741.265007][T30895] netlink: zone id is out of range
[  741.268483][T30895] netlink: zone id is out of range
[  741.270274][T30895] netlink: zone id is out of range
[  741.389010][T30903] sch_tbf: burst 19872 is lower than device lo mtu (32783) !
[  741.935193][T30955] netlink: 'syz.1.6499': attribute type 4 has an invalid length.
[  741.955778][T30955] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6499'.
[  742.054411][T30963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6504'.
[  742.121143][T30982] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  745.059969][T30986] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  745.151587][T31012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6512'.
[  745.200479][T12475] block nbd5: Receive control failed (result -1)
[  745.389191][T31026] netlink: 'syz.2.6516': attribute type 4 has an invalid length.
[  745.399071][T31026] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6516'.
[  745.437276][T31026] openvswitch: netlink: Geneve option length err (len 284, max 255).
[  745.455055][T31026] xt_recent: Unsupported userspace flags (000000b1)
[  747.743749][T31086] netlink: 'syz.2.6531': attribute type 1 has an invalid length.
[  747.755916][T31086] netlink: 264 bytes leftover after parsing attributes in process `syz.2.6531'.
[  747.765493][T31086] netlink: 'syz.2.6531': attribute type 1 has an invalid length.
[  747.770336][T31086] netlink: 264 bytes leftover after parsing attributes in process `syz.2.6531'.
[  747.898783][T31109] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  747.954843][T31118] netlink: 'syz.1.6540': attribute type 83 has an invalid length.
[  748.433783][T31187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6553'.
[  748.480909][T31193] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6555'.
[  748.532908][T31201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6557'.
[  748.599992][T31207] Dead loop on virtual device ip6_vti0 (net 26), fix it urgently!
[  748.679875][T31207] syz.1.6560 (31207) used greatest stack depth: 19648 bytes left
[  748.753307][T31226] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.6564'.
[  748.992867][T31251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6571'.
[  749.046738][T31264] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  749.058499][T31266] x_tables: duplicate underflow at hook 2
[  749.093909][T31270] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6576'.
[  749.103247][T31264] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  749.211976][T31264] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  749.261399][T31264] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  749.390772][T24910] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  749.418351][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  749.469747][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  749.473954][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  749.504366][T31318] smc: net device team0 applied user defined pnetid SYZ2
[  749.508030][T31318] smc: net device team0 erased user defined pnetid SYZ2
[  749.520637][T31322] gtp6: entered allmulticast mode
[  749.587988][T31334] syzkaller0: entered promiscuous mode
[  749.589920][T31334] syzkaller0: entered allmulticast mode
[  749.792076][T31353] 
[  749.793016][T31353] ======================================================
[  749.795970][T31353] WARNING: possible circular locking dependency detected
[  749.798917][T31353] syzkaller #0 Not tainted
[  749.800843][T31353] ------------------------------------------------------
[  749.803585][T31353] syz.1.6597/31353 is trying to acquire lock:
[  749.806138][T31353] ffff8881012acaa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80
[  749.810141][T31353] 
[  749.810141][T31353] but task is already holding lock:
[  749.813163][T31353] ffffffff8f38d660 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  749.816801][T31353] 
[  749.816801][T31353] which lock already depends on the new lock.
[  749.816801][T31353] 
[  749.821085][T31353] 
[  749.821085][T31353] the existing dependency chain (in reverse order) is:
[  749.825451][T31353] 
[  749.825451][T31353] -> #11 (gdp_mutex){+.+.}-{4:4}:
[  749.828523][T31353]        __mutex_lock+0x1a3/0x1550
[  749.830738][T31353]        get_device_parent+0x16f/0x3a0
[  749.833091][T31353]        device_add+0x2e1/0xbb0
[  749.835144][T31353]        device_create+0x269/0x300
[  749.837312][T31353]        msr_device_create+0x33/0x50
[  749.839431][T31353]        cpuhp_invoke_callback+0x445/0x860
[  749.841493][T31353]        cpuhp_thread_fun+0x36b/0x780
[  749.843803][T31353]        smpboot_thread_fn+0x541/0xa50
[  749.846058][T31353]        kthread+0x388/0x470
[  749.847889][T31353]        ret_from_fork+0x514/0xb70
[  749.850021][T31353]        ret_from_fork_asm+0x1a/0x30
[  749.852229][T31353] 
[  749.852229][T31353] -> #10 (cpuhp_state-up){+.+.}-{0:0}:
[  749.855312][T31353]        cpuhp_thread_fun+0x127/0x780
[  749.857539][T31353]        smpboot_thread_fn+0x541/0xa50
[  749.859768][T31353]        kthread+0x388/0x470
[  749.861743][T31353]        ret_from_fork+0x514/0xb70
[  749.863871][T31353]        ret_from_fork_asm+0x1a/0x30
[  749.865815][T31353] 
[  749.865815][T31353] -> #9 (cpu_hotplug_lock){++++}-{0:0}:
[  749.868339][T31353]        cpus_read_lock+0x42/0x160
[  749.869919][T31353]        static_key_slow_inc+0x12/0x30
[  749.871932][T31353]        tcp_md5_do_add+0x1d4/0x390
[  749.873709][T31353]        tcp_v6_parse_md5_keys+0x562/0x680
[  749.876049][T31353]        do_tcp_setsockopt+0x12ec/0x2060
[  749.878378][T31353]        do_sock_setsockopt+0x17c/0x1b0
[  749.880731][T31353]        __x64_sys_setsockopt+0x13d/0x1b0
[  749.883116][T31353]        do_syscall_64+0x15f/0xf80
[  749.885302][T31353]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.887430][T31353] 
[  749.887430][T31353] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  749.890381][T31353]        lock_sock_nested+0x41/0x100
[  749.892498][T31353]        inet_shutdown+0x6a/0x390
[  749.894522][T31353]        nbd_mark_nsock_dead+0x2e9/0x560
[  749.896749][T31353]        recv_work+0x1c2e/0x1d40
[  749.898715][T31353]        process_scheduled_works+0xb5d/0x1860
[  749.901171][T31353]        worker_thread+0xa53/0xfc0
[  749.903227][T31353]        kthread+0x388/0x470
[  749.905097][T31353]        ret_from_fork+0x514/0xb70
[  749.907217][T31353]        ret_from_fork_asm+0x1a/0x30
[  749.909311][T31353] 
[  749.909311][T31353] -> #7 (&nsock->tx_lock){+.+.}-{4:4}:
[  749.911936][T31353]        __mutex_lock+0x1a3/0x1550
[  749.913644][T31353]        nbd_queue_rq+0x37b/0x1100
[  749.915341][T31353]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  749.917343][T31353]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  749.919600][T31353]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  749.921771][T31353]        blk_mq_run_hw_queue+0x348/0x4f0
[  749.923555][T31353]        blk_mq_dispatch_list+0xd16/0xe10
[  749.925456][T31353]        blk_mq_flush_plug_list+0x48d/0x570
[  749.927381][T31353]        __blk_flush_plug+0x3ed/0x4d0
[  749.929320][T31353]        __submit_bio+0x28d/0x580
[  749.931050][T31353]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  749.933137][T31353]        block_read_full_folio+0x599/0x830
[  749.935095][T31353]        filemap_read_folio+0x137/0x3b0
[  749.936981][T31353]        do_read_cache_folio+0x358/0x590
[  749.938977][T31353]        read_part_sector+0xb6/0x2b0
[  749.940804][T31353]        adfspart_check_ICS+0xb1/0x960
[  749.942835][T31353]        bdev_disk_changed+0x817/0x1770
[  749.945131][T31353]        blkdev_get_whole+0x380/0x510
[  749.947441][T31353]        bdev_open+0x31e/0xd30
[  749.949479][T31353]        blkdev_open+0x470/0x610
[  749.951585][T31353]        do_dentry_open+0x785/0x14e0
[  749.953597][T31353]        vfs_open+0x3b/0x340
[  749.955154][T31353]        path_openat+0x2e08/0x3860
[  749.956916][T31353]        do_file_open+0x23e/0x4a0
[  749.958615][T31353]        do_sys_openat2+0x113/0x200
[  749.960426][T31353]        __x64_sys_openat+0x138/0x170
[  749.962728][T31353]        do_syscall_64+0x15f/0xf80
[  749.964917][T31353]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.967098][T31353] 
[  749.967098][T31353] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  749.969521][T31353]        __mutex_lock+0x1a3/0x1550
[  749.971334][T31353]        nbd_queue_rq+0xc6/0x1100
[  749.972974][T31353]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  749.975435][T31353]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  749.978258][T31353]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  749.980881][T31353]        blk_mq_run_hw_queue+0x348/0x4f0
[  749.982933][T31353]        blk_mq_dispatch_list+0xd16/0xe10
[  749.984850][T31353]        blk_mq_flush_plug_list+0x48d/0x570
[  749.986754][T31353]        __blk_flush_plug+0x3ed/0x4d0
[  749.988728][T31353]        __submit_bio+0x28d/0x580
[  749.990544][T31353]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  749.992598][T31353]        block_read_full_folio+0x599/0x830
[  749.994526][T31353]        filemap_read_folio+0x137/0x3b0
[  749.996514][T31353]        do_read_cache_folio+0x358/0x590
[  749.998475][T31353]        read_part_sector+0xb6/0x2b0
[  750.000258][T31353]        adfspart_check_ICS+0xb1/0x960
[  750.002541][T31353]        bdev_disk_changed+0x817/0x1770
[  750.004441][T31353]        blkdev_get_whole+0x380/0x510
[  750.006344][T31353]        bdev_open+0x31e/0xd30
[  750.007944][T31353]        blkdev_open+0x470/0x610
[  750.009649][T31353]        do_dentry_open+0x785/0x14e0
[  750.011577][T31353]        vfs_open+0x3b/0x340
[  750.013315][T31353]        path_openat+0x2e08/0x3860
[  750.015183][T31353]        do_file_open+0x23e/0x4a0
[  750.016866][T31353]        do_sys_openat2+0x113/0x200
[  750.018614][T31353]        __x64_sys_openat+0x138/0x170
[  750.020572][T31353]        do_syscall_64+0x15f/0xf80
[  750.022762][T31353]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.025395][T31353] 
[  750.025395][T31353] -> #5 (set->srcu){.+.+}-{0:0}:
[  750.028291][T31353]        __synchronize_srcu+0xca/0x300
[  750.030590][T31353]        elevator_switch+0x1e8/0x7a0
[  750.032859][T31353]        elevator_change+0x2cc/0x450
[  750.035131][T31353]        elevator_set_default+0x36c/0x430
[  750.037573][T31353]        blk_register_queue+0x3e9/0x4e0
[  750.039898][T31353]        __add_disk+0x677/0xd50
[  750.041882][T31353]        add_disk_fwnode+0xfb/0x480
[  750.043668][T31353]        nbd_dev_add+0x72c/0xb50
[  750.045352][T31353]        nbd_init+0x168/0x1f0
[  750.046951][T31353]        do_one_initcall+0x250/0x870
[  750.048751][T31353]        do_initcall_level+0x104/0x190
[  750.050675][T31353]        do_initcalls+0x59/0xa0
[  750.052360][T31353]        kernel_init_freeable+0x2a6/0x3e0
[  750.054258][T31353]        kernel_init+0x1d/0x1d0
[  750.055913][T31353]        ret_from_fork+0x514/0xb70
[  750.057648][T31353]        ret_from_fork_asm+0x1a/0x30
[  750.059472][T31353] 
[  750.059472][T31353] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  750.062220][T31353]        __mutex_lock+0x1a3/0x1550
[  750.064138][T31353]        elevator_change+0x1b3/0x450
[  750.066004][T31353]        elevator_set_none+0xb5/0x140
[  750.067834][T31353]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  750.069998][T31353]        nbd_start_device+0x17f/0xb10
[  750.071791][T31353]        nbd_genl_connect+0x165b/0x1cf0
[  750.073593][T31353]        genl_family_rcv_msg_doit+0x22a/0x330
[  750.075556][T31353]        genl_rcv_msg+0x61c/0x7a0
[  750.077182][T31353]        netlink_rcv_skb+0x232/0x4b0
[  750.078936][T31353]        genl_rcv+0x28/0x40
[  750.080431][T31353]        netlink_unicast+0x75c/0x8e0
[  750.082160][T31353]        netlink_sendmsg+0x813/0xb40
[  750.083885][T31353]        ____sys_sendmsg+0x972/0x9f0
[  750.085611][T31353]        ___sys_sendmsg+0x2a5/0x360
[  750.087334][T31353]        __x64_sys_sendmsg+0x1bd/0x2a0
[  750.089142][T31353]        do_syscall_64+0x15f/0xf80
[  750.090850][T31353]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.092931][T31353] 
[  750.092931][T31353] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  750.095733][T31353]        blk_alloc_queue+0x546/0x680
[  750.097467][T31353]        __blk_mq_alloc_disk+0x197/0x390
[  750.099306][T31353]        nbd_dev_add+0x499/0xb50
[  750.100883][T31353]        nbd_init+0x168/0x1f0
[  750.102428][T31353]        do_one_initcall+0x250/0x870
[  750.104167][T31353]        do_initcall_level+0x104/0x190
[  750.105963][T31353]        do_initcalls+0x59/0xa0
[  750.107577][T31353]        kernel_init_freeable+0x2a6/0x3e0
[  750.109436][T31353]        kernel_init+0x1d/0x1d0
[  750.111032][T31353]        ret_from_fork+0x514/0xb70
[  750.112678][T31353]        ret_from_fork_asm+0x1a/0x30
[  750.114382][T31353] 
[  750.114382][T31353] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  750.116748][T31353]        fs_reclaim_acquire+0x71/0x100
[  750.118528][T31353]        kmem_cache_alloc_lru_noprof+0x45/0x640
[  750.120562][T31353]        alloc_inode+0xb8/0x1b0
[  750.122164][T31353]        iget_locked+0x131/0x6a0
[  750.123786][T31353]        kernfs_get_inode+0x4f/0x780
[  750.125505][T31353]        kernfs_get_tree+0x5cd/0x980
[  750.127120][T31353]        sysfs_get_tree+0x46/0x110
[  750.128785][T31353]        vfs_get_tree+0x92/0x2a0
[  750.130460][T31353]        do_new_mount+0x341/0xd30
[  750.132414][T31353]        __se_sys_mount+0x31d/0x420
[  750.134620][T31353]        do_syscall_64+0x15f/0xf80
[  750.136808][T31353]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.139538][T31353] 
[  750.139538][T31353] -> #1 (&root->kernfs_rwsem){++++}-{4:4}:
[  750.142748][T31353]        down_write+0x96/0x200
[  750.144795][T31353]        kernfs_remove_by_name_ns+0x4e/0x140
[  750.147313][T31353]        device_links_driver_bound+0x54f/0x14e0
[  750.149876][T31353]        driver_bound+0xd8/0x2e0
[  750.151911][T31353]        really_probe+0x789/0xaf0
[  750.153998][T31353]        __driver_probe_device+0x1ef/0x380
[  750.156496][T31353]        driver_probe_device+0x4f/0x240
[  750.158838][T31353]        __device_attach_driver+0x279/0x430
[  750.161237][T31353]        bus_for_each_drv+0x258/0x2f0
[  750.163511][T31353]        __device_attach+0x2c5/0x450
[  750.165648][T31353]        device_initial_probe+0xa1/0xd0
[  750.167994][T31353]        bus_probe_device+0x12a/0x220
[  750.170279][T31353]        device_add+0x7e9/0xbb0
[  750.172457][T31353]        faux_device_create_with_groups+0x189/0x290
[  750.175252][T31353]        regulator_dummy_init+0x19/0x40
[  750.177577][T31353]        regulator_init+0xca/0x110
[  750.179738][T31353]        do_one_initcall+0x250/0x870
[  750.181903][T31353]        do_initcall_level+0x104/0x190
[  750.184163][T31353]        do_initcalls+0x59/0xa0
[  750.186220][T31353]        kernel_init_freeable+0x2a6/0x3e0
[  750.188605][T31353]        kernel_init+0x1d/0x1d0
[  750.190727][T31353]        ret_from_fork+0x514/0xb70
[  750.192885][T31353]        ret_from_fork_asm+0x1a/0x30
[  750.195061][T31353] 
[  750.195061][T31353] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  750.198512][T31353]        __lock_acquire+0x15a5/0x2cf0
[  750.200686][T31353]        lock_acquire+0x106/0x350
[  750.202729][T31353]        down_read+0x47/0x2e0
[  750.204552][T31353]        kernfs_remove+0x35/0x80
[  750.206351][T31353]        __kobject_del+0xe1/0x330
[  750.208020][T31353]        kobject_del+0x45/0x60
[  750.209555][T31353]        cleanup_glue_dir+0x1a3/0x220
[  750.211564][T31353]        device_del+0x780/0x8f0
[  750.213129][T31353]        unregister_netdevice_many_notify+0x1d5f/0x22c0
[  750.215284][T31353]        unregister_netdevice_queue+0x31f/0x360
[  750.217302][T31353]        _cfg80211_unregister_wdev+0x155/0x570
[  750.219587][T31353]        ieee80211_if_remove+0x299/0x350
[  750.221806][T31353]        ieee80211_del_iface+0x19/0x30
[  750.223984][T31353]        cfg80211_remove_virtual_intf+0x221/0x3f0
[  750.226618][T31353]        genl_family_rcv_msg_doit+0x22a/0x330
[  750.229086][T31353]        genl_rcv_msg+0x61c/0x7a0
[  750.231149][T31353]        netlink_rcv_skb+0x232/0x4b0
[  750.233098][T31353]        genl_rcv+0x28/0x40
[  750.234907][T31353]        netlink_unicast+0x75c/0x8e0
[  750.236799][T31353]        netlink_sendmsg+0x813/0xb40
[  750.238527][T31353]        ____sys_sendmsg+0x972/0x9f0
[  750.240684][T31353]        ___sys_sendmsg+0x2a5/0x360
[  750.242531][T31353]        __x64_sys_sendmsg+0x1bd/0x2a0
[  750.244263][T31353]        do_syscall_64+0x15f/0xf80
[  750.245882][T31353]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.247900][T31353] 
[  750.247900][T31353] other info that might help us debug this:
[  750.247900][T31353] 
[  750.251619][T31353] Chain exists of:
[  750.251619][T31353]   &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex
[  750.251619][T31353] 
[  750.255862][T31353]  Possible unsafe locking scenario:
[  750.255862][T31353] 
[  750.258972][T31353]        CPU0                    CPU1
[  750.261145][T31353]        ----                    ----
[  750.263373][T31353]   lock(gdp_mutex);
[  750.264992][T31353]                                lock(cpuhp_state-up);
[  750.267843][T31353]                                lock(gdp_mutex);
[  750.270541][T31353]   rlock(&root->kernfs_supers_rwsem);
[  750.272835][T31353] 
[  750.272835][T31353]  *** DEADLOCK ***
[  750.272835][T31353] 
[  750.276158][T31353] 4 locks held by syz.1.6597/31353:
[  750.278275][T31353]  #0: ffffffff8fe3eec8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  750.281593][T31353]  #1: ffffffff8fdcf7c0 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x8a0
[  750.285441][T31353]  #2: ffff8881172d0780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_del_interface+0x126/0x140
[  750.289600][T31353]  #3: ffffffff8f38d660 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  750.293408][T31353] 
[  750.293408][T31353] stack backtrace:
[  750.295853][T31353] CPU: 0 UID: 0 PID: 31353 Comm: syz.1.6597 Not tainted syzkaller #0 PREEMPT(full) 
[  750.295869][T31353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  750.295876][T31353] Call Trace:
[  750.295881][T31353]  <TASK>
[  750.295886][T31353]  dump_stack_lvl+0xe8/0x150
[  750.295904][T31353]  print_circular_bug+0x2e1/0x300
[  750.295921][T31353]  check_noncircular+0x12e/0x150
[  750.295937][T31353]  __lock_acquire+0x15a5/0x2cf0
[  750.295954][T31353]  ? kernfs_remove+0x35/0x80
[  750.295969][T31353]  lock_acquire+0x106/0x350
[  750.295980][T31353]  ? kernfs_remove+0x35/0x80
[  750.295998][T31353]  down_read+0x47/0x2e0
[  750.296013][T31353]  ? kernfs_remove+0x35/0x80
[  750.296029][T31353]  kernfs_remove+0x35/0x80
[  750.296043][T31353]  __kobject_del+0xe1/0x330
[  750.296057][T31353]  kobject_del+0x45/0x60
[  750.296070][T31353]  cleanup_glue_dir+0x1a3/0x220
[  750.296084][T31353]  device_del+0x780/0x8f0
[  750.296097][T31353]  ? __pfx_device_del+0x10/0x10
[  750.296107][T31353]  ? netdev_unregister_kobject+0x344/0x450
[  750.296120][T31353]  unregister_netdevice_many_notify+0x1d5f/0x22c0
[  750.296138][T31353]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  750.296151][T31353]  ? call_rcu+0x644/0x890
[  750.296168][T31353]  unregister_netdevice_queue+0x31f/0x360
[  750.296187][T31353]  ? __pfx___up_read+0x10/0x10
[  750.296235][T31353]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  750.296252][T31353]  ? kernfs_remove_by_name_ns+0x101/0x140
[  750.296272][T31353]  ? kernfs_remove_by_name_ns+0x101/0x140
[  750.296292][T31353]  _cfg80211_unregister_wdev+0x155/0x570
[  750.296309][T31353]  ieee80211_if_remove+0x299/0x350
[  750.296323][T31353]  ieee80211_del_iface+0x19/0x30
[  750.296341][T31353]  cfg80211_remove_virtual_intf+0x221/0x3f0
[  750.296359][T31353]  genl_family_rcv_msg_doit+0x22a/0x330
[  750.296377][T31353]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  750.296392][T31353]  ? bpf_lsm_capable+0x9/0x20
[  750.296403][T31353]  ? security_capable+0x7e/0x2c0
[  750.296421][T31353]  genl_rcv_msg+0x61c/0x7a0
[  750.296434][T31353]  ? __pfx_genl_rcv_msg+0x10/0x10
[  750.296444][T31353]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  750.296457][T31353]  ? __pfx_nl80211_del_interface+0x10/0x10
[  750.296471][T31353]  ? __pfx_nl80211_post_doit+0x10/0x10
[  750.296484][T31353]  ? __pfx_ref_tracker_free+0x10/0x10
[  750.296503][T31353]  netlink_rcv_skb+0x232/0x4b0
[  750.296520][T31353]  ? __pfx_genl_rcv_msg+0x10/0x10
[  750.296533][T31353]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  750.296552][T31353]  ? down_read+0x270/0x2e0
[  750.296569][T31353]  ? genl_rcv+0xd/0x40
[  750.296580][T31353]  genl_rcv+0x28/0x40
[  750.296591][T31353]  netlink_unicast+0x75c/0x8e0
[  750.296607][T31353]  netlink_sendmsg+0x813/0xb40
[  750.296634][T31353]  ? __pfx_netlink_sendmsg+0x10/0x10
[  750.296652][T31353]  ? aa_sock_msg_perm+0xf1/0x1b0
[  750.296670][T31353]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  750.296687][T31353]  ____sys_sendmsg+0x972/0x9f0
[  750.296704][T31353]  ? __might_fault+0xaf/0x130
[  750.296722][T31353]  ? __pfx_____sys_sendmsg+0x10/0x10
[  750.296741][T31353]  ? import_iovec+0x73/0xa0
[  750.296759][T31353]  ___sys_sendmsg+0x2a5/0x360
[  750.296775][T31353]  ? __lock_acquire+0x6b5/0x2cf0
[  750.296789][T31353]  ? __pfx____sys_sendmsg+0x10/0x10
[  750.296808][T31353]  ? futex_wait+0x2a2/0x390
[  750.296832][T31353]  ? __fget_files+0x2a/0x420
[  750.296847][T31353]  ? __fget_files+0x3a0/0x420
[  750.296864][T31353]  __x64_sys_sendmsg+0x1bd/0x2a0
[  750.296880][T31353]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  750.296899][T31353]  ? rcu_is_watching+0x15/0xb0
[  750.296917][T31353]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.296930][T31353]  do_syscall_64+0x15f/0xf80
[  750.296946][T31353]  ? trace_irq_disable+0x3b/0x140
[  750.296964][T31353]  ? clear_bhb_loop+0x40/0x90
[  750.296978][T31353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.296991][T31353] RIP: 0033:0x7f51e1d9cdd9
[  750.297004][T31353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  750.297015][T31353] RSP: 002b:00007f51e2ba4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  750.297030][T31353] RAX: ffffffffffffffda RBX: 00007f51e2016180 RCX: 00007f51e1d9cdd9
[  750.297039][T31353] RDX: 0000000020040040 RSI: 0000200000000300 RDI: 0000000000000005
[  750.297048][T31353] RBP: 00007f51e1e32d69 R08: 0000000000000000 R09: 0000000000000000
[  750.297056][T31353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  750.297063][T31353] R13: 00007f51e2016218 R14: 00007f51e2016180 R15: 00007ffd59bfec08
[  750.297078][T31353]  </TASK>
[  750.479622][T31347] ip6_vti0 speed is unknown, defaulting to 1000
[  750.531489][T31346] ip6_vti0 speed is unknown, defaulting to 1000
[  752.448022][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
