last executing test programs:

1.390669119s ago: executing program 0 (id=1506):
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
r1 = socket$pptp(0x18, 0x1, 0x2)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000040)=0xe3e)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x190, r2, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7dab5aff, 0x14}}}}, [@NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0xa, 0x3}, {0x9e, 0x2}, {}, {}, {0x3, 0x4}, {0x0, 0x2}, {0x7, 0x5}, {0xe2, 0x2}, {0xa, 0x6}, {0x8, 0x1}, {0x13, 0x7}, {0x0, 0x4}, {0x0, 0x4}], "1bd74be5c769f670"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0xd, 0x6}, {0x6, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0xf, 0x2}, {0x40, 0x2}, {0x1}, {0x56, 0x2}, {0x8, 0x7}, {0x0, 0x6}, {0x3, 0x3}, {0x3}, {0x6, 0x2}, {0xe}], "b00081ad4cbcef53"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x1, 0x3}, {0xff}, {0x80, 0x4}, {0x3, 0x81}, {0xe3, 0x4}, {0x9, 0x2}, {0x5, 0x1}, {0x3, 0x3}, {0x15, 0x4}, {0x1, 0x7}, {0x88, 0x7}, {0xd, 0x1}, {0x8, 0x7}, {0x2, 0x5}, {0x1, 0x6}, {0x7, 0x6}, {0x8}, {0x6}, {0x4, 0x3}], "6e70b55a7e2b309f"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x40, 0x4}, {0x80, 0x2}, {0x47, 0x3}, {0x2, 0x6}, {0x6, 0x3}, {0x9, 0x3}, {0x7, 0x7}, {0xff, 0x4}, {0x1, 0x5}, {0xfd, 0x4}, {0xd}, {0xff, 0x4}, {0xa5, 0x2}, {0x0, 0x7}, {0x5, 0x7}], "d76301691cfcd103"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x1, 0x3}, {0x80, 0x4}, {0x6, 0x2}, {0x4, 0x3}, {}, {}, {0x4, 0x2}, {0x5, 0x2}, {0x81, 0x7}, {0x8, 0x3}, {0x4, 0x5}, {0xf}, {0x1, 0x7}], "0231bae56eb7b30d"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x3, 0x5}, {0xff, 0x5}, {0x9, 0x6}, {0xfa, 0x3}, {0x10, 0x1}, {0x9, 0x5}, {0x2, 0x3}, {0x3, 0x2}, {0x6, 0x2}, {}, {0x0, 0x2}, {0x5, 0x5}, {0x3, 0x6}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x4}, {0x5, 0x7}], "13c8b30ff5b777c3"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x8, 0x3}, {0x24, 0x1}, {0x8f, 0x2}, {0x7f, 0x7}, {0x6, 0x1}, {0x2b, 0x3}, {0x7, 0x3}, {0xc, 0x2}, {0x2, 0x2}, {0xc}, {0xfa, 0x5}, {0x10, 0x2}, {0x6}, {0x5}], "5a2a35106667c03d"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x66}, {0xf, 0x3}], "ee8eae136b616c66"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x7}, {0xf, 0x4}, {0x1, 0x6}], "eae59e4c9a6b8610"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0xaf}, {0x7, 0x7}], "4f52c7db4c1d5603"}}]}, 0x190}, 0x1, 0x0, 0x0, 0x10}, 0x88)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0)
sendmsg$alg(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="f4df930bb2953e655c626714c975917f4a470203b8c10dd0d6ca04509bc23fb3866eda3a3d1e48cf26447ef408f6df25b0453969b1cd74dad60b720054ee303b37ec2bbf430c7230703ee9111276288d861d5b526795580e470b7e653beaa0fff8ade1b265467d963ac7921d2628da4c68257fd755224b8547f489b930ae0158dfbfe24c78936138ca30a6179ee36c07b880dff5fd31a41e6fed8a1e16befb218424c777180ebd5e95083e930f42a0db6334121462a2be9a27", 0xb9}, {&(0x7f00000004c0)="975f316facc6d171ae2846b41327e1806468d2d0", 0x14}, {&(0x7f0000000500)="312c9be7aadb0ae217e6db23178b6246a4737ac9af7b0e55422d3cb5f1afe699f9615a75a416f81194f73337c56712f88911ec3845a431f620bc75991490fe946d50a6704eeed3b17929f800b4a98b84e12faec117737eef1259c42a79135fa5d50c7695d9c8fc78e44a1c29582a64d8dfee03670dd602750d6e85d6a1520fd64702127753c8db07e34d8684d0c6fd9e43bdb3287e42a135b375a152613cb55afd92ad2cce02f26761a78ab8990947f5137bb61082e0d7d11e8d148d20a5cd57d0db26a6cc9a3797f929c0709384c7481cd8", 0xd2}], 0x3, &(0x7f0000000640)=[@iv={0x1018, 0x117, 0x2, 0x1000, "a06a49ba9acd2d4f39a419f3e68a44c7a6b3d9f48c8a57703bea9472c5b51257286132cbb78037c30a390c447e355d930452c36781852b66353bcb95618be9b10a06b0ffd3ed1b678baec21b19764c75d6f16267d70171542188821dc4f7ded45eb14d36ae3efaab8d8de2f75de6ad48632cb57ed5f934d63d6d2324480f9d3829639729bc92b83b7875690cbc0421b0c902e2856e740f92bcc4f42665f849332851092992fcbda1f805f8a348bb58367b466a3fcb80e61b88dd4078d3b630efd058df05ce17c8005605ca83fe4946f2d075b555d9cf16ef981cda7d531381e76f5886b069df42b0a6e1ef91e78e52d8250dbe4fc40dd18d9bdc4d57160a8448a96f514ef6b0e01aafb230332ae06564158a0a49b248aee0b58022b02dad1d62eecf8d255db2092ec65e351abab93fcc87d7628aaa7762833b9d9a450fafdc7431e7beca1f0265206367e0e9054e1507c7c902d284f7b5927f9a6b21b122b4df8419923dcb0c1386b6c3471c443681f26bbee3bde374106c59b5d4960b84c72eaccbff85ba27cc6503d954cd0053f2b51f0586afb51fd85caef33e1988ca5963de06b8d434540e09f3163a993d5d0add2b5b89cf90a5f447b3e53d3e4879b178f2f0e07ed0ca14546c2f4d8f67a767a919c95993ae5a9caa3004c7e2f67d39594c949f2e683874ecfb0eb2b445508b66318c81dfdaceb7219eaa48fd68e9046046abe45fa2d4e3188fae54a120f11267952ff32214f44f23d762daaf75cb1618dab6dd6c8568a2ac7262acf1b320147f097887272ea4a81ca97c6fb8fa928a5e599c64833077cf335f624367df4646d59ef257514fe74a81f9884ab6d00427b57211839d9fb147ee37998d52acf6ea5b935e0e1fc7227c4f704b360cd2578eaa539e899a3d1a371aa566fa52cc6917cc806f32800be58e02a1ce6fb558ea04fdbbcf05599dd186640a700e588fd43f3055416e8fd5a6a930917533fe901b31698f7892370e8b5081d495dd9a24f6c114a4a86eb57804a052c18f53969e05e0910cb1f216266795141f991183e7182e025b2f1a0ea377ca30b0f03517ad8f83b3b83bb514dc976fb026974e90b8c01f7fa7b1eab0df88ef6cf6cf27285850e1e3c07435c23adcf5a529a2e5d9f8bcbee68d900bb63b9c573ac84de00004340784d79028f10671544efd990d56464d6ab06b17ec299002046a0facb95a72648ef045ef404e022f01fa3429bc749635693d407d5a36e54d91fc6e5a4abbffc958d82a20846bd1d15142aea665f1c512231682b5293312a09e73b840ab0902a8de49b43e3a52837106f16981b874046df2ccc6bea28951526406fe7691bf7a43b4c44ae77e399be92d5ff4d8927835120e9d27723676ac1ef7aa37a82be91eec246de0a42e29dd4569a32c165d54e991baff979260a835fec443075db2994d407c0c0914034f62b280bd47ea8a7275b76daf0f410a45b9d0de229564d5960a6a38126f882fba7af4dd5b9b435e8ecfbff9faac1a08e41dd68725aaf085dc5631150a7b2dbe74efb08853497a012650909b3911597003bfbe92f3f9469675404aaeb15b4f778ffe741b9419644eda4b84cc2420391254435153d95c0fd83140ac4e43f31de9e09e88f9035f1b4bfddc14486250b148b3107aeefbbf1d5e60834f707cb3e7395aabe1d3fdd5fca78a4f497e7c3b0c908939cdf3ff7ab43789782c2364dd4a5b413b99419ba08cc93db5659e47235806465c18399eab2ae465cfc4bd623cb10d7391e4399c1131fbf85236b8a4dd1225390e6b470a729bccb63eee8e75cf9cecfd79bc62cfb416b5416e8d71d14d77a3d9f50be212337ae91b8ea721fd28a27918d10a52b3b872fefa8ccc7fddbade3da8be1b479eeaefd9fd93af5106ab9e302f4bb2eba7bebb736cf485347139953b62ebb9e039437e91aeb6d3445375c76d4c9a2f6eb98a47d74f3560c9566246005618ede01164408ca62a2d678c9955fc4d3138f77c7c42e8d0edfe93dcd3ffd4257cf6c3c250401b5032e3991ff379a24f2464c8eb95cc74a5aeee00db94a010c95cb04ce3aa8f561aefde39c46c7c5a93b83bc827283628cebee16963e23781408ecc95b0f5ea48c8070e3dc868a7c4d817ae5be744111caa77f2da3f1865e41f142f57f1ddbc3afea131806ce31764a8aa155db18c2a0fd02430ba553471263e50ddc3614546d530852251bbb8ccb13fc3226bd6eac6f31f2e9d45496f5e182537c8b5895ce45b1de6b13a5f81e9071bed28be73b54843c38e4dafe9980c47662d0ff6f3047054c1ad71913d853de49e156c772723cef1076623835495800c271d7952031d5fdee2b96e7339de92007a4bf5497c54c3ce5c66242713a7a2391924b95da16d011f3f0203090f099273c3d505490c3c52666be1cd1daa79637c620eb758c2322c42b4ef5d9f5c2b0b2f0e3d77446547f969a29ebb035afe7fd19ee50c1424360168687b0c255c80cc181fc888d0f4cb41e824dd4f708e7ab15ad45206a91a04a3719ff9e76f8e2651c09001e72d2ded84478a4720adbc7974a19e769d14d765c4b388fc4795979f8fb361d7927963ee0e848b95236a7413bf130d58fcc01701cf2cc2e3ebff81fa7dd2aa097065c6ba58dcae539f551772a72216863533310f81fe81b11cc37f85850ac12290deab09bab2c24e1f42dfb42916daaaf77eaba20de980ae8720abf60e98de316f2d0a761c596bae394b2e171c3abf959294346b2ec0620cb82ad3b2d7d185cc0f601c5ce16e14c4367443a445f55f7db63e8d8bce001c3f25219272e6b017917c71e20a0a7b7815b9b302a22b6247fc1e88a8a5d4a094cf06479daffacc03d6dc8990671fd256670fe8f95c54f294158c4a2134e7921a08776f63071d007f391bf23fe77948208efac3042e371a1c404dcbd7bc449f366981e41a38d3075ad93ec53d0e8e92726a65aa78cf20cf412e6d426f4e36d78b99d3ecd21cd8972bbcb3e305281d79a3b5be2a17e7df9de6da61624282f5567ddfd40c392ed64fcd2be4e6c05b1f5222b26b71f7f1acc35b9fe5f224f2dfeb37e5a0dafbab6669d9fc16ce6872962c171df3d090090f34d0a6e7f989eed139401ce898cd171f3727e85406497caff14fb0bba1c3dffa3dff94c302658db1a21c855673fa8089e40acbf5de625b7dd5663fc279b6127e0dcd91e3808e42e8ec35e688f39194a3a6ae3d469add6c743006b8f61aee3fe914f0bc347df692865ed459701ef28cd018c79a5f9887749b5373e82522e9c6847f0e3691dd246b292e387d2e56ef0f5e46589384b312d126e63df16cdce3990a71ec66ed63fb3e76f60e7f8fc22a45e84098caff620eb0365ab5db0a61668377acea3165cde8a899bd738b244c5068a76f9ece078e50c7c97f9e9d8d9085add074c56b40bc4c840fa74e6947031187a40d9bed1849e033766a815b4f15eebabe73c1d5bd2dd0389e580f021c75ca0ddbb93e400badb4e2ca7f8ddf72ff0a743936be5c1b8515cb7a31a36c743a2748eabb608f736e0c203f74f03bc735282396638e0249a0817045fd84ee606e70c5ab5d3f3dbeedf6aa9b539a6f32b60baece633c40d17a060c2dd73cbee2caccc6116ee0001c50dad8019b220bceb3c338812f957dd9ec245674b8929909b894cf779b108ba774e72ee7a143f23030f91b72a542771c2d59e771bab54439098bdd660d48c8ef7ecb1a11cd5d1d68891f7f377c5624152196f54351632c4b6d688384f6e50523a5b562f0b94c6d4f287a8883c4afec99df4b946600e92082a8c859b42a4e04317dcada178112b413bfd33256e63c082f8797160b020454472131c652e93074b9c255edb1420ecd2d345da9abc2939fa34e30a938485f61ecab2ee1c40762a243dbe1341d9de30fde6b2cd30c455a45829760eb0b77599016c3e18e8c7060a5d1b213179c5c1a78bff0777ff97b03273648dcc7e4dc708308ffcd2be5f64c90471bf7b5fd7c87f860a6a9c7041003a40381dd8b7a1e20797fc8344c1c8cfa8a5c3b47a12bdbf75513c0cb13dd442cf40b36b6d01a1d87cbe5c2c49dc120e38911f999cd187772ac5e284975f257c97c46e6115179e626ce3b5b15ef98fe17b5bd9d953249b639894f3434ed02922d77e34710de9028377ac43e38d8cedb58349facb0717aa4f155fc6541d2cba1903c672dbc41d12501a1773e04bb73efb03b6a3e38ce71c0de0fb5ada5a8733d1a9542a26aefab24ce321a7e9c041949909b2ef315fa29d7e6ecf17258fe568a73a25f9060f1dc6b062b13f0f3d0e0a832738f62cbd7568dd3a8a5057ea0024d451ed2a1eab16fac5f37ed89fe533937bc0fd4ea2aa64771bce28313740761a45368165ce671e6a1e9fb3387ef948264a076120fa11dff6b5ae8aea8ebcbb0ab8f432bddac8d9eb0c958c3838577701d81ebe201e15224b58cba81f0709301fd61b4031705c6a5553655762bef5be3d357e6cd20be13ec9cf1f582fe93971e2d7cf0a1e1f309eadb504342e304ac88131dd5ebcb76f780d31a67aabe59aa7e11527462f994212b30e82b5f8843a8e0136a80bb3248cd0f2e42692b96be3c38c914c65c01347b1fd4ed297d1e30299f58433e3af8045ba9f7921d5b94061fc8c8362a7a79887cfa12f76894bacb0d28a58ea420296a7773ee201aebe62349b61cb062fb2679d6d95be11acad7cbd18a32c2ffe1288f9bf47d7a8d6b4a33a915cdd65f5d059463efa6d2a88eb1f4380ec4479744f891030fcab0c7675f5afbd9ddaa220e73faad9558fc71ab9036783b115060f63ef448eab92888483b037ef27344b833bec9c52e953894b94e1b568a4d8ea8cffacd03432c4d97fb20f2f36ce7775a68abac39320d1571bdb64baf2419b8d92ce9821fe5e23163030df6e1f0b507290ca29c9015089e00296f5c1bcb619a646efbc7ac999edc4653a9fd35ffaa90b066cc84c1b336fd7ec54085563b507fd163f1337d32595e3c5eb20b33bccdd026854bd69484e071575c936dd5fb20fcd6d72beb0320eb68f4ced68d96aeb9e1f6d2dc6b3c9d74909759f0a2963967581ba033f5ea96b86a97c76f803e0ea5c805a24c183ac0c2b0940b084f4df2a668045373ffbe3bd593c41be6b04bc28267a627a4e96d6f15f5c3b85a303ba40b503985d94b513a6801a176293039c6812f2301e0f064f54af11612468e3cb6af8319a35e651136eb77bba72d557dfadeb5a504b66cb4a52c27811eeab474570c5e8a6a09c9aba58cf5c419a981fb5bb35ce3b6d87621cfaf3af5e6898467ff72a0ea2bedf4c046a1c21ff19a025d182c169d7c74c26c01d0f353714204e10857905dd125e0715ea52b7f7c58d8a484b74020b256fb1e59829ca020625e9346daa3bcf2fb4357689f481c16b53eece64e955ecf6b4d16330817c77c117f6daa18399c291aa97a6ae0debb2e172cdb604d2eb41cd4af15bf84e1e7b5f8991f9751e303fda7a7c13253e00c281227181529d1e37edbeff9d1323d287ee6f3d9f0512787d0921b5c5c8f30e1aadba4e657546e4b60feaf24ac1c83cb7942fabb6c8880114c907ce4e26fd75c6146efa4098d0fe01e38c154b70994056d9c6664424175f99d95b97b7e55f48ee078e68d52012f6cfd65b75e04a1fda0554f21bc0dac135321aa2161daf8388330ea0877db432bd4a8f4b223557e367b6d0df08daaa7d4e698497706984f67ee73633670c87fb2f8097d5f127e7316e835c808fcbd3c906c0a3576e0008ae6a0ad17444e494e03af5e8e8c585f069f718b72d1"}], 0x1018, 0x40000}, 0x24000012)
ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f00000016c0)=0x2200000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000001980)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f0000001740)={0x1dc, r2, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x4, 0x1ff, 0x4, 0xa, 0x401, 0x870]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0x30, 0x24, 0xb, 0x30, 0xe, 0x0, 0x1, 0x30, 0x4, 0x1, 0x9, 0x5, 0x6, 0x3, 0x2, 0x3, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x40, 0x7, 0x101, 0x3, 0x2, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0xe, 0x100, 0x2, 0x6, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xe4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x16, 0xb, 0x5, 0x30, 0x1b, 0x18, 0x36, 0x16, 0x1, 0x24, 0x1b]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x9}, {0x6, 0x7}, {0x0, 0x9}, {0x4, 0x2}, {0x3, 0xa}, {0x7, 0x1}, {0x7, 0x6}, {0x6, 0x5}, {0x3, 0x5}, {0x2, 0x1}, {0x5, 0x6}, {0x7, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0x1, 0xa}, {0x0, 0x3}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0x5}, {0x6, 0x7}, {0x1, 0xa}, {0x3, 0x9}, {0x0, 0xa}, {0x2, 0x4}, {0x5, 0x8}, {0x1, 0x12}, {0x1, 0x5}, {0x2, 0x2}, {}, {0x0, 0x1}, {0x7, 0x9}, {0x0, 0x1}, {0x7, 0x7}, {0x0, 0x2}, {0x3, 0x9}, {0x1, 0x3}, {0x4, 0xa}, {0x7, 0x1}, {0x7, 0x5}, {0x4, 0xa}, {0x1, 0x3}, {0x4, 0x9}, {0x1, 0x5}, {0x5, 0x5}, {0x6, 0x4}, {0x6, 0x7}, {0x5, 0x2}, {0x6, 0xa}, {0x4, 0x8}, {0x2, 0x2}, {0x6, 0x1}, {0x6, 0x5}, {0x2, 0x4}, {0x0, 0xa}, {0x1, 0x5}, {0x3, 0x7}, {0x2, 0x8}, {0x5, 0x4}, {0x0, 0x6}, {0x4, 0x3}, {0x7}, {0x6, 0x4}, {0x5, 0x4}, {0x4, 0x3}, {0x0, 0x9}, {0x4, 0x2}, {0x1, 0x7}, {0x1, 0x6}, {0x1, 0x2}, {0x5, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x17, 0x7f, 0x3, 0xcba0, 0x6, 0x0, 0x1]}}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x2, 0x9, 0x800, 0xcb0, 0x40, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfff7, 0x8, 0xbbf2, 0x9, 0x0, 0x10]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x1b}, {0x3, 0xa}, {0x0, 0x5}, {0x0, 0x2}, {0x5, 0x2}, {0x2, 0x3}, {0x4, 0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x6}, {0x0, 0x6}, {0x1, 0x7}, {0x3, 0xa}, {0x0, 0x4}, {0x6, 0x3}, {0x6, 0x6}, {0x2, 0xa}, {0x7, 0x9}, {0x4, 0x6}, {}, {0x4, 0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x1, 0x9}, {0x0, 0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0xff, 0xef72, 0x2, 0xf5f7, 0x3, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0xc2cd, 0x4, 0xfe49, 0xb558, 0x83, 0x2]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x3, 0x1b, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x8840}, 0x8804)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000019c0)={'team0\x00', <r9=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'gretap0\x00', r9, 0x10, 0x700, 0x65a2, 0xff, {{0x9, 0x4, 0x0, 0x8, 0x24, 0x64, 0x0, 0x3e, 0x2f, 0x0, @remote, @multicast2, {[@rr={0x7, 0xf, 0xa5, [@rand_addr=0x64010102, @broadcast, @empty]}]}}}}})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001b00), r7)
sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000001e80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001e40)={&(0x7f0000001b40)={0x2cc, r11, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x1d8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffc01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a4f}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa37}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x40004}, 0x24008800)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r1)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x26}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4c2}, @CTA_FILTER_REPLY_FLAGS={0x8}]}]}, 0x38}}, 0x8800)
getsockopt$IP_VS_SO_GET_INFO(r8, 0x0, 0x481, &(0x7f0000002000), &(0x7f0000002040)=0xc)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000020c0)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000002200)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000021c0)={&(0x7f0000002100)={0x98, r12, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x3, 0x60}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x47}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x55}, @NL80211_ATTR_PMKID={0x14, 0x55, "9d3ffc198ac121e8123b15053c41046b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x800}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x54}, @NL80211_ATTR_PMKID={0x14, 0x55, "0de3cddacf87180c9dfe3f1bd079482f"}, @NL80211_ATTR_PMK={0x14, 0xfe, "3ee34ad0864ded71b50760b074bf147b"}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004890}, 0x7d19d24f635724c1)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000002240)={<r15=>0x0, 0x7, 0x3, 0x4}, &(0x7f0000002280)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000002300)={r15, 0x30, &(0x7f00000022c0)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000002340)=0x10)
sendto$inet(r4, &(0x7f0000002380)="69078d7e61239e01c2a3a9dadfcd6b9cffd75c1f8180b94ed92530387080c6d25032d849d0fcebd170982724d7905d8836d227aa2b7d73ae43cb459dd9c96474dcfcacb0fb8e3ce07307b1ff6dd2a9d3d1d7d0fe84064152812a18a3f39bde798125718efd093dd6958d0875266a920c0f266d40c12ba6e2adab96bb7f09e8f19d5870d02dd85fbba5c7043dbc53fab876ade636274ef39286d803acb24551554b3ad4002390b7bd8cdc49fbf3f1626976b53cbdcc7711a69ed865cfb9f4cf8620a8fea0cb7006322648655a693e3aca9f3100bbeb5543e3f86093a4bca8441961bd7771879b83502de2e7cba78ccab6ae3a215a88d508", 0xf7, 0x4841, &(0x7f0000002480)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x12}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xff}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000)

1.387360542s ago: executing program 0 (id=1507):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="020900c328e0aa151993001c040000000000000000ddc29958cdab80f3d1d26455867f20462b9288101f084a1f4c4d3faec879397ac358421c4c1f93b0e5e322a82660f9d32be1f5a91f5e249ccfabb28aae369f4b37f187c22a749dd1d8a01427"], 0x10}}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'geneve0\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000ff07000009"], 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d000000ff0f0000040000000600000001000000", @ANYRES32=r3], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000340)=r3}, 0x20)
close(0x3)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x7fff, r5}, 0x38)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0x8, 0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800)
r8 = socket(0x2a, 0x2, 0x0)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="180000001114f37b01072bbd7000fddbdf2508074b0041ff"], 0x18}}, 0x84)
getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x43e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0400000004000000040000000000010008080000", @ANYRES32, @ANYBLOB="0000002000000000000000000000001b00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000003ffffffff00"/28], 0x50)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x48844)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0xffec}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x9}]}}]}, 0x44}}, 0x4000)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xe000200d})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00'})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r12, &(0x7f0000000280)=ANY=[@ANYBLOB="1c0008000100000000003d0000004600003f00000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="be000000907800180e0308050200000000000000000002d588dc050391000000"], 0x4e)

1.170337978s ago: executing program 0 (id=1509):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'vlan0\x00', {}, {}, 0x6, 0x1, 0x5a}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1, 0x0, 0x4, 0x3, 0x2], 0x2, 0x1}, {0xffffffffffffffff, [0x5, 0x6, 0x6, 0x6, 0x2, 0x6], 0x2, 0x3}}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'sit0\x00', 'geneve0\x00', {}, {0xff}, 0xff, 0x2, 0x22}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0xf, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @remote}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @empty}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

1.169182869s ago: executing program 0 (id=1510):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0xc66d44fb14b9c7e5, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}], {0x14}}, 0xb4}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r2, 0x400, 0x70bd2d, 0x25dfdb7d, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x48040)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e000100000000000000000000030000080001"], 0x1c}}, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x20008014)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r7 = accept(r4, 0x0, 0x0)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r8, 0xc)
setsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
accept(r8, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0)
recvfrom(r6, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0)
connect$unix(r7, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)

520.081139ms ago: executing program 1 (id=1522):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000)
getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25021f00cb", @ANYRES32=r4, @ANYBLOB="08000400000000000800090007000000080002000a01010208000b"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@mpls_getnetconf={0x0, 0x52, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x0, 0x1, r2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x0, 0x6, 0x8001}, @NETCONFA_IFINDEX={0x0, 0x1, r2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x0, 0x6, 0x42d0}, @IGNORE_ROUTES_WITH_LINKDOWN={0x0, 0x6, 0x7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x0, 0x6, 0xc}, @NETCONFA_IFINDEX={0x0, 0x1, r4}, @NETCONFA_IFINDEX={0x0, 0x1, r2}, @NETCONFA_IFINDEX={0x0, 0x1, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001800dd8d000000000000000002000000fe000005000000000600150005000000280016802400010004"], 0x4c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010020004000000080000000000000000", @ANYRES32=r2, @ANYBLOB="00210000ac0006001c0012800b000100697036746e6c00000c00028006000f0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)

519.506386ms ago: executing program 1 (id=1523):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x2a, 0x4, 0xb13, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x13c, 0x9, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x80, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6333}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_COMMENT={0x8, 0x1a, '/+\xd6\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xe05}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_COMMENT={0x11, 0x1a, '*}-/^-)-&-+/\x00'}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '%'}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xddba12b07e1e5246}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x440c0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_buf(r4, 0x1, 0x3e, &(0x7f0000000e40)=""/211, &(0x7f0000000f40)=0xd3) (async)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

459.899099ms ago: executing program 1 (id=1524):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) (async)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_ifreq(r4, 0x8970, &(0x7f0000000040)={'veth1_macvtap\x00', @ifru_settings={0x80000000, 0x100009, @sync=0x0}})
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r6, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x9}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd6}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @cgroup_sysctl, r5, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x8, 0x0, &(0x7f00000003c0)=[{0x5, 0x2, 0xd}, {0x2, 0x1, 0x9, 0xb}, {0x1, 0x5, 0x1, 0x5}, {0x2, 0x5, 0x1, 0x8}, {0x5, 0x2, 0x4, 0x8}, {0x3, 0x1, 0x6, 0x1}, {0x1, 0x2, 0x5, 0xcc3f4c8a5a6d400f}, {0x4, 0x3, 0xd, 0x8}], 0x10, 0x5}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000011c0)={'vxcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000001200)={0x1d, r8, 0x1, {0x1, 0xf0, 0x1}, 0x1}, 0x18)
setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000080)=0x401, 0x4) (async)
setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000080)=0x401, 0x4)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fffffffb00000000010000000c0005001700000000000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c000200800000f0ffffff00fe65891d66ad83ae523d598e82777a925b5e0693ecfd5db954d08452473cd81fd9ba801c89dd546a6421ae208e71832e0a628ce51fe260729d4d27a72081d39baa946ef75636b9f8f0a08bae8eb19726356801aad1dcfa4c7a3b33fa4683645a3547039c9a6fa1c322d1ee31116e2cac94fe5d341c1b0295744d718d48eb52b5404faebb5b419cbdb3d53f6f6088e605532c70131dd908336689d10bfd4093db0741fe9b5aa4c4a8905b7ffa30bbbf486fd564f2bea3ab16e94cc0b70044e4b842b58490c0c0ad341871931fec79aa1e7b2b68b24dca43c1082f881007e683ffad5137e1d40285"], 0x3c}}, 0x20000000)

458.378299ms ago: executing program 2 (id=1525):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet(0x2, 0x2, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x80000002, r3}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0x0)
sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000900)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x20040000)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10)
sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000003800)=""/4107, 0x100b}, {&(0x7f0000000340)=""/241, 0xf1}, {&(0x7f0000000600)=""/171, 0xab}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000780)=""/189, 0xbd}, {&(0x7f0000000840)=""/282, 0x11a}], 0x7}, 0x20001008}], 0x1, 0x0, 0x0)

370.29014ms ago: executing program 2 (id=1526):
r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@getstats={0x1c, 0x5e, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x884) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) (async)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x7a31, 0x7ff}, @sack_perm, @sack_perm, @mss={0x2, 0x4}, @window={0x3, 0x800, 0x6}, @window={0x3, 0x1, 0x10}, @sack_perm], 0x8) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4048001) (async)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x25, &(0x7f0000001500)={0x0, @in={{0x2, 0x4e22, @empty}}}, 0x90) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

267.149625ms ago: executing program 0 (id=1527):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002100090002000000ffdbdf25020000000c0003"], 0x20}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xfe5, &(0x7f0000001840)=""/4069, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0xfffb}, 0x10)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000100)={{0xfffffffffffffffc, 0xa}, {0x6, 0x4}, 0x2, 0xc})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)

190.055939ms ago: executing program 2 (id=1528):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x5)
shutdown(r0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6008884}, 0x4000044)
r3 = socket(0xa, 0x9, 0x200003a)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc)
ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000000080)={0x1})

131.029887ms ago: executing program 1 (id=1529):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x8, 0xfffffffffffff2ba, 0xfffffffffffffff3})
accept4$tipc(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={<r1=>r0})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
clock_gettime(0x0, &(0x7f00000006c0)={<r3=>0x0, <r4=>0x0})
recvmmsg$unix(r2, &(0x7f0000000640)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/168, 0xa8}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/117, 0x75}], 0x3, &(0x7f0000000400)=[@rights={{0x24, 0x1, 0x1, [<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000440), 0x6e, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/244, 0xf4}], 0x1, &(0x7f0000000600)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x10000, &(0x7f0000000700)={r3, r4+10000000})
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, 0x1412, 0x20, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x91)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r8, 0xf505, 0x0)
getsockname$packet(r6, &(0x7f0000000840)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14)
sendmsg$can_bcm(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x1d, r11}, 0x10, &(0x7f0000000980)={&(0x7f0000000900)={0x7, 0x40, 0x6, {0x0, 0xea60}, {0x77359400}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x1, 0x1}, 0x30, 0x2, 0x0, 0x0, "56e9983df8f852026261082205e8625d045fabb828b2920c637aafa87a561687f0e33193d38c989a7b57ed9cc33ae6626f5e58b98d5adfe563e6d95f8fc68f0c"}}, 0x80}, 0x1, 0x0, 0x0, 0x4080080}, 0x10)
r12 = accept(r0, &(0x7f0000000a00)=@qipcrtr, &(0x7f0000000a80)=0x80)
ioctl$NILFS_IOCTL_GET_CPSTAT(r12, 0x80186e83, &(0x7f0000000ac0))
socket$kcm(0x29, 0x4, 0x0)
r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x7fff, '\x00', r11, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50)
ioctl$OCFS2_IOC_MOVE_EXT(r13, 0x40406f06, &(0x7f0000000b80)={0x5, 0x4, 0x79, 0x25e9a6ee, 0x4})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000bc0)={'wg2\x00', <r14=>0x0})
ioctl$XFS_IOC_PATH_TO_HANDLE(r10, 0xc0385869, &(0x7f0000000d00)={<r15=>r10, &(0x7f0000000c00)='\x00', 0x20000, &(0x7f0000000c40)={@_ha_fsid={[0x7, 0xf]}, {0x200, 0xf, 0x3, 0xc000000000000000}}, 0x6, &(0x7f0000000c80), &(0x7f0000000cc0)=0x6})
bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@bloom_filter={0x1e, 0x4, 0x0, 0x1000, 0xc0000, r15, 0x1, '\x00', r11, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0xe}, 0x50)
listen(r7, 0x3)
r16 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e00), r0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r9, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x4c, r16, 0x20, 0xdd00, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)={0x3, 0x4, 0x4, 0xa, 0x0, r15, 0x23, '\x00', 0x0, r10, 0x1, 0x4, 0x1}, 0x50)
getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000fc0)={@private, @multicast1}, &(0x7f0000001000)=0xc)
syz_genetlink_get_family_id$l2tp(&(0x7f0000001040), r9)
r17 = socket(0x24, 0x6, 0xb859)
sendmsg$SOCK_DESTROY(r17, &(0x7f00000021c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002180)={&(0x7f00000010c0)={0x10a8, 0x15, 0x800, 0x70bd27, 0x25dfdbff, {0x1e, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x3f, 0x1, "d3ad6aaf489bb74be1a06cbae708cdd0ae172f8f157dd025aefb6fff88d69ccf038824e87f3cba77b73606abf00228ceb94ce5411c0828da1018d8"}, @INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "6dae643a00e81ff9899f3c710d9fa8fcfcb76f96abd9db4167bc32fd605cc6040169aa9cc26141a382fcc25371f77a8cba1d5784bee9eb63b17f5370f443bd8b1b52add3462d527341f2"}]}, 0x10a8}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002200)={'wlan0\x00'})
r18 = socket$igmp(0x2, 0x3, 0x2)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r18, 0x6628)

128.919593ms ago: executing program 2 (id=1530):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000380)={&(0x7f0000000300)='wrr\x00', &(0x7f0000000340)='wrr\x00', 0x6})
unshare(0x22020600)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="000429"], 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0xfca2238337819a4d)
socket$kcm(0x29, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e22, 0x3, 'lc\x00', 0x24, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xc9, 0x12d5f, 0x3}}, 0x44)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r7, r8, 0x7, 0x0, @val=@tcx={@void, @value=r7}}, 0x1c)
r9 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x3, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x0, 0xc9, 0x80012d58, 0x12d5c}}, 0x44)
ioctl$BTRFS_IOC_RM_DEV_V2(r9, 0x5000943a, &(0x7f0000001140)={{r4}, 0x0, 0x10, @unused=[0x0, 0x10000, 0x1, 0x2], @name="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"})
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
sendto$inet(r10, &(0x7f0000000000)="3db47ecbc591879fa5b13226c088074da7034127bee5a388af8255597b97a9a927ca83cd013643431d5ce2f278ac056be2b726a915173e9d538ff7415865849bdeb34bea81", 0x45, 0x200c0004, &(0x7f0000001100)={0x2, 0x4e22, @empty}, 0x10)

69.219317ms ago: executing program 1 (id=1531):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x5}]}}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20044804)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0)
close(r9)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804)

68.639989ms ago: executing program 2 (id=1532):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000006940)={'ipvs\x00'}, &(0x7f0000006980)=0x1e)
socket$igmp(0x2, 0x3, 0x2) (async)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xfc, 0xfffffff7, @vifc_lcl_addr=@multicast1, @broadcast}, 0x10)

1.200919ms ago: executing program 2 (id=1533):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xa9}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x401}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8800)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000200)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x640100fe}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='[', 0x1}], 0x1}}], 0x2, 0x4000)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={<r2=>0x0, 0xfffff801, 0x5}, &(0x7f0000000100)=0xc)
syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500002800000000002f907864011702ac1414aa4001880b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x0, 0x7, 0x0, 0x70bd2c, 0x0, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d0}, @sadb_address={0x3, 0x7, 0xff, 0x0, 0x0, @in={0x2, 0x4e23, @local}}]}, 0x38}, 0x1, 0x7}, 0x10)
getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x601, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040844)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x408020}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r7, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000006c0)={r2, 0x354}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, r12)
sendmsg$DEVLINK_CMD_RATE_GET(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x24000040)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r8)
sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="707ca31f", @ANYBLOB="031400080004fedbdf2510"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4040080)
sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000d000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a00bdda4a1588bc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9fffffffffffffffcfffffffffffffffdffffffffffffff00"/112], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000"], 0xb8}}, 0x0)

549.406µs ago: executing program 0 (id=1534):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x404c09c}, 0x0)
recvmmsg(r1, &(0x7f0000005600)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000000)=""/76, 0x4c}, {&(0x7f00000001c0)=""/4096, 0x104c}], 0x2}, 0x10}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x9}], 0x4, 0x40010132, 0x0)
getsockopt$inet_int(r0, 0x0, 0x12, 0x0, &(0x7f000000f980))
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000280)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x2, 0x24000045)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000)={0x6}, 0x4)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x2000c044, 0x0, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'gretap0\x00', &(0x7f00000013c0)={'sit0\x00', <r6=>0x0, 0x10, 0x8, 0xac6, 0xf, {{0x16, 0x4, 0x1, 0x2, 0x58, 0x66, 0x0, 0xc, 0x4, 0x0, @multicast2, @private=0xa010101, {[@timestamp={0x44, 0xc, 0xf, 0x0, 0xa, [0xd1f, 0x8]}, @end, @timestamp_addr={0x44, 0x34, 0x70, 0x1, 0x2, [{@broadcast, 0x2}, {@empty, 0x1}, {@rand_addr=0x64010102, 0x2}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@private=0xa010102, 0x3}]}]}}}}})
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0xea}]}}]}, 0x44}}, 0x44094)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001480)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001c00)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001840)=ANY=[@ANYBLOB="44030000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="f00002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f7374617473000000000000000000000000000000000000000502030ef70c000b000000080404004000000008", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ffffffff38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="b401028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173740000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000008000100", @ANYRES32=r9, @ANYBLOB="7400028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004008bffffff38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040006000000"], 0x344}, 0x1, 0x0, 0x0, 0x4}, 0x404c050)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x3}, 0x1c)
sendto$inet6(r4, &(0x7f0000000040)='[', 0x1, 0xc0, 0x0, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r10, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c7821", 0x8f}, {&(0x7f00000002c0)="a01931a77deebe4f", 0x8}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a477647016ad9de5ce797b335cfd816d72e2cc01b12e54a3ccea2593bb0c99266bd87d0d80cc0b8e7101d736237e3fdf5c353e5625c9484f31d9e073594aa9372e588b79ecccd1926dd9a8b0749431aec47512d0f7623f6dd68c4c9b00e812164ff41514aaf10c9f05dd2627c38f8f4118380d5d3346b5460a87b68e6c58b0c3ba6eec887b885bbab0b0c2af50290034afbe9bdcd10948b465797b87c13c40c81bdc283025a5347ebe44880ae7f03", 0xe2}, {&(0x7f00000004c0)="9b1eb0aed9ba4b", 0x7}], 0x4)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0)
sendmsg$802154_raw(r10, &(0x7f0000000300)={&(0x7f0000000140)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14, &(0x7f0000000240)={&(0x7f0000000180)="8ef5ab426aaf21695e3c4466e0fe5bb42f93c736f55ce159ab840a35e1f9223f57b9c4c40ee487e5ef280a28ae9e8ad1e7c320f06661ed289f6cda857bf1980fbdf14934c3e2697176629e0d5e015e965522ce11c681ba0b72d1dcae9f568c3747307d72a3aa7d86ceb9541ff308", 0x6e}, 0x1, 0x0, 0x0, 0xc841}, 0x20000010)
sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1401, 0x200, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000)

0s ago: executing program 1 (id=1535):
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x200000000000011, 0x2, 0x0) (async)
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000240)={0x1, 0x2})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f00000001c0)={0x11, 0x17, r2, 0x1, 0x7, 0x6, @local}, 0x14) (async)
getsockname$packet(r1, &(0x7f00000018c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000680)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYBLOB="20000100", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@ipv6_getnetconf={0x1c, 0x52, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x404c840) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
accept(r5, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x80) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x24004004) (async)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000940)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)={0x2b0, r7, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdfe7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x21}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_BEARER={0x10c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @local, 0x100}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dvmrp0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x993}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x17}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9c9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b5f44e4ce2d715f5f5f290a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000180)={'wg1\x00'}) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'})

kernel console output (not intermixed with test programs):

0 to HW filter on device netdevsim3
[   64.238607][ T5621] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.246168][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.256028][ T5621] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.262450][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.265224][ T5621] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.269750][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.285094][ T5621] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.290794][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.337361][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.342765][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.350729][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.358260][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.361624][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.366948][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.377859][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.384058][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.408637][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.443931][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[   64.459097][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.461587][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.472750][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.475972][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.516504][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.544073][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[   64.555469][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.559360][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.561772][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.579483][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   64.583988][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.586271][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.604154][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.606453][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.618808][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.621173][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.797048][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.843139][ T5612] veth0_vlan: entered promiscuous mode
[   64.860049][ T5612] veth1_vlan: entered promiscuous mode
[   64.870229][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.894766][ T5612] veth0_macvtap: entered promiscuous mode
[   64.901004][ T5612] veth1_macvtap: entered promiscuous mode
[   64.908011][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.913288][ T5002] Bluetooth: hci1: command tx timeout
[   64.913866][ T5616] Bluetooth: hci0: command tx timeout
[   64.935909][ T5621] veth0_vlan: entered promiscuous mode
[   64.944149][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.955821][ T5621] veth1_vlan: entered promiscuous mode
[   64.959599][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.975121][ T5617] veth0_vlan: entered promiscuous mode
[   64.977989][ T5478] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.981824][ T5478] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.990546][ T5617] veth1_vlan: entered promiscuous mode
[   64.994120][ T5616] Bluetooth: hci2: command tx timeout
[   64.996465][ T5478] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.004595][ T5478] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.029040][ T5621] veth0_macvtap: entered promiscuous mode
[   65.035617][ T5621] veth1_macvtap: entered promiscuous mode
[   65.053342][ T5617] veth0_macvtap: entered promiscuous mode
[   65.064106][ T5617] veth1_macvtap: entered promiscuous mode
[   65.072408][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.089070][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.102243][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.106458][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.110547][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.117576][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.121785][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.138479][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.141647][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.150758][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.157712][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.162299][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.166907][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.169811][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.169981][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.185213][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.262450][ T5612] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.277391][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.281484][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.311601][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.316415][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.359733][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.367832][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.399671][   T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.406186][   T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.512758][ T5727] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   65.537795][ T5727] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2'.
[   65.627827][ T5738] tipc: Started in network mode
[   65.629888][ T5738] tipc: Node identity ba9654dc416b, cluster identity 4711
[   65.632294][ T5738] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.636771][ T5738] syzkaller0: entered promiscuous mode
[   65.638575][ T5738] syzkaller0: entered allmulticast mode
[   65.677075][ T5738] tipc: Resetting bearer <eth:syzkaller0>
[   65.682090][ T5737] tipc: Resetting bearer <eth:syzkaller0>
[   65.690341][ T5737] tipc: Disabling bearer <eth:syzkaller0>
[   66.904748][ T5762] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.993442][ T5616] Bluetooth: hci1: command tx timeout
[   66.993642][ T5002] Bluetooth: hci0: command tx timeout
[   67.073237][ T5002] Bluetooth: hci2: command tx timeout
[   67.307834][   T24] cfg80211: failed to load regulatory.db
[   67.531671][ T5781] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13'.
[   67.538662][ T5781] netlink: 'syz.2.13': attribute type 3 has an invalid length.
[   67.542051][ T5781] Zero length message leads to an empty skb
[   67.731893][ T5786] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15'.
[   67.761734][ T5786] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15'.
[   67.800580][ T5786] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15'.
[   67.856027][ T5791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'.
[   67.948295][ T5762] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.974578][ T5793] netlink: 'syz.1.17': attribute type 2 has an invalid length.
[   68.049655][ T5762] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.097766][ T5762] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.188755][ T5667] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.211005][ T5667] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.217246][ T5800] xt_hashlimit: size too large, truncated to 1048576
[   68.226444][ T5667] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.240121][ T5667] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.278000][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.291282][ T5802] bridge_slave_0 (unregistering): left allmulticast mode
[   68.298091][ T5802] bridge_slave_0 (unregistering): left promiscuous mode
[   68.300832][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.326591][ T5800] netlink: 'syz.1.19': attribute type 1 has an invalid length.
[   68.329203][ T5800] netlink: 224 bytes leftover after parsing attributes in process `syz.1.19'.
[   68.329723][ T5804] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   68.378305][ T5802] netlink: 68 bytes leftover after parsing attributes in process `syz.1.19'.
[   68.553866][ T5822] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23'.
[   68.562646][ T5814] netlink: 'syz.0.22': attribute type 2 has an invalid length.
[   68.568308][ T5814] netlink: 'syz.0.22': attribute type 9 has an invalid length.
[   68.571749][ T5814] netlink: 207804 bytes leftover after parsing attributes in process `syz.0.22'.
[   69.075261][ T5002] Bluetooth: hci0: command tx timeout
[   69.078040][ T5002] Bluetooth: hci1: command tx timeout
[   69.154805][ T5002] Bluetooth: hci2: command tx timeout
[   69.749249][ T5920] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   69.798255][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.807974][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.819521][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.829725][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.942437][ T5933] tipc: Started in network mode
[   69.944937][ T5933] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   69.948124][ T5933] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   69.951167][ T5933] tipc: Enabled bearer <udp:syz0>, priority 10
[   70.059951][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.063894][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.094848][ T5941] bridge0: entered allmulticast mode
[   70.118655][ T5941] bridge_slave_1: left allmulticast mode
[   70.121443][ T5941] bridge_slave_1: left promiscuous mode
[   70.125241][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.142044][ T5941] bridge_slave_0: left allmulticast mode
[   70.144745][ T5941] bridge_slave_0: left promiscuous mode
[   70.147208][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.256124][ T5952] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   70.263722][ T5952] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   70.280458][ T5952] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   70.424154][ T5964] openvswitch: netlink: nsh attr 5 is out of range max 3
[   70.430596][ T5964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.460899][ T5972] nftables ruleset with unbound chain
[   70.539958][ T5979] veth3: entered promiscuous mode
[   70.546564][ T5975] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   70.549736][ T5975] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   70.602608][ T5982] netlink: 'syz.2.47': attribute type 1 has an invalid length.
[   70.670446][ T5978] __nla_validate_parse: 5 callbacks suppressed
[   70.670463][ T5978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.47'.
[   70.725421][ T5982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.47'.
[   70.821783][ T5985] macvlan2: entered promiscuous mode
[   70.825351][ T5985] macvlan2: entered allmulticast mode
[   71.154877][ T5002] Bluetooth: hci1: command tx timeout
[   71.154902][ T5616] Bluetooth: hci0: command tx timeout
[   71.233443][ T5616] Bluetooth: hci2: command tx timeout
[   73.721975][   T10] tipc: Node number set to 1
[   73.830326][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.54'.
[   73.837744][ T5996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.841548][ T5996] syzkaller0: entered promiscuous mode
[   73.844470][ T5996] syzkaller0: entered allmulticast mode
[   73.885015][ T5996] tipc: Resetting bearer <eth:syzkaller0>
[   73.900568][ T5995] tipc: Resetting bearer <eth:syzkaller0>
[   73.911032][ T5995] tipc: Disabling bearer <eth:syzkaller0>
[   73.945060][ T6007] netlink: 40 bytes leftover after parsing attributes in process `syz.1.57'.
[   74.040830][ T6012] netlink: 140 bytes leftover after parsing attributes in process `syz.2.60'.
[   74.046954][ T6015] netlink: 32 bytes leftover after parsing attributes in process `syz.1.61'.
[   74.132575][ T6022] netlink: 'syz.0.63': attribute type 1 has an invalid length.
[   74.405983][ T6054] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   74.408753][   T10] team_slave_0: entered promiscuous mode
[   74.411145][   T10] team_slave_1: entered promiscuous mode
[   74.415851][ T6055] IPVS: set_ctl: invalid protocol: 1 100.1.1.1:20000
[   74.430025][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.637062][ T6066] netlink: 'syz.2.72': attribute type 10 has an invalid length.
[   74.648765][ T6066] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   74.654151][ T6066] team0: Port device netdevsim1 added
[   74.656572][ T6066] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[   74.661112][ T6066] netlink: 'syz.2.72': attribute type 10 has an invalid length.
[   74.669849][ T6066] team0: Port device netdevsim1 removed
[   74.675847][ T6066] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   75.187768][ T6049] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   75.192417][ T6054] netlink: 'syz.2.72': attribute type 1 has an invalid length.
[   75.195300][ T6054] netlink: 224 bytes leftover after parsing attributes in process `syz.2.72'.
[   75.392147][ T6074] netlink: 64 bytes leftover after parsing attributes in process `syz.1.75'.
[   75.415365][ T6074] ip6gre1: entered promiscuous mode
[   75.421882][ T6074] ip6gre1: entered allmulticast mode
[   75.577919][ T6093] bond0: (slave bond_slave_0): Releasing backup interface
[   75.595106][ T6093] bond0: (slave bond_slave_1): Releasing backup interface
[   75.612123][ T6093] team_slave_0: left promiscuous mode
[   75.619630][ T6093] team0: Port device team_slave_0 removed
[   75.625184][ T6093] team_slave_1: left promiscuous mode
[   75.630499][ T6093] team0: Port device team_slave_1 removed
[   75.634968][ T6093] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   75.838416][ T6115] xt_hashlimit: size too large, truncated to 1048576
[   75.892015][ T6122] netlink: 68 bytes leftover after parsing attributes in process `syz.1.81'.
[   76.582100][ T6175] netlink: 52 bytes leftover after parsing attributes in process `syz.2.85'.
[   76.611254][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'.
[   76.614828][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'.
[   76.615087][ T6181] netlink: 'syz.0.87': attribute type 1 has an invalid length.
[   76.621673][ T6181] netlink: 'syz.0.87': attribute type 2 has an invalid length.
[   76.628894][ T6181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.87'.
[   76.849465][ T6196] macsec1: entered promiscuous mode
[   76.851301][ T6196] macsec1: entered allmulticast mode
[   76.878506][ T6212] syzkaller0: entered promiscuous mode
[   76.880294][ T6212] syzkaller0: entered allmulticast mode
[   77.034871][ T6220] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   77.058027][   T24] IPVS: starting estimator thread 0...
[   77.153654][ T6222] IPVS: using max 42 ests per chain, 100800 per kthread
[   77.259061][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'.
[   77.262605][ T6241] veth0_macvtap: left promiscuous mode
[   77.408918][ T6250] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   77.415750][ T6250] bond1: (slave lo): Enslaving as an active interface with an up link
[   77.420516][ T6250] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   77.490428][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'.
[   77.615457][ T6269] xt_hashlimit: size too large, truncated to 1048576
[   77.641118][ T6271] netlink: 64 bytes leftover after parsing attributes in process `syz.1.104'.
[   77.671673][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.105'.
[   78.017597][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.110'.
[   78.162377][ T6308] netlink: 'syz.0.114': attribute type 5 has an invalid length.
[   78.233759][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.237771][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.240493][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.245565][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.265078][ T6314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.274561][ T6315] syzkaller0: entered promiscuous mode
[   78.278115][ T6315] syzkaller0: entered allmulticast mode
[   78.291854][ T6318] tipc: New replicast peer: 0.0.0.0
[   78.300245][ T6318] tipc: Enabled bearer <udp:syz2>, priority 10
[   78.311908][ T6316] tipc: Resetting bearer <eth:syzkaller0>
[   78.321783][ T6316] tipc: Disabling bearer <eth:syzkaller0>
[   78.376546][ T6321] netlink: 'syz.1.118': attribute type 61 has an invalid length.
[   78.381137][ T6321] netlink: 'syz.1.118': attribute type 62 has an invalid length.
[   78.453191][ T6324] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.457382][ T6324] bond1: Unable to set down delay as MII monitoring is disabled
[   78.702441][ T6341] netlink: 'syz.1.125': attribute type 1 has an invalid length.
[   78.702750][ T5614] block nbd64: NBD_DISCONNECT
[   78.708001][ T6344] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   79.299087][ T6389] xt_hashlimit: size too large, truncated to 1048576
[   79.650054][   T10] tipc: Node number set to 4227683548
[   79.655987][ T5667] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.666669][ T5667] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.679902][ T5667] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.688271][ T5667] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.711007][ T6398] validate_nla: 1 callbacks suppressed
[   79.711021][ T6398] netlink: 'syz.2.134': attribute type 1 has an invalid length.
[   79.716119][ T6398] netlink: 'syz.2.134': attribute type 1 has an invalid length.
[   79.954765][ T6422] vlan2: entered promiscuous mode
[   79.963562][ T6422] team0: entered promiscuous mode
[   79.965242][ T6422] team_slave_0: entered promiscuous mode
[   79.967216][ T6422] team_slave_1: entered promiscuous mode
[   80.367131][ T6447] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   80.870155][ T6482] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.926275][ T6486] netlink: 'syz.2.159': attribute type 10 has an invalid length.
[   80.938267][ T6486] syz_tun: entered promiscuous mode
[   81.033827][ T6501] netlink: 'syz.1.162': attribute type 3 has an invalid length.
[   81.220761][ T6517] __nla_validate_parse: 22 callbacks suppressed
[   81.220773][ T6517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.165'.
[   81.351502][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.2.167'.
[   81.358650][ T6521] gretap1: entered allmulticast mode
[   81.438748][ T6524] netlink: 'syz.2.167': attribute type 1 has an invalid length.
[   81.576174][ T6528] netlink: 'syz.0.169': attribute type 11 has an invalid length.
[   81.739151][ T6532] sctp: [Deprecated]: syz.0.171 (pid 6532) Use of int in max_burst socket option deprecated.
[   81.739151][ T6532] Use struct sctp_assoc_value instead
[   81.826951][ T6534] netlink: 34 bytes leftover after parsing attributes in process `syz.0.172'.
[   81.879694][ T6536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.173'.
[   82.069822][ T6548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.178'.
[   82.072814][ T6548] netlink: 'syz.1.178': attribute type 1 has an invalid length.
[   82.075449][ T6548] netlink: 72 bytes leftover after parsing attributes in process `syz.1.178'.
[   82.079084][ T6548] netlink: 252 bytes leftover after parsing attributes in process `syz.1.178'.
[   82.082356][ T6548] netlink: 'syz.1.178': attribute type 1 has an invalid length.
[   82.087172][ T6548] netlink: 72 bytes leftover after parsing attributes in process `syz.1.178'.
[   82.131152][ T6553] syzkaller0: entered promiscuous mode
[   82.133064][ T6553] syzkaller0: entered allmulticast mode
[   82.268705][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'.
[   82.279576][ T6562] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   82.307270][ T6568] netlink: 200 bytes leftover after parsing attributes in process `syz.0.184'.
[   82.342777][ T6572] syzkaller0: entered promiscuous mode
[   82.356338][ T6572] syzkaller0: entered allmulticast mode
[   82.373676][ T6576] syzkaller0: entered promiscuous mode
[   82.376315][ T6576] syzkaller0: entered allmulticast mode
[   82.419811][ T6581] warning: `syz.1.188' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   82.424823][ T6581] unsupported nlmsg_type 40
[   82.508792][ T6589] netlink: 'syz.2.191': attribute type 1 has an invalid length.
[   82.546044][ T6592] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.548922][ T6593] syzkaller0: entered promiscuous mode
[   82.551163][ T6593] syzkaller0: entered allmulticast mode
[   82.588349][ T6592] tipc: Resetting bearer <eth:syzkaller0>
[   82.608391][ T6591] tipc: Resetting bearer <eth:syzkaller0>
[   82.635722][ T6591] tipc: Disabling bearer <eth:syzkaller0>
[   82.706108][ T6602] netlink: 'syz.1.196': attribute type 11 has an invalid length.
[   82.933307][ T6622] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   82.937693][ T6617] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   82.942590][ T6621] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   83.031050][ T6631] IPVS: set_ctl: invalid protocol: 135 172.20.20.46:20000
[   83.191662][ T6637] xt_CT: You must specify a L4 protocol and not use inversions on it
[   83.729817][ T6662] ipvlan1: entered promiscuous mode
[   83.731604][ T6662] ipvlan1: entered allmulticast mode
[   83.733613][ T6662] veth0_vlan: entered allmulticast mode
[   83.771919][ T6665] bridge0: entered allmulticast mode
[   84.056780][ T6693] geneve2: entered promiscuous mode
[   84.059301][ T5667] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 56392 - 0
[   84.062557][ T5667] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 56392 - 0
[   84.067585][ T5667] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 56392 - 0
[   84.071716][ T5667] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 56392 - 0
[   84.273780][ T6714] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   84.276761][ T6714] IPv6: NLM_F_CREATE should be set when creating new route
[   84.278981][ T6714] IPv6: NLM_F_CREATE should be set when creating new route
[   84.281270][ T6714] IPv6: NLM_F_CREATE should be set when creating new route
[   84.284651][ T6714] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   84.295315][ T6712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.761501][ T6739] syzkaller0: entered promiscuous mode
[   84.764049][ T6739] syzkaller0: entered allmulticast mode
[   84.913062][ T5616] Bluetooth: hci0: command 0x0401 tx timeout
[   84.924662][ T6746] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.005847][ T6750] netlink: 'syz.2.233': attribute type 13 has an invalid length.
[   85.121727][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 56392 - 0
[   85.131035][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 56392 - 0
[   85.139149][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 56392 - 0
[   85.143628][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 56392 - 0
[   85.168875][ T6766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.180326][ T6761] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[   85.202248][ T6761] bond1 (unregistering): Released all slaves
[   85.381615][ T6782] veth0: entered promiscuous mode
[   85.385504][ T6780] syzkaller0: entered promiscuous mode
[   85.388974][ T6780] syzkaller0: entered allmulticast mode
[   85.405103][ T6782] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   85.510837][ T6784] netlink: 'syz.0.243': attribute type 1 has an invalid length.
[   85.513851][ T6784] netlink: 'syz.0.243': attribute type 2 has an invalid length.
[   85.658530][ T6793] netlink: 'syz.0.247': attribute type 1 has an invalid length.
[   85.685854][ T6793] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.749274][ T6797] bond0: (slave bond_slave_1): Releasing backup interface
[   85.840225][ T6801] geneve2: entered promiscuous mode
[   86.105478][ T6821] netlink: 'syz.0.254': attribute type 1 has an invalid length.
[   86.226201][ T6820] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.228829][ T6820] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.531094][ T6820] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.563826][ T6820] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.811742][ T6820] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[   86.823085][ T6820] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[   86.890693][ T6820] geneve2: left promiscuous mode
[   86.925097][ T6776] veth0: left promiscuous mode
[   86.942019][ T6824] gretap3: entered allmulticast mode
[   86.958199][ T6824] bond2: (slave gretap3): making interface the new active one
[   86.969962][ T6824] bond2: (slave gretap3): Enslaving as an active interface with an up link
[   87.001656][ T6826] __nla_validate_parse: 23 callbacks suppressed
[   87.001675][ T6826] netlink: 76 bytes leftover after parsing attributes in process `syz.2.255'.
[   87.028972][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'.
[   87.043122][ T5478] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.051908][ T5478] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.052523][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'.
[   87.060035][ T5478] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.064162][ T5478] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.119427][ T6837] netlink: 'syz.0.257': attribute type 1 has an invalid length.
[   87.140279][ T6837] netlink: 'syz.0.257': attribute type 1 has an invalid length.
[   87.150646][ T6837] netlink: 'syz.0.257': attribute type 2 has an invalid length.
[   87.160670][ T6837] netlink: 'syz.0.257': attribute type 1 has an invalid length.
[   87.171194][ T6837] The dccp option matching is deprecated and scheduled to be removed in 2027.
[   87.171194][ T6837] Please contact the netfilter-devel mailing list or update your nftables rules.
[   87.195424][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'.
[   87.199138][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'.
[   87.384528][ T6867] xt_bpf: check failed: parse error
[   87.450845][ T6876] syzkaller1: entered allmulticast mode
[   87.478323][ T6877] netlink: 40 bytes leftover after parsing attributes in process `syz.2.265'.
[   87.487522][ T6877] netlink: 60 bytes leftover after parsing attributes in process `syz.2.265'.
[   87.587421][ T6890] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.269'.
[   87.665562][ T6901] netlink: 36 bytes leftover after parsing attributes in process `syz.2.272'.
[   87.727829][ T6908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.273'.
[   88.820482][ T6984] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   88.820528][   T33] audit: type=1804 audit(1780021147.039:2): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.281" name="/newroot/82/cgroup.controllers" dev="tmpfs" ino=436 res=1 errno=0
[   88.838782][   T33] audit: type=1800 audit(1780021147.039:3): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.281" name="cgroup.controllers" dev="tmpfs" ino=436 res=0 errno=0
[   89.175408][ T7005] raw_sendmsg: syz.2.287 forgot to set AF_INET. Fix it!
[   89.352823][ T7014] netlink: 'syz.0.290': attribute type 4 has an invalid length.
[   89.371662][ T7014] openvswitch: netlink: Flow actions attr not present in new flow.
[   89.848293][ T7041] openvswitch: netlink: Tunnel attr 78 out of range max 16
[   89.971181][ T7051] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   89.973670][ T7051] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   90.035117][ T7053] bond3: entered promiscuous mode
[   90.038801][ T7053] bond3: entered allmulticast mode
[   90.042548][ T7053] 8021q: adding VLAN 0 to HW filter on device bond3
[   90.093677][ T7061] syzkaller0: entered promiscuous mode
[   90.096586][ T7061] syzkaller0: entered allmulticast mode
[   90.165366][ T7067] geneve3: entered promiscuous mode
[   90.167160][ T7067] geneve3: entered allmulticast mode
[   90.369250][ T7074] tipc: Enabled bearer <eth:batadv_slave_1>, priority 10
[   90.445992][ T7078] sctp: [Deprecated]: syz.2.309 (pid 7078) Use of int in max_burst socket option.
[   90.445992][ T7078] Use struct sctp_assoc_value instead
[   90.491051][ T7082] validate_nla: 1 callbacks suppressed
[   90.491060][ T7082] netlink: 'syz.0.311': attribute type 10 has an invalid length.
[   90.568030][ T7097] syzkaller1: entered promiscuous mode
[   90.569835][ T7097] syzkaller1: entered allmulticast mode
[   90.582135][ T7097] syz_tun: left promiscuous mode
[   90.587973][ T7097] geneve2: left promiscuous mode
[   90.593381][ T7097] syzkaller1: left promiscuous mode
[   90.599831][ T7097] syzkaller1: left allmulticast mode
[   90.606179][ T7103] netlink: 'syz.1.318': attribute type 1 has an invalid length.
[   90.698889][ T7111] bond4: (slave gretap1): making interface the new active one
[   90.702244][ T7111] bond4: (slave gretap1): Enslaving as an active interface with an up link
[   90.783734][ T7125] netlink: 'syz.2.319': attribute type 5 has an invalid length.
[   90.807040][ T7124] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0)
[   90.824788][ T7124] bond5 (unregistering): Released all slaves
[   90.936893][ T7129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   91.118837][ T7142] IPVS: length: 89 != 8
[   91.127179][ T7146] openvswitch: netlink: Multiple metadata blocks provided
[   91.178813][ T7151] vlan2: entered promiscuous mode
[   91.182828][ T7151] geneve1: entered promiscuous mode
[   91.186566][ T7151] vlan2: entered allmulticast mode
[   91.189385][ T7151] geneve1: entered allmulticast mode
[   91.274978][ T7164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.317646][ T7162] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[   91.538881][ T7181] netlink: 'syz.2.341': attribute type 10 has an invalid length.
[   91.545305][ T7181] veth1_virt_wifi: entered allmulticast mode
[   91.579497][ T7183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.666554][ T7188] netlink: 'syz.0.343': attribute type 17 has an invalid length.
[   91.687021][ T7188] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.690323][ T7188] 8021q: adding VLAN 0 to HW filter on device team0
[   91.697263][ T7188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.729579][ T7188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.735028][ T7188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.741635][ T7188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   91.746211][ T7188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   91.754314][ T7188] veth1_vlan: left promiscuous mode
[   91.757271][ T7188] veth0_vlan: left promiscuous mode
[   91.760033][ T7188] veth0_vlan: entered promiscuous mode
[   91.765373][ T7188] veth1_vlan: entered promiscuous mode
[   91.771996][ T7188] veth1_macvtap: left promiscuous mode
[   91.775702][ T7188] veth0_macvtap: left promiscuous mode
[   91.778768][ T7188] veth0_macvtap: entered promiscuous mode
[   91.781899][ T7188] veth1_macvtap: entered promiscuous mode
[   91.787589][ T7188] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   91.804106][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.806501][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.809848][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.812254][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.855124][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.861044][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.875081][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.880283][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.011625][ T7220] __nla_validate_parse: 28 callbacks suppressed
[   92.011638][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'.
[   92.029330][ T7223] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   92.085476][ T7225] syzkaller0: entered promiscuous mode
[   92.091738][ T7225] syzkaller0: entered allmulticast mode
[   92.427321][ T7253] netlink: 'syz.2.358': attribute type 1 has an invalid length.
[   92.441971][ T7253] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.449753][ T7253] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.457885][ T7253] bond2: (slave ip6gretap1): making interface the new active one
[   92.460817][ T7253] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[   92.652813][ T7267] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.705359][ T7271] netlink: 'syz.2.363': attribute type 12 has an invalid length.
[   92.819550][ T7280] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.823641][ T7280] netlink: 'syz.0.367': attribute type 1 has an invalid length.
[   92.826245][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.367'.
[   93.015118][ T7291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.370'.
[   93.124769][   T32] IPVS: starting estimator thread 0...
[   93.214707][ T7298] IPVS: using max 41 ests per chain, 98400 per kthread
[   93.818475][ T7307] hsr0: entered promiscuous mode
[   93.826197][ T7307] netlink: 44 bytes leftover after parsing attributes in process `syz.0.374'.
[   93.902138][ T7310] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[   93.910188][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'.
[   93.914333][ T7310] netlink: 312 bytes leftover after parsing attributes in process `syz.2.375'.
[   93.917951][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'.
[   93.966471][ T7310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.375'.
[   94.064632][ T7318] xt_hashlimit: size too large, truncated to 1048576
[   94.101461][ T7316] syzkaller0: entered promiscuous mode
[   94.105533][ T7316] syzkaller0: entered allmulticast mode
[   94.131577][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'.
[   94.148692][ T7316] xt_CT: No such helper "snmp_trap"
[   94.162882][ T7323] netlink: 'syz.0.379': attribute type 49 has an invalid length.
[   94.319894][ T7335] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.322717][ T7335] syzkaller0: entered promiscuous mode
[   94.327328][ T7335] syzkaller0: entered allmulticast mode
[   94.331677][ T7335] netlink: 56 bytes leftover after parsing attributes in process `syz.1.381'.
[   94.340337][ T7334] tipc: Resetting bearer <eth:syzkaller0>
[   94.373840][ T7334] tipc: Disabling bearer <eth:syzkaller0>
[   94.887333][ T7378] syzkaller1: entered promiscuous mode
[   94.889484][ T7378] syzkaller1: entered allmulticast mode
[   95.086477][   T10] IPVS: starting estimator thread 0...
[   95.173023][ T7401] IPVS: using max 81 ests per chain, 194400 per kthread
[   95.239587][ T7406] tipc: Started in network mode
[   95.241394][ T7406] tipc: Node identity d2c30dd8b746, cluster identity 4711
[   95.244317][ T7406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.264202][ T7407] syzkaller0: entered promiscuous mode
[   95.265921][ T7407] syzkaller0: entered allmulticast mode
[   95.267959][ T7407] tipc: Resetting bearer <eth:syzkaller0>
[   95.271337][ T7403] x_tables: duplicate underflow at hook 1
[   95.277943][ T7405] tipc: Resetting bearer <eth:syzkaller0>
[   95.505266][ T7413] netlink: 'syz.0.393': attribute type 4 has an invalid length.
[   96.236434][ T7405] tipc: Disabling bearer <eth:syzkaller0>
[   96.280546][ T7418] pimreg: entered allmulticast mode
[   96.474845][ T7436] netlink: 'syz.0.397': attribute type 1 has an invalid length.
[   96.529690][ T7445] SET target dimension over the limit!
[   96.685369][ T7454] netlink: 'syz.2.402': attribute type 2 has an invalid length.
[   96.737875][ T7456] netlink: 'syz.0.404': attribute type 9 has an invalid length.
[   96.859784][ T7463] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[   96.958789][ T7469] pimreg: entered promiscuous mode
[   97.090667][ T7479] netlink: 'syz.0.410': attribute type 1 has an invalid length.
[   97.103944][ T7479] 8021q: adding VLAN 0 to HW filter on device bond6
[   97.118165][ T7479] vlan2: entered allmulticast mode
[   97.120454][ T7479] bond6: entered allmulticast mode
[   97.219573][ T7487] __nla_validate_parse: 4 callbacks suppressed
[   97.219586][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.411'.
[   97.569391][ T7505] 8021q: VLANs not supported on ip6_vti0
[   97.586948][ T7508] bridge0: entered allmulticast mode
[   97.798152][ T7532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.875637][ T7535] netlink: 'syz.1.418': attribute type 1 has an invalid length.
[   97.930604][ T7522] bridge0: left allmulticast mode
[   98.102643][ T7522] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.127501][ T7522] tipc: Resetting bearer <eth:batadv_slave_1>
[   98.133010][ T7522] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.382282][ T7522] veth3: left promiscuous mode
[   98.386760][ T7522] ip6gre1: left promiscuous mode
[   98.389861][ T7522] ip6gre1: left allmulticast mode
[   98.394672][ T7522] macsec1: left promiscuous mode
[   98.397756][ T7522] macsec1: left allmulticast mode
[   98.421969][ T7522] vlan2: left promiscuous mode
[   98.424146][ T7522] geneve1: left promiscuous mode
[   98.427323][ T7522] vlan2: left allmulticast mode
[   98.430450][ T7522] geneve1: left allmulticast mode
[   98.451813][ T7531] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   98.461426][ T7531] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   98.504032][ T7533] gretap2: entered allmulticast mode
[   98.507629][ T7533] bond5: (slave gretap2): making interface the new active one
[   98.510294][ T7533] bond5: (slave gretap2): Enslaving as an active interface with an up link
[   98.513259][ T5478] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.518140][ T5478] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.525627][ T5478] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.532855][ T5478] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.536325][ T5478] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.539862][ T5478] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.543629][ T5478] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.546624][ T5478] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.628352][ T7547] netlink: 148 bytes leftover after parsing attributes in process `syz.1.422'.
[   98.635205][ T7547] dummy0: mtu less than device minimum
[   98.639228][ T7548] dummy0: mtu less than device minimum
[   98.654319][ T7547] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y
[   98.654319][ T7547] 3UH5rBn
[   98.731038][ T7555] geneve2: entered promiscuous mode
[   98.738231][ T5667] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.747184][ T5667] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.750812][ T5667] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.761162][ T5667] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.932492][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.427'.
[   98.939191][ T7568] x_tables: duplicate underflow at hook 1
[   98.942675][ T7571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.428'.
[   98.957535][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.428'.
[   99.031728][ T7576] gretap2: left allmulticast mode
[   99.041257][ T7576] geneve2: left promiscuous mode
[   99.073590][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.077027][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.080211][ T7576] netlink: 'syz.1.430': attribute type 1 has an invalid length.
[   99.084262][ T7580] netlink: 56 bytes leftover after parsing attributes in process `syz.2.431'.
[   99.102377][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.109213][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.372374][ T7609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.434'.
[   99.587379][ T7629] netlink: 'syz.2.437': attribute type 39 has an invalid length.
[   99.672572][ T7641] netlink: 'syz.1.439': attribute type 3 has an invalid length.
[   99.672706][ T7642] netlink: 48 bytes leftover after parsing attributes in process `syz.1.439'.
[   99.763583][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'.
[   99.824137][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'.
[   99.844838][ T7653] syzkaller0: entered promiscuous mode
[   99.851076][ T7653] syzkaller0: entered allmulticast mode
[   99.951027][ T7667] syzkaller1: entered promiscuous mode
[   99.953976][ T7667] syzkaller1: entered allmulticast mode
[   99.978254][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.981149][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.012594][ T7667] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.022022][ T7667] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.060278][ T7667] tipc: Resetting bearer <eth:syzkaller0>
[  100.066287][ T7667] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  100.069083][ T7667] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  100.075511][ T7667] gretap3: left allmulticast mode
[  100.077836][ T7667] bond3: left promiscuous mode
[  100.079426][ T7667] bond3: left allmulticast mode
[  100.084955][ T7667] pimreg: left promiscuous mode
[  100.087815][ T7667] vlan2: left allmulticast mode
[  100.089368][ T7667] bond6: left allmulticast mode
[  100.091235][ T7667] syzkaller1: left promiscuous mode
[  100.094189][ T7667] syzkaller1: left allmulticast mode
[  100.097300][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.099989][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.102884][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.105817][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.259283][ T7681] 8021q: VLANs not supported on nlmon0
[  100.262223][ T7680] 8021q: VLANs not supported on nlmon0
[  100.266969][ T7680] netlink: 'syz.2.452': attribute type 1 has an invalid length.
[  100.517730][ T7692] Driver unsupported XDP return value 0 on prog  (id 113) dev N/A, expect packet loss!
[  100.528229][ T7692] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  100.531203][ T7692] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  101.078599][ T7696] netlink: Unknown conntrack attr (0)
[  101.308241][ T7703] validate_nla: 1 callbacks suppressed
[  101.308251][ T7703] netlink: 'syz.1.459': attribute type 1 has an invalid length.
[  101.332120][ T7703] 8021q: adding VLAN 0 to HW filter on device bond7
[  101.353684][ T7703] bond7: (slave veth7): Enslaving as an active interface with a down link
[  101.427473][ T7710] bond7: (slave veth9): Enslaving as an active interface with a down link
[  102.155565][ T7722] 8021q: VLANs not supported on ip_vti0
[  102.345735][ T7728] bridge0: entered allmulticast mode
[  102.496155][ T7730] bond3: option tlb_dynamic_lb: invalid value (5)
[  102.498985][ T7730] bond3 (unregistering): Released all slaves
[  102.759157][ T7734] __nla_validate_parse: 11 callbacks suppressed
[  102.759167][ T7734] netlink: 72 bytes leftover after parsing attributes in process `syz.0.465'.
[  102.949615][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'.
[  102.957921][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'.
[  102.958069][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  102.964024][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  102.967101][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  102.969678][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  103.145696][ T7758] netlink: 'syz.0.470': attribute type 1 has an invalid length.
[  103.153916][ T7758] netlink: 224 bytes leftover after parsing attributes in process `syz.0.470'.
[  103.164040][ T7758] netlink: 'syz.0.470': attribute type 10 has an invalid length.
[  103.166777][ T7758] netlink: 'syz.0.470': attribute type 10 has an invalid length.
[  103.209237][ T7761] netlink: 2 bytes leftover after parsing attributes in process `syz.0.471'.
[  103.232118][ T7751] netlink: 64 bytes leftover after parsing attributes in process `syz.1.468'.
[  103.279878][ T7751] syzkaller0: entered promiscuous mode
[  103.281692][ T7751] syzkaller0: entered allmulticast mode
[  103.396311][ T7779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.456102][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.476'.
[  104.297769][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'.
[  104.414133][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.477'.
[  104.482540][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'.
[  104.617273][ T7806] netlink: 'syz.0.480': attribute type 3 has an invalid length.
[  104.630594][ T7806] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  104.637672][ T7806] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  104.642719][ T7806] tipc: Resetting bearer <eth:syzkaller0>
[  104.704293][ T7814] netlink: 'syz.0.484': attribute type 32 has an invalid length.
[  104.717017][ T7818] netlink: 'syz.1.483': attribute type 8 has an invalid length.
[  104.797001][ T7830] sctp: [Deprecated]: syz.1.487 (pid 7830) Use of struct sctp_assoc_value in delayed_ack socket option.
[  104.797001][ T7830] Use struct sctp_sack_info instead
[  104.921496][ T7841] netlink: 'syz.0.491': attribute type 1 has an invalid length.
[  105.144057][ T7869] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.146616][ T7869] d: renamed from syzkaller0
[  105.149827][ T7869] tipc: Disabling bearer <eth:syzkaller0>
[  105.260775][ T7876] netlink: 'syz.0.502': attribute type 1 has an invalid length.
[  105.385801][ T7885] syzkaller0: entered promiscuous mode
[  105.387663][ T7885] syzkaller0: entered allmulticast mode
[  106.137648][ T7880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  106.140711][ T7879] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  106.374729][ T7909] sctp: [Deprecated]: syz.1.511 (pid 7909) Use of int in maxseg socket option.
[  106.374729][ T7909] Use struct sctp_assoc_value instead
[  106.471838][ T7914] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  106.475865][ T7914] bond8 (unregistering): Released all slaves
[  106.860608][ T7936] veth0_vlan: entered allmulticast mode
[  107.185057][ T7939] netlink: 'syz.0.521': attribute type 3 has an invalid length.
[  107.240401][ T7948] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  107.247785][ T7948] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  108.037950][ T5876] wlan0: Trigger new scan to find an IBSS to join
[  108.098183][ T7985] __nla_validate_parse: 15 callbacks suppressed
[  108.098194][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.534'.
[  108.165486][ T7998] xt_l2tp: invalid flags combination: 8
[  108.199901][ T7985] netlink: 'syz.0.534': attribute type 1 has an invalid length.
[  108.200258][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.537'.
[  108.224531][ T7985] gre0: entered promiscuous mode
[  108.229621][ T7985] gre0: entered allmulticast mode
[  108.241447][ T8002] bridge0: port 1(vlan3) entered blocking state
[  108.244547][ T8002] bridge0: port 1(vlan3) entered disabled state
[  108.247457][ T8002] vlan3: entered allmulticast mode
[  108.250265][ T8002] geneve0: entered allmulticast mode
[  108.254879][ T8002] vlan3: entered promiscuous mode
[  108.257001][ T8002] geneve0: entered promiscuous mode
[  108.364431][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'.
[  108.366493][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'.
[  108.367290][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'.
[  108.373971][ T8008] netlink: 'syz.2.539': attribute type 19 has an invalid length.
[  108.377031][ T8008] netlink: 'syz.2.539': attribute type 20 has an invalid length.
[  108.450607][ T8014] pim6reg1: entered promiscuous mode
[  108.456171][ T8014] pim6reg1: entered allmulticast mode
[  108.620746][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.546'.
[  108.708270][ T8036] netlink: 44 bytes leftover after parsing attributes in process `syz.0.549'.
[  108.721711][ T8036] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  108.761006][ T8044] netlink: 'syz.0.551': attribute type 1 has an invalid length.
[  108.789989][ T8044] bond8: entered promiscuous mode
[  108.794238][ T8044] 8021q: adding VLAN 0 to HW filter on device bond8
[  108.810873][ T8048] netlink: 200 bytes leftover after parsing attributes in process `syz.1.552'.
[  108.820796][ T8044] 8021q: adding VLAN 0 to HW filter on device bond8
[  108.824308][ T8044] bond8: (slave vti0): The slave device specified does not support setting the MAC address
[  108.827989][ T8044] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  108.832395][ T8044] bond8: (slave vti0): making interface the new active one
[  108.837294][ T8044] vti0: entered promiscuous mode
[  108.840742][ T8044] bond8: (slave vti0): Enslaving as an active interface with an up link
[  108.940812][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'.
[  108.947451][ T8059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.556'.
[  109.014323][ T8068] Bluetooth: MGMT ver 1.23
[  109.049808][   T33] audit: type=1804 audit(1780021167.269:4): pid=8070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.559" name="/newroot/188/memory.events" dev="tmpfs" ino=980 res=1 errno=0
[  109.063276][   T33] audit: type=1800 audit(1780021167.269:5): pid=8070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.559" name="memory.events" dev="tmpfs" ino=980 res=0 errno=0
[  109.212460][ T8082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.828774][ T8098] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  109.981619][ T8113] macsec1: entered promiscuous mode
[  109.986466][ T8113] gretap0: entered promiscuous mode
[  109.988502][ T8113] macsec1: entered allmulticast mode
[  109.990237][ T8113] gretap0: entered allmulticast mode
[  109.993498][ T8113] gretap0: left allmulticast mode
[  109.995477][ T8113] gretap0: left promiscuous mode
[  110.105257][ T8128] syzkaller1: entered promiscuous mode
[  110.109054][ T8128] syzkaller1: entered allmulticast mode
[  110.381516][ T8161] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  110.838681][ T8194] bond8: option lacp_rate: invalid value (128)
[  110.842639][ T8194] bond8 (unregistering): Released all slaves
[  110.993022][   T36] wlan0: Trigger new scan to find an IBSS to join
[  111.021624][ T8206] team0: Port device team_slave_0 removed
[  111.196847][ T8218] xt_hashlimit: size too large, truncated to 1048576
[  111.450914][ T8231] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  111.461314][ T8231] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  111.487627][ T8229] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  111.626166][ T8242] netlink: 'syz.2.594': attribute type 1 has an invalid length.
[  111.656256][ T8242] 8021q: adding VLAN 0 to HW filter on device bond3
[  111.663436][ T8242] netlink: 'syz.2.594': attribute type 1 has an invalid length.
[  111.676188][ T8242] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  111.679944][ T8242] gretap2: entered allmulticast mode
[  111.734675][ T8249] bond9: option all_slaves_active: invalid value (127)
[  111.738706][ T8249] bond9 (unregistering): Released all slaves
[  111.764248][ T8242] bond3: (slave bridge2): making interface the new active one
[  111.769521][ T8242] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  111.777496][ T8252] nbd: socks must be embedded in a SOCK_ITEM attr
[  111.810595][ T8249] netlink: 'syz.0.596': attribute type 2 has an invalid length.
[  111.813122][ T8249] netlink: 'syz.0.596': attribute type 1 has an invalid length.
[  111.815627][ T8249] netlink: 'syz.0.596': attribute type 1 has an invalid length.
[  111.889890][ T8262] Bluetooth: MGMT ver 1.23
[  111.941041][ T8255] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.945060][ T8255] 8021q: adding VLAN 0 to HW filter on device team0
[  112.186509][ T8281] bridge0: port 1(ipvlan1) entered blocking state
[  112.188695][ T8281] bridge0: port 1(ipvlan1) entered disabled state
[  112.191187][ T8281] ipvlan1: entered allmulticast mode
[  112.193598][ T8281] bridge0: entered allmulticast mode
[  112.201539][ T8281] ipvlan1: left allmulticast mode
[  112.204300][ T8281] bridge0: left allmulticast mode
[  112.229285][ T8291] bridge_slave_0: left allmulticast mode
[  112.232065][ T8291] bridge_slave_0: left promiscuous mode
[  112.238152][ T8291] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.243000][ T8291] bridge_slave_1: left allmulticast mode
[  112.245285][ T8291] bridge_slave_1: left promiscuous mode
[  112.249055][ T8291] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.258915][ T8291] bond0: (slave bond_slave_0): Releasing backup interface
[  112.263514][ T8291] team_slave_0: left promiscuous mode
[  112.267102][ T8291] team0: Port device team_slave_0 removed
[  112.269888][ T8291] team_slave_1: left promiscuous mode
[  112.274604][ T8291] team0: Port device team_slave_1 removed
[  112.277168][ T8291] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.280740][ T8291] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.284705][ T8291] tipc: Resetting bearer <eth:syzkaller0>
[  112.288116][ T8291] bond2: (slave gretap3): Releasing active interface
[  112.294399][ T8291] bond8: (slave vti0): Releasing backup interface
[  112.297007][ T8291] vti0: left promiscuous mode
[  112.325699][ T8283] ip6gre1: entered allmulticast mode
[  112.329835][ T8283] ip6gre1: entered promiscuous mode
[  112.333419][ T8283] team0: Port device ip6gre1 added
[  113.185000][ T8366] __nla_validate_parse: 29 callbacks suppressed
[  113.185014][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'.
[  113.260381][ T8368] netlink: 'syz.0.625': attribute type 11 has an invalid length.
[  113.316510][ T8370] bond0: (slave bond_slave_1): Releasing backup interface
[  113.331576][ T8370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.626'.
[  113.340532][ T8374] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  113.481468][ T8388] netlink: 'syz.2.632': attribute type 1 has an invalid length.
[  113.491954][ T8388] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  113.548661][ T8402] syzkaller1: entered promiscuous mode
[  113.558291][ T8402] syzkaller1: entered allmulticast mode
[  113.665052][ T8408] veth0_macvtap: entered allmulticast mode
[  113.680716][ T8408] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  113.744444][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'.
[  113.751412][ T8417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.754877][ T8416] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  113.806252][ T8417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.844824][ T8421] netlink: 132 bytes leftover after parsing attributes in process `syz.1.640'.
[  113.860812][ T8417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.033405][ T5876] wlan0: Trigger new scan to find an IBSS to join
[  114.386729][ T8423] IPv6: Can't replace route, no match found
[  114.389973][ T8423] netlink: 'syz.0.641': attribute type 7 has an invalid length.
[  114.394211][ T8423] netlink: 'syz.0.641': attribute type 7 has an invalid length.
[  114.399197][ T8423] netlink: 68 bytes leftover after parsing attributes in process `syz.0.641'.
[  114.427488][ T8428] netlink: 72 bytes leftover after parsing attributes in process `syz.2.643'.
[  114.450057][ T8430] netlink: 'syz.0.644': attribute type 1 has an invalid length.
[  114.471149][ T8432] netlink: 20 bytes leftover after parsing attributes in process `syz.2.645'.
[  114.482595][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.645'.
[  114.487501][ T8432] netlink: 32 bytes leftover after parsing attributes in process `syz.2.645'.
[  114.500290][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'.
[  114.591483][ T8442] netlink: 'syz.2.649': attribute type 4 has an invalid length.
[  114.933991][ T5885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.951463][ T8466] bond8: option fail_over_mac: invalid value (127)
[  114.956720][ T8466] bond8 (unregistering): Released all slaves
[  115.291822][ T8477] netlink: 'syz.1.660': attribute type 1 has an invalid length.
[  115.291830][ T8478] netlink: 'syz.1.660': attribute type 1 has an invalid length.
[  115.324956][ T8477] 8021q: adding VLAN 0 to HW filter on device bond9
[  115.328647][ T8477] bond8: (slave bond9): making interface the new active one
[  115.331516][ T8477] bond8: (slave bond9): Enslaving as an active interface with an up link
[  115.602197][ T8492] netlink: 'syz.2.664': attribute type 1 has an invalid length.
[  115.661967][ T8492] 8021q: adding VLAN 0 to HW filter on device bond6
[  115.703269][ T5616] Bluetooth: hci2: link tx timeout
[  115.706444][ T5616] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.208969][ T8533] netlink: 'syz.1.674': attribute type 12 has an invalid length.
[  116.239214][ T8541] netlink: 'syz.2.675': attribute type 3 has an invalid length.
[  116.274067][ T8535] block nbd0: server does not support multiple connections per device.
[  116.282024][ T8535] block nbd0: shutting down sockets
[  116.311991][ T8545] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  116.319375][ T8545] bond7 (unregistering): Released all slaves
[  116.341390][ T8543] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  117.143151][ T8583] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  117.152540][ T8583] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  117.166835][ T8583] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  117.420505][ T8609] vlan4: entered promiscuous mode
[  117.422685][ T8609] bridge0: entered promiscuous mode
[  117.459587][ T8617] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.501155][ T8614] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  117.713624][ T5002] Bluetooth: hci2: command 0x0406 tx timeout
[  118.352655][ T8651] __nla_validate_parse: 16 callbacks suppressed
[  118.352671][ T8651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.706'.
[  118.380515][ T8650] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  118.397208][ T8651] ip6gre1: entered promiscuous mode
[  118.400619][ T8651] ip6gre1: entered allmulticast mode
[  118.418481][ T8646] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.706'.
[  118.422832][ T8646] ksmbd: Unknown IPC event: 1, ignore.
[  118.423320][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.707'.
[  118.445668][ T8646] netlink: 72 bytes leftover after parsing attributes in process `syz.2.706'.
[  118.456128][ T8646] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  118.460111][ T8646] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  118.527084][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'.
[  118.590008][ T8665] validate_nla: 4 callbacks suppressed
[  118.590018][ T8665] netlink: 'syz.0.711': attribute type 3 has an invalid length.
[  118.668934][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'.
[  118.727202][ T8672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.714'.
[  119.047608][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'.
[  119.105006][ T8687] syzkaller1: entered promiscuous mode
[  119.106855][ T8687] syzkaller1: entered allmulticast mode
[  119.224770][ T8692] netlink: 'syz.0.721': attribute type 3 has an invalid length.
[  119.290505][ T8698] bond10: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  119.296990][ T8698] bond10 (unregistering): Released all slaves
[  119.450734][ T8710] netlink: 'syz.0.727': attribute type 1 has an invalid length.
[  119.500903][ T8710] 8021q: adding VLAN 0 to HW filter on device bond11
[  119.506870][ T8710] bond10: (slave bond11): making interface the new active one
[  119.513934][ T8710] bond10: (slave bond11): Enslaving as an active interface with an up link
[  119.531889][ T8710] netlink: 104 bytes leftover after parsing attributes in process `syz.0.727'.
[  119.551603][ T8718] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  119.566411][ T8720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.730'.
[  119.579694][ T8716] xt_hashlimit: size too large, truncated to 1048576
[  119.583314][ T8718] netlink: 'syz.2.729': attribute type 10 has an invalid length.
[  119.648050][ T8720] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  119.695743][ T8720] bond12 (unregistering): Released all slaves
[  119.782011][ T8736] xt_time: invalid argument - start or stop time greater than 23:59:59
[  119.807548][ T8738] pimreg: entered allmulticast mode
[  119.922285][ T8747] 8021q: adding VLAN 0 to HW filter on device bond10
[  120.297650][ T8761] pim6reg1: entered promiscuous mode
[  120.299955][ T8761] pim6reg1: entered allmulticast mode
[  120.372359][ T8768] netlink: 'syz.1.742': attribute type 12 has an invalid length.
[  120.499774][ T8775] netlink: 'syz.2.745': attribute type 4 has an invalid length.
[  120.508830][ T8775] netlink: 'syz.2.745': attribute type 4 has an invalid length.
[  120.619104][   T33] audit: type=1804 audit(1780021178.839:6): pid=8782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.747" name="/newroot/246/cgroup.controllers" dev="tmpfs" ino=1276 res=1 errno=0
[  120.630774][   T33] audit: type=1800 audit(1780021178.849:7): pid=8782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.747" name="cgroup.controllers" dev="tmpfs" ino=1276 res=0 errno=0
[  120.645056][   T33] audit: type=1800 audit(1780021178.849:8): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.747" name="cgroup.controllers" dev="tmpfs" ino=1276 res=0 errno=0
[  120.784885][ T8797] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  120.789965][ T8797] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  120.798144][ T8797] tipc: Resetting bearer <eth:syzkaller0>
[  123.553459][ T8777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  123.631414][ T8808] openvswitch: netlink: IP tunnel dst address not specified
[  123.717336][ T8818] __nla_validate_parse: 13 callbacks suppressed
[  123.717352][ T8818] netlink: 64 bytes leftover after parsing attributes in process `syz.0.758'.
[  123.751291][ T8819] sctp: [Deprecated]: syz.2.757 (pid 8819) Use of int in max_burst socket option.
[  123.751291][ T8819] Use struct sctp_assoc_value instead
[  123.783499][ T8825] netlink: 'syz.0.760': attribute type 4 has an invalid length.
[  123.785980][ T8826] bridge0: entered allmulticast mode
[  123.793564][ T8825] netlink: 17 bytes leftover after parsing attributes in process `syz.0.760'.
[  123.798212][ T8826] vlan3: left allmulticast mode
[  123.800299][ T8826] geneve0: left allmulticast mode
[  123.802451][ T8826] vlan3: left promiscuous mode
[  123.805256][ T8826] geneve0: left promiscuous mode
[  123.809030][ T8826] bridge0: port 1(vlan3) entered disabled state
[  123.814272][ T8826] bridge_slave_1: left allmulticast mode
[  123.816520][ T8826] bridge_slave_1: left promiscuous mode
[  123.818798][ T8826] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.908423][ T8832] bond11: option tlb_dynamic_lb: invalid value (5)
[  123.931605][ T8832] bond11 (unregistering): Released all slaves
[  123.989855][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.764'.
[  124.049747][ T8846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.766'.
[  124.049969][ T8842] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.765'.
[  124.129343][   T33] audit: type=1107 audit(1780021182.349:9): pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='zɐ0D!e!C2_:4K'}oEǁoh x'
[  124.132638][ T8848] syzkaller1: entered promiscuous mode
[  124.141243][ T8848] syzkaller1: entered allmulticast mode
[  124.145241][   T33] audit: type=1107 audit(1780021182.369:10): pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='F#,!~4"-EDR:29+hUHzkEsٖV7naFw59@D(9ց\U&#kX`QQX\+HmprM[w*9O>[\4
[  124.145241][   T33] v'
[  124.165120][ T8851] netlink: 'syz.0.768': attribute type 9 has an invalid length.
[  124.249810][ T8862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.772'.
[  124.300530][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'.
[  124.305790][ T8869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.774'.
[  124.413077][ T8878] netlink: 80 bytes leftover after parsing attributes in process `syz.1.777'.
[  124.418785][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.777'.
[  124.588199][ T8891] netlink: 'syz.2.782': attribute type 1 has an invalid length.
[  124.618988][ T8891] 8021q: adding VLAN 0 to HW filter on device bond7
[  124.647350][ T8891] bond7: (slave veth3): Enslaving as an active interface with a down link
[  124.660108][ T8891] bond7: (slave dummy0): making interface the new active one
[  124.669872][ T8891] dummy0: entered promiscuous mode
[  124.672430][ T8891] bond7: (slave dummy0): Enslaving as an active interface with an up link
[  124.687739][ T8891] bond7: (slave dummy0): Releasing active interface
[  124.690143][ T8891] dummy0 (unregistering): left promiscuous mode
[  124.835297][   T55] block nbd0: Receive control failed (result -32)
[  124.835728][ T8898] block nbd0: Receive control failed (result -32)
[  124.989195][ T8916] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.992645][ T8917] syzkaller0: entered promiscuous mode
[  124.995827][ T8917] syzkaller0: entered allmulticast mode
[  125.010056][ T8917] tipc: Resetting bearer <eth:syzkaller0>
[  125.026433][ T8917] tipc: Disabling bearer <eth:syzkaller0>
[  125.100088][ T8926] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.129827][ T8926] tipc: Disabling bearer <eth:syzkaller0>
[  125.263668][ T8938] xt_bpf: check failed: parse error
[  125.387568][ T8946] netlink: 'syz.0.797': attribute type 4 has an invalid length.
[  126.387613][ T8977] netlink: 'syz.0.810': attribute type 10 has an invalid length.
[  126.396257][ T8977] syz_tun: entered promiscuous mode
[  126.437165][ T8977] netlink: 'syz.0.810': attribute type 1 has an invalid length.
[  126.515923][ T8988] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  126.519461][ T8988] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  126.524006][ T8988] tipc: Resetting bearer <eth:syzkaller0>
[  126.599281][ T8990] geneve3: entered promiscuous mode
[  126.611748][ T5667] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.614701][ T5667] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.620476][ T5667] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.624850][ T5667] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.001649][ T9011] netlink: 'syz.1.819': attribute type 1 has an invalid length.
[  127.014813][ T9011] 8021q: adding VLAN 0 to HW filter on device bond11
[  127.030621][ T9011] bond11: (slave batadv1): Opening slave failed
[  127.612804][ T9025] netlink: 'syz.2.824': attribute type 1 has an invalid length.
[  127.642216][ T9025] 8021q: adding VLAN 0 to HW filter on device bond8
[  127.792675][ T9043] netlink: 'syz.1.829': attribute type 1 has an invalid length.
[  127.816582][ T9043] bond12: entered promiscuous mode
[  127.818631][ T9043] 8021q: adding VLAN 0 to HW filter on device bond12
[  127.833076][ T9043] bond12: (slave bridge0): making interface the new active one
[  127.836228][ T9043] bridge0: entered promiscuous mode
[  127.839522][ T9043] bond12: (slave bridge0): Enslaving as an active interface with an up link
[  127.909662][ T9052] netlink: 'syz.0.831': attribute type 1 has an invalid length.
[  128.067412][   T33] audit: type=1804 audit(1780021186.289:11): pid=9069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.836" name="/newroot/274/cgroup.controllers" dev="tmpfs" ino=1420 res=1 errno=0
[  128.087726][   T33] audit: type=1800 audit(1780021186.289:12): pid=9069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.836" name="cgroup.controllers" dev="tmpfs" ino=1420 res=0 errno=0
[  128.108761][   T33] audit: type=1804 audit(1780021186.299:13): pid=9069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.836" name="/newroot/274/cgroup.controllers" dev="tmpfs" ino=1420 res=1 errno=0
[  128.665949][ T9113] syzkaller0: entered promiscuous mode
[  128.668120][ T9113] syzkaller0: entered allmulticast mode
[  128.800862][ T9118] syzkaller0: entered promiscuous mode
[  128.803211][ T9118] syzkaller0: entered allmulticast mode
[  128.855158][ T9124] SET target dimension over the limit!
[  128.988717][ T9133] __nla_validate_parse: 32 callbacks suppressed
[  128.988725][ T9133] netlink: 108 bytes leftover after parsing attributes in process `syz.2.855'.
[  129.064210][ T9140] bond9: option xmit_hash_policy: invalid value (10)
[  129.067618][ T9140] bond9 (unregistering): Released all slaves
[  129.177676][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'.
[  129.193113][ T9150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.859'.
[  129.196318][ T9150] IPv6: NLM_F_CREATE should be specified when creating new route
[  129.254260][ T9152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.860'.
[  129.257811][ T9152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.860'.
[  129.261497][ T9152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.860'.
[  129.265236][ T9152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.860'.
[  129.283744][ T9152] netlink: 104 bytes leftover after parsing attributes in process `syz.2.860'.
[  129.371016][ T9156] xt_connbytes: Forcing CT accounting to be enabled
[  129.481696][ T9167] netlink: 56 bytes leftover after parsing attributes in process `syz.2.865'.
[  129.569245][ T9170] tipc: Resetting bearer <eth:syzkaller0>
[  129.658874][ T9184] validate_nla: 1 callbacks suppressed
[  129.658883][ T9184] netlink: 'syz.0.868': attribute type 1 has an invalid length.
[  129.685570][ T9184] bond13: entered promiscuous mode
[  129.687483][ T9184] 8021q: adding VLAN 0 to HW filter on device bond13
[  129.859155][ T9204] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20001
[  129.910082][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'.
[  129.957486][ T9212] bond0: (slave bond_slave_0): Releasing backup interface
[  129.969719][ T9212] team0: Port device team_slave_1 removed
[  129.979962][ T9212] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.991824][ T9212] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.003500][ T9212] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  130.036536][ T9212] ip6gre3: entered allmulticast mode
[  130.039614][ T9212] team0: Port device ip6gre3 added
[  130.169105][ T9228] netlink: 'syz.1.876': attribute type 11 has an invalid length.
[  131.055549][ T9268] netlink: 'syz.0.887': attribute type 21 has an invalid length.
[  131.086076][ T9272] netlink: 'syz.2.888': attribute type 13 has an invalid length.
[  131.094753][ T9272] netlink: 'syz.2.888': attribute type 17 has an invalid length.
[  131.453191][ T9268] netlink: 'syz.0.887': attribute type 4 has an invalid length.
[  131.459768][ T9268] netlink: 'syz.0.887': attribute type 5 has an invalid length.
[  131.566809][ T9272] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.571048][ T9272] 8021q: adding VLAN 0 to HW filter on device team0
[  131.655778][ T9272] veth1_virt_wifi: left allmulticast mode
[  131.661989][ T9272] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  131.681720][ T9235] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.684625][ T9235] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.687907][ T9235] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.692242][ T9235] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.804954][ T9328] netlink: 'syz.0.895': attribute type 1 has an invalid length.
[  131.861417][ T9328] bond14: entered promiscuous mode
[  131.865091][ T9328] bond14: entered allmulticast mode
[  131.867477][ T9328] 8021q: adding VLAN 0 to HW filter on device bond14
[  131.885500][ T9328] erspan1: entered allmulticast mode
[  131.901215][ T9328] bond14: (slave erspan1): making interface the new active one
[  131.909526][ T9328] erspan1: entered promiscuous mode
[  131.917869][ T9328] bond14: (slave erspan1): Enslaving as an active interface with an up link
[  131.926609][ T9328] syz.0.895 (9328) used greatest stack depth: 20024 bytes left
[  131.972150][ T9345] netlink: 'syz.1.897': attribute type 9 has an invalid length.
[  131.994769][ T9348] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  132.055509][ T9354] d: renamed from syzkaller0
[  132.179137][ T9366] 8021q: adding VLAN 0 to HW filter on device bond15
[  132.181656][ T9365] batadv_slave_1: entered promiscuous mode
[  132.185564][ T9366] bond15: Unable to set down delay as MII monitoring is disabled
[  132.259339][ T9363] batadv_slave_1: left promiscuous mode
[  132.302597][ T9382] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.539376][ T9410] bridge39: entered promiscuous mode
[  132.541521][ T9410] bridge39: entered allmulticast mode
[  133.506070][ T9416] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  133.508437][ T9416] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  133.589969][ T9419] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  133.592383][ T9419] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  133.595977][ T9419] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1806) !
[  135.394207][ T9409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  135.538814][ T9439] __nla_validate_parse: 11 callbacks suppressed
[  135.538823][ T9439] netlink: 44 bytes leftover after parsing attributes in process `syz.2.920'.
[  135.555953][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'.
[  135.558012][ T9425] netlink: 14 bytes leftover after parsing attributes in process `syz.0.915'.
[  135.559341][ T9436] netlink: 14 bytes leftover after parsing attributes in process `syz.0.915'.
[  135.610032][ T9441] netlink: 144 bytes leftover after parsing attributes in process `syz.1.921'.
[  135.833457][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.925'.
[  135.874148][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.927'.
[  135.885311][ T9459] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.927'.
[  135.886241][ T9461] netlink: 104 bytes leftover after parsing attributes in process `syz.2.926'.
[  135.941888][ T9463] netlink: 'syz.0.929': attribute type 1 has an invalid length.
[  135.967491][ T9463] 8021q: adding VLAN 0 to HW filter on device bond16
[  136.018053][ T9470] netlink: 'syz.1.930': attribute type 9 has an invalid length.
[  136.042213][ T9477] netlink: 'syz.2.932': attribute type 8 has an invalid length.
[  136.050787][ T9463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.174443][ T9496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.937'.
[  136.600059][ T9531] netlink: 'syz.0.947': attribute type 1 has an invalid length.
[  136.958202][ T9546] netlink: 'syz.0.952': attribute type 22 has an invalid length.
[  137.311026][ T9559] netlink: 'syz.1.955': attribute type 1 has an invalid length.
[  137.316141][ T9557] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20002
[  137.543336][ T9564] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  137.546206][ T9564] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  137.994108][ T9613] netlink: 'syz.2.965': attribute type 89 has an invalid length.
[  138.030454][ T9616] netem: change failed
[  138.035297][ T9616] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  138.040354][ T9616] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  138.271164][ T9631] bridge0: entered allmulticast mode
[  138.615665][ T9673] netlink: 'syz.2.979': attribute type 1 has an invalid length.
[  138.621085][ T9673] netlink: 'syz.2.979': attribute type 2 has an invalid length.
[  138.626199][ T9673] netlink: 'syz.2.979': attribute type 1 has an invalid length.
[  138.630940][ T9667] 8021q: VLANs not supported on vxcan0
[  138.635249][ T9674] 8021q: VLANs not supported on vxcan0
[  138.686322][ T9676] 8021q: adding VLAN 0 to HW filter on device bond9
[  138.720035][ T9676] 8021q: adding VLAN 0 to HW filter on device bond10
[  138.745399][ T9676] 8021q: adding VLAN 0 to HW filter on device bond11
[  138.796059][ T9676] 8021q: adding VLAN 0 to HW filter on device bond12
[  138.810058][ T9676] 8021q: adding VLAN 0 to HW filter on device bond13
[  138.844538][ T9688] bond17: (slave bridge40): Enslaving as an active interface with an up link
[  138.879809][ T9676] 8021q: adding VLAN 0 to HW filter on device bond14
[  138.906978][ T9676] 8021q: adding VLAN 0 to HW filter on device bond15
[  138.942213][ T9676] 8021q: adding VLAN 0 to HW filter on device bond16
[  138.962514][ T9676] 8021q: adding VLAN 0 to HW filter on device bond17
[  138.992759][ T9676] 8021q: adding VLAN 0 to HW filter on device bond18
[  139.000369][ T9697] bridge0: entered allmulticast mode
[  139.031515][ T9676] 8021q: adding VLAN 0 to HW filter on device bond19
[  139.040424][ T9697] bond12: (slave bridge0): Releasing backup interface
[  139.043729][ T9697] bridge0 (unregistering): left promiscuous mode
[  139.111764][ T9676] 8021q: adding VLAN 0 to HW filter on device bond20
[  139.137400][ T9676] 8021q: adding VLAN 0 to HW filter on device bond21
[  139.150154][ T9676] 8021q: adding VLAN 0 to HW filter on device bond22
[  139.175407][ T9676] 8021q: adding VLAN 0 to HW filter on device bond23
[  139.188981][ T9676] 8021q: adding VLAN 0 to HW filter on device bond24
[  139.208628][ T9676] 8021q: adding VLAN 0 to HW filter on device bond25
[  139.263571][ T9676] 8021q: adding VLAN 0 to HW filter on device bond26
[  139.310697][ T9676] 8021q: adding VLAN 0 to HW filter on device bond27
[  139.343541][ T9676] 8021q: adding VLAN 0 to HW filter on device bond28
[  139.385365][ T9676] 8021q: adding VLAN 0 to HW filter on device bond29
[  139.413318][ T9676] 8021q: adding VLAN 0 to HW filter on device bond30
[  139.443830][ T9676] 8021q: adding VLAN 0 to HW filter on device bond31
[  139.460978][ T9676] 8021q: adding VLAN 0 to HW filter on device bond32
[  139.506815][ T9676] 8021q: adding VLAN 0 to HW filter on device bond33
[  139.571598][ T9750] ip6gre1: left promiscuous mode
[  139.582661][ T9750] team0: Port device ip6gre1 removed
[  139.595343][ T9750] bond10: (slave bond11): Releasing backup interface
[  139.608529][ T9750] bond14: (slave erspan1): Releasing active interface
[  139.617292][ T9750] erspan1: left promiscuous mode
[  139.641173][ T9750] bond17: (slave bridge40): Releasing backup interface
[  139.722604][ T9762] bond1: (slave lo): Releasing backup interface
[  139.726855][ T9762] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  139.731461][ T9762] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  139.788881][ T9768] tipc: Can't bind to reserved service type 1
[  140.587191][ T9799] __nla_validate_parse: 31 callbacks suppressed
[  140.587206][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1008'.
[  140.661495][ T9806] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  140.673080][ T9806] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  140.890952][ T9828] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  140.955101][ T9835] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1018'.
[  141.279151][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1022'.
[  141.310451][ T9872] bond34: option tlb_dynamic_lb: invalid value (5)
[  141.314016][ T9872] bond34 (unregistering): Released all slaves
[  141.757032][ T9879] validate_nla: 7 callbacks suppressed
[  141.757051][ T9879] netlink: 'syz.1.1024': attribute type 1 has an invalid length.
[  141.781276][ T9879] 8021q: adding VLAN 0 to HW filter on device bond14
[  141.790040][ T9879] bond14: (slave macvlan0): Enslaving as an active interface with a down link
[  141.837625][ T9882] x_tables: duplicate underflow at hook 2
[  141.876408][ T9884] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1026'.
[  141.879375][ T9884] netlink: 'syz.1.1026': attribute type 1 has an invalid length.
[  141.881856][ T9884] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1026'.
[  141.917899][ T9886] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  141.952424][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1028'.
[  142.076491][ T9898] trusted_key: syz.1.1028 sent an empty control message without MSG_MORE.
[  142.081939][ T9898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1028'.
[  142.120013][ T9897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1031'.
[  142.147539][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1031'.
[  142.181327][ T9896] netlink: 'syz.0.1031': attribute type 4 has an invalid length.
[  142.226205][ T9916] lo: entered allmulticast mode
[  142.227977][ T9916] lo: left allmulticast mode
[  142.269975][ T9920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1037'.
[  142.274377][ T9915] netlink: 'syz.2.1035': attribute type 3 has an invalid length.
[  142.277842][ T9920] netlink: 'syz.0.1037': attribute type 16 has an invalid length.
[  142.280330][ T9920] netlink: 'syz.0.1037': attribute type 17 has an invalid length.
[  142.286910][ T9920] gre0: left promiscuous mode
[  142.288581][ T9920] gre0: left allmulticast mode
[  142.304482][ T9920] syz_tun: left promiscuous mode
[  142.310611][ T9920] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.313708][ T9920] 8021q: adding VLAN 0 to HW filter on device team0
[  142.317732][ T9920] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.352820][ T9920] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  142.589129][ T9932] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  142.824113][ T9943] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4
[  143.559534][ T9976] pimreg: left allmulticast mode
[  143.730953][ T9975] syz_tun: entered allmulticast mode
[  143.957285][ T9995] netlink: 'syz.0.1059': attribute type 3 has an invalid length.
[  143.967593][ T9995] nbd: nbd0 already in use
[  143.969907][ T9995] block nbd0: NBD_DISCONNECT
[  143.971886][ T9995] block nbd0: Send disconnect failed -32
[  143.977689][ T9995] block nbd0: Send disconnect failed -32
[  143.981268][ T9995] block nbd0: shutting down sockets
[  144.046104][ T9995] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  144.065227][T10002] tunl0: entered allmulticast mode
[  144.151870][T10005] netlink: 'syz.2.1061': attribute type 11 has an invalid length.
[  144.206030][T10011] netlink: 'syz.0.1064': attribute type 2 has an invalid length.
[  144.210668][T10011] netlink: 'syz.0.1064': attribute type 2 has an invalid length.
[  144.519678][T10025] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  144.522583][T10025] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  144.983498][T10027] ipvlan2: entered promiscuous mode
[  145.288834][T10051] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  145.292023][T10051] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  145.294894][T10052] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  145.399950][T10059] xt_CT: No such helper "netbios-ns"
[  145.500621][T10075] Cannot find del_set index 0 as target
[  145.798881][T10100] netlink: del zone limit has 8 unknown bytes
[  145.916681][T10111] syzkaller0: entered promiscuous mode
[  145.920198][T10111] syzkaller0: entered allmulticast mode
[  145.927337][T10111] __nla_validate_parse: 21 callbacks suppressed
[  145.927345][T10111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1093'.
[  145.937464][T10111] tunl0: Caught tx_queue_len zero misconfig
[  145.944858][T10113] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  146.164114][T10119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.183789][T10119] syzkaller0: entered promiscuous mode
[  146.185576][T10119] syzkaller0: entered allmulticast mode
[  146.187738][T10119] tipc: Resetting bearer <eth:syzkaller0>
[  146.194774][T10118] tipc: Resetting bearer <eth:syzkaller0>
[  147.005476][T10131] openvswitch: netlink: Actions may not be safe on all matching packets
[  147.332727][T10118] tipc: Disabling bearer <eth:syzkaller0>
[  147.395858][T10136] validate_nla: 2 callbacks suppressed
[  147.395867][T10136] netlink: 'syz.0.1100': attribute type 13 has an invalid length.
[  147.468796][T10138] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1101'.
[  147.495447][T10138] smbdirect: ib_dev[qyz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  147.511134][T10138] smbdirect: ib_dev[qyz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  147.523755][T10138] smbdirect: ib_dev[qyz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  147.552110][T10138] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  147.560459][T10138] infiniband qyz2: RDMA CMA: cma_listen_on_dev, error -98
[  147.583410][T10148] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  147.588790][T10148] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  147.672185][T10153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1105'.
[  147.678616][T10153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1105'.
[  147.684181][T10153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1105'.
[  147.689122][T10153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1105'.
[  147.695299][T10153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1105'.
[  147.699636][T10153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1105'.
[  147.702713][T10153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1105'.
[  147.706989][T10153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1105'.
[  147.868156][T10166] netlink: 'syz.2.1109': attribute type 21 has an invalid length.
[  147.870795][T10166] netlink: 'syz.2.1109': attribute type 4 has an invalid length.
[  147.874138][T10166] netlink: 'syz.2.1109': attribute type 3 has an invalid length.
[  147.932436][T10169] vxcan0: tx address claim with different name
[  148.059544][T10175] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.734566][T10226] netlink: 'syz.0.1120': attribute type 1 has an invalid length.
[  148.835198][T10234] mac80211_hwsim hwsim6 wlan0: Caught tx_queue_len zero misconfig
[  148.838563][T10237] netlink: 'syz.1.1124': attribute type 1 has an invalid length.
[  149.173074][   T32] tipc: Node number set to 1703218648
[  149.952368][   T33] audit: type=1107 audit(1780021208.169:14): pid=10298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='zDJjņF``O&3KMRa;BLPnDm[L(0ݳ8Ƙ7@9,W{_:qA<jܗe`'
[  150.517077][T10327] netlink: 'syz.0.1150': attribute type 3 has an invalid length.
[  150.777453][T10340] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  150.797124][T10340] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  151.118950][T10352] tipc: Resetting bearer <eth:syzkaller0>
[  151.311552][T10363] __nla_validate_parse: 96 callbacks suppressed
[  151.311565][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1158'.
[  151.344304][T10363] bond16: (slave bridge0): Enslaving as an active interface with an up link
[  151.582749][T10374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1160'.
[  151.958702][T10406] netlink: 'syz.0.1169': attribute type 4 has an invalid length.
[  151.976185][T10405] mac80211_hwsim hwsim2 wlan0: Caught tx_queue_len zero misconfig
[  152.127879][T10410] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1170'.
[  152.136046][T10410] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  152.355945][T10432] netlink: 'syz.1.1178': attribute type 3 has an invalid length.
[  152.506189][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1179'.
[  152.522673][T10449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1180'.
[  152.606915][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'.
[  152.609857][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'.
[  152.614020][T10454] netlink: 'syz.2.1182': attribute type 20 has an invalid length.
[  152.616974][T10453] netlink: 'syz.2.1182': attribute type 20 has an invalid length.
[  152.619589][T10454] netlink: 'syz.2.1182': attribute type 21 has an invalid length.
[  152.623039][T10453] netlink: 'syz.2.1182': attribute type 21 has an invalid length.
[  152.654780][T10461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1184'.
[  152.709128][T10470] netlink: 'syz.2.1187': attribute type 1 has an invalid length.
[  152.712196][T10470] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1187'.
[  152.717617][T10470] netlink: 658 bytes leftover after parsing attributes in process `syz.2.1187'.
[  152.773309][T10480] tipc: Enabling <eth:lo> not permitted
[  152.785753][T10480] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  152.811624][T10484] netlink: 'syz.0.1190': attribute type 21 has an invalid length.
[  152.827411][T10484] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  152.829944][T10484] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  152.858974][T10488] xt_hashlimit: size too large, truncated to 1048576
[  152.932553][T10492] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.213742][T10513] netlink: 'syz.2.1199': attribute type 2 has an invalid length.
[  153.444541][T10525] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.448588][T10525] 8021q: adding VLAN 0 to HW filter on device team0
[  153.469923][T10525] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  153.474360][T10525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  153.479078][T10525] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  153.598066][T10537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  153.795421][T10554] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add()
[  154.274674][T10589] vlan1: entered allmulticast mode
[  154.282224][T10589] bond0: entered allmulticast mode
[  154.344907][   T32] qyz2: Port: 1 Link ACTIVE
[  154.555265][T10608] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  154.599146][T10612] ip6tnl3: entered allmulticast mode
[  154.602699][ T9235] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  154.643380][T10614] bond34: option xmit_hash_policy: invalid value (10)
[  154.647695][T10614] bond34 (unregistering): Released all slaves
[  154.666671][T10612] mac80211_hwsim hwsim3 wlan1: Caught tx_queue_len zero misconfig
[  154.677625][T10618] netlink: 'syz.2.1224': attribute type 2 has an invalid length.
[  154.848155][T10626] netlink: 'syz.1.1225': attribute type 4 has an invalid length.
[  154.869312][T10631] netlink: 'syz.2.1229': attribute type 1 has an invalid length.
[  154.886149][T10631] 8021q: adding VLAN 0 to HW filter on device bond34
[  154.901142][T10631] bond34: (slave geneve4): making interface the new active one
[  154.904884][T10631] bond34: (slave geneve4): Enslaving as an active interface with an up link
[  154.907627][ T9235] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.915366][ T9235] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.918339][T10631] syz.2.1229 (10631) used greatest stack depth: 18944 bytes left
[  154.920651][T10635] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.924397][ T9235] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.930882][ T9235] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.285127][T10662] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  155.579140][T10666] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  155.916423][T10699] pim6reg1: entered promiscuous mode
[  155.918763][T10699] pim6reg1: entered allmulticast mode
[  156.107882][T10711] Bluetooth: MGMT ver 1.23
[  156.312638][T10724] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  156.318561][T10724] __nla_validate_parse: 23 callbacks suppressed
[  156.318570][T10724] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1253'.
[  156.325517][T10725] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1253'.
[  156.422545][T10730] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1255'.
[  157.070314][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1263'.
[  157.078949][T10754] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002
[  157.098365][T10750] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1262'.
[  157.140681][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'.
[  157.219996][T10766] xt_CT: You must specify a L4 protocol and not use inversions on it
[  157.220083][T10768] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1267'.
[  157.233919][T10767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.237782][T10767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1266'.
[  157.282834][T10767] bond18: entered promiscuous mode
[  157.285935][T10767] 8021q: adding VLAN 0 to HW filter on device bond18
[  157.302182][T10767] bond18: (slave bridge42): making interface the new active one
[  157.305365][T10767] bridge42: entered promiscuous mode
[  157.308094][T10767] bond18: (slave bridge42): Enslaving as an active interface with an up link
[  157.316003][T10767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1266'.
[  157.349936][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1269'.
[  157.551096][T10791] syzkaller0: entered promiscuous mode
[  157.553384][T10791] syzkaller0: entered allmulticast mode
[  158.114568][ T5002] Bluetooth: hci2: command 0x0406 tx timeout
[  158.117105][ T5616] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  158.411974][T10806] xt_hashlimit: max too large, truncated to 1048576
[  158.603173][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  158.732845][T10793] syzkaller1: entered promiscuous mode
[  158.735806][T10793] syzkaller1: entered allmulticast mode
[  158.954117][T10820] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  159.088704][T10819] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  159.092388][T10820] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  159.101890][T10828] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.126611][T10828] syzkaller0: entered promiscuous mode
[  159.128566][T10828] syzkaller0: entered allmulticast mode
[  159.130848][T10828] tipc: Resetting bearer <eth:syzkaller0>
[  159.206571][T10838] tunl0: Caught tx_queue_len zero misconfig
[  159.252317][T10836] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  159.370405][T10851] netlink: zone id is out of range
[  159.372208][T10851] netlink: get zone limit has 4 unknown bytes
[  159.816918][ T5872] tipc: Resetting bearer <eth:syzkaller0>
[  159.819857][T10822] tipc: Resetting bearer <eth:syzkaller0>
[  160.314907][T10863] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  160.957791][T10822] tipc: Disabling bearer <eth:syzkaller0>
[  160.974132][T10878] ip6erspan1: entered allmulticast mode
[  161.062264][T10880] ip6tnl4: entered allmulticast mode
[  161.069825][T10880] batadv0: Caught tx_queue_len zero misconfig
[  161.322476][T10898] validate_nla: 9 callbacks suppressed
[  161.322493][T10898] netlink: 'syz.1.1305': attribute type 1 has an invalid length.
[  161.328512][T10898] __nla_validate_parse: 11 callbacks suppressed
[  161.328525][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1305'.
[  161.846367][T10922] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1309'.
[  161.850033][T10922] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  161.852845][T10922] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  161.888582][T10926] netlink: 'syz.2.1310': attribute type 11 has an invalid length.
[  161.919480][T10926] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  161.928640][T10926] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  161.931628][T10926] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[  161.975267][T10928] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1311'.
[  162.045914][T10933] netlink: 'syz.0.1313': attribute type 1 has an invalid length.
[  162.067358][T10933] 8021q: adding VLAN 0 to HW filter on device bond19
[  162.100081][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'.
[  162.408400][T10948] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  162.458558][T10953] wg1: Caught tx_queue_len zero misconfig
[  162.595517][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1319'.
[  162.658452][T10965] m1Ie5n: entered promiscuous mode
[  162.664223][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1321'.
[  162.675017][T10965] gretap4: entered allmulticast mode
[  162.865076][T10976] netlink: 'syz.1.1326': attribute type 3 has an invalid length.
[  162.868215][T10976] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1326'.
[  162.875235][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1326'.
[  163.061144][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'.
[  163.218159][T11020] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.273245][T11020] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.299702][T11020] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.337345][T11020] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.346123][T11030] lo: Caught tx_queue_len zero misconfig
[  163.397258][ T5478] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.413809][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.417221][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.434707][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.116232][T11044] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1342'.
[  164.118466][T11042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.532224][T11068] xt_hashlimit: size too large, truncated to 1048576
[  165.289643][T11077] netlink: 'syz.1.1349': attribute type 1 has an invalid length.
[  165.433255][T11077] bond17: entered promiscuous mode
[  165.435231][T11077] 8021q: adding VLAN 0 to HW filter on device bond17
[  165.438188][ T5478] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.443720][ T5478] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.451565][ T5478] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.465762][T11077] bond17: (slave bridge5): making interface the new active one
[  165.468958][T11077] bridge5: entered promiscuous mode
[  165.472053][T11077] bond17: (slave bridge5): Enslaving as an active interface with an up link
[  165.479998][ T5478] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.620632][T11091] netlink: 'syz.1.1352': attribute type 30 has an invalid length.
[  165.632726][T11091] bond18: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  165.638507][T11091] bond18 (unregistering): Released all slaves
[  165.674667][T11093] bridge_slave_1: Caught tx_queue_len zero misconfig
[  166.913397][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  167.241768][T11058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  167.297456][T11102] __nla_validate_parse: 6 callbacks suppressed
[  167.297470][T11102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1354'.
[  167.371584][T11115] netlink: 'syz.2.1357': attribute type 1 has an invalid length.
[  167.381351][T11115] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1357'.
[  167.385543][T11118] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1359'.
[  167.462012][T11129] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1357'.
[  167.569670][T11138] xt_hashlimit: size too large, truncated to 1048576
[  167.579133][T11144] netlink: 'syz.2.1364': attribute type 1 has an invalid length.
[  167.585744][T11144] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1364'.
[  167.643279][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'.
[  167.731588][T11145] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1365'.
[  167.766278][T11154] netlink: 'syz.2.1367': attribute type 3 has an invalid length.
[  167.774392][T11154] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1367'.
[  167.805971][T11158] netlink: 'syz.2.1369': attribute type 7 has an invalid length.
[  167.818698][T11156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.837630][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  167.837661][T11158] netlink: 'syz.2.1369': attribute type 7 has an invalid length.
[  167.841914][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  167.846756][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  167.852648][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  167.938273][T11174] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  168.002709][T11183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'.
[  168.056480][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'.
[  168.151973][T11195] bridge0: port 1(ipvlan3) entered blocking state
[  168.159538][T11195] bridge0: port 1(ipvlan3) entered disabled state
[  168.161738][T11195] ipvlan3: entered allmulticast mode
[  168.164573][T11195] bridge0: entered allmulticast mode
[  168.167782][T11195] ipvlan3: left allmulticast mode
[  168.169815][T11195] bridge0: left allmulticast mode
[  168.184059][T11198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.190099][T11198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.240414][T11212] mac80211_hwsim hwsim12 ;: renamed from wlan0
[  168.246970][T11212] syz.2.1380: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  168.252078][T11212] CPU: 0 UID: 0 PID: 11212 Comm: syz.2.1380 Not tainted syzkaller #0 PREEMPT(full) 
[  168.252088][T11212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.252093][T11212] Call Trace:
[  168.252097][T11212]  <TASK>
[  168.252100][T11212]  dump_stack_lvl+0xe8/0x150
[  168.252114][T11212]  warn_alloc+0x249/0x340
[  168.252126][T11212]  ? stack_trace_save+0xa9/0x100
[  168.252141][T11212]  ? __pfx_warn_alloc+0x10/0x10
[  168.252180][T11212]  ? kasan_save_track+0x4f/0x80
[  168.252191][T11212]  ? kasan_save_track+0x3e/0x80
[  168.252200][T11212]  ? __kasan_kmalloc+0x93/0xb0
[  168.252211][T11212]  ? __kmalloc_cache_noprof+0x31c/0x660
[  168.252223][T11212]  ? xskq_create+0x56/0x170
[  168.252235][T11212]  ? xsk_setsockopt+0x54c/0x990
[  168.252245][T11212]  ? do_sock_setsockopt+0x17c/0x1b0
[  168.252256][T11212]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  168.252265][T11212]  ? do_syscall_64+0x15f/0xf80
[  168.252273][T11212]  __vmalloc_node_range_noprof+0x132/0x1750
[  168.252295][T11212]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  168.252308][T11212]  ? __kasan_kmalloc+0x93/0xb0
[  168.252322][T11212]  vmalloc_user_noprof+0xad/0xe0
[  168.252334][T11212]  ? xskq_create+0xbf/0x170
[  168.252344][T11212]  xskq_create+0xbf/0x170
[  168.252355][T11212]  xsk_init_queue+0x8a/0xe0
[  168.252365][T11212]  xsk_setsockopt+0x54c/0x990
[  168.252376][T11212]  ? __pfx_xsk_setsockopt+0x10/0x10
[  168.252385][T11212]  ? __pfx_aa_sk_perm+0x10/0x10
[  168.252397][T11212]  ? aa_sock_opt_perm+0xff/0x1a0
[  168.252408][T11212]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  168.252419][T11212]  ? __pfx_xsk_setsockopt+0x10/0x10
[  168.252429][T11212]  do_sock_setsockopt+0x17c/0x1b0
[  168.252441][T11212]  __x64_sys_setsockopt+0x13d/0x1b0
[  168.252452][T11212]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.252460][T11212]  do_syscall_64+0x15f/0xf80
[  168.252466][T11212]  ? trace_irq_disable+0x3b/0x140
[  168.252482][T11212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.252490][T11212] RIP: 0033:0x7fcc46f9ce59
[  168.252497][T11212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.252504][T11212] RSP: 002b:00007fcc47e70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  168.252512][T11212] RAX: ffffffffffffffda RBX: 00007fcc47215fa0 RCX: 00007fcc46f9ce59
[  168.252518][T11212] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[  168.252522][T11212] RBP: 00007fcc47032d6f R08: 0000000000000004 R09: 0000000000000000
[  168.252526][T11212] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.252531][T11212] R13: 00007fcc47216038 R14: 00007fcc47215fa0 R15: 00007ffc8f2c75a8
[  168.252542][T11212]  </TASK>
[  168.252545][T11212] Mem-Info:
[  168.345187][T11212] active_anon:6823 inactive_anon:0 isolated_anon:0
[  168.345187][T11212]  active_file:12289 inactive_file:38370 isolated_file:0
[  168.345187][T11212]  unevictable:1768 dirty:36 writeback:0
[  168.345187][T11212]  slab_reclaimable:11134 slab_unreclaimable:106264
[  168.345187][T11212]  mapped:18296 shmem:2351 pagetables:1085
[  168.345187][T11212]  sec_pagetables:0 bounce:0
[  168.345187][T11212]  kernel_misc_reclaimable:0
[  168.345187][T11212]  free:1104276 free_pcp:20001 free_cma:0
[  168.359318][T11212] Node 0 active_anon:16184kB inactive_anon:0kB active_file:25608kB inactive_file:143256kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30348kB dirty:92kB writeback:0kB shmem:4500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6936kB pagetables:1980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  168.369512][T11212] Node 1 active_anon:11108kB inactive_anon:0kB active_file:23548kB inactive_file:10224kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42836kB dirty:52kB writeback:0kB shmem:4904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7676kB pagetables:2360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  168.380238][T11212] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  168.389118][T11212] lowmem_reserve[]: 0 1587 2117 2117 2117
[  168.390912][T11212] Node 0 DMA32 free:1456452kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2068kB inactive_anon:0kB active_file:25608kB inactive_file:4340kB unevictable:0kB writepending:88kB zspages:0kB present:2080636kB managed:1625236kB mlocked:0kB bounce:0kB free_pcp:16876kB local_pcp:8580kB free_cma:0kB
[  168.400628][T11212] lowmem_reserve[]: 0 0 530 530 530
[  168.402256][T11212] Node 0 Normal free:16080kB boost:6144kB min:14656kB low:16784kB high:18912kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14120kB inactive_anon:0kB active_file:0kB inactive_file:138916kB unevictable:3536kB writepending:4kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:3920kB local_pcp:3856kB free_cma:0kB
[  168.411966][T11212] lowmem_reserve[]: 0 0 0 0 0
[  168.413513][T11212] Node 1 Normal free:2929212kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11108kB inactive_anon:0kB active_file:23548kB inactive_file:10224kB unevictable:3536kB writepending:52kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:59292kB local_pcp:30580kB free_cma:0kB
[  168.423463][T11212] lowmem_reserve[]: 0 0 0 0 0
[  168.424980][T11212] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  168.428798][T11212] Node 0 DMA32: 335*4kB (UM) 257*8kB (UME) 112*16kB (UM) 156*32kB (UME) 60*64kB (UME) 91*128kB (UME) 43*256kB (UME) 19*512kB (UM) 15*1024kB (UM) 5*2048kB (UM) 338*4096kB (UM) = 1456452kB
[  168.434562][T11212] Node 0 Normal: 247*4kB (UM) 105*8kB (UME) 101*16kB (UME) 168*32kB (UM) 83*64kB (UME) 7*128kB (U) 2*256kB (U) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 16052kB
[  168.439751][T11212] Node 1 Normal: 2473*4kB (UME) 659*8kB (UM) 1042*16kB (UME) 67*32kB (UME) 463*64kB (UM) 145*128kB (UME) 63*256kB (UM) 51*512kB (UME) 35*1024kB (UME) 22*2048kB (UE) 665*4096kB (UM) = 2929148kB
[  168.445614][T11212] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  168.448480][T11212] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  168.451320][T11212] 53010 total pagecache pages
[  168.452829][T11212] 0 pages in swap cache
[  168.454308][T11212] Free swap  = 124996kB
[  168.455622][T11212] Total swap = 124996kB
[  168.456941][T11212] 1834877 pages RAM
[  168.458131][T11212] 0 pages HighMem/MovableOnly
[  168.459579][T11212] 390269 pages reserved
[  168.460839][T11212] 0 pages cma reserved
[  168.690459][T11233] netlink: 'syz.2.1385': attribute type 1 has an invalid length.
[  168.702723][T11233] 8021q: adding VLAN 0 to HW filter on device bond37
[  168.716746][T11233] bond37: (slave geneve5): making interface the new active one
[  168.719960][T11233] bond37: (slave geneve5): Enslaving as an active interface with an up link
[  168.723586][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.730707][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.741624][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.749439][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.896937][T11248] ip6tnl0: Caught tx_queue_len zero misconfig
[  168.902110][T11254] openvswitch: netlink: Multiple metadata blocks provided
[  168.954625][T11258] ip6tnl0: Caught tx_queue_len zero misconfig
[  168.957290][T11258] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) !
[  168.962093][T11258] netlink: 'syz.1.1393': attribute type 11 has an invalid length.
[  169.017919][T11264] nbd: must specify an index to disconnect
[  169.112565][T11273] pim6reg: entered allmulticast mode
[  169.116377][T11273] pim6reg: left allmulticast mode
[  169.246613][T11293] netlink: 'syz.1.1401': attribute type 12 has an invalid length.
[  169.309032][T11298] veth0: entered promiscuous mode
[  169.316263][T11298] veth0 (unregistering): left promiscuous mode
[  172.302577][T11301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  172.350558][T11331] __nla_validate_parse: 14 callbacks suppressed
[  172.350575][T11331] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1408'.
[  172.374206][T11331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  172.438895][T11343] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1411'.
[  172.646631][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'.
[  172.649760][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'.
[  172.655605][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'.
[  172.661037][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'.
[  172.792405][T11373] bond18: Unable to set peer notification delay as MII monitoring is disabled
[  172.797846][T11373] bond18 (unregistering): Released all slaves
[  172.829130][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'.
[  172.832791][T11385] xt_CT: You must specify a L4 protocol and not use inversions on it
[  172.834969][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'.
[  172.979226][T11403] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  172.981697][T11403] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  173.031052][T11409] : renamed from bond0
[  173.053602][T11409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1428'.
[  173.109127][T11409] team1: entered promiscuous mode
[  173.110884][T11409] team1: entered allmulticast mode
[  173.112880][T11409] 8021q: adding VLAN 0 to HW filter on device team1
[  173.116617][T11415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1429'.
[  173.117516][T11409] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  173.133108][T11409] team2: entered promiscuous mode
[  173.135128][T11409] team2: entered allmulticast mode
[  173.137473][T11409] 8021q: adding VLAN 0 to HW filter on device team2
[  173.209284][T11420] vlan4: entered promiscuous mode
[  173.210952][T11420] bridge0: entered promiscuous mode
[  173.800171][T11403] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  174.061220][T11485] ip6gre2: entered promiscuous mode
[  174.063806][T11485] ip6gre2: entered allmulticast mode
[  174.067018][T11485] netlink: 'syz.0.1446': attribute type 1 has an invalid length.
[  174.095551][T11485] vlan3: entered allmulticast mode
[  174.097238][T11485] veth0_to_bond: entered allmulticast mode
[  174.224671][T11502] netlink: 'syz.0.1452': attribute type 23 has an invalid length.
[  174.240760][T11503] team_slave_1: Caught tx_queue_len zero misconfig
[  174.272545][T11497] 8021q: adding VLAN 0 to HW filter on device bond38
[  174.301025][T11497] bond38 (unregistering): Released all slaves
[  174.485446][T11522] team_slave_1: Caught tx_queue_len zero misconfig
[  174.524565][ T9235] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  174.531613][ T9235] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  174.540668][T11524] lo: Caught tx_queue_len zero misconfig
[  174.553701][ T5613] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  174.595298][T11525] bond20: option lp_interval: invalid value (0)
[  174.597419][T11525] bond20: option lp_interval: allowed values 1 - 2147483647
[  174.601380][T11525] bond20 (unregistering): Released all slaves
[  175.143315][ T5613] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  175.277815][  T797] hid-generic 0005:10CF:7FFF.0001: item fetching failed at offset 0/1
[  175.285755][  T797] hid-generic 0005:10CF:7FFF.0001: probe with driver hid-generic failed with error -22
[  175.477414][ T5613] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  175.583613][T11558] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  175.592342][T11558] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  175.762245][T11578] pimreg: entered allmulticast mode
[  175.790395][T11584] netlink: 'syz.0.1476': attribute type 4 has an invalid length.
[  175.796340][T11584] sctp: [Deprecated]: syz.0.1476 (pid 11584) Use of int in max_burst socket option.
[  175.796340][T11584] Use struct sctp_assoc_value instead
[  178.776322][T11584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  178.833101][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  178.859214][T11603] __nla_validate_parse: 20 callbacks suppressed
[  178.859224][T11603] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1481'.
[  178.864851][T11603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  178.891355][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1479'.
[  178.894949][T11599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1479'.
[  178.898011][T11599] netlink: 'syz.1.1479': attribute type 18 has an invalid length.
[  179.025445][T11615] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1484'.
[  179.277364][T11631] netlink: 'syz.0.1490': attribute type 1 has an invalid length.
[  179.283379][T11631] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1490'.
[  179.311837][T11634] netlink: 'syz.2.1491': attribute type 11 has an invalid length.
[  179.345491][T11635] netlink: 'syz.0.1490': attribute type 10 has an invalid length.
[  179.348295][T11631] netlink: 'syz.0.1490': attribute type 10 has an invalid length.
[  179.351461][T11631] netlink: 'syz.0.1490': attribute type 10 has an invalid length.
[  179.355049][T11635] netlink: 'syz.0.1490': attribute type 10 has an invalid length.
[  179.727529][T11643] bond0: Caught tx_queue_len zero misconfig
[  179.858595][T11650] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1496'.
[  180.090589][T11652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1497'.
[  180.154675][T11656] netlink: 'syz.0.1498': attribute type 3 has an invalid length.
[  180.168087][T11656] block nbd0: NBD_DISCONNECT
[  180.218738][T11637] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  180.288287][T11660] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.1500'.
[  180.540565][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1507'.
[  180.583965][T11692] netlink: 'syz.1.1508': attribute type 1 has an invalid length.
[  180.609402][T11692] 8021q: adding VLAN 0 to HW filter on device bond18
[  180.613642][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1508'.
[  180.622660][T11692] bond18: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  180.626859][T11692] bond18: entered promiscuous mode
[  180.628526][T11692] bond18: entered allmulticast mode
[  180.688811][T11695] ipt_REJECT: TCP_RESET invalid for non-tcp
[  180.746785][T11699] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  180.885522][T11712] Cannot find del_set index 8192 as target
[  181.259637][   T33] audit: type=1107 audit(1780021239.479:15): pid=11729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  181.345803][T11739] netlink: 'syz.1.1522': attribute type 11 has an invalid length.
[  181.623821][T11746] nbd0: detected capacity change from 0 to 140737487831040
[  181.700955][   T55] block nbd0: Receive control failed (result -104)
[  181.805626][T11769] syzkaller0: entered promiscuous mode
[  181.807430][T11769] syzkaller0: entered allmulticast mode
[  181.842449][T11771] dvmrp0: entered allmulticast mode
[  181.881005][T11773] netlink: 'syz.2.1533': attribute type 1 has an invalid length.
[  181.940989][T11775] 
[  181.941838][T11775] ======================================================
[  181.944304][T11775] WARNING: possible circular locking dependency detected
[  181.947026][T11775] syzkaller #0 Not tainted
[  181.948758][T11775] ------------------------------------------------------
[  181.951053][T11775] syz.0.1534/11775 is trying to acquire lock:
[  181.952991][T11775] ffff8881134a3438 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaf/0x130
[  181.955766][T11775] 
[  181.955766][T11775] but task is already holding lock:
[  181.958039][T11775] ffff8881131c9d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_sendmsg_fastopen+0x128/0x580
[  181.961265][T11775] 
[  181.961265][T11775] which lock already depends on the new lock.
[  181.961265][T11775] 
[  181.964753][T11775] 
[  181.964753][T11775] the existing dependency chain (in reverse order) is:
[  181.967739][T11775] 
[  181.967739][T11775] -> #8 (k-sk_lock-AF_INET6){+.+.}-{0:0}:
[  181.970240][T11775]        lock_sock_nested+0x41/0x100
[  181.971898][T11775]        mptcp_sendmsg_fastopen+0x128/0x580
[  181.973787][T11775]        mptcp_sendmsg+0x1b0c/0x1dc0
[  181.975425][T11775]        ____sys_sendmsg+0x5c7/0x9f0
[  181.977031][T11775]        ___sys_sendmsg+0x2a5/0x360
[  181.978655][T11775]        __x64_sys_sendmsg+0x1bd/0x2a0
[  181.980593][T11775]        do_syscall_64+0x15f/0xf80
[  181.982209][T11775]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.984181][T11775] 
[  181.984181][T11775] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  181.986533][T11775]        lock_sock_nested+0x41/0x100
[  181.988161][T11775]        inet_shutdown+0x6a/0x390
[  181.989792][T11775]        nbd_mark_nsock_dead+0x2e9/0x560
[  181.991543][T11775]        sock_shutdown+0x15e/0x260
[  181.993179][T11775]        nbd_clear_sock+0x24/0x170
[  181.994763][T11775]        nbd_config_put+0x2dd/0x580
[  181.996383][T11775]        nbd_genl_connect+0x19d5/0x1cf0
[  181.998129][T11775]        genl_family_rcv_msg_doit+0x22a/0x330
[  182.000023][T11775]        genl_rcv_msg+0x61c/0x7a0
[  182.001604][T11775]        netlink_rcv_skb+0x232/0x4b0
[  182.003266][T11775]        genl_rcv+0x28/0x40
[  182.004729][T11775]        netlink_unicast+0x75c/0x8e0
[  182.006367][T11775]        netlink_sendmsg+0x813/0xb40
[  182.008048][T11775]        ____sys_sendmsg+0x972/0x9f0
[  182.009812][T11775]        ___sys_sendmsg+0x2a5/0x360
[  182.011515][T11775]        __x64_sys_sendmsg+0x1bd/0x2a0
[  182.013308][T11775]        do_syscall_64+0x15f/0xf80
[  182.014898][T11775]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.017145][T11775] 
[  182.017145][T11775] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  182.019980][T11775]        __mutex_lock+0x1a3/0x1550
[  182.021906][T11775]        nbd_queue_rq+0x37b/0x1100
[  182.023571][T11775]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  182.025457][T11775]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  182.027559][T11775]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  182.029634][T11775]        blk_mq_run_hw_queue+0x348/0x4f0
[  182.031404][T11775]        blk_mq_dispatch_list+0xd16/0xe10
[  182.033201][T11775]        blk_mq_flush_plug_list+0x48d/0x570
[  182.035013][T11775]        __blk_flush_plug+0x3ed/0x4d0
[  182.036672][T11775]        __submit_bio+0x28d/0x580
[  182.038204][T11775]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  182.040402][T11775]        block_read_full_folio+0x7b7/0x830
[  182.042548][T11775]        filemap_read_folio+0x137/0x3b0
[  182.044652][T11775]        do_read_cache_folio+0x358/0x590
[  182.046837][T11775]        read_part_sector+0xb6/0x2b0
[  182.048894][T11775]        adfspart_check_ICS+0xb1/0x960
[  182.050819][T11775]        bdev_disk_changed+0x817/0x1770
[  182.052958][T11775]        blkdev_get_whole+0x380/0x510
[  182.055039][T11775]        bdev_open+0x31e/0xd30
[  182.056923][T11775]        blkdev_open+0x470/0x610
[  182.058848][T11775]        do_dentry_open+0x785/0x14e0
[  182.060902][T11775]        vfs_open+0x3b/0x340
[  182.062684][T11775]        path_openat+0x2e08/0x3860
[  182.064667][T11775]        do_file_open+0x23e/0x4a0
[  182.066591][T11775]        do_sys_openat2+0x113/0x200
[  182.068599][T11775]        __x64_sys_openat+0x138/0x170
[  182.070521][T11775]        do_syscall_64+0x15f/0xf80
[  182.072148][T11775]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.074033][T11775] 
[  182.074033][T11775] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  182.076665][T11775]        __mutex_lock+0x1a3/0x1550
[  182.078642][T11775]        nbd_queue_rq+0xc6/0x1100
[  182.080620][T11775]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  182.082949][T11775]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  182.085238][T11775]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  182.087224][T11775]        blk_mq_run_hw_queue+0x348/0x4f0
[  182.088953][T11775]        blk_mq_dispatch_list+0xd16/0xe10
[  182.090706][T11775]        blk_mq_flush_plug_list+0x48d/0x570
[  182.092537][T11775]        __blk_flush_plug+0x3ed/0x4d0
[  182.094198][T11775]        __submit_bio+0x28d/0x580
[  182.095928][T11775]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  182.098327][T11775]        block_read_full_folio+0x7b7/0x830
[  182.100589][T11775]        filemap_read_folio+0x137/0x3b0
[  182.102691][T11775]        do_read_cache_folio+0x358/0x590
[  182.104861][T11775]        read_part_sector+0xb6/0x2b0
[  182.106917][T11775]        adfspart_check_ICS+0xb1/0x960
[  182.109060][T11775]        bdev_disk_changed+0x817/0x1770
[  182.111256][T11775]        blkdev_get_whole+0x380/0x510
[  182.112882][T11775]        bdev_open+0x31e/0xd30
[  182.114404][T11775]        blkdev_open+0x470/0x610
[  182.115927][T11775]        do_dentry_open+0x785/0x14e0
[  182.117531][T11775]        vfs_open+0x3b/0x340
[  182.118895][T11775]        path_openat+0x2e08/0x3860
[  182.120481][T11775]        do_file_open+0x23e/0x4a0
[  182.122054][T11775]        do_sys_openat2+0x113/0x200
[  182.123691][T11775]        __x64_sys_openat+0x138/0x170
[  182.125364][T11775]        do_syscall_64+0x15f/0xf80
[  182.126949][T11775]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.128910][T11775] 
[  182.128910][T11775] -> #4 (set->srcu){.+.+}-{0:0}:
[  182.131070][T11775]        __synchronize_srcu+0xca/0x300
[  182.132771][T11775]        elevator_switch+0x1e8/0x7a0
[  182.134402][T11775]        elevator_change+0x2cc/0x450
[  182.136044][T11775]        elevator_set_default+0x36c/0x430
[  182.137821][T11775]        blk_register_queue+0x3e9/0x4e0
[  182.139535][T11775]        __add_disk+0x677/0xd50
[  182.141039][T11775]        add_disk_fwnode+0xfb/0x480
[  182.142652][T11775]        nbd_dev_add+0x72c/0xb50
[  182.144185][T11775]        nbd_init+0x168/0x1f0
[  182.145642][T11775]        do_one_initcall+0x250/0x870
[  182.147281][T11775]        do_initcall_level+0x104/0x190
[  182.148979][T11775]        do_initcalls+0x59/0xa0
[  182.150548][T11775]        kernel_init_freeable+0x2a6/0x3e0
[  182.152307][T11775]        kernel_init+0x1d/0x1d0
[  182.153811][T11775]        ret_from_fork+0x514/0xb70
[  182.155420][T11775]        ret_from_fork_asm+0x1a/0x30
[  182.157032][T11775] 
[  182.157032][T11775] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  182.159493][T11775]        __mutex_lock+0x1a3/0x1550
[  182.161058][T11775]        elevator_change+0x1b3/0x450
[  182.162680][T11775]        elevator_set_none+0xb5/0x140
[  182.164348][T11775]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  182.166308][T11775]        nbd_start_device+0x17f/0xb10
[  182.167962][T11775]        nbd_genl_connect+0x165b/0x1cf0
[  182.169703][T11775]        genl_family_rcv_msg_doit+0x22a/0x330
[  182.171549][T11775]        genl_rcv_msg+0x61c/0x7a0
[  182.173093][T11775]        netlink_rcv_skb+0x232/0x4b0
[  182.174717][T11775]        genl_rcv+0x28/0x40
[  182.176185][T11775]        netlink_unicast+0x75c/0x8e0
[  182.177911][T11775]        netlink_sendmsg+0x813/0xb40
[  182.179745][T11775]        ____sys_sendmsg+0x972/0x9f0
[  182.181456][T11775]        ___sys_sendmsg+0x2a5/0x360
[  182.183131][T11775]        __x64_sys_sendmsg+0x1bd/0x2a0
[  182.184887][T11775]        do_syscall_64+0x15f/0xf80
[  182.186625][T11775]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.188729][T11775] 
[  182.188729][T11775] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  182.191516][T11775]        blk_alloc_queue+0x546/0x680
[  182.193233][T11775]        __blk_mq_alloc_disk+0x197/0x390
[  182.195127][T11775]        nbd_dev_add+0x499/0xb50
[  182.196657][T11775]        nbd_init+0x168/0x1f0
[  182.198118][T11775]        do_one_initcall+0x250/0x870
[  182.199763][T11775]        do_initcall_level+0x104/0x190
[  182.201432][T11775]        do_initcalls+0x59/0xa0
[  182.202932][T11775]        kernel_init_freeable+0x2a6/0x3e0
[  182.204678][T11775]        kernel_init+0x1d/0x1d0
[  182.206173][T11775]        ret_from_fork+0x514/0xb70
[  182.207740][T11775]        ret_from_fork_asm+0x1a/0x30
[  182.209366][T11775] 
[  182.209366][T11775] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  182.211544][T11775]        fs_reclaim_acquire+0x71/0x100
[  182.213230][T11775]        kmem_cache_alloc_noprof+0x40/0x650
[  182.215020][T11775]        mas_alloc_nodes+0x291/0x350
[  182.216756][T11775]        mas_preallocate+0x2d6/0x640
[  182.218398][T11775]        vma_link+0x123/0x470
[  182.220178][T11775]        insert_vm_struct+0x1a5/0x270
[  182.222089][T11775]        create_init_stack_vma+0x546/0x9b0
[  182.223847][T11775]        alloc_bprm+0x495/0x5c0
[  182.225353][T11775]        kernel_execve+0x87/0x930
[  182.226918][T11775]        try_to_run_init_process+0x13/0x60
[  182.228716][T11775]        kernel_init+0xad/0x1d0
[  182.230255][T11775]        ret_from_fork+0x514/0xb70
[  182.231830][T11775]        ret_from_fork_asm+0x1a/0x30
[  182.233441][T11775] 
[  182.233441][T11775] -> #0 (&mm->mmap_lock){++++}-{4:4}:
[  182.235774][T11775]        __lock_acquire+0x15a5/0x2cf0
[  182.237484][T11775]        lock_acquire+0x106/0x350
[  182.239028][T11775]        __might_fault+0xcb/0x130
[  182.240701][T11775]        _copy_from_iter+0x100/0x1670
[  182.242357][T11775]        copy_page_from_iter+0x220/0x2d0
[  182.244369][T11775]        tcp_connect+0x2676/0x53a0
[  182.246348][T11775]        tcp_sendmsg_fastopen+0x2bd/0x5e0
[  182.248380][T11775]        mptcp_sendmsg_fastopen+0x17d/0x580
[  182.250278][T11775]        mptcp_sendmsg+0x1b0c/0x1dc0
[  182.251929][T11775]        __sys_sendto+0x4a3/0x710
[  182.253508][T11775]        __x64_sys_sendto+0xde/0x100
[  182.255147][T11775]        do_syscall_64+0x15f/0xf80
[  182.256731][T11775]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.258694][T11775] 
[  182.258694][T11775] other info that might help us debug this:
[  182.258694][T11775] 
[  182.261958][T11775] Chain exists of:
[  182.261958][T11775]   &mm->mmap_lock --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6
[  182.261958][T11775] 
[  182.266957][T11775]  Possible unsafe locking scenario:
[  182.266957][T11775] 
[  182.269474][T11775]        CPU0                    CPU1
[  182.271152][T11775]        ----                    ----
[  182.272815][T11775]   lock(k-sk_lock-AF_INET6);
[  182.274299][T11775]                                lock(sk_lock-AF_INET6);
[  182.276448][T11775]                                lock(k-sk_lock-AF_INET6);
[  182.278683][T11775]   rlock(&mm->mmap_lock);
[  182.280156][T11775] 
[  182.280156][T11775]  *** DEADLOCK ***
[  182.280156][T11775] 
[  182.282608][T11775] 2 locks held by syz.0.1534/11775:
[  182.284205][T11775]  #0: ffff888108253660 (sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_sendmsg+0x12c/0x1dc0
[  182.287515][T11775]  #1: ffff8881131c9d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_sendmsg_fastopen+0x128/0x580
[  182.291568][T11775] 
[  182.291568][T11775] stack backtrace:
[  182.293867][T11775] CPU: 0 UID: 0 PID: 11775 Comm: syz.0.1534 Not tainted syzkaller #0 PREEMPT(full) 
[  182.293882][T11775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  182.293889][T11775] Call Trace:
[  182.293894][T11775]  <TASK>
[  182.293899][T11775]  dump_stack_lvl+0xe8/0x150
[  182.293910][T11775]  print_circular_bug+0x2e1/0x300
[  182.293922][T11775]  check_noncircular+0x12e/0x150
[  182.293934][T11775]  __lock_acquire+0x15a5/0x2cf0
[  182.293943][T11775]  ? __kasan_slab_alloc+0x6c/0x80
[  182.293955][T11775]  ? kmem_cache_alloc_node_noprof+0x384/0x690
[  182.293966][T11775]  ? __alloc_skb+0x27d/0x7d0
[  182.293976][T11775]  ? tcp_stream_alloc_skb+0x3f/0x580
[  182.293984][T11775]  ? tcp_connect+0x2533/0x53a0
[  182.293990][T11775]  ? tcp_sendmsg_fastopen+0x2bd/0x5e0
[  182.293998][T11775]  ? mptcp_sendmsg_fastopen+0x17d/0x580
[  182.294005][T11775]  ? mptcp_sendmsg+0x1b0c/0x1dc0
[  182.294014][T11775]  ? __sys_sendto+0x4a3/0x710
[  182.294023][T11775]  ? __x64_sys_sendto+0xde/0x100
[  182.294032][T11775]  ? do_syscall_64+0x15f/0xf80
[  182.294038][T11775]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.294047][T11775]  ? __might_fault+0xaf/0x130
[  182.294056][T11775]  lock_acquire+0x106/0x350
[  182.294063][T11775]  ? __might_fault+0xaf/0x130
[  182.294073][T11775]  ? __might_fault+0xaf/0x130
[  182.294081][T11775]  __might_fault+0xcb/0x130
[  182.294089][T11775]  ? __might_fault+0xaf/0x130
[  182.294128][T11775]  _copy_from_iter+0x100/0x1670
[  182.294146][T11775]  ? rcu_is_watching+0x15/0xb0
[  182.294164][T11775]  ? trace_kmem_cache_alloc+0x29/0xe0
[  182.294180][T11775]  ? __pfx__copy_from_iter+0x10/0x10
[  182.294192][T11775]  copy_page_from_iter+0x220/0x2d0
[  182.294204][T11775]  tcp_connect+0x2676/0x53a0
[  182.294217][T11775]  ? __pfx_tcp_connect+0x10/0x10
[  182.294229][T11775]  ? rcu_is_watching+0x15/0xb0
[  182.294239][T11775]  ? __kmalloc_cache_noprof+0x31c/0x660
[  182.294249][T11775]  ? __kmalloc_cache_noprof+0x15b/0x660
[  182.294259][T11775]  tcp_sendmsg_fastopen+0x2bd/0x5e0
[  182.294269][T11775]  mptcp_sendmsg_fastopen+0x17d/0x580
[  182.294277][T11775]  mptcp_sendmsg+0x1b0c/0x1dc0
[  182.294290][T11775]  ? aa_sk_perm+0x6d5/0x900
[  182.294300][T11775]  ? __pfx_aa_sk_perm+0x10/0x10
[  182.294308][T11775]  ? __pfx_mptcp_sendmsg+0x10/0x10
[  182.294319][T11775]  ? __pfx_inet6_sendmsg+0x10/0x10
[  182.294327][T11775]  ? inet6_sendmsg+0x101/0x120
[  182.294335][T11775]  ? __pfx_inet6_sendmsg+0x10/0x10
[  182.294342][T11775]  __sys_sendto+0x4a3/0x710
[  182.294352][T11775]  ? __pfx___sys_sendto+0x10/0x10
[  182.294361][T11775]  ? do_futex+0x333/0x420
[  182.294373][T11775]  ? __pfx___se_sys_futex+0x10/0x10
[  182.294381][T11775]  ? rcu_is_watching+0x15/0xb0
[  182.294390][T11775]  __x64_sys_sendto+0xde/0x100
[  182.294400][T11775]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.294407][T11775]  do_syscall_64+0x15f/0xf80
[  182.294413][T11775]  ? trace_irq_disable+0x3b/0x140
[  182.294425][T11775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.294432][T11775] RIP: 0033:0x7f387399ce59
[  182.294441][T11775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.294448][T11775] RSP: 002b:00007f3874789028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  182.294456][T11775] RAX: ffffffffffffffda RBX: 00007f3873c15fa0 RCX: 00007f387399ce59
[  182.294462][T11775] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006
[  182.294466][T11775] RBP: 00007f3873a32d6f R08: 0000000000000000 R09: 0000000000000000
[  182.294471][T11775] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  182.294475][T11775] R13: 00007f3873c16038 R14: 00007f3873c15fa0 R15: 00007ffcb37ab618
[  182.294483][T11775]  </TASK>
[  182.434697][T11789] 8021q: adding VLAN 0 to HW filter on device bond39
[  182.437875][T11789] bond38: (slave bond39): making interface the new active one
[  182.440762][T11789] bond38: (slave bond39): Enslaving as an active interface with an up link
[  182.913068][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  186.273031][ T5002] Bluetooth: hci1: command 0x0406 tx timeout
[  187.393207][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
