last executing test programs:

2m46.782447189s ago: executing program 0 (id=2832):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0x1}, &(0x7f00000000c0)=0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802faffff0000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'dummy0\x00', 0x4000})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xf9, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884)
sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0xe, 0x6}, {0x6}, {0xfff3, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404888c}, 0x880)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000440))
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={<r11=>0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000200)={r11, 0x4}, 0x8)
writev(r9, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x00', 0x7}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440200002000010000000000fcdbdf250a808014000000033800000014000200fc1e6a6bbe57e2335fdcd429000200000000000000000000000001000000000800"/75], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)

2m45.251035661s ago: executing program 0 (id=2838):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r4, 0x11, 0x70bd2d, 0x25dfdbfc, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2005c890}, 0x1000c810) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) (async)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r6, 0x20, &(0x7f0000000580)={&(0x7f00000003c0)=""/220, 0xdc, 0x0, &(0x7f00000004c0)=""/149, 0x95}}, 0x10) (async)
r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0x1a, 0x0, @val=@perf_event={0xf}}, 0x18) (async)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async)
setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2) (async)
ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000000280)={{0x0, 0x100, 0x0, 0xcf9, 0xfffffffffffffffe, 0xfff, 0x2, 0xb3, 0x80000000, 0x1, 0xa651, 0x0, 0x0, 0xf3, 0x96c}}) (async)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000012c0)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="1d0000000a200000", @ANYRES32, @ANYRES32=r7, @ANYBLOB="c880d674ebdb5555fc67f3c2f597522bd6e280725027165110707d9200ffb30894ec6b30dd9198d3b2699e4e4e5f1ca245526c2bd8796c718bdd79eb569953c5f739d84b84a7c66e7809c6fcb26d009358db376f9e", @ANYRES64=0x0], 0x20) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r10, &(0x7f0000000340)=ANY=[], 0x141) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910) (async)
setsockopt$inet_tcp_int(r10, 0x6, 0x11, &(0x7f0000001280)=0x3, 0x4)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r10}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) (async)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)=r5) (async)
r12 = socket$nl_audit(0x10, 0x3, 0x9)
connect$netlink(r12, &(0x7f0000000340)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4000}, 0xc)

2m44.753458755s ago: executing program 0 (id=2839):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c)
bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4)

2m44.241249207s ago: executing program 0 (id=2842):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002637850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x218}, 0x48) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000002280)={{<r2=>r1, &(0x7f0000000080)='\x00', 0x222401, &(0x7f0000000180)={@_ha_fsid={[0x9, 0x5]}, {0xdd, 0x2, 0x8001, 0x10001}}, 0x1, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x7}, {[0x36, 0x9, 0x4, 0x2]}, 0x5, 0x1000, &(0x7f0000001280)=""/4096}) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000002300)={@loopback, @loopback, <r3=>0x0}, &(0x7f0000002340)=0xc)
bind$packet(r2, &(0x7f0000002380)={0x11, 0x18, r3, 0x1, 0x7, 0x6, @remote}, 0x14) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) (async)
ioctl(r5, 0x8b20, &(0x7f0000000040)) (async)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xfe}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@hl={{0x28}, {0x8dde9cf0fcc298ce, 0x6}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x59, 0x0, {0xfff}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) (async)
unshare(0x8000400) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x9, 0xf, 0x58}, 0x2c)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000140)=0x80000000, 0x4) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r1, r9, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r10, r0, 0x4, r1}, 0x10)

2m43.560466338s ago: executing program 0 (id=2844):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x19, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r5, 0x25, 0x2, @void}, 0x10) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r5, 0x25, 0x2, @void}, 0x10)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00')
ioctl$BTRFS_IOC_BALANCE(r8, 0x5000940c, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE(r8, 0x5000940c, 0x0)
splice(r6, 0x0, r7, 0x0, 0x2, 0x0) (async)
splice(r6, 0x0, r7, 0x0, 0x2, 0x0)
ioctl$sock_qrtr_TIOCINQ(r7, 0x5760, 0x0) (async)
ioctl$sock_qrtr_TIOCINQ(r7, 0x5760, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000190000000800000091106f0000000000950000000000003c79e0cf3ac83bd200"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$inet6(r9, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x8000001, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4}, 0x1c, &(0x7f0000000140)}}], 0x1, 0x931766f6319eed40) (async)
sendmmsg$inet6(r9, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x8000001, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4}, 0x1c, &(0x7f0000000140)}}], 0x1, 0x931766f6319eed40)
shutdown(r9, 0x1) (async)
shutdown(r9, 0x1)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000001440)={0x0, 0x7}, 0x8)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r5, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x41, &(0x7f0000000200)=0x47f5, 0x4)
bind$inet(r12, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r12, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r12, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
sendmmsg(r12, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r12, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0)
r13 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r10, r11, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r13, r0, 0x4, r10}, 0x10)

2m42.641959184s ago: executing program 0 (id=2847):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001500)={0x0, 0x4, 0x3, 0x1165, 0x2, 0xe8a2, 0x1, 0x3, {0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x9, 0x7, 0x42bb}}, &(0x7f00000015c0)=0xb0) (async)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001500)={0x0, 0x4, 0x3, 0x1165, 0x2, 0xe8a2, 0x1, 0x3, {0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x9, 0x7, 0x42bb}}, &(0x7f00000015c0)=0xb0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000180)={0x8}, 0x1)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x2) (async)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async)
getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0x40, 0x28, 0x575ac7824d421509, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0xee}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x40)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r7, 0x5, 0x0, @void}, 0x10) (async)
r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r7, 0x5, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r0, 0x4, r0}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_PROBE_CLIENT(r9, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r10, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40000)

2m27.424068241s ago: executing program 32 (id=2847):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001500)={0x0, 0x4, 0x3, 0x1165, 0x2, 0xe8a2, 0x1, 0x3, {0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x9, 0x7, 0x42bb}}, &(0x7f00000015c0)=0xb0) (async)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001500)={0x0, 0x4, 0x3, 0x1165, 0x2, 0xe8a2, 0x1, 0x3, {0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x9, 0x7, 0x42bb}}, &(0x7f00000015c0)=0xb0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000180)={0x8}, 0x1)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x2) (async)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async)
getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0x40, 0x28, 0x575ac7824d421509, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0xee}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x40)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r7, 0x5, 0x0, @void}, 0x10) (async)
r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r7, 0x5, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r0, 0x4, r0}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_PROBE_CLIENT(r9, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r10, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40000)

5.195422643s ago: executing program 2 (id=3254):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x22020600)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="260000000001208000000000830887699b5cd2d6f37f56", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
close(r0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
unshare(0x22020600) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="260000000001208000000000830887699b5cd2d6f37f56", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000) (async)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) (async)

4.272642255s ago: executing program 2 (id=3256):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
r2 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r2, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x5, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000029000000390000003a020201"], 0x28}, 0x922bac8576bdadce)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0xfc, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r1, 0x118, 0x2, 0x0, &(0x7f00000003c0)) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) (async)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x1000)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r3, r0, 0x26}, 0x10)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000040)={@loopback, @local, 0x1, "8112cd6d90ad27acd798b02257b586a046f2b442a49832dc6f68c6a5a226e4a1", 0xfff, 0x10001, 0x1, 0xfffffff9}, 0x3c)

4.148921536s ago: executing program 3 (id=3257):
socketpair(0x1e, 0x1, 0x8, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000e1400012dbd70000000000008003c000300000008003c0002000000080001000000000008000300030000000800010000004000080001000004000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x60002004)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r0, 0x2737b000)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffbf, 0x1}, 0x6)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10)
r5 = epoll_create(0x7ff)
epoll_wait(r5, 0x0, 0x0, 0x4)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
close(0x3)
close(0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r3, 0x11, 0x1, 0xfffffff9, &(0x7f0000000480)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0]}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002400)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="47f8943c9326cb0a790e7ddc210babccf9830c872f383c7d715b1ba688edbcac7aa143afe69a62f615ec6319389899c824f762c09898736b040a3eb9011ccaacaabe5126b93c13601f75306b65f84d78eb40fbc846f2dfa777af36720168cf35302732eb5ae70896c782d23a13219509abdeb28bc178d992875f709890a40955e36effb9c4f4bd353b4fd2d82854644f9377560e4513208c120ef852d942d20d772e1ef912105662224d396ea4d17dcdae3844e55f549c3269d61eec153b13a390350c6e30e1b681d674efbc0007dfb1ceedf5e31aaf4f90e0850a8b73f2093bee4e1159f26c8e63ee6767b0a0ed34c35f7ae95e3df91c9af0010998dd86e0db6ba41db30a5aec5dfbe281e3de9cf526404d01f964d25f456e2988fb9e7080b946eaba37b0f5fcfb9f31b3caff0fe07e61a2c8b7cf38960aae5e72df975e993bfc2380079f9e6316b12f0c6e63740161fa3bdf83db266609623b51d8a572630ef7f832a8519dbd544500df6dd2cf5617b4640f012fbcde2ba7fcf1ceeb9235643fcfa44847c6e620ef3985b99fc968ced7ae749a45bb8306b1b82666609bdf66c54965e016a638b9183b8d73679aea129514e209f3cacde406dcb1cfa479acc6d78e9ffb086660835611960c86feebb4b29d27987dd07b971f46e8604204190aaf5c91ce0d7bd800e7e5e6c4f2da776331fe1ca67c7a6f7cd3919ef32ec7606060215465cd11c919e4c21106537fa984c54e3b6a3b5357c86f3ed56f9e04dec4fbe8313eb50510735dcfbcd39cc846cc4737fc1567039e2e047c2d0848a4b477ea55f977f49cc9fd7c8c4ece8d609c2b5821ae054566a57ac94ccef53622e348598e7772aaa631df18e01773e4503e5d91038062e18d1a2fb060a7675b8f7cd1b8f714f69b92b2f4170a162967855a5a5ca2903de0bb31ea2a2ef287d66976138c28d42ed7581ba27be2248c5fad14cba6c112acd2f54db0694fad8edb36cf1b39c7003df0fb619467d817c4f13a8258a489196073e1f8e7e3c7aa26b08f54cf23b157ec8c3b05b7e7f11f10b5a653ac81056ad7e22e07ea0edf37c007c5e8ee9250f72fb6d3dd92c90cff43c5ab950e98a407b3b9694333ef03ae2742662339bad1bd6b4cf2d52d3c5efbd6777db6adb1f1cb4bee0496f1f8685b2fc5a503341b5891ee82f6678d966b2dcef67c6814f2d4b437701137bafe85242c546d3b07cf75d4b96031c3a15d4b30ac912b4923965b88dc4509ec9f08a1dbb6e3650a85484c3a3058dd88b960632aa6763c0edd7380aee42e329c61528aeaad8700c0577ddda92fdb44d2e31a379d56fbd7cb704e6babaf553d627edecdbbc9fec3bc0bc4d8696449904a93b048bd805e324e847f49c82ff9cf26089058a70257269fc22749d261265a01e82169804af0195d2b7d984b9ca70f42b76f0e5880ac950c18f6e7e6817d1ae720259b539f5bf1d77d037559eaf984b8e36e7adca4bc71726c9d37a00f191aec9a44850f34252e1bd6d7e26a3b3cc78af47324bf3dda9088650943c0d9c7c6057dd6df2c4e093d09353338fe0e69f1723a1f345e5b9656dcc93646398148392a1c7c108c78abfef200560ae0100db7f932df33bbceb170ef450cc79a3de2557c4a6fc474777e2a3251bc4461a234f60c8c368d6b734b2bb4f9336df8a380f72f18eea158770e242c19782ce3ee9581bf9c2fe92cd378de1f25ffc5de5656861c7b5ef5409f1a3d204d0e443b4af163bffaf357b0180fda03067b944064c2acc33e12a6820e88b281fc64b886b21c58452c1613f056b4662cea5451c622f5c2b2bd9a949ab72dc061b2d90993b976cbcb5170d32a2ed52b0c114503b249e65b1820bc853fcddf3fc916f6b69814f11201cf61efacc0c47afd3f872ecef676417f71e6923575e32d3d0a6b741aa207cfb1135d0e9f3313f22c9b852a67b5e146833b461f7723072b64756e3dfaf3ea8b6d1a1f2a37cfdfcf38add213762c02e2e43691db09324c671da036d8138842784675b2cbf43a1d825f4eaa4d32e4989b84a2f8645c62efb43fa6cde7a468b5b7b22d9e13cdade54a2cfb8f4de5431f59221ce76095befec102b58088a2245f4326241c39ac240524c2689a497593287a1d1f5e1efe27551db877872a796e965e0e15c9fc540a0f4909ffd90de762f6ef3c6063b469eb2d7fd77a5600011b605741908b555d997aeacb258b436ddd49c15e7b9a2d53886123af8c5b0e33ac190d63a978638896f47e01f15fc818bf6ef3fa2339e2399cd921a67ad7d3ca7605b8f9ee7f3f12e10af04633f251f698bdeff0d7afb0adfa24eb6f2f10df1561399a2af2b622c33395799702ad0e4d130dd726b19f2f5f5dfdfaa50f8f3c4eb2f48dd6585b5118e3c2d5cc27e3f6b1db4f47f61d55df19fe7726b79286a95b9cd50ad6a3d656bff2b8cc7d76ed0669eca2dfd32e3e2b8b79abd74a82066f5df2fb198c024fa22f462fed060e7d1bc58479dc8d96e991b02a4f37767facfceba98a350754adca924a530916ebe480cef966c677fcb62273632e3b63822bbcfc7de3b58b6c499087e2ca4da4d740345657a27cd39f86ccf578d69a38da6ac78e5f4009bc52d34b466363642a2b209b72f558dc4b7650fb721149757a65a9e67a3518b41f11362939ed02060cfacb9df6c039b87693831af640a16ba2203d850b6d64884160aad9df832631fcb432c329fcbc52bae678f5f0a3735f908eb846223f250fa788a14bef23d7fa392d3d5e33c5f473febdea90c6fc11ffe0389cfd98b8ab005b542bf4122df0a3c23dbdee5e3de259461dc24e7ac71e1d42ebb4e7f954780ff9f35975fa6a48e3851d957c9c60d4e04f1ddd59d57bad4d8e3ce791a308fdc0524061ddcbcdacae8520ccdfe084450fd7ffb8092c81fe93b0e3d389e883b119f4150f84cf59ad5a37f2cf11ff1cd606d272ccdf4f86a4cc03255fe358b59ac9a1efd832f1fa9c9903d223df5ab7d95e281a71d2739b801bdbb256990a095466f21572a505815b5375537391487124541483c5a014666dda8162fbcdb956177a4802e8e0b3712a6d912e64ab62542ec303db8efe6240a6d5bd58c2656f42091ffc3349008ce5217450f056d10591322032e06adae7c9457e74110108d4397ded627efcfd71d1ec5833d289929655a89bd70b04d9ef37185fd3d31cd24f98d80d4bfd4086820f40b51feff901fb072b9fc19922b8d2f765edf3145ae42e90edab38aa6ef63d97517a757133986cf250f3dea7207bdc43f464400cc9287bb58f1cb2ae5577fbe44e7b099dea3c758b63854732419bfd7b30f8dd3e622d03fb3562092215fb257f74abdb80402567d292285f8b80895c40311318afce0e89e5ece0b2d6e4031dc7a49707c032249371d0cb62a937e60934bdbed5a0106f0f2c27afc05e144d83deb411b1c29751245bd3eb19cecedd58890c6247fbf5f20aa35eea15d727d461c6a5d100def3355bc81f55954d2ebb12d55b9cdafad6d1061d4552326909a3c8ead0517940aef8c80df1f480e599f33e123d8e78715894fffadde9fc82e4e35c15691514059645ce0ceb92f3c3f2302af56ed043d8351c412016d22762e412dcaaf29f1a30738da92204ec69233a35f24e9731b2116fcb5117f3ac470a9b33a8cce7b6a1fdfa28665e0ed53975fcd03f19019067bd84e490ee9b5d78a1a83b06455fb61673bafe8dd8db8580e77bea77d3cc02e7c211e42e6493e469c0694c5609eeb633e58fae93cef5c3e06adf10851b5a557bda491ba8458ac4e1722d063fb68ff5b1a5b1108be532fa228d3d64d327abb73711a5f007bf2474daf201bfd8f5230f346adb50a9e302870487aa9b6fe2e181845678fd3faf2e116a08f3343d6d28d0f04d8c1e432b725ad6f7091e0a36c551b3740d674ee0873af669c64c64687fcebddc1cbbe92ebde1c58a81472403eb266dd76b0687d82ce7c53cc47f164b6abfc19aa93bad734148b3923dccdc212867b01b3947c62710666b6620ac06dea7cb043ca40520f9b3cbb74ce38b6ac12bba89bdd04ac03e6b5ad279fc7fdf7fcf208060bf7febbc8d5df79b5a7a336b3252ca7057e98f7b841330efddb882c84d41741b5b7ed77e57728b893b45904a6d2fc3fd0e0a6422eba77236e2dbf5d39763f26517bfa70ccad2f7220e2a8270af6c3313d2b50bc1483c1c388862e347d2863877360cc299e883ff5b7b5e0009083bbf0379643696c4b45de98ac7621479e841b67b0c6f0f7a91bba1effc68fb2bfe7000bd9b4a6adb33b8ea448dfdbf4777134ac532c322cba009c5471fd671cbc7cab2cf265e4718d2b8ec5fe30dc9d5ec05610cc6cea72dc235f4f8d65471e844ba976baf59f3c573b1bc3506b7ac72a1a85f130254b81b914c045a5ebe436d1f3c5cd1a4fffee3af4d9c3040a1d4d640c020029f56abd15e1ec5aa26754e5013f8b67d00a0018fb5c0dbae3625250b4d833dfd000c9467ee376b24d0071afa0053e3e6ad95ca2a9f7c27bce31178000e2cbd25746873f8241d6f0621f5f764fe21774aa8ad426a43739f5d1470e126c5dfee12608ee646c8239822ff36af4aba494a5b6571567e524468a8d167efc03c204eb10d332b5aa41f3dfa10e2bc69f5c38bd22451f9d45b04e8a82eb3f8f0dca3221049817d65fdc0f54e18b4a8767f88b83acdf2e896a6920a851f14f9800032a503790a61ce1d5a6288cfc5ef4a59427d5f4c75fcb897ca282836447d41d89246b6aedbcb4d9c6bbbdb403c7cfe2616b6c662e2dcf212fa1250bec73e122afc5917bad2bcdfa83acfe354438cfa44172c268a778293979be344c072df0d11aea2f12b73e24a4247fda88b584e8dbc69bd85c4271cfbd25457172baeaee5ff3cf7e907a74895e2eb60b227a53d338accfc08e6b3d4cdcb9e19eee6a1c517e55fe0f635643ba061dfcd1a9180a334f13537d7a2db13fa76b70150a4c884f0bed5a5c833e3c8c809db80ad391cd51e83392e58152f1ed2ccda0219efe37a205c5ada4a79301bcbcc7d12132a9e626423f076d71b0ac9ba813648583160872faff7bfc5fd67db6c96020e6885291d343f03ac0a390fcf152c06e429eae43fd88c10be89ce5bf08e7438b92491316f7bb1d950e10019b6ff0586b048d8ff84f31270dce88a84ae7dfcd7423126309306dcddcc7f7602eb8f989599b2f11e1978ffa524f3f431a445c88b94b999315a24c7a919524a1e3955fbff7d035f38caf0351b7dbfd97c43ad47d6aeb6d56f1cce225b0d9ce8058af8e37e1ba054fb7b7df3aace9b5e928432ec90493f6334f1d9109bdce09737f3f0603d8e0440b68bf0b82e3337e436430131e1dcd157bfc38443a2bc525efd0e6844319864bfb11de44a415fa3c1882743f03be0230ee6487941d3a582f8bc9a5f3f6bdb26840cc527441203d665025191dd1958488ee1aa4178fa53243654e52db0feaadfd074ea59558db5b93e646973356900f40ca74e349b17e2e2dbc7304b925de0e8d789224c1fd3e999627e7eb4bffbd5c8fd8176037bcbaba9db731b5410065d624620b0943882e0458ad7d108eafa1d6877e06972bb7d047069f1ea3c0ff1b4cafd167333b60e5fc82d166cd6c0b7dabd40db36f006ebe2e0a2b56f56a85a276d7e148246cb7c73c86fa5e53332b26170e4e0f6c09520d15913e1261bcecfd509b243410387b38c0854798136375de5195c8e44475a75b4f75f0031165689f8087f06a5c2c13b8bc3f9a793f053a5e4c009fce4a7b0474945579556f2e10929c7c5d4fe2dd822ca", @ANYBLOB="26000000005609ef35a5b5f2bf336f26fc6de6914946bf0d50c1b63a3d276771ada534f5d59fe829ec6d6ec08909f057f386a4fd6f70e90e0b3ed2ff2995a8041db84e5ed57b5494d25c03512fbcfba6926e9384e6cbe85c37354e3782efd887c8aa8f76615c12f793fcc9a4700b873aee463d95ab05a42c3800ea0853072884b025fa3b91a810b6dfb1561e6fe28c6355f098e58d195459edfd0fce24084db7b8f5827907d3cc597f5e46fc6d92240c06f05fe2e315715c71ffb3bdc4ce4961e2d46c6550336b2deb8b4e9d121a5e2497fceacb5b357dc8cc64528efd58f666b913c58bb726efa762896f3b0c6709aca105d7268ecf7d35b5614451277f7963d7348d74a3ae79ec0540ce779bd4c71ecfd874c984a0766e6f4538bb847ad8527fe2a8d8dbc843832a498dfbb7ae0fc9b5026112da24bc38cd11c6233318f9e590b3cedcf57a2faa25b0c2bcd497160ad370218316676120a1956b94198a", @ANYRESOCT=r5], 0x20)

4.148043858s ago: executing program 1 (id=3258):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002637850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
r3 = socket(0x29, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}, 0xff00}], 0x2, 0x0)
getsockname$qrtr(r3, &(0x7f0000000040), &(0x7f0000000080)=0xc)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r1, r2, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r4, r0, 0x4, r1}, 0x10)

3.756372363s ago: executing program 2 (id=3259):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) (async)
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98)
vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000240)="f9", 0x1}], 0x1, 0xf) (async)
vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000240)="f9", 0x1}], 0x1, 0xf)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) (async)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000100), 0x4) (async)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000100), 0x4)
splice(r1, 0x0, r2, 0x0, 0xc, 0x4)
write(r0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="ee2862d62f9ae1f31f35278b28341a106c78c8c6a4778b7a3464df49e67d8655c2a8f85c631b552dc8ca6513ba558748afa59264124b4f27d59380382ee5046bc11d0ef6415d3e453c2ad5250cc0dbe87ec076e10e49a1543fcfe883afda367d00eeb469fde66a33b85b1bad8ddd5956620fa5846faf6ad9c3b7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="04"], 0x10)

3.56355807s ago: executing program 3 (id=3260):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "ede10c90e0d6d4b2b1651d4ddc62e17b5f4fa4a45bc87ce8b6cab0b0bf7f4a73a775b18b108887c58ce5057146437a52ff5d0f912a8eff0b48b4c25e7d5ae1e974f8cdaa3dccaccd26482b83f2a4afd0"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x1f, 0x0, "fec34e77f1263643b52aa7beb3171ddb9cbe0cfef7c87cb4af8b03bc9f40e8d97a8de1e0af2e350dce1d05f076b9cb42ce8acf171c1499fd401e7e756a5653ea39b4ecd9805ee428eb40cef5df6ef362"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r6, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r6, 0xaa0f4000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r8, 0xe6905000)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x1000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0xfffff000)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9f66})
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0)
mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r5, 0x0)
r10 = socket(0x10, 0x4, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r10)

3.493362089s ago: executing program 1 (id=3261):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344, <r2=>0x41424344}, 0x1, 0x0)
write$tun(r1, &(0x7f0000000240)={@val={0x0, 0x16}, @void, @mpls={[{0xff, 0x0, 0x1}, {0x3}, {0x1f, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x100}, {0xd94}], @ipv6=@tcp={0x8, 0x6, "7c32d9", 0x16c, 0x6, 0x1, @mcast2, @loopback, {[@routing={0x20, 0xa, 0x2, 0x3a, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3f}, @loopback, @empty, @local]}, @dstopts={0x6c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}]}, @fragment={0x2f, 0x0, 0x2, 0x0, 0x0, 0x9}, @dstopts={0x1, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x5d}, @pad1, @calipso={0x7, 0x50, {0x0, 0x12, 0xfe, 0xbee8, [0x50, 0x6, 0x8, 0x4, 0x3, 0x3, 0x9, 0x0, 0x81d]}}]}], {{0x4e24, 0x4e22, 0x41424344, r2, 0x0, 0x0, 0x9, 0x20, 0x401, 0x0, 0x5, {[@mss={0x2, 0x4, 0x3}, @timestamp={0x8, 0xa, 0x7, 0x7}]}}, {"b0b045dbc8e17365b1532c4bdcca8d93e2f2412a9537020f88d39f804d5d0acc9e38983849399796975a357607c8c68e799e79417a36034ce05d4088cf8fa4f0e09b4d685ac2b4129864de70838ad895017008c6d4a1fbd717f84e94e03b202e834ea63917054c472c2bccb63272bf23fdeb5c4bb0bea0cf"}}}}}}, 0x1b0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r3, 0x5, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r0, 0x4, r0}, 0x10)

3.085159228s ago: executing program 1 (id=3262):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000080)={0x3d, 0x400007e, 0xb, 0x7, 0x203b, 0x8100}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000201009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000017080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98f0ff0000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007001000040000002500000001"], 0x50) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x34, r6, 0x100, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8040)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r4, 0x20}, 0x38) (async)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0)
write$bt_hci(r9, &(0x7f0000000040)=ANY=[], 0x6)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async)
sendto$inet(r8, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) (async)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r4, 0x4) (async)
accept$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r3, r0, 0x26}, 0x10)

3.084710792s ago: executing program 2 (id=3263):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x1}, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50)
r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r2, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c)
bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000200))
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002680)={0x10, 0x140d, 0xd15, 0x70bd2a, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20004008)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r0, 0x4, r0}, 0x10)
connect(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr=0x64010102}, 0x1, 0x2, 0x1, 0x3}}, 0x80)

2.37210146s ago: executing program 2 (id=3264):
socket(0x2a, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x4007054)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x30}}, 0x0)
r6 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x64, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x0, 0x3}, {0x10, 0xffe0}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x94}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x9}, {0xfffffffffffffdc4, 0xb, 0x6}, {0x8, 0xb, 0x200083}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xfb}]}, 0x64}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
r15 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r15, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)

2.351402538s ago: executing program 1 (id=3265):
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x3}, 0x50) (async)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
unshare(0x400) (async)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect$unix(r3, &(0x7f0000000100)=@abs={0x27}, 0x6e) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a1180002000202000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r5, &(0x7f0000000200), 0x806000) (async)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r4, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x20)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) (async)
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x11, &(0x7f0000000480)=0x3ff, 0x4) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r1, 0x5, 0x0, @val=@tcx}, 0x1c)
bind$netlink(r6, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) (async)
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000cc0)=ANY=[@ANYBLOB="030000000400000005"], 0xc)

2.036130719s ago: executing program 3 (id=3266):
socket$igmp6(0xa, 0x3, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000003f320c83000400"/28], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="050000000000a826bdca7c6a70826be84d809a8e4ff576ec11551506a1257370afbd28d499bb02233f8082762965243d9b5b75406c249a1b801a268b602bb12bc9dd8ea83eba61afd6b4c56702fc2c98b0f3760c0abb6ef2e952c886f16b5699594d0bc18333f31b948a02ed811e5330773690c14d45965bc76315d8554e5fdf25f82dbd534f643986178f1f111756cb029ea7c539641fa6d1c1370963a57ea4a91d078fecf0c2b02946963057d33a5956757d478b4b80576f478ad962ecfcd55bbd", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[], 0x10)

1.676934308s ago: executing program 3 (id=3267):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10)

1.308397861s ago: executing program 3 (id=3268):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002637850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r1, r2, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r3, r0, 0x4, r1}, 0x10)

963.063596ms ago: executing program 1 (id=3269):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000680)={0x8001, 0x0, 0x7ffffffc}, 0xc) (async)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001800356a00000000000000000a800000ff0300ebffffffff13000100"], 0x30}}, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) (async)
syz_clone(0x22000100, &(0x7f0000000100)="9b8ccebf578d8d9a5b582289c4f4f547bc55a3542f68465521867b2de1706e44ebe910d1d9fdcfd4392ccaab162caa90a3923eb0d56e2dc7eb", 0x39, &(0x7f00000003c0), &(0x7f0000000000), &(0x7f0000000440)="4a6de6485ed2449eec916cad7be4ee6275d696eb3a7ee06b4eeafb79f343c5c756b4e00339c507ae6fa0c58b96db7b220644d809d52358bfd9c1c8f6ca8e3bd77ecd99ae550287e0810dded8c36009d128401be28763bee7cd1713a9549cc4dad53fdca2af0ffbe57f01c750550393dc5fbbc1fd03635b8273f0952d4ae493cedc9fc316c622908f350b77061e86ab963c9462f6f9e28f66114fc2b91982d3c706d1efb01e1f6c0c2104506f948acf60e8743a133c2cb8d3e55b2b882f354ea2") (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x4000) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="04"], 0x10)

802.579114ms ago: executing program 2 (id=3270):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000090601020000000000000000000000000900020073797a3100000000050001000700000004000780d2bbc6d9475b6787d27afb58638f452fad5917e6"], 0x2c}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
sendmsg$NFT_BATCH(r1, &(0x7f0000001940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001900)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0xcc, 0x9, 0xa, 0x404, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x60, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff7}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_SET_EXPRESSIONS={0x48, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_OP={0x8}]}}}]}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xff2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd1d}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe5f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1a0}, 0x1, 0x0, 0x0, 0x8084}, 0x24008000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=<r5=>r4, @ANYBLOB="05"], 0x10)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r6, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
socket$netlink(0x10, 0x3, 0x8000000004)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000900)=ANY=[@ANYBLOB="0180c200000000000000000086dd600000000008110000000000000000000000000000000000ff02000000000000080000000000000100000e2200089078"], 0x0)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x5}}, @fwd={0x9}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000001980)=""/150, 0x40, 0x96, 0x1, 0x4}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r5, @ANYRES32=r3, @ANYRES16=r4, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="00000000000000000500"/28], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r8 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r8, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}], 0x18, 0x4008000}, 0x28008841)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000000)=0x4ca68b28, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x20}, 0x94)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000000400), 0x0, 0x40000021, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r10 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})

761.561799ms ago: executing program 3 (id=3271):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x40d, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c01}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xfffffff8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r6}, @TCA_ROUTE4_TO={0x8, 0x2, 0x89}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x62}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xdc, 0x0, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3e}, @CTA_EXPECT_TUPLE={0xa0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x48840)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r3, r0, 0x4, r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x40d, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c01}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xfffffff8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8840}, 0x0) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
socket(0x10, 0x803, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r6}, @TCA_ROUTE4_TO={0x8, 0x2, 0x89}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x62}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xdc, 0x0, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3e}, @CTA_EXPECT_TUPLE={0xa0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x48840) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r3, r0, 0x4, r7}, 0x10) (async)

0s ago: executing program 1 (id=3272):
r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x14}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x2000000000000236, &(0x7f0000000540)=ANY=[@ANYRES64=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0x48)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$inet6_sctp(0xa, 0x6, 0x84)
setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x0)
sendmsg$nl_crypto(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r7, 0x0, 0x80)
r9 = socket$tipc(0x1e, 0x2, 0x0)
bind$bt_hci(r9, &(0x7f0000000040), 0x6)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10)
sendfile(r2, r5, 0x0, 0x20000000002)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r10, 0x0)

kernel console output (not intermixed with test programs):

es leftover after parsing attributes in process `syz.1.524'.
[   98.901543][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'.
[   98.989577][ T7506] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  101.505158][ T7466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  101.568182][ T7513] netlink: 'syz.1.527': attribute type 1 has an invalid length.
[  101.645284][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'.
[  101.674365][ T7527] netlink: 'syz.1.533': attribute type 12 has an invalid length.
[  101.678030][ T7517] x_tables: duplicate underflow at hook 3
[  101.790001][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'.
[  101.799630][ T7555] netlink: 'syz.2.537': attribute type 26 has an invalid length.
[  101.803954][ T7554] netlink: 'syz.2.537': attribute type 26 has an invalid length.
[  101.915971][ T7576] syzkaller0: entered promiscuous mode
[  101.917774][ T7576] syzkaller0: entered allmulticast mode
[  102.711657][ T7570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  102.855119][ T7612] IPv6: sit1: Disabled Multicast RS
[  103.698961][ T7638] __nla_validate_parse: 1 callbacks suppressed
[  103.698976][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'.
[  103.717763][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'.
[  103.722093][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'.
[  103.727241][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'.
[  103.731120][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'.
[  103.735061][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'.
[  103.738800][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'.
[  103.742713][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'.
[  103.746599][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'.
[  103.833028][ T7649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.560'.
[  103.838825][ T7649] IPVS: Error connecting to the multicast addr
[  105.899864][ T7620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  106.105564][ T5663] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  106.110532][ T7674] syzkaller0: entered promiscuous mode
[  106.113263][ T7674] syzkaller0: entered allmulticast mode
[  106.117071][ T5663] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  106.145728][ T5663] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  106.149370][ T5663] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.514169][ T7707] bond2: invalid ARP target 0.0.0.0 specified for addition
[  106.516590][ T7707] bond2: option arp_ip_target: invalid value (0)
[  106.519485][ T7707] bond2 (unregistering): Released all slaves
[  106.618869][ T7716] syzkaller0: entered promiscuous mode
[  106.624429][ T7716] syzkaller0: entered allmulticast mode
[  106.674417][ T7721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.767699][ T7719] tipc: Disabling bearer <eth:syzkaller0>
[  106.791628][ T7728] netlink: 'syz.1.586': attribute type 4 has an invalid length.
[  106.953238][ T7745] block nbd1: server does not support multiple connections per device.
[  106.960201][ T7745] block nbd1: shutting down sockets
[  107.353943][ T7831] hsr0: entered promiscuous mode
[  108.131822][ T7824] hsr0: left promiscuous mode
[  110.202762][ T7786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  110.269109][ T7837] Cannot find set identified by id 65534 to match
[  110.353553][ T7847] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  110.357050][ T7847] netlink: 'syz.2.610': attribute type 4 has an invalid length.
[  110.360370][ T7847] netlink: 'syz.2.610': attribute type 4 has an invalid length.
[  110.436346][ T7853] netlink: 'syz.0.613': attribute type 4 has an invalid length.
[  110.478217][ T7866] __nla_validate_parse: 7 callbacks suppressed
[  110.478239][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.616'.
[  110.489128][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.612'.
[  110.606946][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'.
[  110.610723][ T7880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.619'.
[  110.615882][ T7880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.619'.
[  110.863602][ T7904] netlink: 56 bytes leftover after parsing attributes in process `syz.1.629'.
[  110.974951][ T7906] Cannot find add_set index 2 as target
[  110.977730][   T55] block nbd1: Receive control failed (result -32)
[  111.083187][ T7917] block nbd2: server does not support multiple connections per device.
[  111.088182][ T7917] block nbd2: shutting down sockets
[  111.122993][ T7920] syzkaller1: entered promiscuous mode
[  111.124882][ T7920] syzkaller1: entered allmulticast mode
[  111.264397][ T7922] pim6reg1: entered promiscuous mode
[  111.266841][ T7922] pim6reg1: entered allmulticast mode
[  111.320611][ T7928] netlink: 56 bytes leftover after parsing attributes in process `syz.2.637'.
[  111.448074][ T7939] Can't find ip_set type h`sh:ip,mac
[  111.489586][ T7947] netlink: 104 bytes leftover after parsing attributes in process `syz.0.642'.
[  111.511564][ T7947] tipc: New replicast peer: 172.30.0.1
[  111.515564][ T7947] tipc: Enabled bearer <udp:syz2>, priority 10
[  111.518547][ T7948] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  111.527049][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'.
[  111.539235][ T7950] syzkaller0: entered promiscuous mode
[  111.540982][ T7950] syzkaller0: entered allmulticast mode
[  111.543978][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'.
[  111.546944][ T7947] tipc: Disabling bearer <udp:syz2>
[  111.549648][ T7952] bond0: left allmulticast mode
[  111.786530][ T7974] nbd: must specify at least one socket
[  112.003465][ T7983] 8021q: adding VLAN 0 to HW filter on device bond5
[  112.635711][ T7999] netlink: 'syz.0.660': attribute type 11 has an invalid length.
[  112.642295][ T7999] netlink: 'syz.0.660': attribute type 11 has an invalid length.
[  112.727952][ T8008] nbd: must specify at least one socket
[  112.866484][ T8038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  113.314657][ T8072] block nbd2: server does not support multiple connections per device.
[  113.323146][ T8072] block nbd2: shutting down sockets
[  113.393012][ T8081] block nbd3: server does not support multiple connections per device.
[  113.400875][ T8081] block nbd3: shutting down sockets
[  113.549242][ T8105] mac80211_hwsim hwsim4 : renamed from wlan0
[  113.620168][ T8111] syzkaller1: entered promiscuous mode
[  113.622103][ T8111] syzkaller1: entered allmulticast mode
[  113.815847][ T8136] netlink: 'syz.1.703': attribute type 1 has an invalid length.
[  113.819202][ T8137] netlink: 'syz.1.703': attribute type 1 has an invalid length.
[  114.006147][ T8162] IPVS: Error connecting to the multicast addr
[  114.049787][ T8166] xt_SECMARK: invalid mode: 4
[  114.300116][ T8183] ip6t_srh: unknown srh match flags  4000
[  114.555360][ T8232] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  114.575912][ T8233] netlink: 'syz.0.731': attribute type 1 has an invalid length.
[  114.578473][ T8233] netlink: 'syz.0.731': attribute type 4 has an invalid length.
[  114.620835][ T8238] syzkaller0: entered allmulticast mode
[  114.762483][ T8260] IPVS: Error connecting to the multicast addr
[  115.164748][ T8307] nbd: must specify at least one socket
[  115.251144][ T8318] netlink: 'syz.2.763': attribute type 7 has an invalid length.
[  115.477398][ T8329] 8021q: VLANs not supported on ip6tnl0
[  115.488156][ T8338] __nla_validate_parse: 29 callbacks suppressed
[  115.488173][ T8338] netlink: 40 bytes leftover after parsing attributes in process `syz.1.767'.
[  116.614897][ T8393] syzkaller0: entered promiscuous mode
[  116.619604][ T8393] syzkaller0: entered allmulticast mode
[  116.623906][ T8396] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.649059][ T8392] tipc: Resetting bearer <eth:syzkaller0>
[  116.664662][ T8402] xt_hashlimit: size too large, truncated to 1048576
[  116.769298][ T8392] tipc: Disabling bearer <eth:syzkaller0>
[  116.924263][ T8425] dvmrp0: entered allmulticast mode
[  116.993868][ T8428] netlink: 2 bytes leftover after parsing attributes in process `syz.1.786'.
[  117.050663][   T56] block nbd2: Receive control failed (result -32)
[  117.110009][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.791'.
[  117.113841][ T8439] syzkaller0: entered promiscuous mode
[  117.116434][ T8439] syzkaller0: entered allmulticast mode
[  117.125336][ T8444] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.136441][ T8438] tipc: Resetting bearer <eth:syzkaller0>
[  117.208899][ T8438] tipc: Disabling bearer <eth:syzkaller0>
[  117.217221][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'.
[  117.266177][ T8454] netlink: 'syz.1.796': attribute type 1 has an invalid length.
[  117.276618][ T8454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.796'.
[  117.280583][ T8454] nbd: illegal input index -50266104
[  117.314627][   T32] IPVS: starting estimator thread 0...
[  117.315918][ T8456] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001
[  117.325526][ T8462] bond3: entered allmulticast mode
[  117.327353][ T8462] 8021q: adding VLAN 0 to HW filter on device bond3
[  117.342169][ T8461] bond4: entered allmulticast mode
[  117.351031][ T8461] 8021q: adding VLAN 0 to HW filter on device bond4
[  117.405719][ T8464] IPVS: using max 106 ests per chain, 254400 per kthread
[  117.410150][ T8478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.803'.
[  117.433561][ T8474] block nbd3: server does not support multiple connections per device.
[  117.437558][ T8474] block nbd3: shutting down sockets
[  117.494427][ T8480] block nbd4: server does not support multiple connections per device.
[  117.498696][ T8480] block nbd4: shutting down sockets
[  117.530715][ T8486] tipc: Failed to remove unknown binding: 66,0,0/0:3358840671/3358840673
[  117.538665][ T8486] tipc: Failed to remove unknown binding: 66,0,0/0:3358840671/3358840672
[  117.544593][ T8486] tipc: Failed to remove unknown binding: 66,0,0/0:3358840671/3358840673
[  117.547405][ T8486] tipc: Failed to remove unknown binding: 66,0,0/0:3358840671/3358840672
[  117.623593][ T8502] block nbd3: server does not support multiple connections per device.
[  117.626424][ T8502] block nbd3: shutting down sockets
[  117.649684][ T8504] netlink: 40 bytes leftover after parsing attributes in process `syz.1.810'.
[  117.653723][ T8504] nbd: must specify at least one socket
[  117.712628][ T8508] syzkaller0: entered promiscuous mode
[  117.715435][ T8508] syzkaller0: entered allmulticast mode
[  117.718252][ T8510] netlink: 'syz.0.813': attribute type 12 has an invalid length.
[  117.721375][ T8510] netlink: 132 bytes leftover after parsing attributes in process `syz.0.813'.
[  117.727137][ T8508] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.733684][ T8507] tipc: Resetting bearer <eth:syzkaller0>
[  117.793567][ T8507] tipc: Disabling bearer <eth:syzkaller0>
[  117.868511][ T8520] netlink: 4924 bytes leftover after parsing attributes in process `syz.0.818'.
[  118.366123][ T8592] sctp: [Deprecated]: syz.1.842 (pid 8592) Use of struct sctp_assoc_value in delayed_ack socket option.
[  118.366123][ T8592] Use struct sctp_sack_info instead
[  118.558067][ T8618] netlink: 52 bytes leftover after parsing attributes in process `syz.2.849'.
[  118.576679][ T8618] netlink: 'syz.2.849': attribute type 3 has an invalid length.
[  118.589158][   T33] audit: type=1804 audit(1781937930.190:2): pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.850" name="/newroot/288/cgroup.controllers" dev="tmpfs" ino=1488 res=1 errno=0
[  118.599570][   T33] audit: type=1800 audit(1781937930.190:3): pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.850" name="cgroup.controllers" dev="tmpfs" ino=1488 res=0 errno=0
[  119.026408][ T8667] =======================================================
[  119.026408][ T8667] WARNING: The mand mount option has been deprecated and
[  119.026408][ T8667]          and is ignored by this kernel. Remove the mand
[  119.026408][ T8667]          option from the mount to silence this warning.
[  119.026408][ T8667] =======================================================
[  119.198018][ T8682] ksmbd: Unknown IPC event: 1, ignore.
[  119.903385][ T8701] syzkaller1: entered promiscuous mode
[  119.905620][ T8701] syzkaller1: entered allmulticast mode
[  119.919166][   T33] audit: type=1800 audit(1781937931.520:4): pid=8706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.875" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1541 res=0 errno=0
[  120.216361][ T8741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.235098][ T8740] tipc: Disabling bearer <eth:syzkaller0>
[  120.340533][ T8754] xt_TPROXY: Can be used only with -p tcp or -p udp
[  121.022898][ T8760] syzkaller0: entered promiscuous mode
[  121.025159][ T8760] syzkaller0: entered allmulticast mode
[  121.182487][ T8765] __nla_validate_parse: 8 callbacks suppressed
[  121.182497][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'.
[  121.234238][ T8767] block nbd3: server does not support multiple connections per device.
[  121.245247][ T8767] block nbd3: shutting down sockets
[  121.440678][ T8791] netlink: 40 bytes leftover after parsing attributes in process `syz.2.900'.
[  121.445610][ T8791] netlink: 40 bytes leftover after parsing attributes in process `syz.2.900'.
[  121.575118][ T8805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.904'.
[  121.666176][ T8816] netlink: 'syz.0.909': attribute type 11 has an invalid length.
[  121.677910][ T8816] netlink: 228 bytes leftover after parsing attributes in process `syz.0.909'.
[  121.691915][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'.
[  121.718183][ T8803] xt_CT: No such helper "snmp_trap"
[  121.854266][ T8826] netlink: 'syz.2.913': attribute type 10 has an invalid length.
[  121.860425][ T8826] 8021q: adding VLAN 0 to HW filter on device team0
[  121.866267][ T8826] .`: (slave team0): Enslaving as an active interface with an up link
[  121.880383][ T8826] netlink: 'syz.2.913': attribute type 1 has an invalid length.
[  121.969857][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'.
[  122.163431][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.926'.
[  122.186771][ T8867] bond2: invalid ARP target 0.0.0.0 specified for addition
[  122.190432][ T8867] bond2: option arp_ip_target: invalid value (0)
[  122.194145][ T8867] bond2 (unregistering): Released all slaves
[  122.211394][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.926'.
[  122.473749][   T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf00
[  125.272208][ T8887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  125.352155][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.942'.
[  125.408035][ T8934] netlink: 'syz.0.946': attribute type 12 has an invalid length.
[  125.411094][ T8934] netlink: 'syz.0.946': attribute type 29 has an invalid length.
[  125.415903][ T8934] netlink: 'syz.0.946': attribute type 1 has an invalid length.
[  125.605936][ T8958] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component
[  125.837286][ T9020] netlink: 'syz.1.968': attribute type 1 has an invalid length.
[  125.854691][ T9020] 8021q: adding VLAN 0 to HW filter on device bond6
[  125.864465][ T9018] bond6: (slave veth7): Enslaving as an active interface with a down link
[  125.869226][ T9019] bond6: (slave dummy0): making interface the new active one
[  125.872500][ T9019] dummy0: entered promiscuous mode
[  125.875103][ T9019] bond6: (slave dummy0): Enslaving as an active interface with an up link
[  128.665478][ T8981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  128.785279][ T9043] block nbd3: server does not support multiple connections per device.
[  128.790359][ T9043] block nbd3: shutting down sockets
[  129.224002][ T9093] __nla_validate_parse: 2 callbacks suppressed
[  129.224012][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.986'.
[  129.390263][ T9123] netlink: 'syz.2.996': attribute type 4 has an invalid length.
[  129.433382][ T9128] syzkaller0: entered promiscuous mode
[  129.435609][ T9128] syzkaller0: entered allmulticast mode
[  129.439209][ T9128] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.444065][ T9127] tipc: Resetting bearer <eth:syzkaller0>
[  129.450333][ T9127] tipc: Disabling bearer <eth:syzkaller0>
[  129.557934][ T9136] netlink: 'syz.2.1000': attribute type 12 has an invalid length.
[  129.567722][ T9136] netlink: 'syz.2.1000': attribute type 7 has an invalid length.
[  129.612131][ T9138] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1001'.
[  129.624571][ T9138] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.627867][ T9138] syzkaller0: entered promiscuous mode
[  129.630017][ T9138] syzkaller0: entered allmulticast mode
[  129.634957][ T9137] tipc: Resetting bearer <eth:syzkaller0>
[  129.641439][ T9137] tipc: Disabling bearer <eth:syzkaller0>
[  129.882629][ T9160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1007'.
[  129.911909][ T9160] 8021q: adding VLAN 0 to HW filter on device bond5
[  129.957526][ T9173] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[  129.972634][ T9173] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1012'.
[  130.034436][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1014'.
[  130.177553][   T33] audit: type=1804 audit(1781937941.780:5): pid=9198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1020" name="/newroot/349/memory.events" dev="tmpfs" ino=1804 res=1 errno=0
[  130.189514][   T33] audit: type=1800 audit(1781937941.780:6): pid=9198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1020" name="memory.events" dev="tmpfs" ino=1804 res=0 errno=0
[  130.199160][   T33] audit: type=1804 audit(1781937941.780:7): pid=9198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1020" name="/newroot/349/memory.events" dev="tmpfs" ino=1804 res=1 errno=0
[  130.238433][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1022'.
[  130.328723][ T9207] syzkaller0: entered promiscuous mode
[  130.331109][ T9207] syzkaller0: entered allmulticast mode
[  130.337343][ T9207] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.348829][ T9206] tipc: Resetting bearer <eth:syzkaller0>
[  130.414420][ T9206] tipc: Disabling bearer <eth:syzkaller0>
[  130.624772][ T9221] block nbd3: server does not support multiple connections per device.
[  130.629139][ T9221] block nbd3: shutting down sockets
[  130.745969][ T9257] netlink: 'syz.2.1036': attribute type 13 has an invalid length.
[  130.787493][ T9257] nbd: nbd2 already in use
[  130.825345][ T9261] netlink: 'syz.2.1037': attribute type 4 has an invalid length.
[  130.828456][ T9261] netlink: 'syz.2.1037': attribute type 4 has an invalid length.
[  130.840390][ T9261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1037'.
[  130.845464][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'.
[  130.848683][ T9261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  130.935027][ T9267] bond1: (slave .`): Releasing backup interface
[  130.941964][ T9267] .`: (slave team0): Releasing backup interface
[  130.946092][ T9267] bridge_slave_0: left allmulticast mode
[  130.947992][ T9267] bridge_slave_0: left promiscuous mode
[  130.949978][ T9267] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.955082][ T9267] bridge_slave_1: left allmulticast mode
[  130.957012][ T9267] bridge_slave_1: left promiscuous mode
[  130.958979][ T9267] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.966924][ T9267] .`: (slave bond_slave_0): Releasing backup interface
[  130.970828][ T9267] .`: (slave bond_slave_1): Releasing backup interface
[  130.975547][ T9267] team0: Port device team_slave_0 removed
[  130.978199][ T9267] team0: Port device team_slave_1 removed
[  130.980419][ T9267] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.983765][ T9267] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.987550][ T9267] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  130.993951][ T9268] team0: Mode changed to "activebackup"
[  130.998533][ T9267] syz.2.1039 (9267) used greatest stack depth: 19976 bytes left
[  131.470434][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'.
[  131.992956][ T9339] block nbd3: server does not support multiple connections per device.
[  132.000623][ T9339] block nbd3: shutting down sockets
[  132.057411][ T9344] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20004
[  132.203099][ T9359] block nbd3: server does not support multiple connections per device.
[  132.208407][ T9359] block nbd3: shutting down sockets
[  132.377010][ T9384] block nbd3: server does not support multiple connections per device.
[  132.382277][ T9384] block nbd3: shutting down sockets
[  132.443274][ T9405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1077'.
[  132.765075][ T9448] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  132.800681][ T9450] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  133.938076][ T9467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  134.143188][ T9522] netlink: 'syz.2.1113': attribute type 1 has an invalid length.
[  134.167150][ T9522] 8021q: adding VLAN 0 to HW filter on device bond6
[  134.245088][ T9536] xt_socket: unknown flags 0x8
[  134.280938][ T9537] __nla_validate_parse: 5 callbacks suppressed
[  134.280949][ T9537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1113'.
[  134.914125][ T9522] bond6: (slave veth9): Enslaving as an active interface with a down link
[  134.921553][ T9534] 8021q: adding VLAN 0 to HW filter on device batadv1
[  134.926488][ T9534] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  134.946082][ T9536] bond2: entered promiscuous mode
[  134.948567][ T9536] 8021q: adding VLAN 0 to HW filter on device bond2
[  135.049687][ T9543] block nbd3: server does not support multiple connections per device.
[  135.066360][ T9543] block nbd3: shutting down sockets
[  135.148258][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1126'.
[  135.176110][ T9566] nbd: must specify a size in bytes for the device
[  135.204224][ T9573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1128'.
[  135.240286][ T9577] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  135.245484][ T9577] IPVS: set_ctl: invalid protocol: 15 4.0.0.0:1024
[  135.330052][ T9592] netlink: 'syz.1.1135': attribute type 5 has an invalid length.
[  135.335913][ T9594] xt_l2tp: missing protocol rule (udp|l2tpip)
[  135.366639][ T5663] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc7
[  135.581567][ T9612] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1139'.
[  136.116681][ T9585] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  136.165797][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'.
[  136.174937][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'.
[  136.239541][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1145'.
[  136.257227][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1145'.
[  136.285396][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1147'.
[  136.303390][ T9641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1148'.
[  136.424685][ T9651] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.445202][ T9650] tipc: Disabling bearer <eth:syzkaller0>
[  136.963275][ T5663] dummy0: left promiscuous mode
[  138.694439][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  138.697162][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  150.713649][ T9674] block nbd3: server does not support multiple connections per device.
[  150.720182][ T9674] block nbd3: shutting down sockets
[  151.183097][ T9710] netlink: 'syz.0.1173': attribute type 1 has an invalid length.
[  151.187856][ T9710] netlink: 'syz.0.1173': attribute type 8 has an invalid length.
[  151.209688][ T9710] __nla_validate_parse: 1 callbacks suppressed
[  151.209705][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1173'.
[  151.218180][ T9710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1173'.
[  151.228004][ T9717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1175'.
[  151.233262][ T9718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1175'.
[  151.243294][ T9717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1175'.
[  151.249290][ T9718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1175'.
[  151.256728][ T9717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1175'.
[  151.262611][ T9718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1175'.
[  151.265556][ T9717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1175'.
[  151.267653][ T9718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1175'.
[  151.359198][ T9724] syzkaller0: entered promiscuous mode
[  151.362332][ T9724] syzkaller0: entered allmulticast mode
[  151.366759][ T9723] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.377583][ T9723] tipc: Resetting bearer <eth:syzkaller0>
[  151.382144][ T9723] tipc: Disabling bearer <eth:syzkaller0>
[  151.828148][ T9744] syzkaller0: entered promiscuous mode
[  151.830477][ T9744] syzkaller0: entered allmulticast mode
[  151.927106][ T9749] Bluetooth: MGMT ver 1.23
[  152.203116][ T9764] xt_hashlimit: size too large, truncated to 1048576
[  152.245474][ T9765] syzkaller1: entered promiscuous mode
[  152.247784][ T9765] syzkaller1: entered allmulticast mode
[  152.328435][ T9764] xt_hashlimit: size too large, truncated to 1048576
[  152.386294][ T9764] xt_hashlimit: size too large, truncated to 1048576
[  152.477112][ T9778] batadv_slave_1: entered promiscuous mode
[  152.488162][ T9777] batadv_slave_1: left promiscuous mode
[  152.493226][ T9764] xt_hashlimit: size too large, truncated to 1048576
[  152.566932][ T9764] xt_hashlimit: size too large, truncated to 1048576
[  152.643619][ T9764] xt_hashlimit: size too large, truncated to 1048576
[  152.696748][ T9786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  152.719444][ T9786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  152.726865][ T9764] xt_hashlimit: size too large, truncated to 1048576
[  152.811568][ T9764] xt_hashlimit: size too large, truncated to 1048576
[  152.890209][ T9764] xt_hashlimit: size too large, truncated to 1048576
[  152.959492][ T9764] xt_hashlimit: size too large, truncated to 1048576
[  153.211941][ T9805] openvswitch: netlink: Message has 512 unknown bytes.
[  153.282672][ T9814] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20001
[  153.342983][ T9815] block nbd3: server does not support multiple connections per device.
[  153.347144][ T9815] block nbd3: shutting down sockets
[  153.484628][ T9832] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  153.489321][ T9834] netlink: 'syz.1.1212': attribute type 1 has an invalid length.
[  153.540791][ T9836] netlink: 'syz.1.1214': attribute type 39 has an invalid length.
[  153.653143][ T9844] block nbd3: server does not support multiple connections per device.
[  153.656575][ T9844] block nbd3: shutting down sockets
[  154.134106][ T9873] block nbd3: server does not support multiple connections per device.
[  154.137757][ T9873] block nbd3: shutting down sockets
[  157.281948][ T9894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  157.362454][ T9932] bpf: Bad value for 'gid'
[  157.372145][ T9932] __nla_validate_parse: 45 callbacks suppressed
[  157.372160][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1241'.
[  157.415731][ T9932] bond3: (slave bridge4): Enslaving as an active interface with an up link
[  157.501739][ T9955] netlink: 'syz.0.1247': attribute type 1 has an invalid length.
[  157.504571][ T9955] netlink: 'syz.0.1247': attribute type 2 has an invalid length.
[  157.507015][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1247'.
[  157.510606][ T9955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1247'.
[  157.513715][ T9955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1247'.
[  157.519628][ T9955] syzkaller0: entered promiscuous mode
[  157.521681][ T9955] syzkaller0: entered allmulticast mode
[  157.881618][T10006] syzkaller0: entered promiscuous mode
[  157.885808][T10006] syzkaller0: entered allmulticast mode
[  157.912178][T10010] netlink: 'syz.1.1260': attribute type 10 has an invalid length.
[  157.918301][T10010] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  157.922002][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.928676][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.936187][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.941608][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.998519][T10019] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1262'.
[  158.038207][T10021] team0: entered allmulticast mode
[  158.041197][T10021] 8021q: adding VLAN 0 to HW filter on device team0
[  158.044681][T10021] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  158.078476][T10026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1266'.
[  158.216487][T10044] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1269'.
[  158.315167][T10047] ieee802154 phy0 wpan0: encryption failed: -22
[  158.326485][T10047] netlink: 'syz.2.1271': attribute type 9 has an invalid length.
[  158.332454][T10047] netlink: 'syz.2.1271': attribute type 6 has an invalid length.
[  158.335951][T10047] netlink: 'syz.2.1271': attribute type 7 has an invalid length.
[  158.338836][T10047] netlink: 'syz.2.1271': attribute type 8 has an invalid length.
[  158.495580][T10052] netlink: 'syz.1.1273': attribute type 12 has an invalid length.
[  158.603093][T10057] block nbd3: server does not support multiple connections per device.
[  158.606395][T10057] block nbd3: shutting down sockets
[  158.813850][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1279'.
[  159.285943][T10117] 8021q: adding VLAN 0 to HW filter on device bond8
[  159.289236][T10117] bridge0: port 1(bond8) entered blocking state
[  159.291970][T10117] bridge0: port 1(bond8) entered disabled state
[  159.296593][T10117] bond8: entered allmulticast mode
[  159.300184][T10117] bond8: entered promiscuous mode
[  159.308265][T10117] netlink: 'syz.2.1290': attribute type 1 has an invalid length.
[  159.311598][T10117] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1290'.
[  159.312274][T10109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  159.318980][T10107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  159.452340][T10132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1295'.
[  159.455742][T10132] nbd: must specify at least one socket
[  159.543163][T10135] block nbd3: server does not support multiple connections per device.
[  159.548850][T10135] block nbd3: shutting down sockets
[  159.569773][T10150] x_tables: duplicate underflow at hook 1
[  159.830356][T10185] bond7: option xmit_hash_policy: invalid value (10)
[  159.834159][T10185] bond7 (unregistering): Released all slaves
[  159.894169][T10190] block nbd3: server does not support multiple connections per device.
[  159.904208][T10190] block nbd3: shutting down sockets
[  159.959407][T10196] vlan0: Caught tx_queue_len zero misconfig
[  160.118556][T10214] ip6tnl0: Caught tx_queue_len zero misconfig
[  160.258835][T10223] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  161.054552][T10279] block nbd3: server does not support multiple connections per device.
[  161.059218][T10279] block nbd3: shutting down sockets
[  161.107053][T10286] IPVS: Error connecting to the multicast addr
[  161.250159][T10303] dvmrp1: entered allmulticast mode
[  162.769270][T10414] __nla_validate_parse: 11 callbacks suppressed
[  162.769288][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1379'.
[  162.778612][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1379'.
[  163.184735][T10458] syzkaller0: entered promiscuous mode
[  163.186836][T10458] syzkaller0: entered allmulticast mode
[  163.434732][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1398'.
[  163.584374][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1405'.
[  163.587231][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1405'.
[  163.592056][T10501] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1405'.
[  163.661955][T10503] x_tables: duplicate underflow at hook 1
[  163.744869][T10509] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1409'.
[  163.750720][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1409'.
[  163.756014][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1409'.
[  163.820611][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1410'.
[  164.678406][T10567] netlink: 'syz.0.1425': attribute type 32 has an invalid length.
[  164.787915][T10569] netlink: 'syz.0.1426': attribute type 4 has an invalid length.
[  164.791151][T10569] netlink: 'syz.0.1426': attribute type 4 has an invalid length.
[  164.800207][T10570] netlink: 'syz.0.1426': attribute type 30 has an invalid length.
[  164.803693][T10571] netlink: 'syz.0.1426': attribute type 30 has an invalid length.
[  165.179392][T10599] netlink: 'syz.0.1436': attribute type 11 has an invalid length.
[  166.390307][T10666] nbd: must specify at least one socket
[  166.396858][T10666] tipc: Enabled bearer <udp:syz2>, priority 10
[  166.431753][T10668] xt_hashlimit: size too large, truncated to 1048576
[  166.774583][T10691] lo: Caught tx_queue_len zero misconfig
[  166.776710][T10691] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  166.809998][T10696] netlink: 'syz.1.1462': attribute type 1 has an invalid length.
[  166.815695][T10696] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  167.169357][T10734] syzkaller0: entered promiscuous mode
[  167.174777][T10734] syzkaller0: entered allmulticast mode
[  167.512912][ T6180] tipc: Node number set to 1901805504
[  168.013460][T10807] netlink: 'syz.1.1498': attribute type 13 has an invalid length.
[  168.047216][T10807] netlink: 'syz.1.1498': attribute type 1 has an invalid length.
[  168.050129][T10807] __nla_validate_parse: 79 callbacks suppressed
[  168.050170][T10807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1498'.
[  168.075609][T10815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1502'.
[  168.093309][T10807] nbd: must specify at least one socket
[  168.101100][T10807] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1498'.
[  168.445358][T10837] 8021q: VLANs not supported on syzkaller1
[  168.492827][T10839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1509'.
[  168.830636][T10851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1512'.
[  168.847227][T10851] bond9: entered promiscuous mode
[  168.849205][T10851] bond9: entered allmulticast mode
[  171.722521][T10845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  171.871774][T10881] netlink: 'syz.2.1520': attribute type 4 has an invalid length.
[  171.874944][T10881] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1520'.
[  171.911109][T10885] sctp: [Deprecated]: syz.2.1521 (pid 10885) Use of int in max_burst socket option deprecated.
[  171.911109][T10885] Use struct sctp_assoc_value instead
[  171.915985][T10886] netlink: 'syz.2.1521': attribute type 2 has an invalid length.
[  171.918446][T10886] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1521'.
[  171.921378][T10885] netlink: 'syz.2.1521': attribute type 2 has an invalid length.
[  171.928840][T10885] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1521'.
[  171.933501][T10886] batadv_slave_0: Caught tx_queue_len zero misconfig
[  172.418597][T10923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  172.472353][T10937] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1537'.
[  172.477023][T10937] openvswitch: netlink: Message has 512 unknown bytes.
[  172.483761][T10940] block nbd3: server does not support multiple connections per device.
[  172.489065][T10940] block nbd3: shutting down sockets
[  172.615622][T10954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1541'.
[  173.018841][T10989] IPv6: NLM_F_CREATE should be specified when creating new route
[  173.250938][T11010] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  173.346645][T11016] block nbd0: Unsupported socket: should be TCP or UNIX.
[  173.356928][T11016] netlink: 'syz.1.1562': attribute type 1 has an invalid length.
[  173.360933][T11016] netlink: 'syz.1.1562': attribute type 4 has an invalid length.
[  173.363658][T11016] __nla_validate_parse: 2 callbacks suppressed
[  173.363666][T11016] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1562'.
[  173.728975][T11042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1572'.
[  173.937927][T11066] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  173.966374][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1578'.
[  174.427650][T11080] netlink: 'syz.1.1582': attribute type 1 has an invalid length.
[  174.441639][T11080] bond7: entered promiscuous mode
[  174.444353][T11080] 8021q: adding VLAN 0 to HW filter on device bond7
[  174.480721][T11080] bond7: (slave veth9): making interface the new active one
[  174.487359][T11080] veth9: entered promiscuous mode
[  174.491293][T11080] bond7: (slave veth9): Enslaving as an active interface with an up link
[  174.559755][T11083] syzkaller0: entered promiscuous mode
[  174.562101][T11083] syzkaller0: entered allmulticast mode
[  174.607365][T11085] gre0: entered promiscuous mode
[  174.609609][T11085] gre0: entered allmulticast mode
[  174.614768][T11085] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  175.176366][T11124] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  175.465674][T11146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1604'.
[  175.481182][T11146] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1604'.
[  175.621791][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1608'.
[  175.629886][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1608'.
[  175.893752][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1609'.
[  176.063852][T11170] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1613'.
[  176.323620][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1617'.
[  176.440646][T11183] netlink: 'syz.0.1617': attribute type 1 has an invalid length.
[  176.444014][T11187] netlink: 'syz.0.1617': attribute type 1 has an invalid length.
[  176.444068][T11187] netlink: 'syz.0.1617': attribute type 2 has an invalid length.
[  176.466344][T11183] netlink: 'syz.0.1617': attribute type 2 has an invalid length.
[  176.615002][ T5612] Bluetooth: hci0: command 0x040f tx timeout
[  176.615102][ T4996] Bluetooth: hci1: command 0x0406 tx timeout
[  177.043937][T11223] block nbd3: server does not support multiple connections per device.
[  177.048286][T11223] block nbd3: shutting down sockets
[  177.142606][T11234] syzkaller0: entered promiscuous mode
[  177.145208][T11234] syzkaller0: entered allmulticast mode
[  178.071467][T11294] netlink: 'syz.0.1649': attribute type 1 has an invalid length.
[  178.407433][T11316] __nla_validate_parse: 9 callbacks suppressed
[  178.407452][T11316] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1656'.
[  178.420965][T11315] netlink: 'syz.1.1655': attribute type 6 has an invalid length.
[  178.425389][T11315] netlink: 'syz.1.1655': attribute type 7 has an invalid length.
[  178.428933][T11315] netlink: 'syz.1.1655': attribute type 8 has an invalid length.
[  178.547176][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1659'.
[  178.619200][T11326] bond4: entered promiscuous mode
[  178.625671][T11326] bond4: entered allmulticast mode
[  178.829222][T11345] xt_TCPMSS: Only works on TCP SYN packets
[  178.870378][T11349] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1666'.
[  178.930328][T11353] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1668'.
[  178.935472][T11353] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1668'.
[  178.982006][T11351] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  179.132322][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1671'.
[  179.177628][T11369] netlink: 'syz.0.1672': attribute type 1 has an invalid length.
[  179.181033][T11369] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1672'.
[  179.267760][T11376] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  179.270108][T11377] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  179.283833][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'.
[  179.888143][T11402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1683'.
[  180.042572][T11415] netlink: 'syz.1.1688': attribute type 1 has an invalid length.
[  180.048741][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1688'.
[  180.052681][T11415] netlink: 'syz.1.1688': attribute type 1 has an invalid length.
[  180.064801][T11415] syzkaller1: entered promiscuous mode
[  180.068217][T11415] syzkaller1: entered allmulticast mode
[  180.704607][T11446] block nbd3: server does not support multiple connections per device.
[  180.718892][T11446] block nbd3: shutting down sockets
[  180.732359][T11452] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  181.369712][T11478] 8021q: VLANs not supported on syzkaller1
[  181.868022][   T33] audit: type=1804 audit(1781937993.470:8): pid=11484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1713" name="/newroot/564/memory.events" dev="tmpfs" ino=2907 res=1 errno=0
[  181.890487][   T33] audit: type=1800 audit(1781937993.480:9): pid=11484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1713" name="memory.events" dev="tmpfs" ino=2907 res=0 errno=0
[  181.908475][   T33] audit: type=1804 audit(1781937993.490:10): pid=11484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1713" name="/newroot/564/memory.events" dev="tmpfs" ino=2907 res=1 errno=0
[  182.068183][ T5663] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  182.079662][ T5663] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  182.087161][ T5663] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  182.092565][ T5663] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  183.340177][T11555] block nbd3: server does not support multiple connections per device.
[  183.355404][T11555] block nbd3: shutting down sockets
[  183.657489][T11570] netlink: 'syz.2.1742': attribute type 1 has an invalid length.
[  183.825795][T11572] bond10: (slave bridge3): making interface the new active one
[  183.830329][T11572] bond10: (slave bridge3): Enslaving as an active interface with an up link
[  184.316564][T11577] block nbd3: server does not support multiple connections per device.
[  184.326611][T11577] block nbd3: shutting down sockets
[  184.867928][T11595] __nla_validate_parse: 13 callbacks suppressed
[  184.867942][T11595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1750'.
[  185.406590][T11625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1759'.
[  185.529453][T11635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1762'.
[  185.536142][T11635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  185.706424][T11646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1767'.
[  185.973372][T11663] netlink: 'syz.2.1771': attribute type 4 has an invalid length.
[  186.557094][T11713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1785'.
[  186.720182][T11715] syzkaller1: entered promiscuous mode
[  186.725899][T11715] syzkaller1: entered allmulticast mode
[  186.738094][T11717] syzkaller1: entered promiscuous mode
[  186.740387][T11717] syzkaller1: entered allmulticast mode
[  186.911345][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1790'.
[  187.045297][T11753] xt_hashlimit: size too large, truncated to 1048576
[  187.373459][T11771] dvmrp0: left allmulticast mode
[  187.376046][T11771] dvmrp1: left allmulticast mode
[  187.676109][T11793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1809'.
[  187.760521][T11793] 8021q: adding VLAN 0 to HW filter on device bond11
[  187.873294][T11806] block nbd3: server does not support multiple connections per device.
[  187.877968][T11806] block nbd3: shutting down sockets
[  188.167851][T11844] netlink: 'syz.0.1826': attribute type 1 has an invalid length.
[  188.410116][T11872] trusted_key: syz.0.1834 sent an empty control message without MSG_MORE.
[  188.469363][T11872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1834'.
[  188.821642][T11892] 8021q: VLANs not supported on syzkaller1
[  189.077706][T11894] sctp: [Deprecated]: syz.2.1841 (pid 11894) Use of struct sctp_assoc_value in delayed_ack socket option.
[  189.077706][T11894] Use struct sctp_sack_info instead
[  189.116844][T11896] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1842'.
[  189.178064][T11898] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1843'.
[  190.310610][T11950] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  190.584688][T11971] __nla_validate_parse: 5 callbacks suppressed
[  190.584700][T11971] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1862'.
[  190.961978][T11980] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1866'.
[  191.124484][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1868'.
[  191.333445][T11994] syzkaller1: left promiscuous mode
[  191.335951][T11994] syzkaller1: left allmulticast mode
[  191.363953][T11993] block nbd3: server does not support multiple connections per device.
[  191.368353][T11993] block nbd3: shutting down sockets
[  191.372526][T11993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1870'.
[  191.483838][T12000] netlink: 'syz.0.1873': attribute type 1 has an invalid length.
[  191.491199][T11998] netlink: 'syz.1.1872': attribute type 2 has an invalid length.
[  191.520819][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'.
[  191.681697][T12011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1876'.
[  191.733830][T12011] 8021q: adding VLAN 0 to HW filter on device bond5
[  192.203250][T12034] block nbd3: server does not support multiple connections per device.
[  192.207400][T12034] block nbd3: shutting down sockets
[  192.773428][T12067] block nbd3: server does not support multiple connections per device.
[  192.777373][T12067] block nbd3: shutting down sockets
[  192.806169][T12068] netlink: 'syz.1.1890': attribute type 7 has an invalid length.
[  192.910564][   T55] block nbd0: Receive control failed (result -107)
[  192.913811][T12076] block nbd0: reconnected socket
[  192.918495][T12076] netlink: 'syz.0.1897': attribute type 13 has an invalid length.
[  192.956542][T12076] IPVS: sh: FWM 3 0x00000003 - no destination available
[  193.252115][T12085] 8021q: VLANs not supported on syzkaller1
[  193.594060][T12094] block nbd3: server does not support multiple connections per device.
[  193.599374][T12094] block nbd3: shutting down sockets
[  194.109703][T12121] xt_hashlimit: size too large, truncated to 1048576
[  194.234216][T12123] block nbd3: server does not support multiple connections per device.
[  194.239091][T12123] block nbd3: shutting down sockets
[  194.358908][T12131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1914'.
[  194.378852][T12131] vlan2: entered promiscuous mode
[  194.380505][T12131] erspan0: entered promiscuous mode
[  194.558456][T12143] 8021q: VLANs not supported on syzkaller1
[  194.660992][T12146] xt_policy: neither incoming nor outgoing policy selected
[  194.695416][T12155] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  194.780935][T12162] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  194.791038][T12161] vlan3: entered promiscuous mode
[  194.793711][T12161] bridge0: entered promiscuous mode
[  194.830669][T12165] x_tables: duplicate underflow at hook 3
[  194.887896][T12169] syzkaller0: entered promiscuous mode
[  194.890579][T12169] syzkaller0: entered allmulticast mode
[  194.983164][T12167] block nbd3: server does not support multiple connections per device.
[  194.990120][T12167] block nbd3: shutting down sockets
[  195.056839][T12177] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  195.297449][T12196] netlink: 'syz.0.1931': attribute type 5 has an invalid length.
[  195.465095][T12202] block nbd3: server does not support multiple connections per device.
[  195.479280][T12202] block nbd3: shutting down sockets
[  195.497579][T12210] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1936'.
[  195.517046][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1936'.
[  195.709694][T12219] netlink: 'syz.0.1938': attribute type 58 has an invalid length.
[  195.714456][T12224] netlink: 'syz.1.1941': attribute type 1 has an invalid length.
[  195.732619][T12224] bond8: entered promiscuous mode
[  195.737125][T12224] 8021q: adding VLAN 0 to HW filter on device bond8
[  195.749368][T12224] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  195.755035][T12224] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  195.759403][T12224] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  196.963161][T12237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  197.028294][T12269] syzkaller0: entered promiscuous mode
[  197.033893][T12269] syzkaller0: entered allmulticast mode
[  197.099082][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1954'.
[  197.105460][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1954'.
[  197.112659][T12271] netlink: 58 bytes leftover after parsing attributes in process `syz.1.1954'.
[  197.126389][T12271] team0 (unregistering): Port device team_slave_0 removed
[  197.132339][T12271] team0 (unregistering): Port device team_slave_1 removed
[  197.175114][T12275] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1957'.
[  197.300190][T12278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1956'.
[  197.312352][T12278] nbd: must specify at least one socket
[  197.471780][T12303] syzkaller0: entered promiscuous mode
[  197.473681][T12303] syzkaller0: entered allmulticast mode
[  197.531273][T12287] syzkaller1: entered promiscuous mode
[  197.535188][T12287] syzkaller1: entered allmulticast mode
[  197.673136][T12318] sctp: [Deprecated]: syz.2.1967 (pid 12318) Use of struct sctp_assoc_value in delayed_ack socket option.
[  197.673136][T12318] Use struct sctp_sack_info instead
[  197.717879][T12317] netlink: 'syz.0.1965': attribute type 1 has an invalid length.
[  197.786808][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1965'.
[  197.790470][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1965'.
[  198.128509][T12337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1973'.
[  198.132199][T12337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1973'.
[  198.161189][T12343] team_slave_1: Caught tx_queue_len zero misconfig
[  198.714617][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1982'.
[  199.304852][T12395] block nbd3: server does not support multiple connections per device.
[  199.312042][T12395] block nbd3: shutting down sockets
[  199.501956][T12404] macvlan0: Caught tx_queue_len zero misconfig
[  199.878909][T12421] 8021q: VLANs not supported on syzkaller1
[  200.136080][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  200.139507][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  200.182264][T12431] unsupported nlmsg_type 40
[  200.976830][T12459] batadv_slave_1: entered promiscuous mode
[  200.992687][T12458] batadv_slave_1: left promiscuous mode
[  201.151227][T12475] netlink: 'syz.2.2014': attribute type 29 has an invalid length.
[  201.159893][T12475] syzkaller0: entered promiscuous mode
[  201.161823][T12475] syzkaller0: entered allmulticast mode
[  201.178813][T12475] simple: basic_1
[  201.180167][T12475] simple: basic_2
[  201.181501][T12475] simple: basic_3
[  201.182728][T12475] simple: basic_4
[  201.183971][T12475] simple: basic_5
[  201.185202][T12475] simple: basic_6
[  201.186490][T12475] simple: basic_7
[  201.187847][T12475] simple: basic_8
[  201.189208][T12475] simple: basic_9
[  201.190518][T12475] simple: basic_10
[  201.191905][T12475] simple: basic_11
[  201.193272][T12475] simple: basic_12
[  201.194545][T12475] simple: basic_13
[  201.195827][T12475] simple: basic_14
[  201.197159][T12475] simple: basic_15
[  201.198336][T12475] simple: basic_16
[  201.199515][T12475] simple: basic_17
[  201.200679][T12475] 0: reclassify loop, rule prio 0, protocol 800
[  201.526990][T12489] tipc: Can't bind to reserved service type 1
[  202.022572][T12515] syzkaller1: entered promiscuous mode
[  202.025811][T12515] syzkaller1: entered allmulticast mode
[  202.106806][T12530] __nla_validate_parse: 7 callbacks suppressed
[  202.106816][T12530] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2029'.
[  202.114104][T12530] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  202.448548][T12543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2032'.
[  202.599836][T12546] syzkaller1: left promiscuous mode
[  202.601792][T12546] syzkaller1: left allmulticast mode
[  202.607414][T12547] lo: Caught tx_queue_len zero misconfig
[  202.650259][T12549] bond12: (slave tunl0): Device is not bonding slave
[  202.652513][T12549] bond12: option active_slave: invalid value (tunl0)
[  202.656518][T12549] bond12 (unregistering): Released all slaves
[  202.846597][T12569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2040'.
[  203.177778][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2045'.
[  203.186302][T12583] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2045'.
[  203.203296][T12580] block nbd3: server does not support multiple connections per device.
[  203.206412][T12580] block nbd3: shutting down sockets
[  203.225760][T12582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.247720][T12582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.258635][T12582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.417652][T12588] syz_tun: entered allmulticast mode
[  203.442476][T12589] pimreg: entered allmulticast mode
[  203.494171][T12589] syz_tun: left allmulticast mode
[  203.638355][T12603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2051'.
[  203.734265][T12602] block nbd3: server does not support multiple connections per device.
[  203.743932][T12602] block nbd3: shutting down sockets
[  203.876957][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2052'.
[  203.886729][T12607] 8021q: adding VLAN 0 to HW filter on device macsec2
[  204.438190][T12623] xt_bpf: check failed: parse error
[  204.482738][T12628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2058'.
[  204.595142][T12636] netlink: 'syz.1.2061': attribute type 8 has an invalid length.
[  204.712091][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2066'.
[  204.722436][T12653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2066'.
[  205.127035][T12695] ieee802154 phy0 wpan0: encryption failed: -22
[  205.383328][T12708] block nbd3: server does not support multiple connections per device.
[  205.387237][T12708] block nbd3: shutting down sockets
[  205.749822][T12732] xt_socket: unknown flags 0x8
[  205.791826][ T5663] tipc: Subscription rejected, illegal request
[  205.891337][T12733] ipvlan2: entered promiscuous mode
[  206.190440][T12767] IPVS: set_ctl: invalid protocol: 92 172.20.20.25:20004
[  206.407197][T12798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.429641][T12798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.451999][T12798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.669374][T12817] netlink: 'syz.1.2112': attribute type 2 has an invalid length.
[  206.833044][T12823] block nbd3: server does not support multiple connections per device.
[  206.837280][T12823] block nbd3: shutting down sockets
[  207.055137][ T5617] cgroup: fork rejected by pids controller in /syz0
[  207.759754][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  207.762423][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  207.765671][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  207.768429][ T5608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  207.774029][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  208.085363][T12861] netlink: 'syz.1.2123': attribute type 1 has an invalid length.
[  208.088812][T12846] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.091940][T12861] __nla_validate_parse: 9 callbacks suppressed
[  208.091955][T12861] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2123'.
[  208.101257][T12846] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.105611][T12846] bridge_slave_0: entered allmulticast mode
[  208.108968][T12846] bridge_slave_0: entered promiscuous mode
[  208.116943][T12846] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.120705][T12846] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.124527][T12846] bridge_slave_1: entered allmulticast mode
[  208.127496][T12846] bridge_slave_1: entered promiscuous mode
[  208.174701][T12846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.180824][T12846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.201714][T12846] team0: Port device team_slave_0 added
[  208.210598][T12846] team0: Port device team_slave_1 added
[  208.225851][T12846] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.228958][T12846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  208.243085][T12846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.251121][T12846] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.256826][T12846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  208.279574][T12846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.360052][T12846] hsr_slave_0: entered promiscuous mode
[  208.389744][T12846] hsr_slave_1: entered promiscuous mode
[  208.401420][T12846] debugfs: 'hsr0' already exists in 'hsr'
[  208.412567][T12846] Cannot create hsr debugfs directory
[  208.839506][T12846] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.846865][T12846] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.914713][T12846] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.923121][T12846] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.975961][T12846] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.979493][T12846] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.117289][T12846] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  209.120907][T12846] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.239809][T12846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  209.255498][T12846] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  209.258400][T12846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  209.264752][T12846] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  209.270287][T12846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  209.283102][T12846] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  209.286071][T12846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  209.292079][T12846] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  209.332524][T12846] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.347447][T12846] 8021q: adding VLAN 0 to HW filter on device team0
[  209.352740][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.355890][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.368787][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.371751][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.505572][T12904] x_tables: duplicate underflow at hook 3
[  209.520811][T12904] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.541825][T12893] tipc: Disabling bearer <eth:syzkaller0>
[  209.737667][T12846] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.805854][T12846] veth0_vlan: entered promiscuous mode
[  209.813014][ T5608] Bluetooth: hci2: command tx timeout
[  209.818981][T12846] veth1_vlan: entered promiscuous mode
[  209.822691][T12917] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.850156][T12915] tipc: Disabling bearer <eth:syzkaller0>
[  209.860981][T12846] veth0_macvtap: entered promiscuous mode
[  209.869257][T12846] veth1_macvtap: entered promiscuous mode
[  209.884833][T12846] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.918154][T12846] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.929944][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.940219][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.966334][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.975719][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.101924][T12311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.110544][T12311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.167834][T12923] dvmrp0: entered allmulticast mode
[  210.180781][T12311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.186553][T12311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.603592][T12959] netlink: 'syz.2.2146': attribute type 1 has an invalid length.
[  210.650131][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'.
[  210.654538][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'.
[  210.658199][T12963] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  210.863419][T12983] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2145'.
[  211.191737][T13017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2162'.
[  211.207443][T13018] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2164'.
[  211.282285][T13022] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2162'.
[  211.714634][T13047] syz.2.2172: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  211.719366][T13047] CPU: 0 UID: 0 PID: 13047 Comm: syz.2.2172 Not tainted syzkaller #0 PREEMPT(full) 
[  211.719379][T13047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  211.719386][T13047] Call Trace:
[  211.719391][T13047]  <TASK>
[  211.719396][T13047]  dump_stack_lvl+0xe8/0x150
[  211.719413][T13047]  warn_alloc+0x24c/0x270
[  211.719428][T13047]  ? __pfx_stack_trace_save+0x10/0x10
[  211.719441][T13047]  ? __pfx_warn_alloc+0x10/0x10
[  211.719454][T13047]  ? __kasan_kmalloc+0x93/0xb0
[  211.719461][T13047]  ? __kmalloc_cache_noprof+0x318/0x660
[  211.719472][T13047]  ? xskq_create+0x56/0x170
[  211.719488][T13047]  ? xsk_init_queue+0x8a/0xe0
[  211.719499][T13047]  ? xsk_setsockopt+0x52a/0x960
[  211.719510][T13047]  ? do_sock_setsockopt+0x17c/0x1b0
[  211.719520][T13047]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  211.719529][T13047]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.719537][T13047]  __vmalloc_node_range_noprof+0x12c/0x1730
[  211.719553][T13047]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  211.719565][T13047]  ? __kasan_kmalloc+0x93/0xb0
[  211.719572][T13047]  vmalloc_user_noprof+0xad/0xe0
[  211.719582][T13047]  ? xskq_create+0xbf/0x170
[  211.719592][T13047]  xskq_create+0xbf/0x170
[  211.719603][T13047]  xsk_init_queue+0x8a/0xe0
[  211.719613][T13047]  xsk_setsockopt+0x52a/0x960
[  211.719622][T13047]  ? __pfx_xsk_setsockopt+0x10/0x10
[  211.719631][T13047]  ? rcu_is_watching+0x15/0xb0
[  211.719639][T13047]  ? __pfx_aa_sk_perm+0x10/0x10
[  211.719648][T13047]  ? aa_sock_opt_perm+0xff/0x1a0
[  211.719657][T13047]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  211.719666][T13047]  ? __pfx_xsk_setsockopt+0x10/0x10
[  211.719676][T13047]  do_sock_setsockopt+0x17c/0x1b0
[  211.719686][T13047]  __x64_sys_setsockopt+0x13d/0x1b0
[  211.719695][T13047]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.719703][T13047]  do_syscall_64+0x174/0x580
[  211.719711][T13047]  ? trace_irq_disable+0x3b/0x140
[  211.719723][T13047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.719731][T13047] RIP: 0033:0x7f345819ce59
[  211.719738][T13047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  211.719746][T13047] RSP: 002b:00007f34590ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  211.719756][T13047] RAX: ffffffffffffffda RBX: 00007f3458415fa0 RCX: 00007f345819ce59
[  211.719761][T13047] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  211.719766][T13047] RBP: 00007f3458232e6f R08: 0000000000000004 R09: 0000000000000000
[  211.719771][T13047] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  211.719775][T13047] R13: 00007f3458416038 R14: 00007f3458415fa0 R15: 00007fff36520af8
[  211.719784][T13047]  </TASK>
[  211.719787][T13047] Mem-Info:
[  211.822482][T13047] active_anon:5031 inactive_anon:0 isolated_anon:0
[  211.822482][T13047]  active_file:7 inactive_file:56295 isolated_file:0
[  211.822482][T13047]  unevictable:1768 dirty:144 writeback:0
[  211.822482][T13047]  slab_reclaimable:10802 slab_unreclaimable:89660
[  211.822482][T13047]  mapped:18379 shmem:2349 pagetables:978
[  211.822482][T13047]  sec_pagetables:0 bounce:0
[  211.822482][T13047]  kernel_misc_reclaimable:0
[  211.822482][T13047]  free:1118030 free_pcp:18616 free_cma:0
[  211.840443][T13047] Node 0 active_anon:6220kB inactive_anon:0kB active_file:20kB inactive_file:49492kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45996kB dirty:208kB writeback:0kB shmem:4744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5016kB pagetables:2024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  211.854186][T13047] Node 1 active_anon:13904kB inactive_anon:0kB active_file:8kB inactive_file:175688kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27520kB dirty:368kB writeback:0kB shmem:4652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10320kB pagetables:1888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  211.866177][T13047] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  211.876488][T13047] lowmem_reserve[]: 0 1586 2117 2117 2117
[  211.878765][T13047] Node 0 DMA32 free:1515260kB boost:0kB min:25008kB low:31260kB high:37512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:348kB inactive_anon:0kB active_file:0kB inactive_file:2836kB unevictable:0kB writepending:4kB zspages:0kB present:2080636kB managed:1624696kB mlocked:0kB bounce:0kB free_pcp:14996kB local_pcp:14728kB free_cma:0kB
[  211.889624][T13047] lowmem_reserve[]: 0 0 530 530 530
[  211.891440][T13047] Node 0 Normal free:16760kB boost:6144kB min:14656kB low:16784kB high:18912kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5836kB inactive_anon:0kB active_file:20kB inactive_file:46656kB unevictable:3536kB writepending:204kB zspages:0kB present:1572868kB managed:543128kB mlocked:0kB bounce:0kB free_pcp:3220kB local_pcp:3208kB free_cma:0kB
[  211.903026][ T5608] Bluetooth: hci2: command tx timeout
[  211.905812][T13047] lowmem_reserve[]: 0 0 0 0 0
[  211.907614][T13047] Node 1 Normal free:2924548kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13904kB inactive_anon:0kB active_file:8kB inactive_file:175688kB unevictable:3536kB writepending:368kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:56388kB local_pcp:32128kB free_cma:0kB
[  211.920531][T13047] lowmem_reserve[]: 0 0 0 0 0
[  211.923278][T13047] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  211.929495][T13047] Node 0 DMA32: 161*4kB (UM) 105*8kB (UME) 47*16kB (UM) 1*32kB (U) 2*64kB (UE) 1*128kB (E) 1*256kB (M) 2*512kB (UM) 2*1024kB (UE) 7*2048kB (UME) 365*4096kB (M) = 1515228kB
[  211.936996][T13047] Node 0 Normal: 154*4kB (UE) 154*8kB (UE) 26*16kB (UME) 3*32kB (ME) 1*64kB (M) 2*128kB (UE) 11*256kB (UME) 6*512kB (UM) 0*1024kB 0*2048kB 2*4096kB (U) = 16760kB
[  211.944143][T13047] Node 1 Normal: 1115*4kB (UE) 849*8kB (UE) 469*16kB (UE) 870*32kB (UE) 339*64kB (UM) 117*128kB (UM) 47*256kB (UM) 24*512kB (UME) 17*1024kB (UM) 3*2048kB (M) 682*4096kB (UM) = 2924612kB
[  211.951592][T13047] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  211.955495][T13047] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  211.958763][T13047] 58651 total pagecache pages
[  211.961098][T13047] 0 pages in swap cache
[  211.962650][T13047] Free swap  = 124996kB
[  211.964431][T13047] Total swap = 124996kB
[  211.965964][T13047] 1834877 pages RAM
[  211.967265][T13047] 0 pages HighMem/MovableOnly
[  211.968865][T13047] 390410 pages reserved
[  211.970643][T13047] 0 pages cma reserved
[  211.993103][T13046] block nbd3: server does not support multiple connections per device.
[  211.996919][T13046] block nbd3: shutting down sockets
[  212.163202][T13061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2178'.
[  212.735835][T13113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2191'.
[  212.797597][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2194'.
[  212.826993][T13113] bond6: (slave dummy0): Releasing active interface
[  212.831509][T13113] bridge6: port 1(dummy0) entered blocking state
[  212.835183][T13113] bridge6: port 1(dummy0) entered disabled state
[  212.838259][T13113] dummy0: entered allmulticast mode
[  212.841434][T13113] dummy0: entered promiscuous mode
[  212.849348][T13113] netlink: 'syz.1.2191': attribute type 10 has an invalid length.
[  212.858862][T13125] netlink: 'syz.2.2194': attribute type 2 has an invalid length.
[  212.870196][T13113] bridge6: port 1(dummy0) entered blocking state
[  212.873014][T13113] bridge6: port 1(dummy0) entered forwarding state
[  212.880683][T13113] dummy0: left allmulticast mode
[  212.885274][T13113] bridge6: port 1(dummy0) entered disabled state
[  213.884960][T13137] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.890739][T13135] tipc: Disabling bearer <eth:syzkaller0>
[  213.973299][ T5608] Bluetooth: hci2: command tx timeout
[  214.397183][T13172] __nla_validate_parse: 1 callbacks suppressed
[  214.397195][T13172] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2212'.
[  214.416141][T13172] syzkaller1: entered promiscuous mode
[  214.418597][T13172] syzkaller1: entered allmulticast mode
[  214.448822][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2207'.
[  215.307154][T13184] gre0: left promiscuous mode
[  215.311910][T13184] gre0: left allmulticast mode
[  215.324985][T13184] ip6tnl0: left promiscuous mode
[  215.326755][T13184] ip6tnl0: left allmulticast mode
[  215.331430][T13184] team0: left allmulticast mode
[  215.344592][T13184] bond0: left promiscuous mode
[  215.349962][T13184] bond2: left promiscuous mode
[  215.353636][T13184] bond2: left allmulticast mode
[  215.359812][T13184] bond3: left allmulticast mode
[  215.368131][T13184] bond4: left allmulticast mode
[  215.382596][T13184] bond9: left promiscuous mode
[  215.386462][T13184] bond9: left allmulticast mode
[  215.615725][T13196] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2219'.
[  215.782732][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2217'.
[  215.997292][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2224'.
[  216.053271][ T5608] Bluetooth: hci2: command tx timeout
[  217.147101][T13299] tipc: Invalid UDP bearer configuration
[  217.147122][T13299] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  217.318508][T13303] tcf_pedit_act: 22 callbacks suppressed
[  217.318519][T13303] tc action pedit 'at' offset 9 out of bounds
[  217.593931][T13319] syzkaller0: entered promiscuous mode
[  217.596139][T13319] syzkaller0: entered allmulticast mode
[  217.661551][T13322] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.665734][T13322] syzkaller0: entered promiscuous mode
[  217.668463][T13322] syzkaller0: entered allmulticast mode
[  217.676627][T13322] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  217.691455][T13322] tipc: Resetting bearer <eth:syzkaller0>
[  217.698706][T13321] tipc: Resetting bearer <eth:syzkaller0>
[  217.711146][T13321] tipc: Disabling bearer <eth:syzkaller0>
[  217.801181][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2258'.
[  217.814060][T13324] block nbd3: server does not support multiple connections per device.
[  217.818938][T13324] block nbd3: shutting down sockets
[  217.850281][T13327] netlink: 'syz.1.2259': attribute type 1 has an invalid length.
[  217.865833][T13327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2259'.
[  217.883701][T13327] nbd: illegal input index -50266104
[  217.887059][T13329] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2260'.
[  217.898284][T13327] netlink: 'syz.1.2259': attribute type 1 has an invalid length.
[  217.924352][T13327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2259'.
[  217.928314][T13327] nbd: illegal input index -50266104
[  217.930733][T13327] netlink: 'syz.1.2259': attribute type 1 has an invalid length.
[  217.934902][T13327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2259'.
[  217.938753][T13327] nbd: illegal input index -50266104
[  217.941185][T13327] netlink: 'syz.1.2259': attribute type 1 has an invalid length.
[  217.945062][T13327] nbd: illegal input index -50266104
[  217.981573][T13335] syzkaller0: entered promiscuous mode
[  217.984317][T13335] syzkaller0: entered allmulticast mode
[  218.133105][ T5608] Bluetooth: hci2: command tx timeout
[  218.405913][T13370] netlink: 'syz.1.2273': attribute type 1 has an invalid length.
[  218.591134][T13389] netlink: 'syz.1.2279': attribute type 1 has an invalid length.
[  218.594453][T13389] nbd: illegal input index -50266104
[  219.424167][T13439] netlink: 'syz.2.2293': attribute type 1 has an invalid length.
[  219.426852][T13439] netlink: 'syz.2.2293': attribute type 2 has an invalid length.
[  219.489833][T13445] __nla_validate_parse: 6 callbacks suppressed
[  219.489917][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2292'.
[  219.499009][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2292'.
[  219.503488][T13445] netlink: 'syz.0.2292': attribute type 6 has an invalid length.
[  219.506840][T13445] netlink: 'syz.0.2292': attribute type 5 has an invalid length.
[  219.587988][ T5499] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  219.593925][ T5499] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  219.607572][ T5499] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  219.610812][ T5499] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  219.615920][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2295'.
[  219.622033][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2295'.
[  219.932108][   T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  220.641317][T13464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  220.791543][T13499] netlink: 'syz.0.2307': attribute type 11 has an invalid length.
[  220.800598][T13499] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2307'.
[  220.865254][T13510] Cannot find map_set index 0 as target
[  220.889353][T13507] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  220.895170][T13507] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  221.034787][T13511] block nbd3: server does not support multiple connections per device.
[  221.042066][T13511] block nbd3: shutting down sockets
[  221.221165][T13535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2320'.
[  222.730786][T13562] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2324'.
[  223.347262][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2326'.
[  228.250786][T13624] tipc: Started in network mode
[  228.258993][T13624] tipc: Node identity 4246, cluster identity 4711
[  228.264787][T13624] tipc: Node number set to 16966
[  229.900608][T13643] pim6reg1: entered promiscuous mode
[  229.911777][T13643] pim6reg1: entered allmulticast mode
[  232.694330][T13668] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2358'.
[  232.719331][T13668] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2358'.
[  233.727371][T13677] block nbd3: server does not support multiple connections per device.
[  233.734219][T13677] block nbd3: shutting down sockets
[  234.120828][T13684] tipc: MTU too low for tipc bearer
[  234.203796][T13684] block nbd3: server does not support multiple connections per device.
[  234.215335][T13684] block nbd3: shutting down sockets
[  236.310583][T13702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2368'.
[  238.105138][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2373'.
[  240.031792][T13751] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component
[  243.440554][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2392'.
[  243.450820][T13798] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  243.459863][T13798] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  243.470544][T13798] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2392'.
[  243.515588][T13802] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2392'.
[  243.519390][T13798] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2392'.
[  243.539394][T13800] block nbd3: server does not support multiple connections per device.
[  243.546138][T13800] block nbd3: shutting down sockets
[  244.376184][T13810] block nbd3: server does not support multiple connections per device.
[  244.389186][T13810] block nbd3: shutting down sockets
[  245.733008][T13827] bond12 (unregistering): Released all slaves
[  247.113903][T13852] batadv_slave_1: entered promiscuous mode
[  247.157860][T13852] validate_nla: 4 callbacks suppressed
[  247.157909][T13852] netlink: 'syz.0.2408': attribute type 1 has an invalid length.
[  247.218755][T13851] batadv_slave_1: left promiscuous mode
[  247.618185][T13861] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2411'.
[  247.758959][T13863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2410'.
[  248.425215][T13868] syzkaller0: entered promiscuous mode
[  248.443334][T13868] syzkaller0: entered allmulticast mode
[  248.538267][ T5499] syzkaller0: tun_net_xmit 48
[  248.674722][T13875] sctp: [Deprecated]: syz.2.2415 (pid 13875) Use of int in max_burst socket option.
[  248.674722][T13875] Use struct sctp_assoc_value instead
[  249.054247][T13881] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2416'.
[  250.507949][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2423'.
[  251.080312][T13905] netlink: 'syz.0.2425': attribute type 3 has an invalid length.
[  252.461836][T13922] xt_addrtype: ipv6 does not support BROADCAST matching
[  253.776716][T13946] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2437'.
[  254.152479][T13954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2442'.
[  254.155993][T13954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2442'.
[  254.159198][T13954] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2442'.
[  254.162204][T13954] netlink: 'syz.2.2442': attribute type 3 has an invalid length.
[  254.166108][T13954] netlink: 'syz.2.2442': attribute type 2 has an invalid length.
[  254.174470][T13954] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2442'.
[  254.178298][T13954] netlink: 'syz.2.2442': attribute type 2 has an invalid length.
[  256.417296][T13961] block nbd3: shutting down sockets
[  257.658835][T13990] netlink: 'syz.2.2450': attribute type 10 has an invalid length.
[  259.391826][T14016] syzkaller1: entered promiscuous mode
[  259.415287][T14016] syzkaller1: entered allmulticast mode
[  261.586070][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  261.588427][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  263.348242][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x1
[  263.808922][T14048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2465'.
[  264.034662][T14037] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  264.044051][T14037] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  264.555039][T14056] block nbd3: server does not support multiple connections per device.
[  264.590683][T14056] block nbd3: shutting down sockets
[  266.712512][T14092] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2479'.
[  267.108712][T14098] netlink: 'syz.2.2481': attribute type 1 has an invalid length.
[  267.184796][T14098] syzkaller1: entered promiscuous mode
[  267.186893][T14098] syzkaller1: entered allmulticast mode
[  267.391460][T14087] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  268.465703][T14110] netlink: 550 bytes leftover after parsing attributes in process `syz.1.2485'.
[  269.019122][T14119] netlink: 'syz.1.2486': attribute type 2 has an invalid length.
[  269.031221][T14119] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2486'.
[  269.700914][T14124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2487'.
[  270.418672][T14130] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004
[  270.513644][T14130] tap0: tun_chr_ioctl cmd 1074025676
[  270.518668][T14130] tap0: owner set to 0
[  270.625330][T14134] netlink: 'syz.0.2490': attribute type 4 has an invalid length.
[  270.628163][T14134] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2490'.
[  270.677303][T14132] netlink: 'syz.1.2491': attribute type 1 has an invalid length.
[  270.684796][T14132] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2491'.
[  270.741891][T14134] .`: renamed from bond0 (while UP)
[  270.769155][T14137] x_tables: duplicate underflow at hook 2
[  271.392093][T14147] IPVS: set_ctl: invalid protocol: 126 172.20.20.170:20002
[  271.427930][T14147] IPVS: ip_vs_add_dest(): server weight less than zero
[  271.647788][T14151] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20004
[  271.684583][T14151] sctp: [Deprecated]: syz.2.2496 (pid 14151) Use of int in max_burst socket option.
[  271.684583][T14151] Use struct sctp_assoc_value instead
[  271.974029][T14155] netlink: 'syz.2.2498': attribute type 1 has an invalid length.
[  272.026136][T14155] erspan1: entered allmulticast mode
[  272.085783][T14156] block nbd3: server does not support multiple connections per device.
[  272.140261][T14156] block nbd3: shutting down sockets
[  273.736729][T14185] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  274.609897][T14206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2511'.
[  274.831430][T14210] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2507'.
[  275.219834][T14214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2513'.
[  275.707865][T14222] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2516'.
[  275.853851][T14224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2516'.
[  275.857379][T14224] netlink: 'syz.1.2516': attribute type 1 has an invalid length.
[  276.562241][T14234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  277.630779][T14251] xt_hashlimit: size too large, truncated to 1048576
[  279.284659][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2532'.
[  279.297219][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2532'.
[  279.392677][T14279] netlink: 'syz.2.2534': attribute type 8 has an invalid length.
[  279.912086][T14290] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2537'.
[  279.919372][T14290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2537'.
[  282.701069][T14330] syzkaller1: entered promiscuous mode
[  282.704338][T14330] syzkaller1: entered allmulticast mode
[  283.340261][T14338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2551'.
[  283.343548][T14338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2551'.
[  283.374010][T14338] geneve3: entered promiscuous mode
[  283.386364][T14335] IPv6: NLM_F_REPLACE set, but no existing node found!
[  283.541410][T14345] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2553'.
[  284.634800][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2559'.
[  284.647219][T14364] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2560'.
[  284.862082][T14367] netlink: 'syz.0.2561': attribute type 1 has an invalid length.
[  285.132428][T14371] sctp: [Deprecated]: syz.2.2562 (pid 14371) Use of int in max_burst socket option.
[  285.132428][T14371] Use struct sctp_assoc_value instead
[  285.230820][T14370] bond0: (slave bridge1): Enslaving as a backup interface with an up link
[  285.239383][T14374] netlink: 732 bytes leftover after parsing attributes in process `syz.1.2563'.
[  285.247121][T14374] netlink: 732 bytes leftover after parsing attributes in process `syz.1.2563'.
[  285.322712][T14372] macvlan2: entered promiscuous mode
[  285.325068][T14372] macvlan2: entered allmulticast mode
[  285.332015][T14372] bond0: entered promiscuous mode
[  285.339783][T14372] bridge1: entered promiscuous mode
[  285.358436][T14372] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  285.372561][T14376] netlink: 'syz.1.2563': attribute type 10 has an invalid length.
[  285.595876][T14372] bond0: left promiscuous mode
[  285.602597][T14372] bridge1: left promiscuous mode
[  285.742707][T14376] dummy0: left promiscuous mode
[  286.255717][T14381] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  286.283815][T14386] netlink: 'syz.0.2567': attribute type 19 has an invalid length.
[  286.286634][T14386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2567'.
[  286.298661][T14386] netlink: 'syz.0.2567': attribute type 19 has an invalid length.
[  286.302394][T14386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2567'.
[  288.667218][T14424] gretap0: mtu less than device minimum
[  289.000317][T14433] nbd: must specify at least one socket
[  293.304163][T14485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2594'.
[  293.554618][T14488] block nbd3: server does not support multiple connections per device.
[  293.575461][T14488] block nbd3: shutting down sockets
[  295.481125][T14516] netlink: 'syz.1.2603': attribute type 1 has an invalid length.
[  295.860966][T14525] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.2605'.
[  297.398152][T14547] block nbd3: server does not support multiple connections per device.
[  297.422152][T14547] block nbd3: shutting down sockets
[  298.156610][T14565] block nbd3: server does not support multiple connections per device.
[  298.171850][T14565] block nbd3: shutting down sockets
[  298.961669][T14569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2617'.
[  299.114420][T14575] netlink: 'syz.1.2619': attribute type 21 has an invalid length.
[  299.121238][T14575] netlink: 'syz.1.2619': attribute type 22 has an invalid length.
[  299.128755][T14575] netlink: 'syz.1.2619': attribute type 23 has an invalid length.
[  299.139933][T14575] netlink: 'syz.1.2619': attribute type 25 has an invalid length.
[  299.144387][T14575] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2619'.
[  299.578086][T14585] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2620'.
[  300.827854][T14599] netlink: 'syz.1.2626': attribute type 3 has an invalid length.
[  300.830773][T14599] netlink: 'syz.1.2626': attribute type 1 has an invalid length.
[  300.835887][T14599] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2626'.
[  300.886390][T14602] netlink: 'syz.2.2625': attribute type 6 has an invalid length.
[  300.935173][T14600] block nbd3: server does not support multiple connections per device.
[  300.954548][T14600] block nbd3: shutting down sockets
[  301.458867][T14596] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  301.465443][T14596] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  302.317411][T14624] netlink: 'syz.0.2633': attribute type 2 has an invalid length.
[  302.328347][T14624] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2633'.
[  305.544009][T14630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2634'.
[  305.562625][T14630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2634'.
[  305.773593][T14630] gretap0: entered promiscuous mode
[  305.847877][T14630] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  305.870248][T14630] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  306.156162][T14641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2637'.
[  306.276561][T14642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2637'.
[  306.577901][T14646] xt_hashlimit: size too large, truncated to 1048576
[  307.886303][T14659] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2643'.
[  307.905279][T14659] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2643'.
[  309.959635][T14688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2652'.
[  310.406333][T14693] block nbd3: server does not support multiple connections per device.
[  310.461000][T14693] block nbd3: shutting down sockets
[  310.698051][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2655'.
[  316.728069][T14794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2685'.
[  318.263911][T14818] block nbd3: Unsupported socket: should be TCP or UNIX.
[  318.291510][T14818] block nbd3: shutting down sockets
[  319.707456][ T5662] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.720368][ T5662] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.732096][ T5662] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  320.034718][ T5662] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  320.741679][T14853] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2700'.
[  320.817663][T14853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  321.490575][T14870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2704'.
[  321.498801][T14869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2704'.
[  323.018372][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  323.022895][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  323.351308][T14904] xt_cgroup: invalid path, errno=-2
[  324.127835][T14918] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2716'.
[  325.099305][T14927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2718'.
[  325.988786][ T6181] IPVS: starting estimator thread 0...
[  326.032456][T14942] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  326.055734][T14942] bond9 (unregistering): Released all slaves
[  326.085188][T14950] IPVS: using max 106 ests per chain, 254400 per kthread
[  326.641179][T14957] C: renamed from veth1_to_team (while UP)
[  326.677635][T14957] netlink: 'syz.0.2725': attribute type 8 has an invalid length.
[  326.680882][T14957] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  326.735396][T14957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2725'.
[  329.038824][T14989] block nbd3: server does not support multiple connections per device.
[  329.075585][T14989] block nbd3: shutting down sockets
[  329.228820][T14992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2734'.
[  329.310283][T14992] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2734'.
[  329.435527][T14992] 8021q: VLANs not supported on ip6_vti0
[  329.828165][T15001] netlink: 'syz.1.2736': attribute type 4 has an invalid length.
[  331.223165][T15019] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2741'.
[  332.594946][T15036] netlink: 'syz.1.2746': attribute type 2 has an invalid length.
[  332.597767][T15036] netlink: 'syz.1.2746': attribute type 1 has an invalid length.
[  332.600373][T15036] netlink: 'syz.1.2746': attribute type 2 has an invalid length.
[  332.603387][T15036] netlink: 'syz.1.2746': attribute type 2 has an invalid length.
[  332.609159][T15036] netlink: 'syz.1.2746': attribute type 1 has an invalid length.
[  332.612602][T15036] netlink: 'syz.1.2746': attribute type 2 has an invalid length.
[  336.138983][T15096] ieee802154 phy0 wpan0: encryption failed: -22
[  337.313710][T15114] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  337.331604][T15114] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  337.875282][T15124] block nbd3: server does not support multiple connections per device.
[  337.905985][T15124] block nbd3: shutting down sockets
[  339.664270][T15152] block nbd3: server does not support multiple connections per device.
[  339.668826][T15152] block nbd3: shutting down sockets
[  340.915032][T15171] netlink: 'syz.0.2779': attribute type 4 has an invalid length.
[  341.698959][T15180] veth0: mtu less than device minimum
[  342.751442][T15194] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2786'.
[  345.500924][T15232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2796'.
[  345.921697][T15240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2798'.
[  348.599069][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2812'.
[  348.657641][T15278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2812'.
[  348.660671][T15278] netlink: 'syz.2.2812': attribute type 7 has an invalid length.
[  348.665943][T15278] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2812'.
[  350.618516][T15297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2819'.
[  351.895204][T15314] syzkaller1: entered promiscuous mode
[  351.897196][T15314] syzkaller1: entered allmulticast mode
[  353.546794][T15341] gre0: entered promiscuous mode
[  353.548719][T15341] gre0: entered allmulticast mode
[  353.584346][T15341] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  354.680546][T15361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2832'.
[  355.248942][T15369] x_tables: duplicate underflow at hook 2
[  355.893871][T15375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2837'.
[  355.924548][T15375] netlink: 'syz.2.2837': attribute type 7 has an invalid length.
[  355.939582][T15375] netlink: 'syz.2.2837': attribute type 8 has an invalid length.
[  355.955286][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2837'.
[  357.104919][T15390] xt_hl: Unknown Hop Limit match mode: 206
[  357.165278][T15392] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  358.658428][T15415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2847'.
[  358.785277][T15414] syzkaller0: entered promiscuous mode
[  358.787964][T15414] syzkaller0: entered allmulticast mode
[  360.864243][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2854'.
[  361.900040][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2857'.
[  365.644455][T15461] block nbd3: server does not support multiple connections per device.
[  365.659200][T15461] block nbd3: shutting down sockets
[  365.686214][T15463] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2861'.
[  365.707863][T15461] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2861'.
[  366.420293][T15468] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.429689][T15468] syzkaller0: entered promiscuous mode
[  366.431788][T15468] syzkaller0: entered allmulticast mode
[  366.448095][T15468] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  366.502147][T15468] tipc: Resetting bearer <eth:syzkaller0>
[  366.566833][T15467] tipc: Resetting bearer <eth:syzkaller0>
[  366.586849][T15467] tipc: Disabling bearer <eth:syzkaller0>
[  369.244093][T15501] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2872'.
[  369.249306][T15501] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2872'.
[  370.601028][T15514] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2877'.
[  371.055584][T15517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2878'.
[  371.070151][T15517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2878'.
[  371.151287][T15517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2878'.
[  371.251561][T15520] x_tables: duplicate underflow at hook 1
[  374.920365][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  374.928828][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  374.932696][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  374.941742][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  374.947803][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  377.018997][   T54] Bluetooth: hci3: command tx timeout
[  377.921949][T15556] nbd: socks must be embedded in a SOCK_ITEM attr
[  377.942386][T15556] block nbd3: shutting down sockets
[  379.103779][   T54] Bluetooth: hci3: command tx timeout
[  379.859484][T15551] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.876544][T15551] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.887328][T15551] bridge_slave_0: entered allmulticast mode
[  379.918272][T15551] bridge_slave_0: entered promiscuous mode
[  379.968868][T15551] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.985636][T15551] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.997208][T15551] bridge_slave_1: entered allmulticast mode
[  380.066929][T15551] bridge_slave_1: entered promiscuous mode
[  380.451948][T15551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  380.543241][T15551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  380.808931][T15551] team0: Port device team_slave_0 added
[  380.830821][T15551] team0: Port device team_slave_1 added
[  381.119074][T15551] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.122590][T15551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.134428][T15551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.149497][T15580] syzkaller1: entered promiscuous mode
[  381.156602][T15580] syzkaller1: entered allmulticast mode
[  381.179631][T15551] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.184393][   T54] Bluetooth: hci3: command tx timeout
[  381.191442][T15551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.225312][T15551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  381.702759][T15551] hsr_slave_0: entered promiscuous mode
[  381.759874][T15551] hsr_slave_1: entered promiscuous mode
[  381.805307][T15551] debugfs: 'hsr0' already exists in 'hsr'
[  381.825101][T15551] Cannot create hsr debugfs directory
[  382.036919][T15597] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  383.254248][   T54] Bluetooth: hci3: command tx timeout
[  383.367993][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2900'.
[  383.479178][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2900'.
[  383.917134][T15551] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  383.969717][T15551] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  383.990212][T15551] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  384.049979][T15551] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  384.086467][T15551] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  384.181553][T15551] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  384.234045][T15551] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  384.286639][T15551] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  384.459594][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  384.461819][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  385.252141][T15551] 8021q: adding VLAN 0 to HW filter on device bond0
[  385.368115][T15630] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  385.452953][T15551] 8021q: adding VLAN 0 to HW filter on device team0
[  385.546660][T13210] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.549088][T13210] bridge0: port 1(bridge_slave_0) entered forwarding state
[  385.569212][T15635] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  385.657812][T13210] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.660346][T13210] bridge0: port 2(bridge_slave_1) entered forwarding state
[  388.220146][T15658] netlink: 'syz.1.2910': attribute type 1 has an invalid length.
[  388.241845][T15658] netlink: 'syz.1.2910': attribute type 3 has an invalid length.
[  388.265772][T15658] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2910'.
[  388.380633][T15658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2910'.
[  388.403966][T15658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2910'.
[  389.427238][T15668] block nbd3: server does not support multiple connections per device.
[  389.470072][T15668] block nbd3: shutting down sockets
[  390.006352][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.039795][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.328915][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.353615][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.517730][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.551579][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.870152][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.876323][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.995717][   T55] block nbd3: Receive control failed (result -32)
[  391.876137][   T12] bridge_slave_1: left allmulticast mode
[  391.880462][   T12] bridge_slave_1: left promiscuous mode
[  391.891178][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.964977][   T12] bridge_slave_0: left allmulticast mode
[  391.975004][   T12] bridge_slave_0: left promiscuous mode
[  391.982175][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.117850][   T12] bond0 (unregistering): (slave bridge1): Releasing backup interface
[  393.198103][   T12] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  393.217764][   T12] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  393.232577][   T12] .` (unregistering): Released all slaves
[  393.255547][   T12] bond0 (unregistering): Released all slaves
[  393.372137][T15551] 8021q: adding VLAN 0 to HW filter on device batadv0
[  393.510391][   T12] tipc: Left network mode
[  394.357045][T15703] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2919'.
[  394.454096][   T54] Bluetooth: hci3: command tx timeout
[  394.741682][   T12] hsr_slave_0: left promiscuous mode
[  394.787526][   T12] hsr_slave_1: left promiscuous mode
[  394.837437][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  394.865846][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  394.901984][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  394.917721][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  395.221247][   T12] veth1_macvtap: left promiscuous mode
[  395.235089][   T12] veth0_macvtap: left promiscuous mode
[  395.251471][   T12] veth1_vlan: left promiscuous mode
[  395.284917][   T12] veth0_vlan: left promiscuous mode
[  396.461502][T15719] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004
[  396.734368][T15723] block nbd4: server does not support multiple connections per device.
[  396.751309][T15723] block nbd4: shutting down sockets
[  397.726058][   T12] team0 (unregistering): Port device team_slave_1 removed
[  397.786760][   T12] team0 (unregistering): Port device team_slave_0 removed
[  398.470206][T15720] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  398.480859][T15719] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  398.562472][ T5351] 8021q: adding VLAN 0 to HW filter on device eth1
[  399.128308][T15551] veth0_vlan: entered promiscuous mode
[  399.408841][T15551] veth1_vlan: entered promiscuous mode
[  399.428989][   T12] IPVS: stop unused estimator thread 0...
[  400.121048][T15551] veth0_macvtap: entered promiscuous mode
[  400.266784][T15551] veth1_macvtap: entered promiscuous mode
[  400.789104][T15551] batman_adv: batadv0: Interface activated: batadv_slave_0
[  400.963896][T15551] batman_adv: batadv0: Interface activated: batadv_slave_1
[  401.122824][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.161291][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.204977][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.217069][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.531164][T15745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2929'.
[  401.708867][T15751] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  403.501594][T13212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.524359][T13212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.757818][ T5351] 8021q: adding VLAN 0 to HW filter on device eth2
[  404.052345][T13209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.070067][T13209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.558471][T15773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2934'.
[  405.578394][T15773] netlink: 'syz.2.2934': attribute type 5 has an invalid length.
[  405.598111][T15773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2934'.
[  406.779838][T15782] block nbd4: server does not support multiple connections per device.
[  406.826145][T15782] block nbd4: shutting down sockets
[  408.700559][ T5351] 8021q: adding VLAN 0 to HW filter on device eth3
[  410.507933][T15814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  413.097278][ T5351] 8021q: adding VLAN 0 to HW filter on device eth4
[  425.861359][T15854] block nbd4: server does not support multiple connections per device.
[  425.876263][T15854] block nbd4: shutting down sockets
[  425.891687][T15853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2948'.
[  425.948263][T15854] x_tables: duplicate underflow at hook 1
[  426.375011][T15863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  427.577779][T15881] block nbd4: server does not support multiple connections per device.
[  427.599913][T15881] block nbd4: shutting down sockets
[  427.703514][T15880] block nbd4: server does not support multiple connections per device.
[  427.719182][T15880] block nbd4: shutting down sockets
[  431.544019][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2970'.
[  432.528661][T15956] netlink: 'syz.3.2972': attribute type 9 has an invalid length.
[  433.859322][T15974] netlink: 'syz.1.2978': attribute type 16 has an invalid length.
[  433.891687][T15970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2976'.
[  434.448330][T15982] block nbd4: server does not support multiple connections per device.
[  434.486585][T15982] block nbd4: shutting down sockets
[  434.512038][T15982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2980'.
[  434.602356][T15984] sctp: [Deprecated]: syz.1.2980 (pid 15984) Use of struct sctp_assoc_value in delayed_ack socket option.
[  434.602356][T15984] Use struct sctp_sack_info instead
[  435.645815][T15998] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20001
[  436.837628][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2988'.
[  437.292529][T16028] ieee802154 phy0 wpan0: encryption failed: -22
[  438.310627][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2996'.
[  438.430039][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2998'.
[  439.926948][T16074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  439.972216][T16071] tipc: Disabling bearer <eth:syzkaller0>
[  439.999870][T16076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3005'.
[  440.065405][T16076] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3005'.
[  440.200615][T16079] netlink: 'syz.1.3008': attribute type 2 has an invalid length.
[  440.216496][T16079] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3008'.
[  441.526088][T16095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3013'.
[  441.590511][T16097] ip6t_rpfilter: unknown options
[  443.464007][T16124] block nbd4: server does not support multiple connections per device.
[  443.497941][T16124] block nbd4: shutting down sockets
[  444.501473][T16141] syzkaller1: entered promiscuous mode
[  444.508385][T16141] syzkaller1: entered allmulticast mode
[  445.724901][T16151] bond13: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  445.759384][T16151] bond13 (unregistering): Released all slaves
[  445.899035][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  445.902026][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  448.641744][T16190] tipc: Trying to set illegal importance in message
[  448.879975][T16196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3041'.
[  448.890101][T16197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3041'.
[  450.944514][T16228] syzkaller1: left promiscuous mode
[  450.952221][T16228] syzkaller1: left allmulticast mode
[  450.971357][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3051'.
[  451.797988][T16244] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3055'.
[  452.230046][T16249] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3057'.
[  452.283763][T16249] nft_compat: unsupported protocol 0
[  452.341099][T16249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3057'.
[  452.956353][T16258] nbd: socks must be embedded in a SOCK_ITEM attr
[  452.989567][T16258] block nbd4: shutting down sockets
[  453.017174][T16266] netlink: 'syz.3.3058': attribute type 1 has an invalid length.
[  454.884927][T16282] block nbd4: server does not support multiple connections per device.
[  454.894757][T16282] block nbd4: shutting down sockets
[  454.977618][T16287] tipc: Trying to set illegal importance in message
[  455.393699][T16289] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3066'.
[  455.445275][T16289] IPv6: NLM_F_CREATE should be specified when creating new route
[  456.751776][T16311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3073'.
[  456.766738][T16311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3073'.
[  458.138396][T16331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3080'.
[  458.143963][T16331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3080'.
[  459.435898][T16347] tipc: Started in network mode
[  459.437901][T16347] tipc: Node identity , cluster identity 4711
[  459.444328][T16347] tipc: Failed to obtain node identity
[  459.449061][T16347] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  459.652439][T16353] syzkaller1: entered promiscuous mode
[  459.675330][T16353] syzkaller1: entered allmulticast mode
[  460.635065][T16368] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3089'.
[  462.723266][T16380] syzkaller1: entered promiscuous mode
[  462.727623][T16380] syzkaller1: entered allmulticast mode
[  464.729245][T16407] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  464.834577][T16409] block nbd4: server does not support multiple connections per device.
[  464.891495][T16409] block nbd4: shutting down sockets
[  465.642754][ T6187] IPVS: starting estimator thread 0...
[  465.658949][T16421] netlink: 766 bytes leftover after parsing attributes in process `syz.3.3104'.
[  465.727920][T16421] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3104'.
[  465.752274][T16421] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3104'.
[  465.767574][T16422] IPVS: using max 106 ests per chain, 254400 per kthread
[  466.560653][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3107'.
[  466.579692][T16441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3107'.
[  466.635397][T16435] block nbd4: server does not support multiple connections per device.
[  466.648079][T16435] block nbd4: shutting down sockets
[  466.821114][T16441] netlink: 'syz.1.3107': attribute type 11 has an invalid length.
[  466.841310][T16441] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3107'.
[  466.957125][T16441] netlink: 'syz.1.3107': attribute type 10 has an invalid length.
[  467.927641][T16458] block nbd4: server does not support multiple connections per device.
[  467.957332][T16458] block nbd4: shutting down sockets
[  468.506673][T16466] block nbd4: server does not support multiple connections per device.
[  468.539835][T16466] block nbd4: shutting down sockets
[  468.549594][ T6187] bridge0: entered promiscuous mode
[  473.950978][T16532] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  474.277648][T16535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3136'.
[  474.817877][T16538] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001
[  474.995589][T16535] syzkaller1: left promiscuous mode
[  474.998014][T16535] syzkaller1: left allmulticast mode
[  475.763093][T16545] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3139'.
[  475.973350][T16549] block nbd4: server does not support multiple connections per device.
[  475.995011][T16549] block nbd4: shutting down sockets
[  478.716534][T16580] netlink: 'syz.3.3149': attribute type 1 has an invalid length.
[  478.734855][T16580] netlink: 'syz.3.3149': attribute type 1 has an invalid length.
[  478.750855][T16580] netlink: 'syz.3.3149': attribute type 1 has an invalid length.
[  478.762562][T16580] netlink: 'syz.3.3149': attribute type 1 has an invalid length.
[  478.775036][T16580] netlink: 'syz.3.3149': attribute type 1 has an invalid length.
[  478.782343][T16580] netlink: 'syz.3.3149': attribute type 1 has an invalid length.
[  478.799906][T16580] netlink: 'syz.3.3149': attribute type 1 has an invalid length.
[  478.808317][T16580] netlink: 'syz.3.3149': attribute type 1 has an invalid length.
[  478.819502][T16580] netlink: 'syz.3.3149': attribute type 1 has an invalid length.
[  478.829979][T16580] netlink: 'syz.3.3149': attribute type 1 has an invalid length.
[  479.848575][T16591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3153'.
[  482.654376][T16633] veth91: entered promiscuous mode
[  483.463526][T16646] block nbd4: server does not support multiple connections per device.
[  483.479667][T16646] block nbd4: shutting down sockets
[  483.766040][T16654] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3167'.
[  483.965232][T16659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3168'.
[  484.855523][T16668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3170'.
[  484.921447][T16671] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3171'.
[  485.806181][T16684] nbd: nbd3 already in use
[  485.827049][T16684] block nbd3: NBD_DISCONNECT
[  485.828728][T16684] block nbd3: Send disconnect failed -32
[  485.831217][T16684] block nbd3: shutting down sockets
[  485.918411][T16680] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3173'.
[  485.938305][T16680] nbd: must specify at least one socket
[  486.260338][T16684] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3174'.
[  487.683468][T16708] syzkaller0: entered promiscuous mode
[  487.688761][T16708] syzkaller0: entered allmulticast mode
[  487.779020][T16710] validate_nla: 44 callbacks suppressed
[  487.779063][T16710] netlink: 'syz.3.3180': attribute type 1 has an invalid length.
[  487.895627][T16708] netlink: 'syz.3.3180': attribute type 1 has an invalid length.
[  487.912066][T16708] netlink: 'syz.3.3180': attribute type 2 has an invalid length.
[  488.744097][T16723] netlink: 'syz.2.3182': attribute type 1 has an invalid length.
[  493.240837][T16775] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  493.264203][T16775] batman_adv: batadv0: Removing interface: batadv_slave_0
[  493.326569][T16775] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  493.346357][T16775] batman_adv: batadv0: Removing interface: batadv_slave_1
[  496.940790][T16815] syzkaller0: entered promiscuous mode
[  496.948026][T16815] syzkaller0: entered allmulticast mode
[  499.855722][T16817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  504.530320][T16866] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  505.105707][T16870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3222'.
[  507.444144][T16891] pimreg9: entered allmulticast mode
[  508.331377][T16902] x_tables: duplicate entry at hook 2
[  508.979599][T16908] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3232'.
[  509.597083][T16915] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3234'.
[  511.780007][T16935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3241'.
[  511.882302][T16939] netlink: 'syz.1.3242': attribute type 1 has an invalid length.
[  513.231212][T16939] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  513.319787][T16942] bond2: entered promiscuous mode
[  513.332756][T16942] bond2: entered allmulticast mode
[  515.044245][T16960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3249'.
[  515.329806][T16965] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3251'.
[  515.891165][T16974] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  515.968947][T16976] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3253'.
[  516.143998][T16983] syzkaller1: entered promiscuous mode
[  518.091557][   T33] audit: type=1804 audit(1781938329.690:11): pid=17011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3260" name="/newroot/100/cgroup.controllers" dev="tmpfs" ino=528 res=1 errno=0
[  518.116559][   T33] audit: type=1800 audit(1781938329.700:12): pid=17011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3260" name="cgroup.controllers" dev="tmpfs" ino=528 res=0 errno=0
[  518.178925][   T33] audit: type=1804 audit(1781938329.780:13): pid=17011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3260" name="/newroot/100/cgroup.controllers" dev="tmpfs" ino=528 res=1 errno=0
[  518.856491][T17022] netlink: 'syz.2.3264': attribute type 1 has an invalid length.
[  519.314973][T17032] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3264'.
[  519.418656][T17022] 8021q: adding VLAN 0 to HW filter on device bond13
[  519.698962][T17022] nbd: must specify at least one socket
[  521.332281][T17056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3272'.
[  521.339500][T17056] ------------[ cut here ]------------
[  521.342100][T17056] !sock_allow_reclassification(sk)
[  521.342257][T17056] WARNING: drivers/block/nbd.c:1249 at nbd_add_socket+0xf35/0x12c0, CPU#1: syz.1.3272/17056
[  521.348938][T17056] Modules linked in:
[  521.350814][T17056] CPU: 1 UID: 0 PID: 17056 Comm: syz.1.3272 Not tainted syzkaller #0 PREEMPT(full) 
[  521.355297][T17056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  521.359458][T17056] RIP: 0010:nbd_add_socket+0xf35/0x12c0
[  521.362144][T17056] Code: f7 e8 ff 51 1d fc bf e0 01 00 00 49 03 3e 48 c7 c6 a0 5c 55 8c e8 db d7 15 fb b8 f0 ff ff ff e9 b2 fd ff ff e8 ac d0 af fb 90 <0f> 0b 90 e9 16 f8 ff ff e8 6e ff 97 05 44 89 e9 80 e1 07 fe c1 38
[  521.370608][T17056] RSP: 0018:ffffc9000395f140 EFLAGS: 00010283
[  521.373326][T17056] RAX: ffffffff86166474 RBX: 1ffff11023503a59 RCX: 0000000000080000
[  521.376924][T17056] RDX: ffffc90021d40000 RSI: 00000000000009db RDI: 00000000000009dc
[  521.380691][T17056] RBP: ffffc9000395f230 R08: ffff88810e9b1d5f R09: 1ffff11021d363ab
[  521.385310][T17056] R10: dffffc0000000000 R11: ffffed1021d363ac R12: ffff88811a81d100
[  521.388692][T17056] R13: 1ffff9200072be34 R14: dffffc0000000000 R15: 0000000000000001
[  521.392025][T17056] FS:  00007fa87827b6c0(0000) GS:ffff8882a9253000(0000) knlGS:0000000000000000
[  521.396029][T17056] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  521.398921][T17056] CR2: 00007fa877388200 CR3: 00000001aad88000 CR4: 00000000000006f0
[  521.406642][T17056] Call Trace:
[  521.408355][T17056]  <TASK>
[  521.409826][T17056]  ? trace_irq_disable+0x3b/0x140
[  521.412155][T17056]  ? __pfx_nbd_add_socket+0x10/0x10
[  521.415780][T17056]  ? __nla_parse+0x40/0x60
[  521.417952][T17056]  nbd_genl_connect+0x133d/0x1c10
[  521.420156][T17056]  ? __pfx_nbd_genl_connect+0x10/0x10
[  521.422573][T17056]  ? irqentry_exit+0x218/0x8f0
[  521.424891][T17056]  ? trace_irq_disable+0x3b/0x140
[  521.427035][T17056]  ? __nla_parse+0x40/0x60
[  521.429122][T17056]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  521.432045][T17056]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  521.435065][T17056]  genl_family_rcv_msg_doit+0x233/0x340
[  521.437578][T17056]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  521.439748][T17056]  genl_rcv_msg+0x614/0x7a0
[  521.441446][T17056]  ? __pfx_genl_rcv_msg+0x10/0x10
[  521.444270][T17056]  ? rcu_is_watching+0x15/0xb0
[  521.446469][T17056]  ? __pfx_nbd_genl_connect+0x10/0x10
[  521.448784][T17056]  ? __netlink_lookup+0xc6/0x8b0
[  521.450727][T17056]  ? rcu_is_watching+0x15/0xb0
[  521.452594][T17056]  netlink_rcv_skb+0x226/0x4a0
[  521.454710][T17056]  ? __pfx_genl_rcv_msg+0x10/0x10
[  521.456747][T17056]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  521.458646][T17056]  ? down_read+0x2be/0x330
[  521.460591][T17056]  genl_rcv+0x28/0x40
[  521.462196][T17056]  netlink_unicast+0x7bb/0x940
[  521.464129][T17056]  netlink_sendmsg+0x813/0xb40
[  521.466161][T17056]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.468211][T17056]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.470222][T17056]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.472029][T17056]  ? sock_sendmsg_nosec+0x128/0x180
[  521.474712][T17056]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.476602][T17056]  sock_sendmsg_nosec+0x13a/0x180
[  521.478343][T17056]  ____sys_sendmsg+0x54e/0x850
[  521.480405][T17056]  ? __pfx_____sys_sendmsg+0x10/0x10
[  521.482605][T17056]  ? lock_release+0x4b/0x3c0
[  521.484609][T17056]  ? import_iovec+0x73/0xa0
[  521.486740][T17056]  ___sys_sendmsg+0x2a5/0x360
[  521.489058][T17056]  ? __pfx____sys_sendmsg+0x10/0x10
[  521.491354][T17056]  ? futex_wait+0x2a2/0x390
[  521.493877][T17056]  ? __fget_files+0x2a/0x420
[  521.496245][T17056]  ? __fget_files+0x3a2/0x420
[  521.498200][T17056]  __x64_sys_sendmsg+0x1b1/0x290
[  521.499877][T17056]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  521.501801][T17056]  ? rcu_is_watching+0x15/0xb0
[  521.504304][T17056]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.506368][T17056]  do_syscall_64+0x174/0x580
[  521.508226][T17056]  ? trace_irq_disable+0x3b/0x140
[  521.510133][T17056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.512165][T17056] RIP: 0033:0x7fa87739ce59
[  521.513705][T17056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  521.519867][T17056] RSP: 002b:00007fa87827b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  521.522589][T17056] RAX: ffffffffffffffda RBX: 00007fa877616090 RCX: 00007fa87739ce59
[  521.525737][T17056] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000006
[  521.528683][T17056] RBP: 00007fa877432e6f R08: 0000000000000000 R09: 0000000000000000
[  521.531275][T17056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  521.535656][T17056] R13: 00007fa877616128 R14: 00007fa877616090 R15: 00007ffe5992c078
[  521.539132][T17056]  </TASK>
[  521.540470][T17056] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  521.542751][T17056] CPU: 1 UID: 0 PID: 17056 Comm: syz.1.3272 Not tainted syzkaller #0 PREEMPT(full) 
[  521.545578][T17056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  521.549037][T17056] Call Trace:
[  521.550298][T17056]  <TASK>
[  521.551440][T17056]  vpanic+0x56c/0xa60
[  521.553267][T17056]  ? __pfx__printk+0x10/0x10
[  521.554914][T17056]  ? __pfx_vpanic+0x10/0x10
[  521.556320][T17056]  ? is_bpf_text_address+0x292/0x2b0
[  521.557945][T17056]  ? is_bpf_text_address+0x26/0x2b0
[  521.559540][T17056]  panic+0xc5/0xd0
[  521.560716][T17056]  ? __pfx_panic+0x10/0x10
[  521.562106][T17056]  __warn+0x315/0x4c0
[  521.563671][T17056]  ? nbd_add_socket+0xf35/0x12c0
[  521.565248][T17056]  ? nbd_add_socket+0xf35/0x12c0
[  521.566794][T17056]  __report_bug+0x331/0x530
[  521.568226][T17056]  ? nbd_add_socket+0xf35/0x12c0
[  521.569753][T17056]  ? __pfx___report_bug+0x10/0x10
[  521.571291][T17056]  ? irqentry_exit+0x218/0x8f0
[  521.572753][T17056]  ? trace_irq_disable+0x3b/0x140
[  521.574288][T17056]  ? nbd_add_socket+0xf37/0x12c0
[  521.575851][T17056]  ? nbd_add_socket+0xf35/0x12c0
[  521.577357][T17056]  report_bug+0x16a/0x220
[  521.579044][T17056]  ? nbd_add_socket+0xf35/0x12c0
[  521.581062][T17056]  ? nbd_add_socket+0xf37/0x12c0
[  521.583025][T17056]  handle_bug+0x9c/0x200
[  521.584482][T17056]  exc_invalid_op+0x1a/0x50
[  521.586188][T17056]  asm_exc_invalid_op+0x1a/0x20
[  521.588076][T17056] RIP: 0010:nbd_add_socket+0xf35/0x12c0
[  521.590219][T17056] Code: f7 e8 ff 51 1d fc bf e0 01 00 00 49 03 3e 48 c7 c6 a0 5c 55 8c e8 db d7 15 fb b8 f0 ff ff ff e9 b2 fd ff ff e8 ac d0 af fb 90 <0f> 0b 90 e9 16 f8 ff ff e8 6e ff 97 05 44 89 e9 80 e1 07 fe c1 38
[  521.596872][T17056] RSP: 0018:ffffc9000395f140 EFLAGS: 00010283
[  521.598823][T17056] RAX: ffffffff86166474 RBX: 1ffff11023503a59 RCX: 0000000000080000
[  521.601462][T17056] RDX: ffffc90021d40000 RSI: 00000000000009db RDI: 00000000000009dc
[  521.604430][T17056] RBP: ffffc9000395f230 R08: ffff88810e9b1d5f R09: 1ffff11021d363ab
[  521.607343][T17056] R10: dffffc0000000000 R11: ffffed1021d363ac R12: ffff88811a81d100
[  521.609981][T17056] R13: 1ffff9200072be34 R14: dffffc0000000000 R15: 0000000000000001
[  521.612832][T17056]  ? nbd_add_socket+0xf34/0x12c0
[  521.614799][T17056]  ? trace_irq_disable+0x3b/0x140
[  521.616655][T17056]  ? __pfx_nbd_add_socket+0x10/0x10
[  521.618260][T17056]  ? __nla_parse+0x40/0x60
[  521.619764][T17056]  nbd_genl_connect+0x133d/0x1c10
[  521.621675][T17056]  ? __pfx_nbd_genl_connect+0x10/0x10
[  521.623482][T17056]  ? irqentry_exit+0x218/0x8f0
[  521.625016][T17056]  ? trace_irq_disable+0x3b/0x140
[  521.626598][T17056]  ? __nla_parse+0x40/0x60
[  521.628267][T17056]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  521.630462][T17056]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  521.632929][T17056]  genl_family_rcv_msg_doit+0x233/0x340
[  521.635076][T17056]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  521.637418][T17056]  genl_rcv_msg+0x614/0x7a0
[  521.639287][T17056]  ? __pfx_genl_rcv_msg+0x10/0x10
[  521.641284][T17056]  ? rcu_is_watching+0x15/0xb0
[  521.643200][T17056]  ? __pfx_nbd_genl_connect+0x10/0x10
[  521.645334][T17056]  ? __netlink_lookup+0xc6/0x8b0
[  521.647339][T17056]  ? rcu_is_watching+0x15/0xb0
[  521.649258][T17056]  netlink_rcv_skb+0x226/0x4a0
[  521.651422][T17056]  ? __pfx_genl_rcv_msg+0x10/0x10
[  521.653455][T17056]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  521.655611][T17056]  ? down_read+0x2be/0x330
[  521.657394][T17056]  genl_rcv+0x28/0x40
[  521.659040][T17056]  netlink_unicast+0x7bb/0x940
[  521.660967][T17056]  netlink_sendmsg+0x813/0xb40
[  521.662725][T17056]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.664363][T17056]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.665999][T17056]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.667647][T17056]  ? sock_sendmsg_nosec+0x128/0x180
[  521.669261][T17056]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.671116][T17056]  sock_sendmsg_nosec+0x13a/0x180
[  521.672875][T17056]  ____sys_sendmsg+0x54e/0x850
[  521.674701][T17056]  ? __pfx_____sys_sendmsg+0x10/0x10
[  521.676841][T17056]  ? lock_release+0x4b/0x3c0
[  521.678318][T17056]  ? import_iovec+0x73/0xa0
[  521.679709][T17056]  ___sys_sendmsg+0x2a5/0x360
[  521.681156][T17056]  ? __pfx____sys_sendmsg+0x10/0x10
[  521.682789][T17056]  ? futex_wait+0x2a2/0x390
[  521.684185][T17056]  ? __fget_files+0x2a/0x420
[  521.685701][T17056]  ? __fget_files+0x3a2/0x420
[  521.687139][T17056]  __x64_sys_sendmsg+0x1b1/0x290
[  521.688657][T17056]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  521.690271][T17056]  ? rcu_is_watching+0x15/0xb0
[  521.691668][T17056]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.693470][T17056]  do_syscall_64+0x174/0x580
[  521.694873][T17056]  ? trace_irq_disable+0x3b/0x140
[  521.696385][T17056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.698123][T17056] RIP: 0033:0x7fa87739ce59
[  521.699410][T17056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  521.705566][T17056] RSP: 002b:00007fa87827b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  521.708079][T17056] RAX: ffffffffffffffda RBX: 00007fa877616090 RCX: 00007fa87739ce59
[  521.710445][T17056] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000006
[  521.712870][T17056] RBP: 00007fa877432e6f R08: 0000000000000000 R09: 0000000000000000
[  521.715564][T17056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  521.718381][T17056] R13: 00007fa877616128 R14: 00007fa877616090 R15: 00007ffe5992c078
[  521.720913][T17056]  </TASK>
[  521.722599][T17056] Kernel Offset: disabled
[  521.723969][T17056] Rebooting in 86400 seconds..
