last executing test programs:

1.641948701s ago: executing program 1 (id=2747):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="870a000000000000611159000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000080)='--\x00', 0x0, &(0x7f00000000c0)={@_ha_fsid={[0x4, 0xccc]}, {0x8, 0x8001, 0x401, 0x5}}, 0xb7, &(0x7f0000000140), &(0x7f0000000180)=0xffffff7f})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
shutdown(0xffffffffffffffff, 0x0) (async)
close(0x3) (async)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000240))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0xd, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000540), &(0x7f0000000680))
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) (async)
recvmsg(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0xef61caf084274b56}, 0x0) (async)
recvmsg(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000005700)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/4112, 0x1010}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f00000017c0)=""/4066, 0xfe2}, {&(0x7f00000016c0)=""/196, 0xc4}, {&(0x7f0000000840)=""/158, 0x9e}, {&(0x7f0000000700)=""/103, 0x67}, {&(0x7f0000000580)=""/62, 0x3e}], 0x8}, 0x32120)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x8}, {0xa5, 0x7, 0x2, 0x7}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

1.425881985s ago: executing program 1 (id=2749):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000180001232abd7000fadbdf2545dac7"], 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x8854)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
socketpair(0x1e, 0x80000, 0x22, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000040))
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0xb0, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x88, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x78, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x308, {0x10005, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xfffffffffffffc5d, 0x1, {0xfffffffa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x49b}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xf}}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4590, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)

1.364459719s ago: executing program 2 (id=2751):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000400007010c00018006000600800a000014000280100014800c0000140000b600884800"/56], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x58, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc4}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x8000080)
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="000425bd7000fddbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000600040001000000080001007063690011000200303030303a30303a31302e3000000000080003000300000006000400010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000006000400030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000600040002000000080001007063690011000200303030303a30303a31302e3000000000080003000300000006000400010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400030000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000600040002000000"], 0x18c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8014)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20004044)

1.36372697s ago: executing program 1 (id=2752):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000014c0)=ANY=[@ANYBLOB="300000002e00030503001900000000002000000000000000000800000000000055e25e180e54205bd816f405d3271b74aed2a5fcadabddc1a5d7a18274c4ca12aa34b926ffea3e44bbfd568872eb6792b3edfb4578bbf22f5f0ea7ced50600000000000000434ce856a5f1bb8b9579aeb8dfe6d96be7b06ddf65888f4655b1", @ANYRES32, @ANYBLOB="bad8eb335fa8867400000000"], 0x30}], 0x1, 0x0, 0x0, 0x1}, 0x4000000)
openat$tun(0xffffffffffffff9c, &(0x7f00000012c0), 0x82800, 0x0)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000ad50120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x20040001}, 0x40810)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0x0, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r6, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xffff0147}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x10}, 0xc4)
r7 = socket(0x10, 0x80002, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000054000000060a01040000000000000000010000000900010073797a310000000008000b40000000030c000640000000000000000314000480100001800b0001007470726f787900000900010073797a30"], 0x7904}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
recvmmsg$unix(r7, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
write$tun(r4, &(0x7f0000002ac0)=ANY=[@ANYBLOB="000086dd00000100000000000000600000000f982c00fe8000000000000000000000000000aaff0200000000000000000000000000012b0000000000000004010400000000000100907809000000699951a503ff3b00fe8000000000000000000000000000bbfe8000000000000000000000000000bba542e5fa78122afabe978693aab29d1466a08191331ab6a877ada0ba71547993040b10059bd34a8b75294b0923a60f1fb92185b6f684546c90065735ecd57d7d08c3b4f700b561a165be3b70f5708ad409f217ed6af01e38575352a8c2ea616803b11bf27a5a897a351022d0cbfbe26f30b3ab4e3a6f4253d5cf238632ba4115fbcacf020fd669b418bff577c51abf913317f857712c3d4734aa2f0dfdfd67c1de45cc09f7d560c395460a2a172b3c55cd9bcf7ebfd6763f961b5930f9280e156efdc6141ea07715d5af19c9ed06a53651a47aa5c52d8ff986c66d719c19088d4627ff684f19b24b6e6e9605c8a93df75154a96ee4db03442d71d423ae8c16b4106941048aaab26760c88cf9b2cddcd078641bfe5c645197c5ba125531be11df5a44801774c5539d136ba2032fbfcc52731f9713060fa4ad8f6b45b245da43d30117c2b132ed23eac46b5193978f893158020056a63a460d8204f02c26ea9dac9a739f166884691f551084b8ae09965499ddbf57f35eacf411d84b6d13be8d953eedda4d32ad55543fd14d70809120f1ca942fb67d116642297cf78b6ca6f47089fb3ad10af09982551b6ab3c0f37a3e73e875220480c34b1746a98e551f4346706920c1f40dba48a6a3df76333178cd860232e4d52cbc9775fcb9785d5bd3df133756e4745e7e343bca8697fcf302178020df677a83b4473ecc42bfa8e6a50c8b79b315c1eb849fd713374d2b2dae2a60e1592baaf6ee9814c4b42e059094418d206392e9fb225922052995f932f454fd75cc7af9e13f28db47956289701273a411355f34f4677daa0d4fb8d87e2a49d3fc2d5670284c7cf2c622049eaafa2f743dfc7868d03505a409979adfc4ff044d1c04d2311f2ce1cdf5cbf50d289d9b5faae35b2b3de9211d5de16e1422dd47b6c4a4d0d28619e55a96063a46fe0f29b47e8c306cdfb3cb0064ecedfcf67bfe63a0e8a4c12929f0d6a7c32d9e225c7df08fdaf07d8dfbf85b3a167589378f74fa1bb75b3136619017c92a113075467498560442ba3fe1d5566b737e921dec06f60c8ec711b1a6b3df6ad7849564b4e05c4d29d73cda474a8e48f65aebe43c73a85af773eb382a1aba314430753a421d2827f677cc210cc4472e8ea235abc6e6e508c628bf78f5a9208f77c6ae02c03b7bfdde1b94ab2dad96714c5d0cc66763c74e7f1a3a373994ee7e30fd45ef323bb31400b701238fac457ec0d4d17b7b7393903b59dcba68fabfb65ec959f1a35948cd34799784bc3f4c6ff9fbb5da7a11bbf7bee96acfeb788d620f274858f6de5f7975d6bdf570de50ac2a9ecacf30672cb4d5326ab2ec36d0f09113d799a3167202b751292a497e015a6071373576f55bb0e6ce4f29820cd1a6a7293317ccce61d468e908868ba061653aaba351661008c70d825421810a524ef6df25878e750130dd99b8aa34fbce491e98770fa328c9d26f2d5800255e9037d74c7a2e2bacdcc81cec81a681d0be9aa77761ed07c91f5b0bcca388b881c001a6ecfd098ada1d3bed3b873ead3073a62774b9b019415b5b64589f48f36b79d930f544b2d3f3dd7b634105bfd710a825cb5c2bf41a931c0c3fabaef0bba470faadc56466bc0894f7222454ff138bffe94b58fb4d45a1cf14482d5bd7ac9887e2d2826bc74d1f22f056f2ded24c9586dd1be8a573a1c9da8dd0e5ff0a7263a473b1c948c4fea4a5282d3e039fb89140688b70d7d69ef13276d5e871550c1674cd506e9ad4d0d5a03e0b120c384b9f6ab315bc4c105f839206a53a6f226ce637689f81aab37a1b8f94f7796107ed826f3f3bf3d6a086f216ead59fc3e19a0aa39177bcbad38d94b7a4c3edbb53f88099a6ac618409a225c893244d22e236989ae9acd7eda7619f1f249dc60b855e0fec347f3909e90f80e6ac03feec2df18c9b4b2abcd96e90768e8433a133e69381b370341bd980257b4ed4ee4f7a2fda9142ed5540966d1142bb13840cccbab402d2ff9ce3702b4ca2115b20e29d4aa8341a77affa5abc88c09ead30ddd988844309d33fde48d32b156da20b912a17663b14b6db60d7d7af55dedb45d1088eb6b7e264478344c4389234e18209f86c9a77479f31e5617a30e6bf67f06c6c2d9558866dc9054814e58bcd5e2876e1f7b1d80279da5e1442eebffc07dc6330e000bd9361066950da1ba6cf64c7622c4e3ebd730152138d79b6f8f4cd3cfeca0c5f9c650303aef130c9e9449e7212163d60ca2741cfdf7951d804fa317d2cd4ae8397fed494502853b869672ca6f1e78d8fb05de313a4c0985f11b1c345bba92028bfd6b9e3a2cc7c975a48feb28ba1584523b88bbdaf4a052d01446ac06ff5fb00982ce965b72e9e37319ec7df2895843c750379eb99ecfa0569defe96a8204a7a1cda42eb69aa74fde31c0305d026ccf3fe1d3ac984901cc70890d0e3115001280f60e0130655f26bcb611e86f4c1c43327b18f2aace900cccc8a5606d7090cf7996093f72d32a71bfffb07954b4419c61c3a59ef35cd9533087c245106482d8d37b61d627fd1b60cc94ccceddb6da244a530442b4f2e4f7ec0cffca2cb02e4df7e25fe7229ea2b6be96ecab5ad54d623d369b5719d82c206692850b07e4a61dcca7d3cfd1bf0d8d46a0a9f6ced4f4094ba009e553f03a36e47fe5fa608f9d40fffef99d6e945468a75fc8663099c432bcb514d769e7559114ffe0beb6ddf9ad9dec965ec41b9ec2af69468b7e3512c949a82d8c1525f8f3d56553b8deaadf39328a983b2f483fb7bec16e1fc82d512d6156805ffc4d83bea8c674fa439b6b94ea76f5155a305b59715dd7f205d402b936afdb620a973663527dfe62a52af76c605264d729ad735a3dd27ab39a321b1401211108d52e9bb68baad2ce46ed3c85ccff07a383809f9aaa1aa88b57c1eaf69a1ee917e3a57800beba4919ef66a235a260978c76f1367e2b3a151069b379c5c261d56e3d4a31a122a515f3722dbe92eaa4032bab9b2684ed3c850c79276fc3adf44579a125ede97d172e7029dcd4ffe281c0608a6191e4a3eacc5c1d2563792820142ac6363fc3f7f4238852d15fce090cf54fb67ce3e4355ee701d02ab3f64011f9945659291f0252712948c91d5c4926f1728e9a517f9a583fc2d75773da4f10cbd28738de20d2cb05b9ca5a3fed2accf4ba7cb416f95338a1ada4691fcdc06322c009fa832b7dc7f9dee155941c3bf54626d4e47aa98d3eebe0ebfd7ebebca7f11e75e95dd9f81dbbd5359ed9bce1a55fc7938c7e79e84bdb2fc0b3bc7c77909b9fec954d0013b718e99067d47bfca810297d32cc34c6d092b855fba9d4b0bb53325b06fdf346d09a8290fa72f36bcba1584167bbf1a0e32e6aa7b3ba10569033067884fe671caf7195710bf0334f1fca6d76cc86ba8e49e5fc36f4011f42f6c475636f698df193b4f91c4b735b6b781736b978fcfe6ad49f8e5d90339cf494541f27e2ad4a86ba69eef6864880ae23d1db5353e67fbfbc494ffe3cd268fc430c5562c8c145ff7042904274a863d948ae2a76dba175809b3136539e9cfca23fa45ea1c2552bf943f7687b9e06bdaa66c1f6eba8cd3294c4437804041eddc469815b4cdde8501ee0f7ba8bcb36b14944d31066a5a11c9b562d840296cc4b1362054c15174b27306d362ebb3c4896e37cb5f5c037fece5dfba91ecda3111b1bc80a2ab0b3a61ea2b53347d34d581a3715928cefde613bd5b18424b4ac1e74247cd48676ed1e379c73a17547d439871f6e43b697181fa871b53ad9675c029a423827ae02eedd4564c753d552e939a38fea733b6699ed94b816b42eac960135cd30e65480fb1a1f9370d801ac1c232e3107c00fba5e778a870bc6d3066659e674e39d82f1414d6396ee2c731cd33cb4eaccb386b704bd7530bbdc6fc5a5edc093ed637460b6af9969b4239407b35c95f9a78f5adb85b68a8ad045c7833f9456cfa3fb185004b7df8515ed9c3121506804b5dc1fe5ae4d72b84ea3cf120f9575d205276a5934d683e7911ff7de4283f718082c71f02c109e5fe20aea97dafa090a163ccff053636c8657ca9a7451bf5d1051feef1f3b6d234d8e962f45520c14b2283408764da859499196c9c39e58f02974446812e557068367a37228f450b127ab0e304be418336f9aaecb313bd7ff326251a4e0cf13a426078fb9c0fcbdea5ed32cce42649d2465529945291f996d016e9927bc3ceccaf2b1eb7fb5562c89ce741e4884a8b5843a08a147ef0699a9063f41044f87fbcbad7cda63671df28fabbf3216f62082af08e5b4e8ab38f15948ab241ced5da50a7e093271244b40513a5db6b74d78d03d44e4cf4c5dcbb0327aa17f5e7c3684778bde55dbd9139a5cab010b3ee8b6f43ce2faeee633ca737ebe802f9e460aba571f28c763967b3f2636bc66ce44454809e2474a86789e98a46fcc1d1868cd860820d9dfdeae933f73b6a1bd3bbcf79b8c14354921fa7c13456995489abe275a43bf7725a9509fd97c522ec0598f5e1c8773b9966eae619b342ddda0de784aa2762f18b96c6e5256e3c74c8d125886edc659594f53072906f50fe1600c9ca39062d5f9875df13783bde9e5f50004da74793ea4272353fedd3bf8023aa550a451374964d208a3e190ebd12ded53f32cdd509301423d4ca0c1726a2eeaa8a0d3b53ac5cd14518eac7ece9a3effa518076d388b461ade8d577981590a6d6105c4f367390bc7c5a2a7b225160824709fb9aa1b55b84172af05c885295e97c233963c24f8cf5aa49c219b075c21f49044e594240b32bcdf26e31128cdb6173243fadfc2ea281ecdb61ce558486ae46d2d209d1b1e0e6600f00efb343992b1a2ea0a7a43cab8046b219fe1e54a80ffa1df84ab41d4df7ef3ebe486e1747ea0b075affc6c798e942e39a86a955a6aada121eba738cde9a33dce2daf6745b62b9c4db5ba2b44ff8884b5033dc92d33f9d65a450cea047cb35aec5a37ad322e4e07f56be0f7e0d2164027a4bff4e70642868978d7b0d1e82013447be0d34e32c2ce2316c0f35812cb132a0a9b104586fd3d1d3df82a9d6f123d711819803d2366bbe1f4c26fea66c5c034b9e147f57742f219cb493d6fea43a6dc4c50b864671c73f88b855798201bb890919574345b759de2c645351aadb7f5ed9d8ae3a2804ee1ede9f0122d4db3e12a67444b86746d54bb243814b7a9746c89764f5009c7b950a3a19828e973ea3f248a6ba64544c1aa69de375d3eb9ae4825950ea0657a1f35ac89ebca6aac43057f1b0abd9deb4ce505cdb9deb3b4151cccd24cda516783166eb7e3c8029db851c0fda16608f2f1e893d931ce609e217300c848975e75dea7fdb488bc512a1613eac5c699dc0277dd5601f354b18730b4a1b2e8ddd287d4bac13beef6c98b449e659b5fa81fdb452b5500dd1a5ca775c24c30ff9b01a59399d0bda0de1414bd037504d5f36622337b86566e0104119a19cf01f5e95a201ca3966af2829241e2e7887d2821d651bb1f90d5ec1858da6d58595213ffa32f04266197f11b022f0f36a26c5c1512a9ee73db2918a4e58ea89c67dec6334173bde68f7788c5422f43be999e811cfc1ea66d5351b179749e846b4266de70568976662d6cf0cfc73da8bf5a34fd6665a0f1e6a"], 0xfce)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={<r9=>r2, @in6={{0xa, 0x4e21, 0x4, @mcast1}}}, &(0x7f0000000080)=0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r9, 0x3}, 0x8)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)

1.361468489s ago: executing program 2 (id=2753):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r1, &(0x7f00000049c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="5d5ff9883c7a858a8e2659b069f9925b8f641729", 0x14}], 0x1}}], 0x1, 0x40008c0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000540)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x2, 0x7e3e, 0x71, 0x5, 0x7fffffff}}}}}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
unshare(0x20400)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000600000000000000020000840901000004000000040000000100000000000001f1ffffff09000000003000002e00"], 0x0, 0x42, 0x0, 0x8}, 0x28)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x810, 0xffffffffffffffff, 0xfffff000)
socket(0x40000000015, 0x5, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={@empty, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x9, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r5})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r5, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2, @mcast2, 0x7800, 0x80, 0x5, 0x9}})
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r7 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000280)=0x4, 0x4)
connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1.18416769s ago: executing program 2 (id=2755):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x1c, &(0x7f0000000600)=[@in6={0xa, 0x4e22, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x6, 0x1ff, 0x3, 0x0, 0x7fff, 0x8001, 0x80000001, {r4, @in6={{0xa, 0x4e23, 0x5, @private0, 0x2}}, 0x6, 0x0, 0x6, 0x10000, 0x3}}, &(0x7f0000000100)=0xb0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d8000000540001002bbd7000fedbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01010000ff02000000000000000000000000000186dd00"], 0xd8}}, 0x8004)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x10, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@rand_addr=' \x01\x00', @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3c, 0x2, 0x0, 0x2, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd09000400000005000000080009000200000008000c00a80a000008000b000000000006000100"], 0x3c}}, 0x20)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d00200800182fff2040000000000000000000004e000001ff0200000000000000000000000000014f19"], 0x52)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)

1.031496983s ago: executing program 2 (id=2757):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000040)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x4}]}]}, 0x80}}, 0x0)

1.03078648s ago: executing program 0 (id=2758):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @local, 0x1, 0x1, [@local]}, 0x14)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', <r4=>0x0, 0x29, 0x8, 0x8, 0x8, 0x22, @rand_addr=' \x01\x00', @empty, 0x1, 0x767, 0x5, 0x7}})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f0000000380)="fad33075218151db00316f3a277fedbc6c8e46fe766f486d7ce218d5be2cf4380cc23b64201f3516", 0x28, 0x6008092, &(0x7f0000000080)={0x11, 0x88a8, r6, 0x1, 0xda, 0x6, @remote}, 0x14)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040c1}, 0x4008800)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0xd0, 0x270, 0xd0, 0x340, 0x340, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x44}, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@local, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0xffffffff], 'tunl0\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x322}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xffffff00], 'wg1\x00', 'team_slave_1\x00', {0xff}, {}, 0x2f, 0x6b, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x602100, 0x0)

946.01795ms ago: executing program 2 (id=2759):
ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @remote}]}) (async)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={<r1=>0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x488881, &(0x7f00000000c0)={@align=0x94, {0x1, 0x8001, 0x81, 0x4}}, 0x400, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x7})
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000001c0)={{r1}, {@void, @max}}) (async)
ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000200)={0x1, 0xbd42})
shutdown(r0, 0x1) (async)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000240)) (async)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000280)) (async)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0x1c8, 0x100, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'macvlan1\x00', 'wg2\x00', {0xff}, {}, 0x6, 0x1, 0x2}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x4, 0x2, 0x1, 0x1, 0x2, 0x1], 0x1, 0x1}}}, @common=@ttl={{0x28}, {0x0, 0x10}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x2, 0x4]}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "38e8"}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1000, 0x10, 0xfffff800, 0x7, 0x5, 0x10d, 0xa6]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) (async)
ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000700)={0x0, 0x3f}) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r2, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x190}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x40004840) (async)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000880)=0x1, 0x4) (async)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000009c0)=@buf={0xce, &(0x7f00000008c0)="1ac7477abac4ce64f9be846d01b99f4c6a6fe01fdca1999ca9ab2eec60a8ff1d9932448f900657b831e4837d91547ceef2a61150a21101590904037e05d91111a07c75e7409f79fe67070ab5d5b4dccd18276f6c7f6be4f4e4396779b9bf9112e86b05dffe41b75b9c6dc1ce0f618f80f32b85607e03b6597ab68b09d6e1b7412e3aee1d0fb21dcf3920c58c5d14d755e6860a63422bf2c0b07229d64b6dd8bd1dbc743a1c1b935778c5992baa03e8abfb51527e806e65889d161ebedf23a9854ac5eee84928a1329bffff256025"}) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000a00)={'gretap0\x00', @local}) (async)
ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000a40)="44eddfd3f188c58b825f02251dbab007d378ceee22dadd081d99342424ed8896fb4a6d80ef928a2e0b416be99078e9e4da1d662b2f91c3") (async)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000a80)) (async)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000ac0), 0x4) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c00)={@map=r1, 0x34, 0x1, 0x1, &(0x7f0000000b00)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0]}, 0x40) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000c40)={{r0}, {@void, @actul_num={@void, 0x19, 0x47}}})
setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000c80)={@remote, @broadcast, @multicast1}, 0xc) (async)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000cc0)={<r4=>0x0, 0x29ae}, &(0x7f0000000d00)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000d40)={<r5=>r4, 0x7, 0x30, 0x4, 0x7}, &(0x7f0000000d80)=0x18) (async)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000dc0)) (async)
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x14014001}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x48, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x28000845}, 0x475dcd52bc281775)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000f40)={0x1, 0x6bc, 0x3, 0xf08a}, 0x8)
sendto$x25(r1, &(0x7f0000000f80)="9c194165ba2053c75be11039cbcd4e2745180a52da5036467dd4eedbbe46f75f6f429d8a799b6335fa43a6c3", 0x2c, 0x4000, &(0x7f0000000fc0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000001000)={r5, 0x84f}, 0x8)

945.650031ms ago: executing program 0 (id=2760):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0xfffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000a64080c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50)
bind$unix(r2, &(0x7f0000000dc0)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000e80)={0x0, 0x2710}, 0x10)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

895.13474ms ago: executing program 0 (id=2761):
r0 = socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x45, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r2, 0x1)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @empty, 0x3}, 0x1c) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0100002c00010000000000fcdbdf250a01f28004001800140001"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000001200000a000100ff045f8a0916ffffffffff0000140035006d616373656330000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x40008)
sendmmsg$inet6(r2, &(0x7f0000001280)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @empty, 0xfffffffe}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x10, @loopback, 0x2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)}}], 0x3, 0x240c089d) (async)
sendfile(r3, r2, &(0x7f0000000380)=0xfffffffffffffff9, 0x5) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@typedef={0x3, 0x0, 0x0, 0x8, 0x4}, @struct={0x4, 0x0, 0x0, 0x4, 0x0, 0x8}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0xfffffffd}}]}, {0x0, [0x2e, 0x61, 0x5f, 0x5f]}}, 0x0, 0x5a, 0x0, 0x1}, 0x28) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r5=>0x0}) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3a}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe, 0x0, &(0x7f0000000340)="0700000000000000bcf7d1725c60", 0x0, 0x808005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r9, 0x8b27, &(0x7f0000000040)) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r10 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r10, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)

894.568431ms ago: executing program 2 (id=2762):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb430500017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0xfc, 0x0, &(0x7f0000000400)="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"}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40054}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x98}}, 0x4048010)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
unshare(0x66000080)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x0, &(0x7f00000001c0)}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={<r7=>r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
readv(r3, &(0x7f0000000cc0)=[{&(0x7f0000000580)=""/206, 0xce}, {&(0x7f0000000680)=""/69, 0x45}, {&(0x7f00000009c0)=""/217, 0xd9}, {&(0x7f0000000ac0)=""/26, 0x1a}, {&(0x7f0000000b00)=""/207, 0xa1}, {&(0x7f0000000c00)=""/133, 0x85}], 0x6)
r9 = socket$l2tp6(0xa, 0x2, 0x73)
r10 = accept4$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80800)
ppoll(&(0x7f0000000180)=[{r8, 0x8400}, {r9, 0x80}, {r3, 0x8000}, {r10, 0x1050}, {0xffffffffffffffff, 0x260}, {r5, 0x1}, {r1, 0x100}], 0x7, &(0x7f0000000240)={0x77359400}, &(0x7f0000000300)={[0xfffffffffffffffb]}, 0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r7, 0x3}, &(0x7f00000000c0)=0x8)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
sendfile(r3, r4, 0x0, 0xffffffff004)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000000c0)={0xe440, 0x7fffffff, 0xffffffff, 0xfffffffb, 0xfffffffc}, 0x14)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r11, 0x6, 0x6, &(0x7f0000000000)=0x3, 0x4)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x4040811}, 0x0)

784.685588ms ago: executing program 0 (id=2763):
r0 = socket(0x10, 0x803, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000003c0)={{<r1=>r0, &(0x7f0000000140)='gretap\x00', 0xa000, &(0x7f0000000180)={@_ha_fsid={[0x7, 0x1]}, {0x834c, 0x4, 0x4, 0x5}}, 0xd, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)}, {[0xfffffffd, 0x3, 0xffffffff, 0x76d]}, 0x7fff, 0x65, &(0x7f0000000300)=""/101})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000440)={<r2=>0x0, @in6={{0xa, 0x4e23, 0x10, @dev={0xfe, 0x80, '\x00', 0x44}, 0x4}}, 0x2, 0x3}, &(0x7f0000000500)=0x90)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000540)={r2, 0x6}, &(0x7f0000000580)=0x8)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013", @ANYRES32=r3], 0xc8}}, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x1, 0x21dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x4040)

783.385942ms ago: executing program 1 (id=2764):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9570d730a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300ef0a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000002000000000044ff72f96f084f4b6cdcb1b4a9d8e9f9021b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c404c8f292f36730845dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a008097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c84418a1faae590b6c896cdd808376b6b51b217fcad5fbd7e3208d009e37484378df3ee5969f817d715d60fdd02c04e3fdd62a29285ac92f6836cbeb4d04d84c396150b2e17828d924013978173c48635e0b1ad4a0c5956717629794b39cf18d599e723d3c24689a5fea6cc1f59d1ba1fccfba88e02f9907"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r4], 0x44}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x1040)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410072786500140033006c6f0009b01a2c"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x850)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd70000000007b280000000c000180080001", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4044884)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r7, @ANYBLOB="de7f1f414d55e8e1a92c2eaa3a2d436e1b87a895e13b81b9227bf17669f2ea55cb96882bcaeb8ff53eff7cd60193b283d4aded496b8147286e380d50af2acd52843c3ec2e8c8adeeb46639853911fb467997b8d51ec270318962f889375bac4d7d7461c475791a068c38254331bb436f59f8", @ANYRES64=r2, @ANYRES8=r7], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x58040)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
syz_emit_ethernet(0xffffffffffffffac, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000240))
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000400)={<r10=>r2, &(0x7f00000002c0)='GPL\x00', 0x80a80, &(0x7f0000000300)={@_ha_fsid={[0xfff, 0x3]}, {0x6, 0x26d9, 0xd, 0xfffffffffffffffb}}, 0x6, &(0x7f0000000340), &(0x7f00000003c0)=0xe})
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r10, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000000714000129bd7000fedbdf250900020073797a0500540001fff4000900024f82797a3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x240088d4)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="1400000010000100000000000500000a44000000090a010400000000000000000a0000040900010073797a31000000000800054000000002090002000000000008000a40fffffffc08000c400000000814000000f9ffffff00000000000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x2003, 0x0, 0x0, 0x0, 0x52}, 0xfffffffffffffd9b)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0), 0x48)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x200000, 0x2, 0xe, 0x2, r11, 0x2000000, '\x00', 0x0, r10, 0x5, 0x5, 0x2, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r12, &(0x7f0000000600)="05000000d9e49a", &(0x7f0000000000)=""/8, 0x2}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000280)={'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})

616.36617ms ago: executing program 0 (id=2765):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x888e}, @void, @eth={@broadcast, @local, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x7, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xffffffffffffff94, 0x0, 0x0, 0xfc, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x8000, 0x8100, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x40, 0x0, @void}}}}}}}}, 0x36)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)

465.84007ms ago: executing program 1 (id=2766):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback={0x2}}, 0x1c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r7 = socket(0x10, 0x3, 0x0)
close(r6)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x3, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r12 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
bind(r12, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x80)
listen(r0, 0x0)

76.317492ms ago: executing program 0 (id=2767):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async)
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)="31020002", 0x4}, {&(0x7f0000000a80)="683f0021954e837474512fcaea99bc671e3d", 0x12}], 0x3) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)

0s ago: executing program 1 (id=2768):
r0 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64841}, 0x40000)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='lp', 0x2)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="020afc000700000028bd7000fe9bdf2505001a0000000000000300000000000000000000640101000000000000000000000000000a0030"], 0x38}}, 0x40408c0)
bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
recvfrom$inet(r4, &(0x7f0000000100)=""/28, 0x1c, 0x0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="bc0000000002010400001a00000000000a000000300001802c00018014000300200100000000000000000000000000011400040000000000000000000000ffffac1e00013c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014100400fe800000000000fb22000000000000bb3c0002800c00028005000100000000002c00018014000300fe8000000000000000000000000000bb140004"], 0xbc}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0x2a, 0xb4, &(0x7f00000000c0)="21f0d410def365a99bfc30e5c2ab3551aff7f6d2fda4c757a5ecee708ce7f1c58edca32db404f91c5a0c", &(0x7f0000000340)=""/180, 0x0, 0x0, 0xef, 0x59, &(0x7f0000000540)="a697daa6787684cdcd597a980464a25ca6b9f3a14271bc48130fed98efed00f6691ca709343c3963cb717d789ee62940025e900f1bb4c76865c48b840140477ed118da082f719b0ffe3e58b88f614d1802c25428de1c986646da77d38cc56810ce1c467791b86d246b961281d547bf04b377a74b6b2df8778339bd4b25520478a77e5858af882f07ee46e44d9b2421273cc1a509b78193be18fe4af79b645ae0455cacc5d0e8faf96a7222b5cc7cd228be71c6609b7a596a73c3b868d4e4b4db851f96b4c66aa9ba066dc10ab809f8859031116be443d26cc768d2fb4dca901f5b9414f0ed6ba9a3f78f19b47da926", &(0x7f0000000680)="ac03c665688740ea42e3f53b7585f66d2d0201deffed1f587c671beefe4fc7f6a5837ddbce562a25546f5dfa20c285387f52553fa81ed5e0693e2fdaadc6a49ee40ce555bf6f31558478f5fc8ab05378c2a41fd0224f0a448b", 0x9, 0x0, 0xfc4}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCBRDELBR(r8, 0x89a1, &(0x7f0000000040)='bridge0\x00')

kernel console output (not intermixed with test programs):

][ T8509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.867'.
[  117.677670][   T53] Bluetooth: hci2: link tx timeout
[  117.680000][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.681694][ T8511] validate_nla: 32 callbacks suppressed
[  117.681839][ T8511] netlink: 'syz.2.869': attribute type 29 has an invalid length.
[  117.683760][   T53] Bluetooth: hci2: link tx timeout
[  117.691393][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.691800][ T8509] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.706013][ T8511] syzkaller0: entered promiscuous mode
[  117.709582][ T8511] syzkaller0: entered allmulticast mode
[  117.744991][ T8513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.870'.
[  117.822193][ T8519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.873'.
[  117.843734][ T8519] bond21: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  117.847806][ T8519] bond21 (unregistering): Released all slaves
[  117.966970][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.876'.
[  117.976454][ T8527] netlink: 'syz.2.875': attribute type 3 has an invalid length.
[  117.979393][ T8527] netlink: 228 bytes leftover after parsing attributes in process `syz.2.875'.
[  118.058349][ T8533] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  118.065567][   T53] Bluetooth: hci2: link tx timeout
[  118.067881][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.124872][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.880'.
[  118.165411][   T53] Bluetooth: hci2: command 0x0406 tx timeout
[  118.186152][ T8542] xt_connbytes: Forcing CT accounting to be enabled
[  118.189332][ T8542] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  118.205821][ T8542] netlink: 116 bytes leftover after parsing attributes in process `syz.2.881'.
[  118.258787][ T8546] netlink: 'syz.1.883': attribute type 1 has an invalid length.
[  118.269925][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'.
[  118.280138][ T8549] netlink: 32 bytes leftover after parsing attributes in process `syz.0.884'.
[  118.438924][ T8561] sctp: [Deprecated]: syz.1.889 (pid 8561) Use of int in max_burst socket option deprecated.
[  118.438924][ T8561] Use struct sctp_assoc_value instead
[  118.502171][ T8562] lo speed is unknown, defaulting to 1000
[  118.550099][ T8567] netlink: 'syz.1.891': attribute type 1 has an invalid length.
[  118.834025][ T8590] lo speed is unknown, defaulting to 1000
[  119.241444][ T8596] lo speed is unknown, defaulting to 1000
[  119.495657][ T8603] bond11: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  119.501142][ T8603] bond11 (unregistering): Released all slaves
[  119.808620][ T8612] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.811096][ T8612] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.855094][ T8612] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.860878][ T8612] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.922290][ T5676] lo speed is unknown, defaulting to 1000
[  119.931101][ T5676] sqz0: Port: 1 Link DOWN
[  119.992708][ T5505] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.007678][ T5505] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.019969][ T5676] lo speed is unknown, defaulting to 1000
[  120.021971][ T5505] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.034947][ T8621] netlink: 'syz.1.905': attribute type 13 has an invalid length.
[  120.038657][ T8621] netlink: 'syz.1.905': attribute type 17 has an invalid length.
[  120.041991][ T8621] netlink: 'syz.1.905': attribute type 27 has an invalid length.
[  120.069794][ T5505] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.104393][ T8615] lo speed is unknown, defaulting to 1000
[  121.148589][ T8634] syzkaller1: entered promiscuous mode
[  121.150345][ T8634] syzkaller1: entered allmulticast mode
[  121.401197][ T8617] net_ratelimit: 2 callbacks suppressed
[  121.401209][ T8617] Set syz1 is full, maxelem 65536 reached
[  121.607313][ T8659] __nla_validate_parse: 8 callbacks suppressed
[  121.607323][ T8659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.916'.
[  121.738569][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'.
[  122.309426][ T8668] netlink: 'syz.2.920': attribute type 29 has an invalid length.
[  122.424073][ T8680] netlink: 48 bytes leftover after parsing attributes in process `syz.2.924'.
[  122.463192][ T8680] syzkaller0: entered promiscuous mode
[  122.465087][ T8680] syzkaller0: entered allmulticast mode
[  122.467864][ T8373] syzkaller0: tun_net_xmit 70
[  122.476509][ T8680] syzkaller0: tun_net_xmit 14
[  122.667078][ T8698] lo speed is unknown, defaulting to 1000
[  122.737249][ T8706] netlink: 'syz.0.930': attribute type 29 has an invalid length.
[  122.777939][ T8707] vlan4: entered promiscuous mode
[  122.780608][ T8711] netlink: 'syz.0.932': attribute type 1 has an invalid length.
[  122.781576][ T8707] gretap0: entered promiscuous mode
[  122.838440][ T8714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.933'.
[  122.953930][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'.
[  123.002196][ T8727] syzkaller0: entered promiscuous mode
[  123.008805][ T8727] syzkaller0: entered allmulticast mode
[  123.242012][ T8731] bond23 (unregistering): Released all slaves
[  123.328480][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'.
[  123.415786][ T8745] netlink: 'syz.1.943': attribute type 29 has an invalid length.
[  123.444758][ T8747] netlink: 72 bytes leftover after parsing attributes in process `syz.0.944'.
[  123.494222][ T8751] bridge_slave_0: left allmulticast mode
[  123.496220][ T8751] bridge_slave_0: left promiscuous mode
[  123.498224][ T8751] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.502351][ T8751] bridge_slave_1: left allmulticast mode
[  123.508279][ T8751] bridge_slave_1: left promiscuous mode
[  123.510247][ T8751] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.517023][ T8751] bond0: (slave bond_slave_0): Releasing backup interface
[  123.533434][ T8751] bond0: (slave bond_slave_1): Releasing backup interface
[  123.551200][ T8751] team0: Port device team_slave_0 removed
[  123.558951][ T8751] team0: Port device team_slave_1 removed
[  123.561811][ T8751] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.565458][ T8751] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.569214][ T8751] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  123.634495][ T8757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.947'.
[  123.678231][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.949'.
[  123.681348][ T8759] netlink: 108 bytes leftover after parsing attributes in process `syz.0.949'.
[  123.824259][ T8764] lo speed is unknown, defaulting to 1000
[  124.226769][ T8779] netlink: 'syz.2.953': attribute type 1 has an invalid length.
[  124.431847][ T8788] netlink: 'syz.1.956': attribute type 2 has an invalid length.
[  124.469196][ T8790] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  124.530911][ T8796] block nbd2: not configured, cannot reconfigure
[  124.608874][ T8801] netlink: 'syz.1.960': attribute type 1 has an invalid length.
[  124.946735][ T8814] netlink: 'syz.1.964': attribute type 2 has an invalid length.
[  124.946744][ T8815] netlink: 'syz.1.964': attribute type 2 has an invalid length.
[  125.033189][   T53] Bluetooth: hci0: command 0x0c1a tx timeout
[  125.035206][ T5608] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  125.626304][ T8830] netlink: 'syz.2.968': attribute type 1 has an invalid length.
[  125.759246][ T8839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.773267][ T8840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.780525][ T8838] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  125.793330][ T8838] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  125.847681][ T8844] openvswitch: netlink: Flow key attr not present in new flow.
[  125.902029][ T8846] netlink: 'syz.1.973': attribute type 4 has an invalid length.
[  126.049793][ T8857] xt_CT: No such helper "netbios-ns"
[  126.334083][ T8882] bond24: (slave bridge6): making interface the new active one
[  126.337700][ T8882] bond24: (slave bridge6): Enslaving as an active interface with an up link
[  126.387737][ T8892] xt_hashlimit: max too large, truncated to 1048576
[  126.703846][ T8911] __nla_validate_parse: 16 callbacks suppressed
[  126.703858][ T8911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.992'.
[  126.770742][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'.
[  126.812964][ T8920] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  126.819797][ T8920] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  127.040179][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1000'.
[  127.089702][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'.
[  127.116937][ T8956] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1001'.
[  127.159968][ T8964] bridge_slave_0: left allmulticast mode
[  127.161979][ T8964] bridge_slave_0: left promiscuous mode
[  127.164109][ T8964] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.176147][ T8964] bridge_slave_1: left allmulticast mode
[  127.178478][ T8964] bridge_slave_1: left promiscuous mode
[  127.180747][ T8964] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.189438][ T8964] bond0: (slave bond_slave_0): Releasing backup interface
[  127.193947][ T8964] bond0: (slave bond_slave_1): Releasing backup interface
[  127.197977][ T8964] team0: Port device team_slave_0 removed
[  127.200802][ T8964] team0: Port device team_slave_1 removed
[  127.202772][ T8964] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.207276][ T8964] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.210030][ T8964] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  127.216716][ T8966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  127.406088][ T8986] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1008'.
[  127.506793][ T8999] 8021q: adding VLAN 0 to HW filter on device bond13
[  127.582420][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1012'.
[  127.802443][ T9028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'.
[  128.050379][ T9061] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1029'.
[  128.054882][ T9061] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1029'.
[  128.302122][ T9076] netlink: zone id is out of range
[  128.308457][ T9076] netlink: zone id is out of range
[  128.312819][ T9076] netlink: zone id is out of range
[  128.320576][ T9076] netlink: zone id is out of range
[  128.322394][ T9076] netlink: zone id is out of range
[  128.324490][ T9076] netlink: zone id is out of range
[  128.326262][ T9076] netlink: zone id is out of range
[  128.328148][ T9076] netlink: zone id is out of range
[  128.361548][ T9083] veth1_to_batadv: entered promiscuous mode
[  128.521564][ T9094] vti0: entered promiscuous mode
[  128.734395][ T9106] lo speed is unknown, defaulting to 1000
[  128.892038][ T9109] lo speed is unknown, defaulting to 1000
[  129.060676][ T9121] validate_nla: 4 callbacks suppressed
[  129.060686][ T9121] netlink: 'syz.1.1047': attribute type 30 has an invalid length.
[  129.262777][ T9127] syzkaller0: entered promiscuous mode
[  129.268561][ T9127] syzkaller0: entered allmulticast mode
[  129.482421][ T9142] netlink: 'syz.1.1053': attribute type 29 has an invalid length.
[  129.490471][ T9142] syzkaller0: entered promiscuous mode
[  129.492273][ T9142] syzkaller0: entered allmulticast mode
[  129.921668][ T9182] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.061388][ T9198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  130.076427][ T9195] 8021q: adding VLAN 0 to HW filter on device bond15
[  130.093052][ T9195] bond15 (unregistering): Released all slaves
[  130.203383][   T33] audit: type=1804 audit(1778604192.286:3): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1075" name="/newroot/401/cgroup.controllers" dev="tmpfs" ino=2047 res=1 errno=0
[  130.212982][   T33] audit: type=1800 audit(1778604192.286:4): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1075" name="cgroup.controllers" dev="tmpfs" ino=2047 res=0 errno=0
[  130.272265][ T9208] bridge_slave_0: left allmulticast mode
[  130.274336][ T9208] bridge_slave_0: left promiscuous mode
[  130.276367][ T9208] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.280610][ T9208] bridge_slave_1: left allmulticast mode
[  130.282522][ T9208] bridge_slave_1: left promiscuous mode
[  130.287201][ T9208] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.294128][ T9208] bond0: (slave bond_slave_0): Releasing backup interface
[  130.301336][ T9208] bond0: (slave bond_slave_1): Releasing backup interface
[  130.324275][ T9208] team0: Port device team_slave_0 removed
[  130.337133][ T9208] team0: Port device team_slave_1 removed
[  131.097729][ T9254] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  131.101624][ T9254] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  131.878973][ T9270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  131.920668][ T9274] netlink: 'syz.1.1097': attribute type 1 has an invalid length.
[  131.931711][ T9274] veth5: entered promiscuous mode
[  132.050334][ T9283] __nla_validate_parse: 16 callbacks suppressed
[  132.050344][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'.
[  132.140532][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'.
[  132.143629][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1102'.
[  132.146495][ T9290] netlink: 'syz.1.1102': attribute type 12 has an invalid length.
[  132.148999][ T9290] netlink: 'syz.1.1102': attribute type 13 has an invalid length.
[  132.214285][ T9292] bond26: invalid ARP target 0.0.0.0 specified for addition
[  132.216752][ T9292] bond26: option arp_ip_target: invalid value (0)
[  132.219991][ T9292] bond26 (unregistering): Released all slaves
[  132.236275][   T98] block nbd1: Possible stuck request ffff888103b28600: control (read@0,1024B). Runtime 30 seconds
[  132.241797][   T98] block nbd1: Possible stuck request ffff888103b28800: control (read@1024,1024B). Runtime 30 seconds
[  132.246478][   T98] block nbd1: Possible stuck request ffff888103b28a00: control (read@2048,1024B). Runtime 30 seconds
[  132.251071][   T98] block nbd1: Possible stuck request ffff888103b28c00: control (read@3072,1024B). Runtime 30 seconds
[  132.492768][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1107'.
[  132.609420][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1110'.
[  132.612625][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1110'.
[  132.855623][ T9325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1114'.
[  132.863011][ T9325] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1114'.
[  133.006707][ T9329] netlink: 'syz.2.1116': attribute type 1 has an invalid length.
[  133.011088][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1115'.
[  133.079328][ T9337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1119'.
[  133.158099][ T9342] netlink: 'syz.0.1120': attribute type 12 has an invalid length.
[  133.160718][ T9342] netlink: 'syz.0.1120': attribute type 13 has an invalid length.
[  133.172302][ T9344] 8021q: adding VLAN 0 to HW filter on device bond16
[  133.247384][ T9348] xt_nfacct: accounting object `syz0' does not exist
[  133.271512][ T9353] xt_hl: Unknown TTL match mode: 237
[  133.668699][ T9371] netlink: 'syz.2.1132': attribute type 1 has an invalid length.
[  133.692702][ T9371] bond17: (slave bridge6): making interface the new active one
[  133.696024][ T9371] bond17: (slave bridge6): Enslaving as an active interface with an up link
[  133.729478][ T9374] netem: incorrect gi model size
[  133.732190][ T9374] netem: change failed
[  134.329551][ T9399] netlink: 'syz.0.1139': attribute type 1 has an invalid length.
[  134.349314][ T9399] bond10: (slave bridge5): making interface the new active one
[  134.352109][ T9399] bond10: (slave bridge5): Enslaving as an active interface with an up link
[  134.588692][ T9412] netlink: 'syz.0.1145': attribute type 29 has an invalid length.
[  134.664311][ T9416] 8021q: VLANs not supported on ip6gre0
[  134.715382][ T9421] bond0: entered promiscuous mode
[  134.717841][ T9421] batadv0: entered promiscuous mode
[  134.936020][ T9430] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  135.026309][ T9432] netlink: 'syz.2.1153': attribute type 1 has an invalid length.
[  135.251893][ T9439] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  135.255578][ T9439] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  135.552254][ T9444] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.602534][ T9447] netlink: 'syz.1.1159': attribute type 18 has an invalid length.
[  135.602604][ T9446] netlink: 'syz.1.1159': attribute type 18 has an invalid length.
[  135.696752][ T9455] netlink: 'syz.0.1162': attribute type 1 has an invalid length.
[  135.921118][ T9472] sctp: [Deprecated]: syz.1.1168 (pid 9472) Use of int in maxseg socket option.
[  135.921118][ T9472] Use struct sctp_assoc_value instead
[  136.840665][ T9496] netlink: 'syz.0.1175': attribute type 29 has an invalid length.
[  137.010073][ T9520] netlink: 'syz.0.1184': attribute type 29 has an invalid length.
[  137.063293][ T9530] netlink: 'syz.2.1187': attribute type 4 has an invalid length.
[  137.070108][ T9529] netlink: 'syz.2.1187': attribute type 4 has an invalid length.
[  137.082183][ T9532] __nla_validate_parse: 24 callbacks suppressed
[  137.082198][ T9532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1187'.
[  137.089403][ T9532] net_ratelimit: 102 callbacks suppressed
[  137.089419][ T9532] openvswitch: netlink: Flow actions attr not present in new flow.
[  137.125559][ T9535] smc: net device team0 applied user defined pnetid SYZ2
[  137.135169][ T9537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1189'.
[  137.179045][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'.
[  137.237909][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'.
[  137.249480][ T9547] syzkaller0: entered promiscuous mode
[  137.251327][ T9547] syzkaller0: entered allmulticast mode
[  137.996067][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  138.448625][ T9555] bond3: left promiscuous mode
[  138.450550][ T9555] vlan2: left promiscuous mode
[  138.452076][ T9555] bond5: left promiscuous mode
[  138.454166][ T9555] batadv1: left promiscuous mode
[  138.458456][ T9555] vlan2: left allmulticast mode
[  138.462158][ T9555] bond5: left allmulticast mode
[  138.464396][ T9555] batadv1: left allmulticast mode
[  138.466834][ T9555] batadv2: left promiscuous mode
[  138.469050][ T9555] batadv2: left allmulticast mode
[  138.472060][ T9555] bond8: left promiscuous mode
[  138.474552][ T9555] bond11: left promiscuous mode
[  138.476566][ T9555] bridge2: left promiscuous mode
[  138.478843][ T9555] bond11: left allmulticast mode
[  138.480900][ T9555] bridge2: left allmulticast mode
[  138.484796][ T9555] vlan3: left allmulticast mode
[  138.487019][ T9555] bond_slave_0: left allmulticast mode
[  138.490141][ T9555] gretap1: left allmulticast mode
[  138.527255][ T9561] bond19: (slave bridge7): making interface the new active one
[  138.531084][ T9561] bond19: (slave bridge7): Enslaving as an active interface with an up link
[  138.608214][ T9573] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  138.617047][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1198'.
[  138.644898][ T9574] syzkaller1: entered promiscuous mode
[  138.646791][ T9574] syzkaller1: entered allmulticast mode
[  138.662538][ T9576] netlink: 876 bytes leftover after parsing attributes in process `syz.1.1200'.
[  138.667795][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'.
[  138.693250][ T9578] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1201'.
[  138.827863][ T9588] bond20: (slave bridge8): making interface the new active one
[  138.831958][ T9588] bond20: (slave bridge8): Enslaving as an active interface with an up link
[  138.910415][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'.
[  139.044745][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1210'.
[  139.611567][ T9613] lo speed is unknown, defaulting to 1000
[  139.654892][ T9615] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  139.795821][ T9622] validate_nla: 51 callbacks suppressed
[  139.795833][ T9622] netlink: 'syz.0.1214': attribute type 1 has an invalid length.
[  139.859783][ T9622] bond12: (slave bridge7): making interface the new active one
[  139.863878][ T9622] bond12: (slave bridge7): Enslaving as an active interface with an up link
[  140.048203][ T9632] veth0_vlan: left promiscuous mode
[  140.052167][ T9632] veth0_vlan: entered promiscuous mode
[  140.437554][ T9662] netlink: 'syz.2.1228': attribute type 1 has an invalid length.
[  140.460032][ T9662] 8021q: adding VLAN 0 to HW filter on device bond21
[  140.485304][ T9662] bond21: (slave veth13): Enslaving as an active interface with a down link
[  140.502783][ T9662] bond21: (slave veth15): Enslaving as an active interface with a down link
[  140.510802][ T9662] netlink: 'syz.2.1228': attribute type 1 has an invalid length.
[  140.672004][ T9671] syzkaller1: entered promiscuous mode
[  140.675671][ T9671] syzkaller1: entered allmulticast mode
[  140.793309][   T53] Bluetooth: hci0: command 0x0c1a tx timeout
[  140.796545][ T5608] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  140.824300][ T9677] netlink: 'syz.2.1234': attribute type 1 has an invalid length.
[  140.843578][ T9677] bond22: (slave bridge9): making interface the new active one
[  140.846557][ T9677] bond22: (slave bridge9): Enslaving as an active interface with an up link
[  141.019566][ T9687] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  141.032049][ T9687] batadv_slave_0: entered promiscuous mode
[  141.039368][ T9686] batadv_slave_0: left promiscuous mode
[  142.190618][ T9708] __nla_validate_parse: 8 callbacks suppressed
[  142.190628][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1242'.
[  142.282577][ T9720] netlink: 'syz.2.1247': attribute type 1 has an invalid length.
[  142.285781][ T9723] xt_TPROXY: Can be used only with -p tcp or -p udp
[  142.304602][ T9727] sctp: [Deprecated]: syz.0.1249 (pid 9727) Use of struct sctp_assoc_value in delayed_ack socket option.
[  142.304602][ T9727] Use struct sctp_sack_info instead
[  142.318183][ T9720] bond23: (slave bridge10): making interface the new active one
[  142.318376][ T9727] sctp: [Deprecated]: syz.0.1249 (pid 9727) Use of struct sctp_assoc_value in delayed_ack socket option.
[  142.318376][ T9727] Use struct sctp_sack_info instead
[  142.325941][ T9720] bond23: (slave bridge10): Enslaving as an active interface with an up link
[  142.342995][ T9727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.348376][ T9729] netlink: 'syz.1.1250': attribute type 13 has an invalid length.
[  142.352892][ T9727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.354742][ T9729] netlink: 'syz.1.1250': attribute type 17 has an invalid length.
[  142.361435][ T9729] netlink: 'syz.1.1250': attribute type 27 has an invalid length.
[  142.394925][ T5608] Bluetooth: hci2: command 0x0406 tx timeout
[  142.411997][ T9729] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.415511][ T9729] 8021q: adding VLAN 0 to HW filter on device team0
[  142.426514][ T9733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1251'.
[  142.429869][ T9729] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.457759][ T9729] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  142.461253][ T9729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  142.466902][ T9729] veth1_vlan: left promiscuous mode
[  142.469544][ T9729] veth0_vlan: left promiscuous mode
[  142.471727][ T9729] veth0_vlan: entered promiscuous mode
[  142.477267][ T9729] veth1_vlan: entered promiscuous mode
[  142.481711][ T9729] veth1_macvtap: left promiscuous mode
[  142.485393][ T9729] veth0_macvtap: left promiscuous mode
[  142.487998][ T9729] veth0_macvtap: entered promiscuous mode
[  142.498178][ T9729] veth1_macvtap: entered promiscuous mode
[  142.503896][ T9729] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  142.509266][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1250'.
[  142.512833][ T9729] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  142.520955][ T9729] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  142.528048][ T9729] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  142.535410][ T9729] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  142.573950][ T5505] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.578699][ T5505] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.584794][ T5505] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.588482][ T5505] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.776709][ T9743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1253'.
[  142.947729][ T9756] netlink: 'syz.2.1257': attribute type 1 has an invalid length.
[  142.968528][ T9756] bond24: (slave bridge11): making interface the new active one
[  142.972170][ T9756] bond24: (slave bridge11): Enslaving as an active interface with an up link
[  143.024733][ T9754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1256'.
[  143.096232][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1261'.
[  143.099627][ T9767] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1261'.
[  143.190524][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'.
[  143.213515][ T9773] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.525113][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'.
[  143.527208][ T9784] 8021q: adding VLAN 0 to HW filter on device team0
[  143.528928][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'.
[  143.658245][ T9784] veth1_to_batadv: left promiscuous mode
[  143.690954][ T9784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  143.697747][ T9784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  143.718960][ T9784] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  143.858415][ T9804] netlink: 'syz.1.1269': attribute type 3 has an invalid length.
[  143.890097][ T9806] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  144.239938][ T9831] vlan2: entered allmulticast mode
[  144.241853][ T9831] macvtap0: entered allmulticast mode
[  144.624535][ T9862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  145.055652][ T9927] bridge7: entered promiscuous mode
[  145.057531][ T9927] bridge7: entered allmulticast mode
[  145.061953][ T9927] team0: Port device bridge7 added
[  145.152936][ T9931] lo speed is unknown, defaulting to 1000
[  145.276336][ T9948] netlink: 'syz.1.1307': attribute type 12 has an invalid length.
[  145.289172][ T9947] netlink: 'syz.1.1307': attribute type 12 has an invalid length.
[  145.297539][ T9948] macsec0: entered promiscuous mode
[  145.311776][ T9946] macsec0: left promiscuous mode
[  145.504969][ T9960] netlink: 'syz.1.1309': attribute type 1 has an invalid length.
[  145.645032][ T9973] TCP: TCP_TX_DELAY enabled
[  145.932603][ T9991] syzkaller0: entered promiscuous mode
[  145.936863][ T9991] syzkaller0: entered allmulticast mode
[  147.472766][T10025] __nla_validate_parse: 16 callbacks suppressed
[  147.472777][T10025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1323'.
[  147.478183][T10025] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1323'.
[  147.488609][T10025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1323'.
[  147.564318][T10035] netlink: 'syz.0.1328': attribute type 10 has an invalid length.
[  147.566684][T10037] netlink: 'syz.1.1329': attribute type 1 has an invalid length.
[  147.607306][T10037] bond26: (slave bridge8): making interface the new active one
[  147.613774][T10037] bond26: (slave bridge8): Enslaving as an active interface with an up link
[  147.630989][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'.
[  147.637192][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'.
[  147.662619][T10046] veth0: entered promiscuous mode
[  147.668887][T10046] bond0: entered promiscuous mode
[  147.687957][T10049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1333'.
[  147.720959][T10034] bond0: left promiscuous mode
[  147.728153][T10034] veth0: left promiscuous mode
[  147.788968][T10062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1337'.
[  147.835962][T10066] pim6reg: entered allmulticast mode
[  147.842532][T10066] pim6reg: left allmulticast mode
[  147.902256][T10073] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1338'.
[  147.987055][T10082] netlink: 'syz.2.1345': attribute type 21 has an invalid length.
[  149.592805][T10082] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1345'.
[  149.662201][T10095] xt_bpf: check failed: parse error
[  149.783529][T10104] syzkaller0: entered promiscuous mode
[  149.786623][T10104] syzkaller0: entered allmulticast mode
[  149.802501][T10104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1352'.
[  149.982904][T10112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.120038][T10115] netlink: 'syz.1.1355': attribute type 1 has an invalid length.
[  150.171073][T10122] 8021q: adding VLAN 0 to HW filter on device team0
[  150.177608][T10122] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.216266][T10122] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  150.219595][T10122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  150.227034][T10122] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  150.236826][ T6171] lo speed is unknown, defaulting to 1000
[  150.240158][ T6171] sqz0: Port: 1 Link ACTIVE
[  150.273950][ T6171] lo speed is unknown, defaulting to 1000
[  150.475312][T10131] veth0: entered promiscuous mode
[  150.478735][T10130] veth0: left promiscuous mode
[  150.541773][T10133] lo speed is unknown, defaulting to 1000
[  151.080774][T10161] block nbd2: Unsupported socket: should be TCP or UNIX.
[  151.429179][T10172] netlink: 'syz.1.1371': attribute type 21 has an invalid length.
[  151.742672][T10185] xt_cgroup: invalid path, errno=-2
[  151.745851][T10192] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  152.304190][T10238] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  153.132519][T10321] netlink: 'syz.2.1400': attribute type 1 has an invalid length.
[  153.185416][T10321] 8021q: adding VLAN 0 to HW filter on device bond26
[  153.236415][T10321] __nla_validate_parse: 9 callbacks suppressed
[  153.236426][T10321] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1400'.
[  153.270575][T10321] bond26: (slave geneve2): making interface the new active one
[  153.284652][T10321] bond26: (slave geneve2): Enslaving as an active interface with an up link
[  153.294611][ T5660] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.297555][ T5660] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.300744][ T5660] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.304799][ T5660] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.428986][T10343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1404'.
[  153.466596][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1404'.
[  153.559933][T10353] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  153.566119][T10353] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  153.572408][T10353] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  153.580065][T10353] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  153.592133][T10353] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  153.639112][T10365] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  153.650264][T10363] smc: removing ib device sqz0
[  153.678145][T10363] smbdirect: ib_dev[sqz0] removed
[  154.420568][T10391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1413'.
[  154.489723][   T33] audit: type=1804 audit(1778604216.576:5): pid=10391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1413" name="/newroot/491/memory.events" dev="tmpfs" ino=2511 res=1 errno=0
[  154.514011][   T33] audit: type=1800 audit(1778604216.576:6): pid=10391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1413" name="memory.events" dev="tmpfs" ino=2511 res=0 errno=0
[  154.571195][T10400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1418'.
[  154.928392][T10428] openvswitch: netlink: Duplicate or invalid key (type 0).
[  154.936971][T10428] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.951267][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1427'.
[  154.964781][T10432] netlink: 'syz.1.1427': attribute type 13 has an invalid length.
[  154.974071][T10432] netlink: 'syz.1.1427': attribute type 17 has an invalid length.
[  154.995928][T10436] x_tables: unsorted underflow at hook 4
[  155.028972][T10432] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  155.040882][T10439] netlink: 'syz.2.1429': attribute type 1 has an invalid length.
[  155.088969][T10439] bond27: (slave bridge13): making interface the new active one
[  155.093520][T10439] bond27: (slave bridge13): Enslaving as an active interface with an up link
[  155.100531][T10442] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1431'.
[  155.255864][ T5660] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  155.266509][ T5660] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  155.270908][ T5660] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  155.281357][ T5660] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  155.338685][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1436'.
[  155.351807][T10465] netlink: 'syz.1.1437': attribute type 1 has an invalid length.
[  155.367237][T10465] bond27: entered promiscuous mode
[  155.369436][T10465] 8021q: adding VLAN 0 to HW filter on device bond27
[  155.388467][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1437'.
[  155.430613][T10470] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1439'.
[  155.486554][T10473] netlink: 'syz.0.1440': attribute type 1 has an invalid length.
[  155.635144][T10481] tipc: Resetting bearer <eth:syzkaller0>
[  155.658606][T10486] netlink: 'syz.1.1444': attribute type 1 has an invalid length.
[  155.737214][T10493] bond13: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[  155.742390][T10493] bond13: entered promiscuous mode
[  155.746313][T10493] 8021q: adding VLAN 0 to HW filter on device bond13
[  156.274899][T10523] netlink: 'syz.2.1453': attribute type 4 has an invalid length.
[  156.282194][T10523] netlink: 'syz.2.1453': attribute type 4 has an invalid length.
[  156.403669][T10530] syzkaller0: entered promiscuous mode
[  156.406668][T10530] syzkaller0: entered allmulticast mode
[  156.606045][T10537] netlink: 'syz.1.1458': attribute type 12 has an invalid length.
[  156.684258][T10541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.965318][T10555] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  156.972887][T10555] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  157.186831][T10566] netlink: 'syz.0.1466': attribute type 1 has an invalid length.
[  157.225794][T10566] bond14: (slave bridge8): making interface the new active one
[  157.228996][T10566] bond14: (slave bridge8): Enslaving as an active interface with an up link
[  157.640764][T10596] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  157.699449][T10611] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.756663][T10617] netlink: 'syz.0.1481': attribute type 1 has an invalid length.
[  157.817534][T10621] netlink: 'syz.0.1483': attribute type 1 has an invalid length.
[  157.858395][T10621] bond15: (slave bridge9): making interface the new active one
[  157.861552][T10621] bond15: (slave bridge9): Enslaving as an active interface with an up link
[  157.895141][T10626] geneve3: entered promiscuous mode
[  157.900634][ T5505] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.906344][ T5505] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.911111][ T5505] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.916944][ T5505] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.963903][T10629] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  158.007772][T10632] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.094719][T10641] ipt_rpfilter: unknown options
[  158.251561][T10643] __nla_validate_parse: 15 callbacks suppressed
[  158.251581][T10643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1490'.
[  158.331573][T10660] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  158.416682][T10668] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.538975][T10676] syzkaller0: entered promiscuous mode
[  158.541287][T10676] syzkaller0: entered allmulticast mode
[  158.759033][T10700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1508'.
[  158.771328][T10702] netlink: 'syz.1.1509': attribute type 1 has an invalid length.
[  158.798344][T10705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'.
[  158.803767][T10702] bond29: (slave bridge9): making interface the new active one
[  158.807155][T10702] bond29: (slave bridge9): Enslaving as an active interface with an up link
[  158.835958][T10706] bond16: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  158.841022][T10706] bond16 (unregistering): Released all slaves
[  158.863057][T10705] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1510'.
[  158.870196][T10709] syzkaller0: entered promiscuous mode
[  158.872473][T10709] syzkaller0: entered allmulticast mode
[  158.998497][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'.
[  159.008164][T10711] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1512'.
[  159.398299][T10752] xt_socket: unknown flags 0x8
[  159.400421][T10751] xt_socket: unknown flags 0x8
[  159.490815][T10756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1525'.
[  159.944381][T10796] netlink: 'syz.0.1535': attribute type 1 has an invalid length.
[  159.953904][T10796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1535'.
[  159.991839][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1539'.
[  159.999041][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1539'.
[  160.041644][T10810] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  160.510043][T10835] netlink: 'syz.1.1547': attribute type 1 has an invalid length.
[  160.557578][T10835] bond30: (slave bridge10): making interface the new active one
[  160.561971][T10835] bond30: (slave bridge10): Enslaving as an active interface with an up link
[  160.841134][T10857] netlink: 'syz.0.1554': attribute type 1 has an invalid length.
[  160.937140][T10876] Bluetooth: MGMT ver 1.23
[  161.096932][T10901] x_tables: duplicate underflow at hook 3
[  161.142790][T10907] netlink: 'syz.2.1566': attribute type 1 has an invalid length.
[  161.199539][T10913] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  161.478128][T10933] ip6tnl3: entered allmulticast mode
[  161.562412][T10945] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  161.663667][T10963] batadv_slave_1: entered allmulticast mode
[  162.182651][T10993] netlink: 'syz.1.1588': attribute type 32 has an invalid length.
[  162.234728][   T53] Bluetooth: hci0: command 0x0c1a tx timeout
[  162.239099][ T5608] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  162.313758][   T98] block nbd1: Possible stuck request ffff888103b28600: control (read@0,1024B). Runtime 60 seconds
[  162.318021][   T98] block nbd1: Possible stuck request ffff888103b28800: control (read@1024,1024B). Runtime 60 seconds
[  162.322351][   T98] block nbd1: Possible stuck request ffff888103b28a00: control (read@2048,1024B). Runtime 60 seconds
[  162.326416][   T98] block nbd1: Possible stuck request ffff888103b28c00: control (read@3072,1024B). Runtime 60 seconds
[  162.701961][T11021] syzkaller0: entered promiscuous mode
[  162.703934][T11021] syzkaller0: entered allmulticast mode
[  162.752451][T11021] netlink: 'syz.1.1596': attribute type 1 has an invalid length.
[  165.787717][T11064] dvmrp0: entered allmulticast mode
[  165.792304][T11059] __nla_validate_parse: 13 callbacks suppressed
[  165.792320][T11059] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1604'.
[  165.833335][T11055] nbd2: detected capacity change from 0 to 63
[  165.836720][T11055] block nbd0: NBD_DISCONNECT
[  165.838592][T11055] block nbd0: Send disconnect failed -32
[  165.843879][T11055] block nbd0: shutting down sockets
[  165.856076][   T54] block nbd2: Receive control failed (result -104)
[  165.995749][T11072] Cannot find del_set index 8192 as target
[  166.047779][T11071] nbd0: detected capacity change from 0 to 63
[  166.078988][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1606'.
[  166.194500][   T55] block nbd0: Receive control failed (result -104)
[  166.252719][T11083] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  166.330320][T11085] xt_hashlimit: size too large, truncated to 1048576
[  166.439345][T11096] netlink: 'syz.0.1611': attribute type 4 has an invalid length.
[  166.458137][T11098] tun0: tun_chr_ioctl cmd 1074812118
[  166.461968][T11097] tun0: tun_chr_ioctl cmd 1074025673
[  166.466052][T11098] tun0: tun_chr_ioctl cmd 1074033169
[  166.469123][T11099] tun0: tun_chr_ioctl cmd 1074033169
[  166.519238][T11101] xfrm0: entered allmulticast mode
[  166.529147][T11101] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  166.577395][T11104] Unknown options in mask 6
[  166.580441][T11104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1615'.
[  166.788366][T11120] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1618'.
[  166.853675][T11122] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  166.862166][T11122] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  166.868310][T11122] veth0_virt_wifi: entered allmulticast mode
[  166.871197][T11122] veth0_virt_wifi: entered promiscuous mode
[  166.875898][T11122] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  166.878461][T11122] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  166.956751][T11141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1625'.
[  166.998293][T11145] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0
[  167.057870][T11148] netlink: 'syz.2.1626': attribute type 1 has an invalid length.
[  167.061108][T11148] netlink: 'syz.2.1626': attribute type 1 has an invalid length.
[  167.064884][T11148] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.1626'.
[  167.069245][T11149] netlink: 'syz.2.1626': attribute type 1 has an invalid length.
[  167.072667][T11149] netlink: 'syz.2.1626': attribute type 1 has an invalid length.
[  167.077097][T11149] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.1626'.
[  167.084852][ T5608] Bluetooth: hci2: link tx timeout
[  167.086706][ T5608] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  167.091949][   T53] Bluetooth: hci2: link tx timeout
[  167.095432][   T53] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  167.099604][   T53] Bluetooth: hci2: link tx timeout
[  167.104453][   T53] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  167.110671][   T53] Bluetooth: hci2: link tx timeout
[  167.112429][   T53] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  167.115475][   T53] Bluetooth: hci2: link tx timeout
[  167.117202][   T53] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  167.120281][   T53] Bluetooth: hci2: link tx timeout
[  167.122970][   T53] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  167.248428][T11153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1628'.
[  167.419828][T11162] netlink: 'syz.2.1631': attribute type 1 has an invalid length.
[  167.581394][T11164] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1632'.
[  167.612072][T11166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1633'.
[  167.701518][ T5606] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  167.716477][ T5606] CPU: 1 UID: 0 PID: 5606 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  167.716500][ T5606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.716508][ T5606] Call Trace:
[  167.716533][ T5606]  <TASK>
[  167.716541][ T5606]  dump_stack_lvl+0xe8/0x150
[  167.716564][ T5606]  dump_header+0xd3/0x4c0
[  167.716582][ T5606]  oom_kill_process+0x3ab/0x970
[  167.716602][ T5606]  out_of_memory+0x106c/0x1410
[  167.716617][ T5606]  ? try_charge_memcg+0xbb9/0x1570
[  167.716636][ T5606]  ? __pfx___mutex_lock+0x10/0x10
[  167.716655][ T5606]  ? __pfx_out_of_memory+0x10/0x10
[  167.716669][ T5606]  ? do_raw_spin_unlock+0x4d/0x210
[  167.716691][ T5606]  try_charge_memcg+0xc77/0x1570
[  167.716720][ T5606]  ? __pfx_try_charge_memcg+0x10/0x10
[  167.716735][ T5606]  ? percpu_ref_tryget+0x15/0x180
[  167.716766][ T5606]  ? charge_memcg+0x23/0x2b0
[  167.716784][ T5606]  charge_memcg+0x1a2/0x2b0
[  167.716801][ T5606]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  167.716817][ T5606]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  167.716836][ T5606]  __swap_cache_prepare_and_add+0xdc/0x700
[  167.716853][ T5606]  ? page_rmappable_folio+0x9a/0x170
[  167.716876][ T5606]  swap_cache_alloc_folio+0xf1/0x240
[  167.716892][ T5606]  swap_cluster_readahead+0x355/0x670
[  167.716911][ T5606]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  167.716934][ T5606]  ? get_vma_policy+0x27b/0x3c0
[  167.716954][ T5606]  swapin_readahead+0x196/0xc50
[  167.716971][ T5606]  ? swap_table_get+0x1e/0x260
[  167.716994][ T5606]  ? __pfx_swapin_readahead+0x10/0x10
[  167.717009][ T5606]  ? swap_table_get+0x1e/0x260
[  167.717021][ T5606]  ? swap_table_get+0x1e/0x260
[  167.717033][ T5606]  ? swap_table_get+0x1e/0x260
[  167.717046][ T5606]  ? swap_table_get+0x216/0x260
[  167.717061][ T5606]  ? swap_cache_get_folio+0x2e4/0x2f0
[  167.717080][ T5606]  do_swap_page+0x555/0x5120
[  167.717095][ T5606]  ? __pte_offset_map+0x29/0x240
[  167.717109][ T5606]  ? __pte_offset_map+0x29/0x240
[  167.717125][ T5606]  ? do_swap_page+0x128/0x5120
[  167.717136][ T5606]  ? __pfx_do_swap_page+0x10/0x10
[  167.717147][ T5606]  ? __pte_offset_map+0x1ae/0x240
[  167.717190][ T5606]  ? pte_offset_map_rw_nolock+0xea/0x160
[  167.717207][ T5606]  handle_mm_fault+0x12d2/0x3170
[  167.717232][ T5606]  ? handle_mm_fault+0xee/0x3170
[  167.717250][ T5606]  ? __pfx_handle_mm_fault+0x10/0x10
[  167.717262][ T5606]  ? lock_vma_under_rcu+0x45a/0x500
[  167.717295][ T5606]  do_user_addr_fault+0xa73/0x1340
[  167.717314][ T5606]  ? rcu_is_watching+0x15/0xb0
[  167.717330][ T5606]  ? trace_page_fault_user+0x84/0x1e0
[  167.717344][ T5606]  exc_page_fault+0x6a/0xc0
[  167.717364][ T5606]  asm_exc_page_fault+0x26/0x30
[  167.717377][ T5606] RIP: 0033:0x7f0ca675d60e
[  167.717390][ T5606] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  167.717399][ T5606] RSP: 002b:00007ffdd6a67a98 EFLAGS: 00010246
[  167.717410][ T5606] RAX: 0000000000000000 RBX: 000055556a977500 RCX: 00007f0ca675d60e
[  167.717419][ T5606] RDX: 00007ffdd6a67af0 RSI: 0000000000000000 RDI: 0000000000000000
[  167.717426][ T5606] RBP: 00007ffdd6a67b5c R08: 0000000000000000 R09: 0000000000000000
[  167.717433][ T5606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  167.717440][ T5606] R13: 00000000000927c0 R14: 0000000000028c58 R15: 00007ffdd6a67bb0
[  167.717460][ T5606]  </TASK>
[  167.914694][ T5606] memory: usage 307200kB, limit 307200kB, failcnt 2980
[  167.918204][ T5606] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0
[  167.926462][ T5606] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[  167.930484][ T5606] Memory cgroup stats for /syz1:
[  167.930757][ T5606] cache 4096
[  167.937251][ T5606] rss 0
[  167.940050][ T5606] rss_huge 0
[  167.943043][ T5606] shmem 0
[  167.945693][ T5606] mapped_file 0
[  167.948285][ T5606] dirty 0
[  167.950513][ T5606] writeback 0
[  167.951631][ T5606] workingset_refault_anon 0
[  167.954905][ T5606] workingset_refault_file 0
[  167.957766][ T5606] swap 204800
[  167.960769][ T5606] swapcached 204800
[  167.966428][ T5606] pgpgin 97553
[  167.968879][ T5606] pgpgout 97552
[  167.970906][ T5606] pgfault 114676
[  167.974107][ T5606] pgmajfault 2
[  167.976676][ T5606] inactive_anon 0
[  167.979413][ T5606] active_anon 0
[  167.981989][ T5606] inactive_file 0
[  167.989127][ T5606] active_file 4096
[  167.991134][ T5606] unevictable 0
[  167.994538][ T5606] hierarchical_memory_limit 314572800
[  167.998757][ T5606] hierarchical_memsw_limit 9223372036854771712
[  168.004470][ T5606] total_cache 4096
[  168.007265][ T5606] total_rss 0
[  168.010930][ T5606] total_rss_huge 0
[  168.014900][ T5606] total_shmem 0
[  168.018813][ T5606] total_mapped_file 0
[  168.031361][ T5606] total_dirty 0
[  168.035000][ T5606] total_writeback 0
[  168.040332][ T5606] total_workingset_refault_anon 0
[  168.045519][ T5606] total_workingset_refault_file 0
[  168.055907][ T5606] total_swap 204800
[  168.061656][ T5606] total_swapcached 204800
[  168.070820][ T5606] total_pgpgin 97553
[  168.077200][ T5606] total_pgpgout 97552
[  168.081909][ T5606] total_pgfault 114676
[  168.091032][ T5606] total_pgmajfault 2
[  168.099874][ T5606] total_inactive_anon 0
[  168.105149][ T5606] total_active_anon 0
[  168.112990][ T5606] total_inactive_file 0
[  168.119776][ T5606] total_active_file 4096
[  168.127535][ T5606] total_unevictable 0
[  168.133947][ T5606] anon_cost 0
[  168.139682][ T5606] file_cost 0
[  168.146092][ T5606] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1624,pid=11137,uid=0
[  168.173386][ T5606] Memory cgroup out of memory: Killed process 11137 (syz.1.1624) total-vm:102292kB, anon-rss:1244kB, file-rss:23072kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  168.977770][T11206] netlink: 'syz.0.1642': attribute type 1 has an invalid length.
[  169.019771][T11206] 8021q: adding VLAN 0 to HW filter on device bond17
[  169.032474][T11209] xt_TCPMSS: Only works on TCP SYN packets
[  169.084799][T11203] gtp1: entered promiscuous mode
[  169.091258][T11203] gtp1: entered allmulticast mode
[  169.113444][   T53] Bluetooth: hci2: command 0x0406 tx timeout
[  169.127213][T11214] bond17: (slave veth7): Enslaving as an active interface with a down link
[  169.353063][T11228] netlink: 'syz.1.1646': attribute type 3 has an invalid length.
[  169.514560][T11244] openvswitch: netlink: Flow key attr not present in new flow.
[  169.712417][T11251] x_tables: duplicate underflow at hook 3
[  169.877611][T11283] netlink: 'syz.0.1656': attribute type 8 has an invalid length.
[  170.070493][T11291] netlink: 'syz.1.1659': attribute type 1 has an invalid length.
[  170.098183][T11294] 8021q: adding VLAN 0 to HW filter on device bond28
[  170.436524][T11312] syzkaller0: entered promiscuous mode
[  170.442626][T11312] syzkaller0: entered allmulticast mode
[  170.514216][T11320] bond29: option arp_validate: invalid value (655368)
[  170.518540][T11320] bond29 (unregistering): Released all slaves
[  170.623338][T11326] pim6reg: entered allmulticast mode
[  170.708781][T11325] pim6reg: left allmulticast mode
[  170.748798][T11334] netlink: 'syz.0.1669': attribute type 1 has an invalid length.
[  170.854881][T11347] __nla_validate_parse: 15 callbacks suppressed
[  170.854900][T11347] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1669'.
[  170.981061][T11354] bridge_slave_0: entered promiscuous mode
[  171.046767][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1674'.
[  171.059286][T11360] bond19: option arp_validate: invalid value (655368)
[  171.062540][T11360] bond19 (unregistering): Released all slaves
[  171.179034][T11374] netlink: 'syz.2.1677': attribute type 4 has an invalid length.
[  171.336314][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1680'.
[  172.114578][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1685'.
[  172.331658][T11428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  172.372826][T11430] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1695'.
[  172.646464][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1699'.
[  172.661999][T11445] : entered promiscuous mode
[  172.735508][T11452] netlink: 'syz.1.1702': attribute type 1 has an invalid length.
[  172.738909][T11452] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1702'.
[  172.742123][T11452] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1702'.
[  172.746681][T11452] netlink: 'syz.1.1702': attribute type 1 has an invalid length.
[  172.749216][T11452] netlink: 'syz.1.1702': attribute type 8 has an invalid length.
[  172.751649][T11452] netlink: 606 bytes leftover after parsing attributes in process `syz.1.1702'.
[  172.796928][T11455] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  173.912841][ T5057] udevd[5057]: worker [6368] /devices/virtual/block/nbd1 is taking a long time
[  181.033414][   T53] Bluetooth: hci1: command 0x0406 tx timeout
[  181.979456][T11463] netlink: 'syz.0.1704': attribute type 1 has an invalid length.
[  182.021779][T11463] bond19: entered promiscuous mode
[  182.024644][T11463] 8021q: adding VLAN 0 to HW filter on device bond19
[  182.082499][T11463] bond19: (slave bridge11): making interface the new active one
[  182.087837][T11463] bridge11: entered promiscuous mode
[  182.092214][T11463] bond19: (slave bridge11): Enslaving as an active interface with an up link
[  182.199485][T11481] dvmrp8: entered allmulticast mode
[  182.209803][T11485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.306168][T11496] ip6tnl2: entered allmulticast mode
[  182.317724][T11485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.349488][T11500] bond0: (slave wlan0): Opening slave failed
[  182.361335][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1717'.
[  182.592246][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'.
[  182.682205][T11534] netlink: 'syz.0.1724': attribute type 11 has an invalid length.
[  182.686640][T11534] netlink: 'syz.0.1724': attribute type 23 has an invalid length.
[  182.686760][T11536] netlink: 'syz.2.1726': attribute type 1 has an invalid length.
[  182.689019][T11538] IPVS: set_ctl: invalid protocol: 8 100.1.1.1:20002
[  182.690785][T11534] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1724'.
[  182.725687][T11536] 8021q: adding VLAN 0 to HW filter on device bond29
[  182.730520][T11536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'.
[  182.746424][T11536] macvlan5: entered promiscuous mode
[  182.748220][T11536] macvlan5: entered allmulticast mode
[  182.767221][T11537] bond29: (slave ip6gretap3): making interface the new active one
[  182.773978][T11537] bond29: (slave ip6gretap3): Enslaving as an active interface with an up link
[  182.894122][T11545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1727'.
[  183.403855][T11555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  183.811643][T11577] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  183.816636][T11577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1740'.
[  184.307863][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'.
[  184.327678][T11603] bond30: option arp_validate: invalid value (655368)
[  184.372474][T11603] bond30 (unregistering): Released all slaves
[  184.384187][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1748'.
[  184.393146][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'.
[  185.684121][T11617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  185.770816][T11627] netlink: 'syz.1.1753': attribute type 1 has an invalid length.
[  185.773348][T11626] netlink: 'syz.1.1753': attribute type 1 has an invalid length.
[  185.795666][T11626] 8021q: adding VLAN 0 to HW filter on device bond31
[  185.805579][T11632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1754'.
[  185.831355][T11626] bond31: (slave gretap3): making interface the new active one
[  185.836331][T11626] bond31: (slave gretap3): Enslaving as an active interface with an up link
[  186.623667][T11684] sock: sock_set_timeout: `syz.0.1771' (pid 11684) tries to set negative timeout
[  186.767013][T11696] netlink: zone id is out of range
[  186.819476][T11699] tipc: Invalid UDP bearer configuration
[  186.819514][T11699] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  187.993352][   T53] Bluetooth: hci2: command 0x0406 tx timeout
[  188.281107][T11726] team0: No ports can be present during mode change
[  188.329381][T11739] netlink: 'syz.1.1787': attribute type 1 has an invalid length.
[  188.336784][T11739] netlink: 'syz.1.1787': attribute type 1 has an invalid length.
[  188.340226][T11739] netlink: 'syz.1.1787': attribute type 2 has an invalid length.
[  188.349414][T11739] netlink: 'syz.1.1787': attribute type 1 has an invalid length.
[  188.351915][T11739] netlink: 'syz.1.1787': attribute type 1 has an invalid length.
[  188.360729][T11739] netlink: 'syz.1.1787': attribute type 2 has an invalid length.
[  188.367967][T11739] netlink: 'syz.1.1787': attribute type 2 has an invalid length.
[  188.370831][T11737] netlink: 'syz.1.1787': attribute type 1 has an invalid length.
[  188.374892][T11737] netlink: 'syz.1.1787': attribute type 1 has an invalid length.
[  188.377438][T11737] netlink: 'syz.1.1787': attribute type 2 has an invalid length.
[  188.407582][T11747] __nla_validate_parse: 5 callbacks suppressed
[  188.407594][T11747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1789'.
[  188.423734][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1789'.
[  188.429900][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1789'.
[  188.434864][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1789'.
[  188.439611][T11749] 8021q: adding VLAN 0 to HW filter on device team0
[  188.440859][T11751] openvswitch: netlink: EtherType 50a is less than min 600
[  188.499402][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1789'.
[  188.549132][T11764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1795'.
[  188.551967][T11764] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1795'.
[  188.598061][T11769] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1796'.
[  188.620568][T11771] openvswitch: netlink: nsh attr 1647 is out of range max 3
[  188.930528][T11790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1803'.
[  188.959558][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1804'.
[  189.058116][T11794] openvswitch: netlink: Key type 142 is out of range max 32
[  189.120072][T11796] bond32: entered promiscuous mode
[  189.122017][T11796] bond32: entered allmulticast mode
[  189.124714][T11796] 8021q: adding VLAN 0 to HW filter on device bond32
[  189.202356][T11798] bridge13: entered promiscuous mode
[  189.205075][T11798] bridge13: entered allmulticast mode
[  189.208012][T11798] bond32: (slave bridge13): Enslaving as a backup interface with an up link
[  189.234113][ T5505] bond32: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  189.353315][ T5660] bond32: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  189.391654][T11812] openvswitch: netlink: Flow key attr not present in new flow.
[  189.401173][T11809] 8021q: adding VLAN 0 to HW filter on device bond30
[  189.412278][T11809] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  189.416426][T11809] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  189.518748][T11821] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  189.522730][T11821] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  189.525937][T11821] tipc: Enabled bearer <eth:hsr0>, priority 10
[  189.556006][T11825] xt_hashlimit: size too large, truncated to 1048576
[  189.653351][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  189.657483][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  190.019874][T11835] bond33: entered promiscuous mode
[  190.021891][T11835] 8021q: adding VLAN 0 to HW filter on device bond33
[  190.152332][T11846] ieee802154 phy0 wpan0: encryption failed: -22
[  191.182354][T11874] vlan0: entered promiscuous mode
[  191.184108][T11874] bridge0: entered promiscuous mode
[  191.454162][T11893] "syz.0.1836" (11893) uses obsolete ecb(arc4) skcipher
[  191.515367][T11901] 8021q: adding VLAN 0 to HW filter on device bond20
[  191.536943][T11901] bond20: (slave veth9): Enslaving as an active interface with a down link
[  191.543010][T11901] netlink: 'syz.0.1838': attribute type 11 has an invalid length.
[  191.553028][T11901] bond20: entered allmulticast mode
[  191.900323][T11906] tipc: Resetting bearer <eth:hsr0>
[  191.907513][T11906] tipc: Resetting bearer <eth:hsr0>
[  192.119386][ T5505] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.124817][ T5505] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.127703][ T5505] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.130555][ T5505] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.391292][T11951] Cannot find add_set index 2 as target
[  192.397657][T11951] Cannot find add_set index 2 as target
[  192.405090][T11951] Cannot find add_set index 2 as target
[  192.411197][   T98] block nbd1: Possible stuck request ffff888103b28600: control (read@0,1024B). Runtime 90 seconds
[  192.415202][T11951] Cannot find add_set index 2 as target
[  192.415292][T11951] Cannot find add_set index 2 as target
[  192.415373][T11951] Cannot find add_set index 2 as target
[  192.417416][T11951] Cannot find add_set index 2 as target
[  192.417502][T11951] Cannot find add_set index 2 as target
[  192.420806][   T98] block nbd1: Possible stuck request ffff888103b28800: control (read@1024,1024B). Runtime 90 seconds
[  192.431156][   T98] block nbd1: Possible stuck request ffff888103b28a00: control (read@2048,1024B). Runtime 90 seconds
[  192.433705][T11951] Cannot find add_set index 2 as target
[  192.435631][   T98] block nbd1: Possible stuck request ffff888103b28c00: control (read@3072,1024B). Runtime 90 seconds
[  192.443788][T11951] Cannot find add_set index 2 as target
[  192.789140][T11985] netem: invalid attributes len -1
[  192.791561][T11985] netem: change failed
[  192.883581][T11989] 8021q: adding VLAN 0 to HW filter on device bond21
[  192.887481][T11997] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  192.966033][T12009] x_tables: unsorted entry at hook 3
[  193.100626][T12019] sctp: [Deprecated]: syz.1.1872 (pid 12019) Use of int in max_burst socket option deprecated.
[  193.100626][T12019] Use struct sctp_assoc_value instead
[  193.113604][ T5608] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  193.116276][   T53] Bluetooth: hci2: command 0x0406 tx timeout
[  194.205882][T12056] net_ratelimit: 7 callbacks suppressed
[  194.205893][T12056] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  194.276395][T12060] __nla_validate_parse: 86 callbacks suppressed
[  194.276405][T12060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1880'.
[  194.581315][T12072] validate_nla: 15 callbacks suppressed
[  194.581330][T12072] netlink: 'syz.2.1884': attribute type 1 has an invalid length.
[  194.586810][T12072] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1884'.
[  194.846022][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1888'.
[  194.849404][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1888'.
[  194.917625][T12093] xt_CT: No such helper "snmp_trap"
[  194.931639][T12093] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1889'.
[  195.035893][T12097] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1890'.
[  195.231513][T12107] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.250113][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1893'.
[  195.386316][T12121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1894'.
[  195.396589][T12109] netlink: 'syz.0.1892': attribute type 1 has an invalid length.
[  195.399948][T12109] netlink: 'syz.0.1892': attribute type 4 has an invalid length.
[  195.403050][T12109] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1892'.
[  195.514301][T12125] netlink: 'syz.2.1896': attribute type 39 has an invalid length.
[  195.760736][T12138] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1897'.
[  195.912587][T12146] netlink: 'syz.1.1899': attribute type 10 has an invalid length.
[  195.926059][T12146] team0: Port device geneve1 added
[  196.164456][T12162] netlink: 'syz.1.1903': attribute type 1 has an invalid length.
[  196.191881][T12162] 8021q: adding VLAN 0 to HW filter on device bond34
[  196.215920][T12162] veth9: entered promiscuous mode
[  196.220708][T12162] bond34: (slave veth9): Enslaving as an active interface with an up link
[  196.257012][  T134] block nbd0: Possible stuck request ffff8881037e0000: control (read@0,1024B). Runtime 30 seconds
[  196.261245][  T134] block nbd0: Possible stuck request ffff8881037e0200: control (read@1024,1024B). Runtime 30 seconds
[  196.265090][  T134] block nbd0: Possible stuck request ffff8881037e0400: control (read@2048,1024B). Runtime 30 seconds
[  196.268576][  T134] block nbd0: Possible stuck request ffff8881037e0600: control (read@3072,1024B). Runtime 30 seconds
[  196.439645][T12181] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  196.660959][T12191] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  196.665517][T12191] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  197.445665][T12211] bond32 (unregistering): Released all slaves
[  197.528711][T12218] openvswitch: netlink: Message has 2 unknown bytes.
[  197.617153][T12230] openvswitch: netlink: IPv6 tunnel dst address is zero
[  198.014075][T12270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  198.075659][T12274] batadv0: entered promiscuous mode
[  198.079172][T12274] batadv0: left promiscuous mode
[  198.322503][T12287] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.390026][T12295] netlink: 'syz.0.1946': attribute type 1 has an invalid length.
[  198.405381][T12295] 8021q: adding VLAN 0 to HW filter on device bond22
[  198.637007][T12308] tipc: Started in network mode
[  198.642950][T12308] tipc: Node identity , cluster identity 4711
[  198.657836][T12308] tipc: Failed to obtain node identity
[  198.666546][T12308] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  198.679162][T12309] tipc: Started in network mode
[  198.683223][T12309] tipc: Node identity , cluster identity 4711
[  198.686781][T12309] tipc: Failed to obtain node identity
[  198.688926][T12313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.691142][T12309] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  198.766516][T12313] bond35: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  198.771604][T12313] bond35 (unregistering): Released all slaves
[  198.782049][T12320] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.854311][T12322] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.957006][T12324] netlink: 'syz.2.1956': attribute type 1 has an invalid length.
[  198.990437][T12324] 8021q: adding VLAN 0 to HW filter on device bond32
[  199.582079][T12338] __nla_validate_parse: 34 callbacks suppressed
[  199.582091][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1959'.
[  199.795541][T12354] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1965'.
[  199.870112][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1967'.
[  199.876463][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1967'.
[  199.882362][T12362] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1968'.
[  199.950656][T12366] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1970'.
[  199.986501][T12373] netlink: 'syz.0.1971': attribute type 10 has an invalid length.
[  199.989132][T12373] netlink: 'syz.0.1971': attribute type 10 has an invalid length.
[  200.005637][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1973'.
[  200.013303][T12377] netlink: 'syz.1.1973': attribute type 13 has an invalid length.
[  200.018901][T12377] netlink: 'syz.1.1973': attribute type 17 has an invalid length.
[  200.060975][T12377] 8021q: adding VLAN 0 to HW filter on device team0
[  200.078759][T12389] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1974'.
[  200.085144][T12389] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1974'.
[  200.088439][T12389] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1974'.
[  200.127155][T12377] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  200.244184][T12408] rdma_rxe: rxe_newlink: failed to add lo
[  200.250628][T12407] lo speed is unknown, defaulting to 1000
[  200.276789][T12407] lo speed is unknown, defaulting to 1000
[  200.279928][T12407] lo speed is unknown, defaulting to 1000
[  200.424231][T12407] infiniband sqz0: set active
[  200.426368][T12407] infiniband sqz0: added lo
[  200.443057][T12407] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  200.449217][T12407] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  200.456538][T12407] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  200.491138][T12407] RDS/IB: sqz0: added
[  200.494120][T12407] smc: adding ib device sqz0 with port count 1
[  200.499265][T12407] smc:    ib device sqz0 port 1 has no pnetid
[  200.528570][ T5668] lo speed is unknown, defaulting to 1000
[  200.528603][ T8368] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  200.535005][ T8485] lo speed is unknown, defaulting to 1000
[  200.539962][T12407] lo speed is unknown, defaulting to 1000
[  200.542472][ T8368] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  200.555318][ T8368] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  200.563196][ T8368] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  200.736701][T12407] lo speed is unknown, defaulting to 1000
[  200.888425][T12407] lo speed is unknown, defaulting to 1000
[  202.110006][T12455] netlink: 'syz.0.1992': attribute type 1 has an invalid length.
[  202.267490][T12464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.473199][T12493] netlink: 'syz.0.2005': attribute type 83 has an invalid length.
[  203.473375][T12492] netlink: 'syz.0.2005': attribute type 83 has an invalid length.
[  203.546975][T12495] netem: change failed
[  203.708017][T12508] lo speed is unknown, defaulting to 1000
[  204.068939][T12527] bond33: option resend_igmp: invalid value (2878)
[  204.072937][T12527] bond33: option resend_igmp: allowed values 0 - 255
[  204.079483][T12527] bond33 (unregistering): Released all slaves
[  204.365945][T12545] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  204.376099][T12545] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  204.544016][T12545] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  204.547337][T12545] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  204.765770][T12573] __nla_validate_parse: 46 callbacks suppressed
[  204.765784][T12573] netlink: 594 bytes leftover after parsing attributes in process `syz.2.2027'.
[  204.785351][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2027'.
[  204.829437][T12575] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003
[  205.376725][T12584] IPVS: set_ctl: invalid protocol: 2 172.20.20.39:20003
[  205.380577][T12584] netlink: 'syz.0.2032': attribute type 4 has an invalid length.
[  205.394836][T12584] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2032'.
[  205.845626][T12618] lo speed is unknown, defaulting to 1000
[  205.899296][T12630] netlink: 'syz.2.2046': attribute type 1 has an invalid length.
[  205.920501][T12630] bond33: entered promiscuous mode
[  205.922674][T12630] 8021q: adding VLAN 0 to HW filter on device bond33
[  205.934209][T12630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2046'.
[  205.964992][T12630] bond33: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  205.977927][T12630] bond33: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  205.986724][T12630] bond33: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  206.191318][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2049'.
[  206.220053][T12640] hsr_slave_1 (unregistering): left promiscuous mode
[  206.299700][T12654] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.2052'.
[  206.410360][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2054'.
[  206.646211][T12682] macvtap1: entered allmulticast mode
[  206.648548][T12682] veth0_to_bridge: entered allmulticast mode
[  206.655878][T12682] veth0_to_bridge: left allmulticast mode
[  206.693976][T12684] lo speed is unknown, defaulting to 1000
[  206.764808][T12690] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2061'.
[  206.771502][T12690] ksmbd: Unknown IPC event: 1, ignore.
[  206.937420][T12699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  206.943034][T12699] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  207.628311][T12709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2065'.
[  210.601928][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'.
[  210.663025][T12718] ip6t_srh: unknown srh match flags  4000
[  210.696004][T12713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2067'.
[  210.842795][T12738] netlink: 'syz.1.2073': attribute type 1 has an invalid length.
[  210.862054][T12742] netlink: 'syz.2.2074': attribute type 1 has an invalid length.
[  211.044662][T12754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.157535][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2082'.
[  211.208865][ T8486] lo speed is unknown, defaulting to 1000
[  211.276465][T12769] bond36: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  211.286646][T12769] bond36 (unregistering): Released all slaves
[  211.307580][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2082'.
[  211.312997][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2082'.
[  211.319304][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2082'.
[  211.324095][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2082'.
[  211.327856][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2082'.
[  211.435188][T12792] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  211.460660][T12792] syzkaller0: entered promiscuous mode
[  211.465385][T12792] syzkaller0: entered allmulticast mode
[  211.722006][T12814] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2093'.
[  211.757763][T12814] netlink: 'syz.0.2093': attribute type 1 has an invalid length.
[  211.766266][T12814] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2093'.
[  214.830600][T12852] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.858229][T12854] xt_TCPMSS: Only works on TCP SYN packets
[  214.865793][T12854] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  215.032435][T12867] rdma_rxe: rxe_newlink: failed to add lo
[  215.035330][T12868] rdma_rxe: rxe_newlink: failed to add lo
[  215.071694][T12864] bond23: (slave bridge14): Enslaving as an active interface with an up link
[  215.148337][T12875] netlink: 'syz.2.2106': attribute type 2 has an invalid length.
[  215.211352][T12879] xt_ecn: cannot match TCP bits for non-tcp packets
[  215.360097][T12891] netlink: 'syz.2.2112': attribute type 1 has an invalid length.
[  215.435953][T12898] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  215.441741][T12898] openvswitch: netlink: Key type 769 is out of range max 32
[  215.599890][T12910] netlink: 'syz.2.2118': attribute type 1 has an invalid length.
[  215.603701][T12910] __nla_validate_parse: 14 callbacks suppressed
[  215.603718][T12910] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2118'.
[  216.511679][T13000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.616036][T13006] bond35 (unregistering): Released all slaves
[  216.821840][T13014] netlink: 'syz.1.2144': attribute type 12 has an invalid length.
[  216.824698][T13014] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2144'.
[  216.830351][T13014] netlink: 'syz.1.2144': attribute type 39 has an invalid length.
[  216.899598][T13018] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2145'.
[  216.922125][T13018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2145'.
[  217.023738][T13018] netlink: 'syz.1.2145': attribute type 11 has an invalid length.
[  217.067466][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'.
[  217.070598][T13025] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2146'.
[  217.075941][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'.
[  217.079258][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'.
[  217.450198][T13046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2152'.
[  217.469878][T13048] nft_compat: unsupported protocol 0
[  217.531333][T13050] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2155'.
[  217.566767][T13052] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  217.585304][T13052] syzkaller0: entered promiscuous mode
[  217.587906][T13052] syzkaller0: entered allmulticast mode
[  218.086408][   T33] audit: type=1804 audit(1778604280.176:7): pid=13077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2165" name="/newroot/742/cgroup.controllers" dev="tmpfs" ino=3784 res=1 errno=0
[  218.106645][   T33] audit: type=1800 audit(1778604280.186:8): pid=13077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2165" name="cgroup.controllers" dev="tmpfs" ino=3784 res=0 errno=0
[  218.253410][   T33] audit: type=1804 audit(1778604280.346:9): pid=13091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2169" name="/newroot/745/cgroup.controllers" dev="tmpfs" ino=3802 res=1 errno=0
[  218.273374][   T33] audit: type=1800 audit(1778604280.346:10): pid=13091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2169" name="cgroup.controllers" dev="tmpfs" ino=3802 res=0 errno=0
[  221.141259][T13108] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  221.156733][T13108] syzkaller0: entered promiscuous mode
[  221.161941][T13108] syzkaller0: entered allmulticast mode
[  221.168869][T13112] netlink: 'syz.1.2175': attribute type 1 has an invalid length.
[  221.183741][T13112] netlink: 'syz.1.2175': attribute type 4 has an invalid length.
[  221.187049][T13112] __nla_validate_parse: 10 callbacks suppressed
[  221.187061][T13112] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2175'.
[  221.315686][T13113] ip6gretap0: entered promiscuous mode
[  221.327845][T13113] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.332377][T13113] 8021q: adding VLAN 0 to HW filter on device team0
[  221.340207][T13113] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.411487][T13113] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  221.418215][T13113] tipc: Resetting bearer <eth:hsr0>
[  221.420788][T13113] tipc: Resetting bearer <eth:hsr0>
[  221.426428][T13113] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  221.453985][T13119] netem: change failed
[  221.563288][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  221.564746][T13126] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  221.602521][T13128] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2181'.
[  221.613219][T13128] netlink: 'syz.1.2181': attribute type 9 has an invalid length.
[  221.621947][T13128] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2181'.
[  221.626187][T13128] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2181'.
[  221.628507][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2182'.
[  221.636977][T13133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2182'.
[  221.699269][T13141] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2185'.
[  221.770304][T13149] netlink: 'syz.1.2187': attribute type 9 has an invalid length.
[  221.783708][T13149] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.2187'.
[  221.833330][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  221.861846][T13154] xt_HMARK: proto mask must be zero with L3 mode
[  221.899362][T13159] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  221.947671][T13165] xt_l2tp: missing protocol rule (udp|l2tpip)
[  221.992443][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2194'.
[  222.010941][T13171] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  222.018992][T13171] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  222.307594][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2201'.
[  222.355233][T13200] lo speed is unknown, defaulting to 1000
[  222.363263][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  222.484625][   T98] block nbd1: Possible stuck request ffff888103b28600: control (read@0,1024B). Runtime 120 seconds
[  222.489574][   T98] block nbd1: Possible stuck request ffff888103b28800: control (read@1024,1024B). Runtime 120 seconds
[  222.499017][   T98] block nbd1: Possible stuck request ffff888103b28a00: control (read@2048,1024B). Runtime 120 seconds
[  222.504858][   T98] block nbd1: Possible stuck request ffff888103b28c00: control (read@3072,1024B). Runtime 120 seconds
[  222.539604][T13211] bond0 (unregistering): left promiscuous mode
[  222.542717][T13211] bond0 (unregistering): Released all slaves
[  222.677965][T13217] netlink: 'syz.2.2208': attribute type 16 has an invalid length.
[  222.681422][T13217] netlink: 'syz.2.2208': attribute type 17 has an invalid length.
[  222.700167][T13217] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  222.705814][T13217] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.172682][T13232] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  223.205338][T13237] netlink: 'syz.0.2215': attribute type 8 has an invalid length.
[  223.434789][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  223.463049][T13232] ipvlan0: left allmulticast mode
[  223.468011][T13232] veth0_vlan: left allmulticast mode
[  223.469939][T13232] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  223.472643][T13232] veth3: left promiscuous mode
[  223.476217][T13232] bond7: left promiscuous mode
[  223.477845][T13232] erspan1: left promiscuous mode
[  223.479940][T13232] bond7: left allmulticast mode
[  223.481659][T13232] erspan1: left allmulticast mode
[  223.484431][T13232] vlan2: left promiscuous mode
[  223.489971][T13232] bridge0: left promiscuous mode
[  223.545892][T13232] ip6tnl2: left allmulticast mode
[  223.559956][T13232] macvlan5: left promiscuous mode
[  223.569080][T13232] macvlan5: left allmulticast mode
[  223.584239][T13232] bond33: left promiscuous mode
[  223.608761][ T6171] lo speed is unknown, defaulting to 1000
[  223.611515][ T6171] sqz0: Port: 1 Link DOWN
[  223.658165][ T6167] syz1: Port: 1 Link DOWN
[  223.676820][T13241] syzkaller0: entered promiscuous mode
[  223.680787][T13241] syzkaller0: entered allmulticast mode
[  223.685814][ T5660] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.690681][ T5660] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.693700][ T5660] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.696649][ T5660] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.717571][ T6179] lo speed is unknown, defaulting to 1000
[  223.719173][ T5660] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.727733][ T5660] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.807995][ T5660] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.812688][ T5660] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.078078][T13278] netlink: 'syz.2.2222': attribute type 1 has an invalid length.
[  224.095986][T13278] bond0: entered promiscuous mode
[  224.097805][T13278] bond0: entered allmulticast mode
[  224.100142][T13278] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.113481][T13278] bridge16: entered promiscuous mode
[  224.116372][T13278] bridge16: entered allmulticast mode
[  224.119502][T13278] bond0: (slave bridge16): Enslaving as a backup interface with an up link
[  224.130899][T13282] bridge17: entered promiscuous mode
[  224.133940][T13282] bridge17: entered allmulticast mode
[  224.136522][T13282] bond0: (slave bridge17): Enslaving as a backup interface with a down link
[  224.149691][T13278] bridge18: entered promiscuous mode
[  224.151937][T13278] bridge18: entered allmulticast mode
[  224.154626][T13278] bond0: (slave bridge18): Enslaving as a backup interface with a down link
[  224.166261][T13282] bridge19: entered promiscuous mode
[  224.168228][T13282] bridge19: entered allmulticast mode
[  224.170378][T13282] bond0: (slave bridge19): Enslaving as a backup interface with a down link
[  225.856082][T13340] netlink: 'syz.1.2236': attribute type 29 has an invalid length.
[  225.927333][T13342] bond36: invalid ARP target 0.0.0.0 specified for addition
[  225.933551][T13342] bond36: option arp_ip_target: invalid value (0)
[  225.944041][T13342] bond36 (unregistering): Released all slaves
[  226.329799][  T134] block nbd0: Possible stuck request ffff8881037e0000: control (read@0,1024B). Runtime 60 seconds
[  226.335056][  T134] block nbd0: Possible stuck request ffff8881037e0200: control (read@1024,1024B). Runtime 60 seconds
[  226.340461][  T134] block nbd0: Possible stuck request ffff8881037e0400: control (read@2048,1024B). Runtime 60 seconds
[  226.345408][  T134] block nbd0: Possible stuck request ffff8881037e0600: control (read@3072,1024B). Runtime 60 seconds
[  226.418204][T13387] __nla_validate_parse: 21 callbacks suppressed
[  226.418223][T13387] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2252'.
[  226.553409][    C0] net_ratelimit: 5 callbacks suppressed
[  226.553428][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  227.124439][T13398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2255'.
[  227.574359][T13427] netlink: 'syz.1.2258': attribute type 1 has an invalid length.
[  227.593331][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  227.978953][T13451] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.209857][T13467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2266'.
[  228.218996][T13469] netlink: 'syz.0.2268': attribute type 1 has an invalid length.
[  228.223807][T13469] netlink: 1008 bytes leftover after parsing attributes in process `syz.0.2268'.
[  228.300913][T13472] can: request_module (can-proto-0) failed.
[  228.633321][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  229.221603][T13496] netlink: 'syz.1.2276': attribute type 1 has an invalid length.
[  229.454674][T13510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2279'.
[  229.497597][T13510] IPVS: ip_vs_edit_dest(): server weight less than zero
[  229.613196][T13520] netlink: 'syz.2.2282': attribute type 1 has an invalid length.
[  229.636563][T13520] 8021q: adding VLAN 0 to HW filter on device bond36
[  229.656841][T13522] veth19: entered allmulticast mode
[  229.666082][T13521] bond36 (unregistering): Released all slaves
[  229.673678][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  229.815112][T13526] netlink: 'syz.2.2283': attribute type 1 has an invalid length.
[  229.831302][T13526] 8021q: adding VLAN 0 to HW filter on device bond36
[  229.908311][T13531] netlink: 'syz.2.2285': attribute type 1 has an invalid length.
[  229.971262][T13532] ip6gre1: entered allmulticast mode
[  229.980453][T13532] team0: Device ip6gre1 is of different type
[  230.137049][T13534] netlink: 'syz.2.2286': attribute type 12 has an invalid length.
[  230.152812][T13534] syzkaller0: entered promiscuous mode
[  230.155782][T13534] syzkaller0: entered allmulticast mode
[  230.270762][T13538] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  230.288157][T13538] syzkaller0: entered promiscuous mode
[  230.290841][T13538] syzkaller0: entered allmulticast mode
[  230.378985][ T5057] udevd[5057]: worker [6370] /devices/virtual/block/nbd2 is taking a long time
[  230.383354][ T5057] udevd[5057]: worker [6369] /devices/virtual/block/nbd0 is taking a long time
[  230.714867][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  231.190337][T13553] openvswitch: netlink: Invalid VLAN frame
[  231.320523][T13561] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2295'.
[  231.358982][T13564] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  231.378820][T13564] syzkaller0: entered promiscuous mode
[  231.380683][T13564] syzkaller0: entered allmulticast mode
[  231.440357][T13568] rdma_op ffff88819ffd69f0 conn xmit_rdma 0000000000000000
[  231.510081][T13577] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2301'.
[  231.753293][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  231.773562][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2310'.
[  231.809887][T13611] bond36: entered promiscuous mode
[  231.930340][T13621] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2315'.
[  231.934940][T13621] openvswitch: netlink: Flow key attr not present in new flow.
[  231.979562][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2314'.
[  231.995378][T13626] netlink: 'syz.0.2316': attribute type 2 has an invalid length.
[  231.999721][T13626] netlink: 'syz.0.2316': attribute type 2 has an invalid length.
[  232.009913][T13626] netlink: 'syz.0.2316': attribute type 2 has an invalid length.
[  232.018844][T13626] netlink: 'syz.0.2316': attribute type 2 has an invalid length.
[  232.092957][T13630] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2317'.
[  232.150294][T13638] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2319'.
[  232.220626][T13650] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.227613][T13650] syzkaller0: entered promiscuous mode
[  232.236573][T13650] syzkaller0: entered allmulticast mode
[  232.268577][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2322'.
[  232.275318][T13653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2323'.
[  232.282088][T13655] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2324'.
[  232.296244][T13650] tipc: Resetting bearer <eth:syzkaller0>
[  232.304362][T13655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2324'.
[  232.312479][T13649] tipc: Resetting bearer <eth:syzkaller0>
[  232.333845][T13649] tipc: Disabling bearer <eth:syzkaller0>
[  232.432712][T13662] xfrm0: left allmulticast mode
[  232.440417][T13662] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  232.687210][T13690] unsupported nlmsg_type 40
[  232.766079][T13700] bond25: entered promiscuous mode
[  232.769070][T13700] 8021q: adding VLAN 0 to HW filter on device bond25
[  232.787859][T13700] vlan3: entered allmulticast mode
[  232.789910][T13700] bond25: entered allmulticast mode
[  232.793344][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  233.008887][T13723] bond26: entered allmulticast mode
[  233.014847][T13723] macvlan0: entered promiscuous mode
[  233.016785][T13723] macvlan0: entered allmulticast mode
[  233.019292][T13723] bond26: entered promiscuous mode
[  233.021611][T13723] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  233.034611][T13723] bond26: left promiscuous mode
[  233.158912][T13733] sctp: [Deprecated]: syz.0.2345 (pid 13733) Use of int in maxseg socket option.
[  233.158912][T13733] Use struct sctp_assoc_value instead
[  233.209383][T13735] pim6reg: entered allmulticast mode
[  233.212937][T13735] pim6reg: left allmulticast mode
[  233.421176][T13740] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  233.424055][T13740] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  233.426623][T13740] veth0_virt_wifi: entered allmulticast mode
[  233.429649][T13740] veth0_virt_wifi: entered promiscuous mode
[  233.432169][T13740] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  233.434896][T13740] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  233.774539][T13757] validate_nla: 5 callbacks suppressed
[  233.774605][T13757] netlink: 'syz.0.2354': attribute type 21 has an invalid length.
[  233.833281][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  233.852624][T13760] syzkaller0: entered promiscuous mode
[  233.858375][T13760] syzkaller0: entered allmulticast mode
[  233.893720][T13769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  233.896211][T13769] IPv6: NLM_F_CREATE should be set when creating new route
[  234.128063][T13791] netlink: 'syz.1.2365': attribute type 1 has an invalid length.
[  234.131392][T13791] netlink: 'syz.1.2365': attribute type 2 has an invalid length.
[  234.279937][T13804] lo speed is unknown, defaulting to 1000
[  234.426197][T13805] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  234.434907][T13805] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  234.873326][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  235.300966][T13870] netlink: 'syz.1.2390': attribute type 10 has an invalid length.
[  235.364738][T13873] netlink: 'syz.1.2390': attribute type 10 has an invalid length.
[  235.566560][T13870] nbd3: detected capacity change from 0 to 63
[  235.575987][ T7321] block nbd3: Receive control failed (result -104)
[  235.580370][   T54] block nbd3: Receive control failed (result -32)
[  235.761104][T13884] tipc: New replicast peer: 172.20.20.170
[  235.764385][T13884] tipc: Enabled bearer <udp:syz2>, priority 10
[  235.914493][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  236.118742][T13898] pim6reg: entered allmulticast mode
[  236.122573][T13898] pim6reg: left allmulticast mode
[  236.689603][T13913] netlink: 'syz.1.2404': attribute type 1 has an invalid length.
[  236.793062][T13941] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.797251][T13941] netlink: 'syz.0.2412': attribute type 15 has an invalid length.
[  236.799855][T13941] __nla_validate_parse: 27 callbacks suppressed
[  236.799870][T13941] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2412'.
[  236.824907][T13943] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  236.884629][ T5668] tipc: Node number set to 4186890327
[  236.953283][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  237.017860][T13964] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  237.184609][T13972] lo speed is unknown, defaulting to 1000
[  237.657709][T13994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2427'.
[  237.921751][T14013] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2433'.
[  237.927116][T14013] netlink: 'syz.2.2433': attribute type 10 has an invalid length.
[  237.990348][T14016] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2431'.
[  238.003353][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  238.110196][T14020] bond37 (unregistering): Released all slaves
[  238.445450][T14028] 8021q: adding VLAN 0 to HW filter on device team0
[  238.485658][T14028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  238.489926][T14028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  238.495759][T14028] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  238.500852][ T6168] lo speed is unknown, defaulting to 1000
[  238.504074][ T6168] sqz0: Port: 1 Link ACTIVE
[  238.513241][T10753] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  238.515746][T10753] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  238.523639][ T6168] lo speed is unknown, defaulting to 1000
[  238.526283][   T24] syz1: Port: 1 Link ACTIVE
[  238.960185][T14061] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2446'.
[  239.033308][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  239.578858][T14067] netlink: 'syz.1.2447': attribute type 1 has an invalid length.
[  239.596066][T14067] 8021q: adding VLAN 0 to HW filter on device bond37
[  239.614227][T14067] bond37: (slave veth15): Enslaving as an active interface with a down link
[  239.619944][T14067] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2447'.
[  239.644939][T14070] rdma_rxe: rxe_newlink: failed to add lo
[  239.651351][T14070] xt_hashlimit: size too large, truncated to 1048576
[  240.021861][T14090] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  240.073324][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  240.250113][T14099] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  240.253777][T14099] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  240.349247][T14102] sctp: [Deprecated]: syz.2.2458 (pid 14102) Use of struct sctp_assoc_value in delayed_ack socket option.
[  240.349247][T14102] Use struct sctp_sack_info instead
[  240.462573][T14104] openvswitch: netlink: Multiple metadata blocks provided
[  240.509881][T14108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2460'.
[  240.979134][T14149] netem: change failed
[  241.694893][   T33] audit: type=1804 audit(1778604303.776:11): pid=14154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2475" name="/newroot/841/memory.events" dev="tmpfs" ino=4292 res=1 errno=0
[  241.705993][   T33] audit: type=1800 audit(1778604303.796:12): pid=14154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2475" name="memory.events" dev="tmpfs" ino=4292 res=0 errno=0
[  241.716360][   T33] audit: type=1804 audit(1778604303.806:13): pid=14154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2475" name="/newroot/841/memory.events" dev="tmpfs" ino=4292 res=1 errno=0
[  241.719625][T14156] dvmrp8: entered allmulticast mode
[  241.786099][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2478'.
[  241.889298][T14170] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  241.893602][T14170] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  242.154869][    C0] net_ratelimit: 2 callbacks suppressed
[  242.154887][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  242.817801][T14196] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2487'.
[  242.824709][T14196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2487'.
[  243.194769][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  243.814736][T14212] netlink: 'syz.0.2493': attribute type 29 has an invalid length.
[  243.834599][T14212] netlink: 'syz.0.2493': attribute type 29 has an invalid length.
[  243.845839][T14212] netlink: 'syz.0.2493': attribute type 32 has an invalid length.
[  243.848454][T14212] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2493'.
[  243.852824][T14212] netlink: 'syz.0.2493': attribute type 3 has an invalid length.
[  243.855711][T14212] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2493'.
[  244.233878][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  244.489537][T14257] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2507'.
[  244.557177][T14260] netlink: ct family unspecified
[  244.558928][T14260] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.708078][T14270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2512'.
[  244.719236][T14270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2512'.
[  244.801295][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2514'.
[  244.810429][T14275] bond0: entered promiscuous mode
[  244.814369][T14275] batadv0: entered promiscuous mode
[  244.816542][T14275] debugfs: 'hsr1' already exists in 'hsr'
[  244.818638][T14275] Cannot create hsr debugfs directory
[  244.927981][T14280] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2516'.
[  245.273392][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  245.292192][T14310] pimreg: entered allmulticast mode
[  245.296636][T14309] pimreg: left allmulticast mode
[  245.364855][T14315] netem: change failed
[  245.490867][T14328] xt_CT: You must specify a L4 protocol and not use inversions on it
[  245.491748][T14328] netlink: 'syz.2.2532': attribute type 21 has an invalid length.
[  245.657802][T14340] lo speed is unknown, defaulting to 1000
[  246.220781][T14371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2544'.
[  246.313375][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  246.548819][T14390] netlink: 'syz.2.2550': attribute type 1 has an invalid length.
[  246.707994][T14402] xt_policy: neither incoming nor outgoing policy selected
[  246.711577][T14402] netlink: 'syz.1.2556': attribute type 1 has an invalid length.
[  246.738134][T14404] netlink: 'syz.0.2557': attribute type 6 has an invalid length.
[  246.744451][T14404] netlink: 'syz.0.2557': attribute type 7 has an invalid length.
[  246.752576][T14404] netlink: 'syz.0.2557': attribute type 8 has an invalid length.
[  246.758115][T14404] netlink: 'syz.0.2557': attribute type 10 has an invalid length.
[  246.980549][T14415] netlink: 'syz.2.2560': attribute type 2 has an invalid length.
[  246.986705][T14415] netlink: 'syz.2.2560': attribute type 2 has an invalid length.
[  247.382291][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  247.587721][T14457] netlink: 'syz.0.2574': attribute type 11 has an invalid length.
[  247.632075][T14464] 8021q: adding VLAN 0 to HW filter on device bond38
[  247.637505][T14464] bond38: entered promiscuous mode
[  247.639813][T14464] bond38: entered allmulticast mode
[  247.662060][T14458] lo speed is unknown, defaulting to 1000
[  247.709801][T14472] syzkaller0: entered promiscuous mode
[  247.718867][T14472] syzkaller0: entered allmulticast mode
[  247.761549][T14477] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  247.799178][T14480] IPVS: length: 35 != 24
[  247.838095][   T33] audit: type=1804 audit(1778604309.926:14): pid=14486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2582" name="/newroot/830/cgroup.controllers" dev="tmpfs" ino=4242 res=1 errno=0
[  247.869696][   T33] audit: type=1800 audit(1778604309.926:15): pid=14486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2582" name="cgroup.controllers" dev="tmpfs" ino=4242 res=0 errno=0
[  247.912344][T14470] lo speed is unknown, defaulting to 1000
[  248.141055][T14507] __nla_validate_parse: 14 callbacks suppressed
[  248.141068][T14507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2586'.
[  248.395093][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  249.433314][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  250.473347][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  251.001920][T14503] kthread_run failed with err -4
[  251.388384][T14542] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2590'.
[  251.426196][T14542] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2590'.
[  251.523428][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  251.542435][T14552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2592'.
[  251.548262][T14552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2592'.
[  251.551150][T14552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2592'.
[  251.555314][T14552] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2592'.
[  251.578994][T14553] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  251.582105][T14553] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  251.927173][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2596'.
[  251.959386][T14559] infiniband syz0: set down
[  251.960992][T14559] infiniband syz0: added bond0
[  251.970399][T14559] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  251.975550][T14559] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  251.980747][T14559] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  251.992017][T14559] RDS/IB: syz0: added
[  251.993606][T14559] smc: adding ib device syz0 with port count 1
[  251.996450][T14559] smc:    ib device syz0 port 1 has no pnetid
[  252.332373][T14566] validate_nla: 1 callbacks suppressed
[  252.332384][T14566] netlink: 'syz.2.2598': attribute type 1 has an invalid length.
[  252.355068][T14566] 8021q: adding VLAN 0 to HW filter on device bond37
[  252.376920][T14566] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.415791][T14569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2599'.
[  252.420100][T14569] nbd: illegal input index -1113835520
[  252.429652][T14576] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2601'.
[  252.432872][T14576] netlink: 'syz.2.2601': attribute type 1 has an invalid length.
[  252.481798][T14580] xt_hashlimit: size too large, truncated to 1048576
[  252.554577][   T98] block nbd1: Possible stuck request ffff888103b28600: control (read@0,1024B). Runtime 150 seconds
[  252.558735][   T98] block nbd1: Possible stuck request ffff888103b28800: control (read@1024,1024B). Runtime 150 seconds
[  252.562705][   T98] block nbd1: Possible stuck request ffff888103b28a00: control (read@2048,1024B). Runtime 150 seconds
[  252.563890][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  252.569817][   T98] block nbd1: Possible stuck request ffff888103b28c00: control (read@3072,1024B). Runtime 150 seconds
[  252.610187][T14580] netlink: 'syz.1.2602': attribute type 5 has an invalid length.
[  252.638291][T14587] team_slave_0: entered allmulticast mode
[  252.902420][T14615] sctp: [Deprecated]: syz.0.2611 (pid 14615) Use of int in maxseg socket option.
[  252.902420][T14615] Use struct sctp_assoc_value instead
[  253.154586][T14635] IPv6: syztnl1: Disabled Multicast RS
[  253.166652][T14635] __nla_validate_parse: 5 callbacks suppressed
[  253.166666][T14635] netlink: 280 bytes leftover after parsing attributes in process `syz.0.2616'.
[  253.509528][T14644] vxcan0: entered allmulticast mode
[  253.593266][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  254.633349][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  255.673249][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  256.186382][T14658] tipc: Started in network mode
[  256.190778][T14658] tipc: Node identity ac14140f, cluster identity 4711
[  256.196306][T14658] tipc: New replicast peer: 255.255.255.255
[  256.200780][T14658] tipc: Enabled bearer <udp:syz2>, priority 10
[  256.226707][T14658] geneve3: entered promiscuous mode
[  256.233343][T14658] geneve3: entered allmulticast mode
[  256.319836][T14674] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2625'.
[  256.396528][  T134] block nbd0: Possible stuck request ffff8881037e0000: control (read@0,1024B). Runtime 90 seconds
[  256.399877][  T134] block nbd0: Possible stuck request ffff8881037e0200: control (read@1024,1024B). Runtime 90 seconds
[  256.401428][T14685] netlink: 'syz.2.2628': attribute type 1 has an invalid length.
[  256.403498][  T134] block nbd0: Possible stuck request ffff8881037e0400: control (read@2048,1024B). Runtime 90 seconds
[  256.403514][  T134] block nbd0: Possible stuck request ffff8881037e0600: control (read@3072,1024B). Runtime 90 seconds
[  256.461040][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2625'.
[  256.464693][T14685] netlink: 'syz.2.2628': attribute type 2 has an invalid length.
[  256.631991][T14697] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  256.636778][T14697] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  256.672753][T14699] bridge0: entered allmulticast mode
[  256.681378][T14699] bridge0: left allmulticast mode
[  256.713595][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  256.865554][T14720] syzkaller0: entered promiscuous mode
[  256.867432][T14720] syzkaller0: entered allmulticast mode
[  257.105751][T14726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2640'.
[  257.323612][ T6168] tipc: Node number set to 2886997007
[  257.358045][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2646'.
[  257.468612][T14750] ipt_ECN: cannot use operation on non-tcp rule
[  257.501287][T14753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2649'.
[  257.505150][T14753] netlink: 'syz.1.2649': attribute type 21 has an invalid length.
[  257.507878][T14753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2649'.
[  257.511282][T14753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2649'.
[  257.514784][T14753] netlink: 'syz.1.2649': attribute type 21 has an invalid length.
[  257.517454][T14753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2649'.
[  257.604742][T14762] tipc: Can't bind to reserved service type 0
[  257.649516][T14772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2657'.
[  257.652588][T14772] netlink: 'syz.1.2657': attribute type 7 has an invalid length.
[  257.658089][T14772] netlink: 'syz.1.2657': attribute type 8 has an invalid length.
[  257.728012][T14771] lo speed is unknown, defaulting to 1000
[  257.755893][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  257.804079][T14787] bridge16: the hash_elasticity option has been deprecated and is always 16
[  257.807743][T14787] bridge16: entered allmulticast mode
[  257.842392][T14791] netlink: 'syz.1.2663': attribute type 10 has an invalid length.
[  257.852110][T14791] 8021q: adding VLAN 0 to HW filter on device team0
[  258.297733][T14827] lo speed is unknown, defaulting to 1000
[  258.336659][T14831] __nla_validate_parse: 2 callbacks suppressed
[  258.336675][T14831] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2672'.
[  258.375004][T14837] netlink: 'syz.2.2673': attribute type 1 has an invalid length.
[  258.378016][T14837] netlink: 'syz.2.2673': attribute type 4 has an invalid length.
[  258.380778][T14837] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2673'.
[  258.500277][T14844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2675'.
[  258.535901][T14844] openvswitch: : Dropping previously announced user features
[  258.559212][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2675'.
[  258.563707][T14842] openvswitch: : Dropping previously announced user features
[  258.793506][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  258.841775][T14852] netlink: 'syz.2.2679': attribute type 2 has an invalid length.
[  258.845199][T14852] netlink: 'syz.2.2679': attribute type 2 has an invalid length.
[  258.889255][T14860] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2680'.
[  258.896609][T14860] netlink: 'syz.1.2680': attribute type 12 has an invalid length.
[  258.905210][T14860] netlink: 91 bytes leftover after parsing attributes in process `syz.1.2680'.
[  259.054971][T14877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2684'.
[  259.074763][T14879] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  259.082221][T14879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  259.565363][T14926] bond28: (slave bridge15): making interface the new active one
[  259.570718][T14926] bond28: (slave bridge15): Enslaving as an active interface with an up link
[  259.592167][T14926] bond28: (slave gretap3): Enslaving as an active interface with an up link
[  259.647093][T14928] IPVS: length: 187 != 8
[  259.658118][T14928] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  259.672061][T14928] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  259.843246][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  260.035203][T14964] lo speed is unknown, defaulting to 1000
[  260.481375][T14989] 8021q: adding VLAN 0 to HW filter on device bond30
[  260.491523][T14989] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.540020][T14994] netlink: 496 bytes leftover after parsing attributes in process `syz.0.2703'.
[  260.575052][T14997] vlan0: entered promiscuous mode
[  260.654731][T14999] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  260.657289][T14999] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  260.660656][T14999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'.
[  260.669812][T14999] ip6t_REJECT: ECHOREPLY is not supported
[  260.779601][T15009] workqueue: Failed to create a rescuer kthread for wq "nfc9_nci_rx_wq": -EINTR
[  260.888538][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  261.417437][T15061] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2714'.
[  261.913286][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  262.963315][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  263.438435][T15099] __nla_validate_parse: 2 callbacks suppressed
[  263.438445][T15099] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2725'.
[  263.630936][T15113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2731'.
[  263.839357][T15124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2735'.
[  263.972073][T15132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2736'.
[  263.993219][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  264.025339][   T54] block nbd4: Receive control failed (result -1)
[  264.057830][T15132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2736'.
[  264.113886][T15128] 8021q: adding VLAN 0 to HW filter on device bond38
[  264.148835][T15126] syzkaller0: entered promiscuous mode
[  264.150739][T15126] syzkaller0: entered allmulticast mode
[  264.451352][T15147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2741'.
[  264.845168][T15150] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2742'.
[  264.854642][T15150] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2742'.
[  265.039349][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  266.033448][  T134] block nbd3: Connection timed out, retrying (0/2 alive)
[  266.036623][  T134] block nbd3: Connection timed out, retrying (0/2 alive)
[  266.039577][  T134] block nbd3: Connection timed out, retrying (0/2 alive)
[  266.042337][  T134] block nbd3: Connection timed out, retrying (0/2 alive)
[  266.047839][  T134] block nbd3: Dead connection, failed to find a fallback
[  266.052284][  T134] block nbd3: shutting down sockets
[  266.056972][  T134] blk_print_req_error: 138 callbacks suppressed
[  266.056988][  T134] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  266.073657][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  266.085118][  T134] buffer_io_error: 138 callbacks suppressed
[  266.085137][  T134] Buffer I/O error on dev nbd3, logical block 3, async page read
[  266.094631][  T134] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  266.098285][  T134] Buffer I/O error on dev nbd3, logical block 2, async page read
[  266.101405][  T134] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  266.105256][  T134] Buffer I/O error on dev nbd3, logical block 1, async page read
[  266.108495][  T134] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  266.112353][  T134] Buffer I/O error on dev nbd3, logical block 0, async page read
[  266.129678][T11222] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  266.135085][T11222] Buffer I/O error on dev nbd3, logical block 0, async page read
[  266.143393][T11222] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  266.148701][T11222] Buffer I/O error on dev nbd3, logical block 1, async page read
[  266.163493][T11222] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  266.166681][T11222] Buffer I/O error on dev nbd3, logical block 2, async page read
[  266.169872][T11222] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  266.183282][T11222] Buffer I/O error on dev nbd3, logical block 3, async page read
[  266.186438][T11222] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  266.189966][T11222] Buffer I/O error on dev nbd3, logical block 0, async page read
[  266.203376][T11222] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  266.207234][T11222] Buffer I/O error on dev nbd3, logical block 1, async page read
[  266.212466][T11222] ldm_validate_partition_table(): Disk read failed.
[  266.236369][T11222] Dev nbd3: unable to read RDB block 0
[  266.257764][T11222]  nbd3: unable to read partition table
[  266.354538][T11222] ldm_validate_partition_table(): Disk read failed.
[  266.372562][T11222] Dev nbd3: unable to read RDB block 0
[  266.401459][T11222]  nbd3: unable to read partition table
[  267.113464][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  267.289760][T15159] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1280) !
[  267.375619][T15162] validate_nla: 5 callbacks suppressed
[  267.375631][T15162] netlink: 'syz.2.2745': attribute type 1 has an invalid length.
[  267.407518][T15166] xt_l2tp: v2 sid > 0xffff: 8388608
[  267.425640][T15162] 8021q: adding VLAN 0 to HW filter on device bond39
[  267.433440][T15165] netlink: 'syz.1.2747': attribute type 10 has an invalid length.
[  267.439547][T15165] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2747'.
[  267.480546][T15162] sctp: [Deprecated]: syz.2.2745 (pid 15162) Use of int in maxseg socket option.
[  267.480546][T15162] Use struct sctp_assoc_value instead
[  267.518713][T15176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2749'.
[  267.525534][T15176] vlan0: entered promiscuous mode
[  267.527480][T15176] bridge0: entered promiscuous mode
[  267.739131][T15187] netlink: 'syz.0.2754': attribute type 21 has an invalid length.
[  267.764228][T15187] netlink: 'syz.0.2754': attribute type 4 has an invalid length.
[  267.773449][T15187] netlink: 'syz.0.2754': attribute type 5 has an invalid length.
[  267.959475][T15203] netlink: 'syz.2.2757': attribute type 3 has an invalid length.
[  268.108273][T15217] lo speed is unknown, defaulting to 1000
[  268.163549][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  268.277511][T15223] bond39: (slave bond_slave_1): Device is not bonding slave
[  268.283218][T15223] bond39: option active_slave: invalid value (bond_slave_1)
[  268.290410][T15223] bond39 (unregistering): Released all slaves
[  268.389151][T15226] gretap0: entered promiscuous mode
[  268.406529][T15226] vlan3: entered promiscuous mode
[  268.700474][T15239] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  268.710986][T15237] syzkaller0: entered promiscuous mode
[  268.720789][T15237] syzkaller0: entered allmulticast mode
[  268.823977][T15238] __nla_validate_parse: 7 callbacks suppressed
[  268.823998][T15238] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2766'.
[  268.842399][T15237] tipc: Resetting bearer <eth:syzkaller0>
[  268.850115][T15236] tipc: Resetting bearer <eth:syzkaller0>
[  268.904854][T15236] tipc: Disabling bearer <eth:syzkaller0>
[  268.972102][T15243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2767'.
[  269.097980][T15245] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2768'.
[  269.143895][T15245] 
[  269.144779][T15245] ======================================================
[  269.147134][T15245] WARNING: possible circular locking dependency detected
[  269.149302][T15245] syzkaller #0 Not tainted
[  269.150842][T15245] ------------------------------------------------------
[  269.153269][T15245] syz.1.2768/15245 is trying to acquire lock:
[  269.155754][T15245] ffff8881012b4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x44/0x80
[  269.159310][T15245] 
[  269.159310][T15245] but task is already holding lock:
[  269.162205][T15245] ffff8881012b4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80
[  269.166406][T15245] 
[  269.166406][T15245] which lock already depends on the new lock.
[  269.166406][T15245] 
[  269.171422][T15245] 
[  269.171422][T15245] the existing dependency chain (in reverse order) is:
[  269.175137][T15245] 
[  269.175137][T15245] -> #11 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  269.178558][T15245]        down_read+0x47/0x2e0
[  269.180510][T15245]        kernfs_remove_by_name_ns+0x3f/0x140
[  269.183431][T15245]        internal_create_group+0x587/0x1180
[  269.186356][T15245]        sysfs_update_groups+0x60/0x130
[  269.188810][T15245]        pmu_dev_alloc+0x29b/0x300
[  269.190909][T15245]        perf_event_sysfs_init+0x76/0x100
[  269.193187][T15245]        do_one_initcall+0x250/0x870
[  269.195340][T15245]        do_initcall_level+0x104/0x190
[  269.197517][T15245]        do_initcalls+0x59/0xa0
[  269.199310][T15245]        kernel_init_freeable+0x2a6/0x3e0
[  269.201613][T15245]        kernel_init+0x1d/0x1d0
[  269.203525][T15245]        ret_from_fork+0x514/0xb70
[  269.205499][T15245]        ret_from_fork_asm+0x1a/0x30
[  269.207585][T15245] 
[  269.207585][T15245] -> #10 (pmus_lock){+.+.}-{4:4}:
[  269.210492][T15245]        __mutex_lock+0x1a3/0x1550
[  269.212753][T15245]        perf_event_init_cpu+0x1df/0x7c0
[  269.215248][T15245]        cpuhp_invoke_callback+0x445/0x860
[  269.217680][T15245]        cpuhp_thread_fun+0x36b/0x780
[  269.219774][T15245]        smpboot_thread_fn+0x541/0xa50
[  269.222069][T15245]        kthread+0x388/0x470
[  269.224185][T15245]        ret_from_fork+0x514/0xb70
[  269.226575][T15245]        ret_from_fork_asm+0x1a/0x30
[  269.228886][T15245] 
[  269.228886][T15245] -> #9 (cpuhp_state-up){+.+.}-{0:0}:
[  269.232352][T15245]        cpuhp_thread_fun+0x127/0x780
[  269.234464][T15245]        smpboot_thread_fn+0x541/0xa50
[  269.236737][T15245]        kthread+0x388/0x470
[  269.239289][T15245]        ret_from_fork+0x514/0xb70
[  269.241795][T15245]        ret_from_fork_asm+0x1a/0x30
[  269.244055][T15245] 
[  269.244055][T15245] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  269.247064][T15245]        cpus_read_lock+0x42/0x160
[  269.249208][T15245]        static_key_slow_inc+0x12/0x30
[  269.251488][T15245]        udp_tunnel_encap_enable+0x86/0xb0
[  269.253877][T15245]        udp_lib_setsockopt+0x2da/0x6b0
[  269.256290][T15245]        udpv6_setsockopt+0x67/0xb0
[  269.258260][T15245]        do_sock_setsockopt+0x17c/0x1b0
[  269.260070][T15245]        __x64_sys_setsockopt+0x13d/0x1b0
[  269.262015][T15245]        do_syscall_64+0x15f/0xf80
[  269.263788][T15245]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.266214][T15245] 
[  269.266214][T15245] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  269.269096][T15245]        lock_sock_nested+0x41/0x100
[  269.270981][T15245]        inet_shutdown+0x6a/0x390
[  269.272627][T15245]        nbd_mark_nsock_dead+0x2e9/0x560
[  269.274525][T15245]        recv_work+0x1c2e/0x1d40
[  269.276174][T15245]        process_scheduled_works+0xb5d/0x1860
[  269.278277][T15245]        worker_thread+0xa53/0xfc0
[  269.280406][T15245]        kthread+0x388/0x470
[  269.282523][T15245]        ret_from_fork+0x514/0xb70
[  269.284295][T15245]        ret_from_fork_asm+0x1a/0x30
[  269.285874][T15245] 
[  269.285874][T15245] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  269.288167][T15245]        __mutex_lock+0x1a3/0x1550
[  269.290087][T15245]        nbd_queue_rq+0x37b/0x1100
[  269.291868][T15245]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  269.294211][T15245]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  269.296777][T15245]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  269.298874][T15245]        blk_mq_run_hw_queue+0x348/0x4f0
[  269.300671][T15245]        blk_mq_dispatch_list+0xd16/0xe10
[  269.302568][T15245]        blk_mq_flush_plug_list+0x48d/0x570
[  269.304588][T15245]        __blk_flush_plug+0x3ed/0x4d0
[  269.306341][T15245]        __submit_bio+0x28d/0x580
[  269.308007][T15245]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  269.310392][T15245]        block_read_full_folio+0x599/0x830
[  269.312731][T15245]        filemap_read_folio+0x137/0x3b0
[  269.314864][T15245]        do_read_cache_folio+0x358/0x590
[  269.316883][T15245]        read_part_sector+0xb6/0x2b0
[  269.318650][T15245]        adfspart_check_ICS+0xb1/0x960
[  269.320357][T15245]        bdev_disk_changed+0x817/0x1770
[  269.322274][T15245]        blkdev_get_whole+0x380/0x510
[  269.324373][T15245]        bdev_open+0x31e/0xd30
[  269.326528][T15245]        blkdev_open+0x470/0x610
[  269.328548][T15245]        do_dentry_open+0x785/0x14e0
[  269.330641][T15245]        vfs_open+0x3b/0x340
[  269.332410][T15245]        path_openat+0x2e08/0x3860
[  269.334292][T15245]        do_file_open+0x23e/0x4a0
[  269.336082][T15245]        do_sys_openat2+0x113/0x200
[  269.337702][T15245]        __x64_sys_openat+0x138/0x170
[  269.339290][T15245]        do_syscall_64+0x15f/0xf80
[  269.340809][T15245]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.342989][T15245] 
[  269.342989][T15245] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  269.345382][T15245]        __mutex_lock+0x1a3/0x1550
[  269.347335][T15245]        nbd_queue_rq+0xc6/0x1100
[  269.349019][T15245]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  269.351109][T15245]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  269.353340][T15245]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  269.355561][T15245]        blk_mq_run_hw_queue+0x348/0x4f0
[  269.357921][T15245]        blk_mq_dispatch_list+0xd16/0xe10
[  269.360211][T15245]        blk_mq_flush_plug_list+0x48d/0x570
[  269.362238][T15245]        __blk_flush_plug+0x3ed/0x4d0
[  269.364331][T15245]        __submit_bio+0x28d/0x580
[  269.366230][T15245]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  269.369090][T15245]        block_read_full_folio+0x599/0x830
[  269.371532][T15245]        filemap_read_folio+0x137/0x3b0
[  269.373574][T15245]        do_read_cache_folio+0x358/0x590
[  269.375596][T15245]        read_part_sector+0xb6/0x2b0
[  269.377855][T15245]        adfspart_check_ICS+0xb1/0x960
[  269.380359][T15245]        bdev_disk_changed+0x817/0x1770
[  269.382459][T15245]        blkdev_get_whole+0x380/0x510
[  269.384599][T15245]        bdev_open+0x31e/0xd30
[  269.386686][T15245]        blkdev_open+0x470/0x610
[  269.388474][T15245]        do_dentry_open+0x785/0x14e0
[  269.390512][T15245]        vfs_open+0x3b/0x340
[  269.392874][T15245]        path_openat+0x2e08/0x3860
[  269.395156][T15245]        do_file_open+0x23e/0x4a0
[  269.397146][T15245]        do_sys_openat2+0x113/0x200
[  269.398850][T15245]        __x64_sys_openat+0x138/0x170
[  269.400643][T15245]        do_syscall_64+0x15f/0xf80
[  269.402353][T15245]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.404698][T15245] 
[  269.404698][T15245] -> #4 (set->srcu){.+.+}-{0:0}:
[  269.408341][T15245]        __synchronize_srcu+0xca/0x300
[  269.410646][T15245]        elevator_switch+0x1e8/0x7a0
[  269.413380][T15245]        elevator_change+0x2cc/0x450
[  269.415706][T15245]        elevator_set_default+0x36c/0x430
[  269.418059][T15245]        blk_register_queue+0x3e9/0x4e0
[  269.419867][T15245]        __add_disk+0x677/0xd50
[  269.421462][T15245]        add_disk_fwnode+0xfb/0x480
[  269.423017][T15245]        nbd_dev_add+0x72c/0xb50
[  269.424547][T15245]        nbd_init+0x168/0x1f0
[  269.426011][T15245]        do_one_initcall+0x250/0x870
[  269.427670][T15245]        do_initcall_level+0x104/0x190
[  269.429892][T15245]        do_initcalls+0x59/0xa0
[  269.432390][T15245]        kernel_init_freeable+0x2a6/0x3e0
[  269.434458][T15245]        kernel_init+0x1d/0x1d0
[  269.436204][T15245]        ret_from_fork+0x514/0xb70
[  269.437857][T15245]        ret_from_fork_asm+0x1a/0x30
[  269.439567][T15245] 
[  269.439567][T15245] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  269.442061][T15245]        __mutex_lock+0x1a3/0x1550
[  269.444051][T15245]        elevator_change+0x1b3/0x450
[  269.446166][T15245]        elevator_set_none+0xb5/0x140
[  269.448200][T15245]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  269.450221][T15245]        nbd_start_device+0x17f/0xb10
[  269.451965][T15245]        nbd_genl_connect+0x165b/0x1cf0
[  269.453725][T15245]        genl_family_rcv_msg_doit+0x22a/0x330
[  269.455655][T15245]        genl_rcv_msg+0x61c/0x7a0
[  269.457284][T15245]        netlink_rcv_skb+0x232/0x4b0
[  269.458934][T15245]        genl_rcv+0x28/0x40
[  269.460377][T15245]        netlink_unicast+0x75c/0x8e0
[  269.462041][T15245]        netlink_sendmsg+0x813/0xb40
[  269.463697][T15245]        ____sys_sendmsg+0x972/0x9f0
[  269.465361][T15245]        ___sys_sendmsg+0x2a5/0x360
[  269.467051][T15245]        __x64_sys_sendmsg+0x1bd/0x2a0
[  269.469069][T15245]        do_syscall_64+0x15f/0xf80
[  269.470716][T15245]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.472761][T15245] 
[  269.472761][T15245] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  269.475612][T15245]        blk_alloc_queue+0x546/0x680
[  269.477508][T15245]        __blk_mq_alloc_disk+0x197/0x390
[  269.479376][T15245]        nbd_dev_add+0x499/0xb50
[  269.480933][T15245]        nbd_init+0x168/0x1f0
[  269.482800][T15245]        do_one_initcall+0x250/0x870
[  269.484991][T15245]        do_initcall_level+0x104/0x190
[  269.487266][T15245]        do_initcalls+0x59/0xa0
[  269.489301][T15245]        kernel_init_freeable+0x2a6/0x3e0
[  269.491789][T15245]        kernel_init+0x1d/0x1d0
[  269.493935][T15245]        ret_from_fork+0x514/0xb70
[  269.496212][T15245]        ret_from_fork_asm+0x1a/0x30
[  269.498323][T15245] 
[  269.498323][T15245] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  269.501321][T15245]        fs_reclaim_acquire+0x71/0x100
[  269.503619][T15245]        kmem_cache_alloc_lru_noprof+0x45/0x640
[  269.506573][T15245]        alloc_inode+0xb8/0x1b0
[  269.508911][T15245]        iget_locked+0x131/0x6a0
[  269.511285][T15245]        kernfs_get_inode+0x4f/0x780
[  269.513704][T15245]        kernfs_get_tree+0x5cd/0x980
[  269.515824][T15245]        sysfs_get_tree+0x46/0x110
[  269.517974][T15245]        vfs_get_tree+0x92/0x2a0
[  269.520139][T15245]        do_new_mount+0x341/0xd30
[  269.522556][T15245]        __se_sys_mount+0x31d/0x420
[  269.525226][T15245]        do_syscall_64+0x15f/0xf80
[  269.527572][T15245]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.530289][T15245] 
[  269.530289][T15245] -> #0 (&root->kernfs_rwsem){++++}-{4:4}:
[  269.533682][T15245]        __lock_acquire+0x15a5/0x2cf0
[  269.536143][T15245]        lock_acquire+0x106/0x350
[  269.538534][T15245]        down_write+0x96/0x200
[  269.540816][T15245]        kernfs_remove+0x44/0x80
[  269.542806][T15245]        __kobject_del+0xe1/0x330
[  269.544970][T15245]        kobject_put+0x240/0x560
[  269.546690][T15245]        br_sysfs_delbr+0x44/0x70
[  269.548303][T15245]        br_dev_delete+0xe2/0x110
[  269.549878][T15245]        br_del_bridge+0xb6/0xf0
[  269.551474][T15245]        br_ioctl_stub+0x746/0xd60
[  269.553099][T15245]        sock_ioctl+0x523/0x7f0
[  269.555383][T15245]        __se_sys_ioctl+0xfc/0x170
[  269.557994][T15245]        do_syscall_64+0x15f/0xf80
[  269.560394][T15245]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.563013][T15245] 
[  269.563013][T15245] other info that might help us debug this:
[  269.563013][T15245] 
[  269.567177][T15245] Chain exists of:
[  269.567177][T15245]   &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem
[  269.567177][T15245] 
[  269.573403][T15245]  Possible unsafe locking scenario:
[  269.573403][T15245] 
[  269.577001][T15245]        CPU0                    CPU1
[  269.579051][T15245]        ----                    ----
[  269.580968][T15245]   rlock(&root->kernfs_supers_rwsem);
[  269.582703][T15245]                                lock(pmus_lock);
[  269.584897][T15245]                                lock(&root->kernfs_supers_rwsem);
[  269.588061][T15245]   lock(&root->kernfs_rwsem);
[  269.590432][T15245] 
[  269.590432][T15245]  *** DEADLOCK ***
[  269.590432][T15245] 
[  269.593830][T15245] 3 locks held by syz.1.2768/15245:
[  269.595888][T15245]  #0: ffffffff8fdb0fc0 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4fa/0x7f0
[  269.599410][T15245]  #1: ffffffff8fdd0300 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60
[  269.602970][T15245]  #2: ffff8881012b4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80
[  269.606376][T15245] 
[  269.606376][T15245] stack backtrace:
[  269.608287][T15245] CPU: 0 UID: 0 PID: 15245 Comm: syz.1.2768 Not tainted syzkaller #0 PREEMPT(full) 
[  269.608299][T15245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  269.608306][T15245] Call Trace:
[  269.608312][T15245]  <TASK>
[  269.608318][T15245]  dump_stack_lvl+0xe8/0x150
[  269.608332][T15245]  print_circular_bug+0x2e1/0x300
[  269.608345][T15245]  check_noncircular+0x12e/0x150
[  269.608357][T15245]  __lock_acquire+0x15a5/0x2cf0
[  269.608368][T15245]  ? lockdep_unlock+0x5d/0xd0
[  269.608378][T15245]  ? kernfs_remove+0x44/0x80
[  269.608389][T15245]  lock_acquire+0x106/0x350
[  269.608397][T15245]  ? kernfs_remove+0x44/0x80
[  269.608410][T15245]  down_write+0x96/0x200
[  269.608419][T15245]  ? kernfs_remove+0x44/0x80
[  269.608429][T15245]  ? __pfx_down_write+0x10/0x10
[  269.608439][T15245]  kernfs_remove+0x44/0x80
[  269.608450][T15245]  __kobject_del+0xe1/0x330
[  269.608458][T15245]  ? kobject_put+0x234/0x560
[  269.608465][T15245]  kobject_put+0x240/0x560
[  269.608475][T15245]  br_sysfs_delbr+0x44/0x70
[  269.608484][T15245]  br_dev_delete+0xe2/0x110
[  269.608492][T15245]  br_del_bridge+0xb6/0xf0
[  269.608499][T15245]  br_ioctl_stub+0x746/0xd60
[  269.608507][T15245]  ? do_vfs_ioctl+0x1166/0x1530
[  269.608518][T15245]  ? __pfx_br_ioctl_stub+0x10/0x10
[  269.608526][T15245]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  269.608537][T15245]  ? sock_ioctl+0x4fa/0x7f0
[  269.608546][T15245]  ? do_futex+0x395/0x420
[  269.608557][T15245]  ? __pfx_br_ioctl_stub+0x10/0x10
[  269.608564][T15245]  sock_ioctl+0x523/0x7f0
[  269.608572][T15245]  ? __pfx_sock_ioctl+0x10/0x10
[  269.608579][T15245]  ? __fget_files+0x2a/0x420
[  269.608588][T15245]  ? __fget_files+0x3a0/0x420
[  269.608596][T15245]  ? __fget_files+0x2a/0x420
[  269.608604][T15245]  ? bpf_lsm_file_ioctl+0x9/0x20
[  269.608615][T15245]  ? __pfx_sock_ioctl+0x10/0x10
[  269.608622][T15245]  __se_sys_ioctl+0xfc/0x170
[  269.608634][T15245]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.608641][T15245]  do_syscall_64+0x15f/0xf80
[  269.608649][T15245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.608656][T15245] RIP: 0033:0x7f0ca679cdd9
[  269.608665][T15245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  269.608673][T15245] RSP: 002b:00007f0ca760b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  269.608682][T15245] RAX: ffffffffffffffda RBX: 00007f0ca6a15fa0 RCX: 00007f0ca679cdd9
[  269.608687][T15245] RDX: 0000200000000040 RSI: 00000000000089a1 RDI: 000000000000000c
[  269.608692][T15245] RBP: 00007f0ca6832d69 R08: 0000000000000000 R09: 0000000000000000
[  269.608696][T15245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  269.608701][T15245] R13: 00007f0ca6a16038 R14: 00007f0ca6a15fa0 R15: 00007ffdd6a677b8
[  269.608709][T15245]  </TASK>
[  269.704773][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  270.713385][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  271.753290][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  272.793504][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  273.833244][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  274.873411][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  275.913302][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  276.953490][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  277.993245][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  279.033570][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
