last executing test programs:

2m20.459915418s ago: executing program 1 (id=28743):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x400000000000003, 0x20, 0x0, 0x19, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x5, @private1}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x0, 0x3501}]}, 0xc8}}, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x43403d0e, &(0x7f00000020c0)={0x25, 0x4})

2m20.381697867s ago: executing program 1 (id=28744):
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0)
ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000040)={{0xa393, 0x81}, {0x6, 0x9}, 0x5, 0xfbfffffc})
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) (async)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) (async)
ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000040)={{0xa393, 0x81}, {0x6, 0x9}, 0x5, 0xfbfffffc}) (async)

2m20.380834065s ago: executing program 1 (id=28745):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) (async)
listen(r1, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async)
setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
listen(r2, 0x0) (async)
listen(r3, 0x10000) (async)
read$ptp(r0, &(0x7f0000000000)=""/43, 0x2b)

2m20.311862879s ago: executing program 1 (id=28746):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000000)={0x21, 0x3})
socket(0x2c, 0x3, 0xe7)
write$cgroup_int(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f00000000c0))
ioctl$PTP_EXTTS_REQUEST2(r0, 0x43403d0e, &(0x7f0000000040))

2m20.311628519s ago: executing program 1 (id=28747):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f0000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296)
ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000140))
r2 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r2, 0x100000000)

2m20.2516117s ago: executing program 1 (id=28748):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40100, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000540a00000000edfffedbdf25000074005a4c64e66a0d1c4eadccbdfaed7e329952fa799f81d550350a1207e4385cb29690ddf6513b32877eff0572ac1cd62bd78da92c004ee7bed543dd57023e2bce61e99fd2", @ANYRES32=r4, @ANYBLOB="0008000007500500"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000200)={0x1f, 0x81, @none, 0x0, 0x1}, 0xe)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
socket$alg(0x26, 0x5, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0xd, 0x403}, {0x8, 0x0, 0x6, 0xffffffff}]})
bind$bt_hci(r8, &(0x7f0000000000), 0x6)
write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0003000000000000300012800c0001006d6163766c616e00200002801c00058005000400aaaaaaaaaa2300000a0004009e621b92b8b60000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2m5.180312765s ago: executing program 32 (id=28748):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40100, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000540a00000000edfffedbdf25000074005a4c64e66a0d1c4eadccbdfaed7e329952fa799f81d550350a1207e4385cb29690ddf6513b32877eff0572ac1cd62bd78da92c004ee7bed543dd57023e2bce61e99fd2", @ANYRES32=r4, @ANYBLOB="0008000007500500"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000200)={0x1f, 0x81, @none, 0x0, 0x1}, 0xe)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
socket$alg(0x26, 0x5, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0xd, 0x403}, {0x8, 0x0, 0x6, 0xffffffff}]})
bind$bt_hci(r8, &(0x7f0000000000), 0x6)
write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0003000000000000300012800c0001006d6163766c616e00200002801c00058005000400aaaaaaaaaa2300000a0004009e621b92b8b60000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1m34.951523236s ago: executing program 0 (id=29528):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2cbf848ff5a97a0e, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41, 0x4)
ioctl$PTP_EXTTS_REQUEST2(r0, 0xc0403d11, &(0x7f00000020c0)={0x25, 0x4})

1m34.880748434s ago: executing program 0 (id=29531):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e21, 0x4, @mcast2, 0x2}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

1m34.819078414s ago: executing program 0 (id=29532):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipmr_delroute={0x11, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x40, 0xfd, 0x4, 0x0, 0x5, 0x2200}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40010)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xd, 0x2, 0x0, 0x8}}, @TCA_CT_ACTION={0x6, 0x3, 0x14}]}, {0x1f}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40)
ioctl$PTP_EXTTS_REQUEST2(r0, 0xc0403d11, &(0x7f00000020c0)={0x25, 0x4})
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x19, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @remote}], 0x10)
accept4$netrom(r5, &(0x7f00000000c0)={{0x3, @default}, [@rose, @netrom, @default, @default, @bcast, @default, @bcast, @rose]}, &(0x7f0000000040)=0xab, 0x0)

1m34.815966116s ago: executing program 0 (id=29535):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000140))
write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x22eb}, @void, @ipv4=@gre={{0x2e, 0x4, 0x1, 0x0, 0x281, 0x67, 0x0, 0x7f, 0x2f, 0x0, @private=0xa010101, @private=0xa010100, {[@cipso={0x86, 0x42, 0x3, [{0x2, 0x2}, {0x5, 0x3, "f7"}, {0x2, 0x8, "2fdf30b27961"}, {0x0, 0x9, "bc54cb521bc1ca"}, {0x5, 0x4, "3ef1"}, {0x7, 0xb, "3e85ba6a615abf8240"}, {0x5, 0xa, "34919775c1cf13f4"}, {0x1, 0x5, "c40995"}, {0x1, 0x6, "7ff0bf06"}, {0x6, 0x2}]}, @rr={0x7, 0x1f, 0x47, [@multicast1, @multicast2, @loopback, @remote, @empty, @private=0xa010100, @rand_addr=0x64010102]}, @generic={0x219e07b27d79570a, 0xd, "4a51e7b4a9e7726c487f07"}, @timestamp_addr={0x44, 0x14, 0xd1, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x36}, {@local, 0x7fffffff}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x2}, @timestamp={0x44, 0x1c, 0x1f, 0x0, 0xc, [0x4c, 0xfffeffff, 0x80000001, 0x60db4a95, 0xfffffff8, 0xfffffff6]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x6f, 0x3, [0x6], "fb6f13eefcb2660a3a1bd2368996381f8a7b3a2514e2aaca7bfa08e5acf0a67176b386c6e44d4ae57ca78e5d95e8c43502e3ac88f1089110d88837d8cae50260ef0892c85a571e0c2d3cb744389053ab12b473bd7dd84bb5898124e76c26bfa9186c09ebb9926bda299ab2ab917c2b"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x7, 0x355], "84fb44ba9c477a092a9978e014761f60f361bad64af6d97d20d28f67d984aa1aa97164723873a85063365ed6679039fdf8e663c0173c28850072984b9eb101ec469616867e86a04814232ab21cd9e2a4c3c24da6881bf496df266650f9e64f6cfcac9961e5c458215966fecd46f48a75b94e65d2c4f8f30b765fca26ffa1deada2890714cbeb93e44c4e095b18a187a3f5d990357b978688d5d061b5c79f0c269ee96263be8bc64e0dd11965d894dcff0c811dfb486433916bf63905e8a77f05d1fabb91de3a3771f8"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x4, 0x9], "a766d0d50d6caad1f19593fc0c6b13bdff3bb8a18522048f"}, {0x8, 0x88be, 0x8c, {{0x0, 0x1, 0xec, 0x2, 0x1, 0x3, 0x2, 0x3}, 0x1, {0x3ff}}}, {0x8, 0x22eb, 0x1, {{0x6, 0x2, 0xd1, 0x1, 0x0, 0x1, 0x2, 0x6}, 0x2, {0x7, 0x8dbd, 0x0, 0x9, 0x0, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "d7aa9d1d52c39ca23932b7f494bb96837f4c05175caa27e00f308595b4d483a85c1c30ea278319f85b7945"}}}}, 0x285)

1m34.680407284s ago: executing program 0 (id=29538):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c000780086173683a69702c706f72742c697000059ebd05f9c78f57cf000400000000000900020073797a31000000000500010007000000"], 0x58}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0xe, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x40, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0xfffffffd, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0x7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f780000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1000, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x4, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000300)="24785466326cebc6c81c38c136c05e95dff881ec52f9a1cd00bc6edd10bd0ac93755dfe469041a178cb98c178da3ae435b552697840a0000006fe07f9fd5703e0db5574dee089d2cfe1b1551dc6b063e6ddc6774b1245e334392879084035f1538f8c1b4552dfba36e894fdb4fa8c58338d726513750075abb2cd2a6be32acd134898d71808af12fdf3336e7839b85b8fd6b6b622d47929b23769034adba99078e6438e0fce41b840f850c84676925286c0cb10a800150dc5197ef12d5ab3dac1203cad81303a11686fe80c28514cad4a979e830198b2a", 0xd7, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf6, r6, 0x1, 0xd8, 0x6, @remote}, 0x14)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

1m34.611150097s ago: executing program 0 (id=29540):
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
pipe(&(0x7f00000001c0))
socket$packet(0x11, 0x3, 0x300) (async)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x11, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f00000000c0)="f8ffffff", 0x4)
r5 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="28000000000000002900000002"], 0x28}}], 0x1, 0x0) (async)
sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="28000000000000002900000002"], 0x28}}], 0x1, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0100000050001100ac1414aa000000000000000000000000ff010000000000000000000000000001e0000002000000000000000000000000ac14143b0000000000000000000000006c0000000035000002000a007f0012"], 0x220}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0100000050001100ac1414aa000000000000000000000000ff010000000000000000000000000001e0000002000000000000000000000000ac14143b0000000000000000000000006c0000000035000002000a007f0012"], 0x220}, 0x1, 0x0, 0x0, 0x4000884}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pipe(&(0x7f0000000200)) (async)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c)
sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) (async)
sendto$inet6(r7, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0)
shutdown(r7, 0x1) (async)
shutdown(r7, 0x1)
splice(r7, 0x0, r6, 0x0, 0x406f413, 0x0)

1m19.615810382s ago: executing program 33 (id=29540):
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
pipe(&(0x7f00000001c0))
socket$packet(0x11, 0x3, 0x300) (async)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x11, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f00000000c0)="f8ffffff", 0x4)
r5 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="28000000000000002900000002"], 0x28}}], 0x1, 0x0) (async)
sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="28000000000000002900000002"], 0x28}}], 0x1, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0100000050001100ac1414aa000000000000000000000000ff010000000000000000000000000001e0000002000000000000000000000000ac14143b0000000000000000000000006c0000000035000002000a007f0012"], 0x220}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0100000050001100ac1414aa000000000000000000000000ff010000000000000000000000000001e0000002000000000000000000000000ac14143b0000000000000000000000006c0000000035000002000a007f0012"], 0x220}, 0x1, 0x0, 0x0, 0x4000884}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pipe(&(0x7f0000000200)) (async)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c)
sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) (async)
sendto$inet6(r7, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0)
shutdown(r7, 0x1) (async)
shutdown(r7, 0x1)
splice(r7, 0x0, r6, 0x0, 0x406f413, 0x0)

1m5.94112897s ago: executing program 2 (id=29954):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x3d8, 0x0, 0x700001b, 0x148, 0x268, 0x148, 0x340, 0x206, 0x240, 0x340, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x2f, 0x1}, 0x1ea, 0x200, 0x268, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x4, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x0, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x8, 0x9, 0x40, 'netbios-ns\x00', 'syz0\x00', {0x400}}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async, rerun: 32)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (rerun: 32)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) (async)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x7, &(0x7f0000000680)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000480)='syzkaller\x00', 0x2}, 0x94)
r6 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
r9 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', <r10=>0x0}) (async)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xd, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0xfffffffffffffd78, 0x5, 0x7}]}}]}, 0xac}}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x50}}, 0x0) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x0, 0x3c, 0xb2, &(0x7f0000000180)="4362fcf141059e2a2f532f5d78c3ca4d8d964c78115a5dafa485c66d6654069fca6ea9b3b107ed43388d6f8735ad66ab786b334e15ba84554bda9ca7", &(0x7f00000003c0)=""/178, 0x2, 0x0, 0xd3, 0x49, &(0x7f0000000580)="abe7c92140176b6d43f327adb0c8d17501c9b5eaf455f7bbb856494f4dffb9e4a7ad9038f1cc94e96bd5ed596ebb1218d3a4767f9595a4a0b4d81eafff305a770467c9e35c7c4802a414576df715ae2e314e843b8d897f49668dc3e392613c230f4e5e65d3202a4c071f5217e6f49624e1cf3ac5ed5624e4b4442676da11ee19bbc3163279c1dc6f506c6ede1ad7f725252229251983b825dcb3c052cce03b32e480858571a2cab5cd1c9e539c52645b1362c18d0b8413615956bcd759bc2dd4eeb5a64f3675d6746ffbb4b92e507324764d59", &(0x7f00000001c0)="4eb3b8e690566cb6f04a72da061c75762a7e1a840c851929197915155cc34076b92a9f6dd9db383926c38f14f8930b8988f9d089894a98c0ba3246180a7d77787a9b508d1fca30efaa", 0x7, 0x0, 0xb}, 0x50) (async, rerun: 32)
ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000080)) (async)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) (async)
setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000180)=0x8, 0x4) (async)
recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=""/17, 0x11}, 0x100}], 0x1, 0x45833af92e4b38ff, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xbacd}, @in6={0xa, 0x4e20, 0x9, @mcast1, 0x9}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}, @in={0x2, 0x4e21, @empty}], 0x87) (async, rerun: 32)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000000)={{0x1007fff, 0x800}, {0x1, 0x9}, 0x7, 0x5}) (rerun: 32)

1m5.849843268s ago: executing program 2 (id=29956):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000000)=""/73, &(0x7f0000000080)=0x49)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000000100))
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000200)={0x2, 0x0, 0xb0, &(0x7f0000000140)=""/176})
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8)
getsockopt$inet6_buf(r2, 0x29, 0x3c, &(0x7f0000000280)=""/31, &(0x7f00000002c0)=0x1f)
r3 = socket$igmp(0x2, 0x3, 0x2)
tee(0xffffffffffffffff, r3, 0x5, 0x4)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000380)={<r5=>r1, 0x6, 0x8000000000000000, 0x2})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xcc, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x15, 0xa, '/dev/vhost-vsock\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x15, 0xa, '/dev/vhost-vsock\x00'}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000004}, 0x40080)
connect(r0, &(0x7f0000000540)=@pppoe={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth1_to_batadv\x00'}}, 0x80)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000005c0)={<r6=>r3, 0x5cb8, 0x4, 0x3})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x94, 0x1, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0xffff}}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}]}, @NFQA_EXP={0xc, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8}]}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x385b}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFQA_PAYLOAD={0xb, 0xa, "6b49a03dcbbc81"}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7f}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040080}, 0x41)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000008c0)={0x1, 0x1, 0x1000, 0x19, &(0x7f0000000780)="72b04e6886c1c9f619d7915696a82e3dc6b095bf41f4494ae3", 0xfa, 0x0, &(0x7f00000007c0)="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"})
openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x200800, 0x0)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x84, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x84}}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000b00)={<r7=>0x0, @in={{0x2, 0x4e20, @local}}, 0x10, 0x8, 0x9, 0x5, 0x35, 0xb2f5, 0x9}, &(0x7f0000000bc0)=0x9c)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000c00)={r7, 0x1}, 0x8)
getsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000c40), &(0x7f0000000c80)=0x4)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r5)
getsockname$packet(r2, &(0x7f0000000d40)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d80)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000dc0)={'vcan0\x00', <r10=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x58, r8, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x479985b3176fa223}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x800)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@bloom_filter={0x1e, 0x186, 0x8, 0xa, 0x8000, r5, 0x8, '\x00', r9, r6, 0x5, 0x0, 0x3, 0xd, @value=r2}, 0x50)
r11 = accept(r0, &(0x7f0000000f80)=@l2={0x1f, 0x0, @none}, &(0x7f0000001000)=0x80)
ioctl$AUTOFS_IOC_EXPIRE(r11, 0x810c9365, &(0x7f0000001040)={{0x7, 0x4}, 0x100, './file0\x00'})

1m5.781031622s ago: executing program 2 (id=29958):
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x1)
syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbb9bbbbaaaaaaaaaaaa86dd60f4adf700182c00fe800000000000000000000000000000ff0200000000000000000000000000013c0000000000000004019d00000000008100907800000000"], 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x50, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0)
getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5, 0x8}, @timestamp], 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
shutdown(r0, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r6, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r8, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000)

1m4.719607554s ago: executing program 2 (id=29980):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x58442, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xffff, 0x1, 0x8000}) (async)
ioctl$PTP_EXTTS_REQUEST2(r0, 0xc0403d11, &(0x7f0000000000)={0x25, 0x4})

1m4.659537909s ago: executing program 2 (id=29982):
pipe(&(0x7f0000019580)={<r0=>0xffffffffffffffff})
sendmsg$nl_netfilter(r0, &(0x7f0000019940)={&(0x7f00000195c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000019900)={&(0x7f000001bb00)=ANY=[@ANYBLOB="f01700000c07010127bd7000fedbdf2500000001b3015880c8003e800800e100", @ANYRES32=0x0, @ANYBLOB="0c0094000300000000000000a4003a809d001d00e87f2a70764d3bdfdcc4b3075e0850af562b8df53e9d55334c45f0dd02f5bb8a6a4631fda89e4823625b019dea5b9976e768cf14fc5d0565fd22249c3c4cce73036d4df09e40d6cf38af9055ce6c79d29d83a199410f85b773538d73b4d4f77e88f3663c7d38790e06d7a317f6d0827326b29ae464cae2e45cba86f7054298b8b8c9062e3edc199ffaf3a98bd5ca865ccf63f4340e1825d4200000000c003400010000000100000008004c00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x17f0}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000810)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000001c0)="b9fe268cb89e14f088a847ef6e2e158de8ec087d5019fa509e1892f2", 0x0, 0x100, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m4.581294927s ago: executing program 2 (id=29983):
unshare(0x2c020200) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) (async)
pipe(&(0x7f0000000040)) (async, rerun: 32)
r1 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x43}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) (async)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) (async, rerun: 32)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xfdff, 0x3}, 0x6) (async)
write(r4, 0x0, 0x0) (async, rerun: 64)
connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x41, 0x2}, 0x1}}, 0x10) (async, rerun: 64)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[], 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xb8}}, 0x50) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc)
setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000040)={0x89, @rand_addr, 0x0, 0x0, 'wrr\x00', 0x0, 0x0, 0x18}, 0x2c)
r7 = getuid()
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYRES8, @ANYRESHEX=r7, @ANYRESOCT=r0, @ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="9f92089203f4d121ae4c45a0b2190c88cf5213d6743e858f8af1ee82ef6c6587ff2169da1204af5b077d0dea2adc0a4034d7eedbeeaf9cca4d125e230bb0826fd47cdc24dc4f6992d59082567785d26f2d9ceced5d2d3a7467"], 0x250}, 0x1, 0x0, 0x0, 0x2004c010}, 0x800) (async)
unshare(0x6a040000) (async)
unshare(0x44000000)
syz_emit_ethernet(0x0, 0x0, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)

1m1.630324788s ago: executing program 3 (id=30029):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e21, 0x4, @mcast2, 0x2}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000020000000200000000", 0x58}], 0x1)

1m1.627915691s ago: executing program 3 (id=30030):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000104ffffffffffffffff0000ffff", @ANYRES32=0x0, @ANYBLOB="08d10800000000009c00128009000100766c616e000f00008c0002800c0002000e0000000c0000000600050088a80000640003800c000c007b4b0000000000000c00010002000000000000000c000100bf000000000400000c00010002001500ff0100000c00010005000000090000002000010002000000080000000c00010005000000120000000c0001000200000004000000100004800c00010002000000a400000014000300766c616e30"], 0xd0}}, 0x0)

1m1.57142454s ago: executing program 3 (id=30031):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x80503d0a, &(0x7f00000020c0)={0x25, 0x4}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{0x8, 0xfa, 0x6, 0xc000000}, {0x1, 0xd, 0x7, 0x2}, {0x8, 0x4, 0x1, 0x800}, {0x9, 0x3, 0xf8, 0x9}, {0x7fff, 0x5, 0x7, 0x1}, {0x1ff, 0x40, 0xff, 0x2}, {0xffff, 0x1, 0x4, 0x1}]})

1m1.571124459s ago: executing program 3 (id=30033):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5000018, 0x40010, r1, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x43403d0e, &(0x7f00000020c0)={0x25, 0x4})

1m1.501486224s ago: executing program 3 (id=30034):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@gettaction={0x3c, 0x32, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x40000}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x4000}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x6, 0x1, 'gact\x00'}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20044040)

1m1.499670229s ago: executing program 3 (id=30035):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
unshare(0x62040400)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}, 0x1}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010102}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
r5 = accept(r2, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
recvfrom(r4, &(0x7f0000000280)=""/65, 0xfffffffffffffed7, 0x4100, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50)
ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000000)={'\x00', 0x3, 0x0, 0x2})
socket$can_raw(0x1d, 0x3, 0x1)
socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

49.508821828s ago: executing program 34 (id=29983):
unshare(0x2c020200) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) (async)
pipe(&(0x7f0000000040)) (async, rerun: 32)
r1 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x43}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) (async)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) (async, rerun: 32)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xfdff, 0x3}, 0x6) (async)
write(r4, 0x0, 0x0) (async, rerun: 64)
connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x41, 0x2}, 0x1}}, 0x10) (async, rerun: 64)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[], 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xb8}}, 0x50) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc)
setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000040)={0x89, @rand_addr, 0x0, 0x0, 'wrr\x00', 0x0, 0x0, 0x18}, 0x2c)
r7 = getuid()
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYRES8, @ANYRESHEX=r7, @ANYRESOCT=r0, @ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="9f92089203f4d121ae4c45a0b2190c88cf5213d6743e858f8af1ee82ef6c6587ff2169da1204af5b077d0dea2adc0a4034d7eedbeeaf9cca4d125e230bb0826fd47cdc24dc4f6992d59082567785d26f2d9ceced5d2d3a7467"], 0x250}, 0x1, 0x0, 0x0, 0x2004c010}, 0x800) (async)
unshare(0x6a040000) (async)
unshare(0x44000000)
syz_emit_ethernet(0x0, 0x0, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)

46.4849563s ago: executing program 35 (id=30035):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
unshare(0x62040400)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}, 0x1}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010102}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
r5 = accept(r2, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
recvfrom(r4, &(0x7f0000000280)=""/65, 0xfffffffffffffed7, 0x4100, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50)
ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000000)={'\x00', 0x3, 0x0, 0x2})
socket$can_raw(0x1d, 0x3, 0x1)
socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

1.931442748s ago: executing program 4 (id=30666):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x3, 0x1, 0x0, {0x0, 0x0, 0x8, 0x401}}}]]}, {0x4}, {0xc, 0x7, {0xe4ffffff}}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)

1.931312437s ago: executing program 6 (id=30667):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000104ffffffffffffffff0000ffff", @ANYRES32=0x0, @ANYBLOB="08d10800000000009c00128009000100766c616e000000008c0002800c0002000e0000000c0000000600050088a80000640003800c000c007b4b0000000000030c00010002000000000000000c000100bf000000000400000c00010002001500ff0100000c00010005000000090000002000010002000000080000000c00010005000000120000000c0001000200000004000000100004800c00010002000000a400000014000300766c616e30"], 0xd0}}, 0x0)

1.930895833s ago: executing program 4 (id=30668):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401000000000000000000080005"], 0x20}}, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, 0x0, 0x22)
r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x80000)
r3 = socket(0x2d, 0x2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x7d, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240480dd}, 0x0)
bind$xdp(r3, 0x0, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000140)=0x6, &(0x7f0000000180)=0x1)
r11 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x0, 0xfffffffd}, 0x10)
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xff, 0x8, 0x900}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x181202, 0x0)

1.930728681s ago: executing program 6 (id=30669):
r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008086}, 0x0)

1.881626431s ago: executing program 6 (id=30671):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r1=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000008c0)={<r2=>r1, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000580)={r2, 0xb0, "f3663f226195d6a79015bb7b7734e7b5cd0fc5ae73f19549a5265d3f7c2a59f3fb838ee4d0db19a76405a931228efc4b93af18c6e336e5a45f297f041dd5ede1bdfe7bc61efad3ea56471ee3dad245d2d70ee8205fc9d7f6587693b9feac0f83e9d3fd5512fdb2fe2946983477dc88dcc14f570e427ecdf20f78715deb4abf1f0a99766f9cc11615a9eabcb77f2c56270cae48f1f9ab9b4bc26c1d1e1db331e246a97c555caf9d90a9d4c53d954970d3"}, &(0x7f0000000000)=0xb8)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

1.809471346s ago: executing program 4 (id=30674):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x3, 0x1, 0x0, {0x0, 0x0, 0x8, 0x401}}}]]}, {0x4}, {0xc, 0x7, {0xffffffe4}}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)

1.808058408s ago: executing program 4 (id=30676):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000104ffffffffffffffff0000ffff", @ANYRES32=0x0, @ANYBLOB="08d10800000000009c00128009000100766c616e000000008c0002800c0002000e0000000c0000000600050088a80000640003800c000c007b4b0000000000080c00010002000000000000000c000100bf000000000400000c00010002001500ff0100000c00010005000000090000002000010002000000080000000c00010005000000120000000c0001000200000004000000100004800c00010002000000a400000014000300766c616e30"], 0xd0}}, 0x0)

1.700574542s ago: executing program 4 (id=30678):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xff, 0x0, 0x6, 0x7}, 0x8)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000040)={0x1f, 0x0, {0x3, @usage=0x4, 0x0, 0x3ff, 0x101, 0x2, 0x5, 0x6, 0x401, @struct={0x0, 0x81}, 0x9, 0x7, [0x0, 0x8000000000000001, 0x0, 0x8, 0x3ff, 0x7fff]}, {0x8, @usage=0x7185, 0x0, 0x6, 0x3, 0x31d4, 0x5, 0x281a, 0x88, @usage=0x2, 0x8054, 0x6, [0xd, 0x0, 0xffffffffffff4b90, 0x100, 0x2, 0xe1]}, {0x100000000, @usage=0x8, <r1=>0x0, 0x36b0, 0x4, 0x7, 0xc, 0x7f, 0x5b91b70a922ab7fb, @usage=0x5aa, 0x400, 0x7f, [0x7f, 0x10000, 0x4, 0xfffffffffffffff9, 0x4, 0x3]}, {0x616, 0x8, 0x7}})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x2, 0x4, {0x4, @struct={0x4, 0xfffffffc}, 0x0, 0x0, 0xfffffffffffffff9, 0x9, 0x100000000, 0x1, 0x32, @usage=0xc, 0x2, 0x3, [0x8, 0xa6ea, 0x4, 0x0, 0xe0ba, 0x100000001]}, {0xfffffffffffffffe, @struct={0x1, 0x7}, 0x0, 0x6, 0x10001, 0x6, 0x3ff, 0x6, 0x8, @usage=0xfffffffffffffffd, 0x8001, 0x8, [0x6, 0x80, 0x4, 0x4, 0x2, 0x3]}, {0xd, @usage=0xffff, <r2=>0x0, 0x0, 0x3, 0x40, 0xfffffffffffffc00, 0x928f, 0x8b5, @struct={0x9, 0x10}, 0x0, 0x5, [0xfffffffffffffff7, 0x0, 0x1, 0x1, 0x2, 0x4]}, {0x8000000000000001, 0x3, 0xb815}})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000840)={0x1, 0x3, {0x4, @usage=0x3, 0x0, 0x128, 0x8, 0x3, 0x8000, 0x10, 0x0, @struct={0x3}, 0x7fff, 0x4, [0x4, 0x5, 0x3, 0x9, 0x28, 0x2]}, {0x8, @struct={0x8, 0x3ff}, r1, 0x4, 0xb, 0x2, 0xe5f, 0x4, 0x8, @struct={0x5, 0xfe5a}, 0x54, 0x80000000, [0xffff, 0x1, 0xde6, 0xd, 0x2, 0x3]}, {0xa, @struct={0xff, 0x80}, r2, 0x7fffffffffffffff, 0x2, 0x37, 0x5d81, 0x9, 0xc3, @usage=0x5, 0xc5b2, 0x38, [0x10000, 0x4, 0x5, 0x200]}, {0x0, 0x3, 0x5}})
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000c40)={'vcan0\x00', {0x2, 0x0, @loopback}})
pipe(&(0x7f0000000c80)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000cc0), 0x4)
ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000000d00))
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000dc0)={'tunl0\x00', &(0x7f0000000d40)={'syztnl2\x00', <r6=>0x0, 0x80, 0x7888, 0x9, 0xb, {{0x10, 0x4, 0x1, 0x8, 0x40, 0x67, 0x0, 0xb, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x24, 0xaa, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast2, 0x5}, {@broadcast, 0x2c24}, {@rand_addr=0x64010100, 0x7}]}, @lsrr={0x83, 0x7, 0xc, [@remote]}]}}}}})
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000e40)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x4000}, @qipcrtr={0x2a, 0xffffffff, 0x4000}, @xdp={0x2c, 0x0, <r7=>r6, 0x40}, 0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)='veth1_to_hsr\x00', 0x7f, 0x5, 0x8})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r4)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x70, r8, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2ce}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x2e, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @device_b, @random="b7a579e4944d", {0x3, 0x243}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x6, {0x1, 0x6, @void, @val=0x1d, @void}}}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001080)=@generic={&(0x7f0000001040)='./file0\x00', 0x0, 0x67b19a8b2e24fa82}, 0x18)
getsockopt$sock_buf(r5, 0x1, 0x1f, &(0x7f00000010c0)=""/29, &(0x7f0000001100)=0x1d)
bind$packet(r4, &(0x7f0000001140)={0x11, 0x9, r7, 0x1, 0x10, 0x6, @broadcast}, 0x14)
r10 = accept4$bt_l2cap(r4, &(0x7f0000001180)={0x1f, 0x0, @none}, &(0x7f00000011c0)=0xe, 0x800)
r11 = socket$netlink(0x10, 0x3, 0x14)
r12 = epoll_create1(0x80000)
ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000001200)={0x4, 0xd, 0x6, 0x0, 0x0, [{{r11}, 0x55}, {{r4}, 0x7}, {{r3}, 0x1}, {{r9}, 0x7fe5383c}, {{r12}, 0x77}, {{r9}, 0x6}]})
socketpair(0x2a, 0x5, 0xfffff800, &(0x7f0000001300)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001380), r4)
sendmsg$TIPC_NL_KEY_SET(r13, &(0x7f0000002640)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x82cf0000}, 0xc, &(0x7f0000002600)={&(0x7f00000013c0)={0x1220, r14, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdbd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf0}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5151b852}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x64c2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f4000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7b}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd9d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x1018, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc0}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x71ec240a}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x180000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5830b42}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3b7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc3da}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0x1220}, 0x1, 0x0, 0x0, 0x20004050}, 0x20000000)
r15 = socket$inet6_icmp(0xa, 0x2, 0x3a)
recvmsg(r15, &(0x7f0000003800)={0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/61, 0x3d}, {&(0x7f00000036c0)=""/189, 0xbd}], 0x3, &(0x7f00000037c0)}, 0x100)
ioctl$BTRFS_IOC_RM_DEV(r11, 0x5000940b, &(0x7f0000003840)={{r0}, "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"})
r16 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_inet6_SIOCSIFADDR(r16, 0x8916, &(0x7f0000004840)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x8, r6})
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000048c0)=@generic={&(0x7f0000004880)='./file0\x00', r5}, 0x18)

1.621605407s ago: executing program 5 (id=30679):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x3e7643, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x48004) (async, rerun: 64)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40043d0d, &(0x7f00000020c0)={0x25, 0x4}) (rerun: 64)

1.621020633s ago: executing program 5 (id=30680):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
close(0x3)
socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@dontfrag={{0x18, 0x29, 0x34, 0x800}}], 0x18}, 0x40c0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffa}]}, 0x2c}}, 0x20044800)
setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@empty, @empty, r5}, 0xc)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f00000020c0)={0x25, 0x4})

1.571232289s ago: executing program 5 (id=30681):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x48c40, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, &(0x7f00000000c0), &(0x7f0000000080)=0x14)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r5, &(0x7f0000000280)={0xa, 0xfdfe, 0x10000b, @mcast1, 0xa}, 0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000003a80)=ANY=[@ANYBLOB="1a00ee000000131d2ba081e0a5856a20e9fecf63bc706cb1ee0be0541b03c76d6f311f747b0f842dc0932b3df117b21644fbd07cbacf19b0196b82a83d3de19635ce53067493a02339875f19e3a35142a027a2adbf246b913119eeb5da8536a489dcf170820559caecc6bf1d26ea0b3ced6a416853"], 0x8)
connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2, 0x50d}}}, 0x32)
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
listen(r2, 0x8)
ioctl$PTP_EXTTS_REQUEST2(r0, 0xc0403d11, &(0x7f00000020c0)={0x25, 0x4})
socket$phonet(0x23, 0x2, 0x1)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmmsg$inet6(r6, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r6, 0x1)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x82, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r8, 0x4}, 0x8)
clock_gettime(0x0, &(0x7f0000003a00)={<r9=>0x0, <r10=>0x0})
recvmmsg(r1, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f0000000180)=""/128, 0x80}, {&(0x7f0000000200)=""/177, 0xb1}, {&(0x7f0000000380)=""/66, 0x42}, {&(0x7f0000000400)=""/164, 0xa4}, {&(0x7f00000004c0)=""/73, 0x49}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/163, 0xa3}, {&(0x7f0000001600)=""/194, 0xc2}], 0x9, &(0x7f00000002c0)=""/32, 0x20}, 0x40}, {{&(0x7f00000017c0)=@nfc_llcp, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001840)=""/15, 0xf}, {&(0x7f0000001880)=""/243, 0xf3}, {&(0x7f0000001980)=""/39, 0x27}], 0x3, &(0x7f0000001a00)=""/81, 0x51}, 0x7}, {{&(0x7f0000001a80)=@alg, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001b00)=""/171, 0xab}, {&(0x7f0000001bc0)=""/96, 0x60}, {&(0x7f0000001c40)=""/177, 0xb1}, {&(0x7f0000001d00)=""/194, 0xc2}, {&(0x7f0000001e00)=""/179, 0xb3}, {&(0x7f0000001ec0)=""/122, 0x7a}, {&(0x7f0000001f40)=""/196, 0xc4}, {&(0x7f0000002040)=""/19, 0x13}, {&(0x7f0000002080)=""/3, 0x3}, {&(0x7f0000002100)=""/152, 0x98}], 0xa, &(0x7f0000002280)=""/28, 0x1c}, 0x6720}, {{&(0x7f00000022c0)=@ll, 0x80, &(0x7f0000002500)=[{&(0x7f0000002340)=""/144, 0x90}, {&(0x7f0000002400)=""/209, 0xd1}], 0x2, &(0x7f0000002540)=""/73, 0x49}, 0xe95d}, {{&(0x7f00000025c0)=@isdn, 0x80, &(0x7f00000037c0)=[{&(0x7f0000002640)=""/34, 0x22}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/217, 0xd9}], 0x3, &(0x7f0000003800)=""/158, 0x9e}, 0xd11}], 0x5, 0x20012021, &(0x7f0000003a40)={r9, r10+60000000})
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000003b00)=0x8, 0x4)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003b80)=@generic={&(0x7f0000003b40)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003cc0)={r11, &(0x7f0000003bc0)="7321e87da83849ca737b8032842613b322053d0a3820d0ceae0f65969d7a54e41fbf1cb1127a0008a68623ed358f48", &(0x7f0000003c00)=""/141, 0x4}, 0x20)

1.570940251s ago: executing program 5 (id=30682):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x5, 0x7, 0x3})
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, 0x0, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0xffffffff}, 0xff, 0x5, 0xe, 0x1, 0x11, 'syz1\x00', "c1606568cd4f95b0d3af0b7785ca63d65477724e3f550eaabb9ac4b51bf812fa", "c3acdd95687f0ead22e8f3478b6273195e8fbe2a95e2dc9614077077d4d84f8b", [{0x0, 0x7f, {0x2, 0x9}}, {0x10, 0x3, {0x1, 0x3}}, {0x21d, 0xd8c, {0x2, 0x40}}, {0x8, 0x40, {0x2, 0x3}}, {0x9, 0x7ff, {0x3, 0x6}}, {0x3ff, 0x4, {0x2, 0x9}}, {0x52, 0x4, {0x2, 0x6}}, {0x1, 0xd6f, {0x3, 0x5fd}}, {0xb, 0x4, {0x0, 0x57dd}}, {0x7, 0xc136, {0x0, 0x7}}, {0x5, 0x6, {0x3, 0x9}}, {0x7, 0xfffa, {0x1, 0xa755}}, {0x3, 0x2, {0x3, 0x339c}}, {0x800, 0x7, {0x3, 0x2}}, {0x10, 0x7ff, {0x1}}, {0x115, 0xdfd, {0x2, 0x3dd7490e}}, {0x81, 0x2, {0x3, 0x5}}, {0x3, 0xffff, {0x3, 0x2}}, {0x3, 0x5, {0x1, 0x5}}, {0x5, 0xfff8, {0x0, 0x1b}}, {0x0, 0xbf, {0x2, 0x2}}, {0x1, 0x2c70, {0x3, 0x5}}, {0x1, 0xd, {0x3, 0x6}}, {0x3, 0xa484, {0x2, 0x7ff}}, {0x7, 0xfffd, {0x1, 0x1}}, {0x0, 0x7e23, {0x2, 0x2}}, {0x81, 0x9, {0x1, 0x9}}, {0x1ff, 0x4, {0x1, 0x5}}, {0x2, 0x8, {0x2, 0x81}}, {0x1, 0x4, {0x1, 0x5}}, {0x4, 0xd, {0x3, 0x101}}, {0x5, 0x200, {0x1, 0x5}}, {0x3, 0x2, {0x1, 0xff}}, {0x2, 0x9, {0x0, 0x7f}}, {0x4, 0x80, {0x1, 0x8}}, {0x3e, 0x1c0, {0x2, 0x7f47a804}}, {0x4, 0x2, {0x0, 0x1}}, {0x6, 0xace2, {0x0, 0x4}}, {0x401, 0xf, {0x3, 0x2}}, {0x3, 0x80, {0x0, 0x9}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x15}, 0x400c000)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x400402, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d0e, &(0x7f00000020c0)={0x3, 0x9})

1.511374156s ago: executing program 5 (id=30683):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x3, 0x1, 0x0, {0x0, 0x0, 0x8, 0x401}}}]]}, {0x4}, {0xc, 0x7, {0xffffffff}}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)

1.510998284s ago: executing program 5 (id=30684):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xa)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r1, 0x400454cc, 0x308)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="06ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={<r4=>r2, 0xff, 0x8})
ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, &(0x7f00000000c0)={'\x00', 0x2, 0x1, 0x7})
close(r2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000120001000000000000000000fc020000000000000000000000000001ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000040000000000001000000a80c000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000101000000000000"], 0xb8}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b05, &(0x7f0000000140)={'wlan1\x00'})
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x6)

997.348998ms ago: executing program 6 (id=30685):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x2}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xcf14}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}]}]}, 0x44}}, 0x800)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$int_in(r5, 0x5452, &(0x7f0000000140)=0x3)
ppoll(&(0x7f0000003840)=[{r5, 0x40}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08060001080006040001aaaaaaaaaa37ac1452aaaaaaaaaaaa38ac14"], 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0xc0403d11, &(0x7f00000020c0)={0x25, 0x4})

840.534752ms ago: executing program 4 (id=30686):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x118, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xd4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x9, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0xfffffffffffffdeb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x140}}, 0x0)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000002f00)=@raw={'raw\x00', 0xc01, 0x3, 0x1248, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x1100, 0x3c8, 0x3c8, 0x11b0, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x2, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfff9, 0x2, [0x7, 0xc, 0x1f, 0x32, 0x2a, 0xa, 0x3d, 0x3e, 0x2d, 0x17, 0x19, 0xc, 0x25, 0xd, 0x3e, 0x79], 0x0, 0x1000, 0x5b5}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x12a8)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008086}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1e}}, 0x14)
r9 = socket(0x400000000010, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x5, 0x2, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5805}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x80}}, 0x0)
r10 = socket(0x10, 0x3, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r12=>0x0})
r13 = socket$pptp(0x18, 0x1, 0x2)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000200)={{r13}, 0xd, 0x9, 0x5})
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r12, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
r14 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r15, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xfffffffffffffe4b}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)

1.103515ms ago: executing program 6 (id=30687):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close(0x3)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x10)
pselect6(0x40, &(0x7f0000000a80)={0x5, 0x5, 0x0, 0x100000000, 0x6, 0x1, 0x3, 0xfffffffffffffffd}, &(0x7f00000003c0)={0xdc, 0xa, 0x100000002ddd, 0x3, 0x1000000000f, 0x7fff, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)='K', 0x1)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
socket$unix(0x1, 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000700)=""/197, 0xc5}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x5}, 0x5d}], 0x1, 0x10022, 0x0)

0s ago: executing program 6 (id=30688):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100009060400"/20, @ANYRES32=0x0, @ANYBLOB="44340200080001002c001280080001006774700007000280050005000100000014000800fc0100"/52], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20000040)

kernel console output (not intermixed with test programs):

set [0, 0] type 1 family 0 port 8472 - 0
[ 1196.064120][ T7712] netlink: 'syz.0.27621': attribute type 4 has an invalid length.
[ 1196.108241][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27623'.
[ 1196.229586][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27624'.
[ 1196.232483][ T7723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.27624'.
[ 1196.461448][ T7747] netlink: 208 bytes leftover after parsing attributes in process `syz.2.27634'.
[ 1196.465256][ T7746] atomic_op ffff8881a917a198 conn xmit_atomic 0000000000000000
[ 1196.504432][ T7749] netlink: 208 bytes leftover after parsing attributes in process `syz.2.27635'.
[ 1196.620305][ T7761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27639'.
[ 1196.682524][ T7766] netlink: 'syz.1.27641': attribute type 4 has an invalid length.
[ 1196.695228][ T7767] atomic_op ffff8881b32dc998 conn xmit_atomic 0000000000000000
[ 1196.844716][ T7785] netlink: 208 bytes leftover after parsing attributes in process `syz.1.27650'.
[ 1196.905023][ T7792] No such timeout policy "syz1"
[ 1197.009299][ T7802] netlink: 208 bytes leftover after parsing attributes in process `syz.1.27658'.
[ 1197.065667][ T7809] atomic_op ffff88801c058198 conn xmit_atomic 0000000000000000
[ 1197.225043][ T7827] netlink: 'syz.2.27667': attribute type 4 has an invalid length.
[ 1197.249980][ T7831] atomic_op ffff8881704d2998 conn xmit_atomic 0000000000000000
[ 1197.459374][ T7851] atomic_op ffff888048a2d198 conn xmit_atomic 0000000000000000
[ 1197.475657][ T7854] netlink: 'syz.2.27678': attribute type 4 has an invalid length.
[ 1197.574894][ T7872] netlink: 'syz.1.27683': attribute type 2 has an invalid length.
[ 1197.647411][ T7881] netlink: 'syz.0.27688': attribute type 4 has an invalid length.
[ 1197.776250][ T7905] netlink: 'syz.2.27696': attribute type 4 has an invalid length.
[ 1198.056845][ T7929] block nbd13: server does not support multiple connections per device.
[ 1198.060095][ T7929] block nbd13: shutting down sockets
[ 1198.155242][ T7940] dvmrp0: entered allmulticast mode
[ 1198.536035][ T7960] bond39: option arp_validate: invalid value (18446744073491447809)
[ 1198.540281][ T7960] bond39 (unregistering): Released all slaves
[ 1198.570834][ T7969] netlink: 'syz.0.27717': attribute type 13 has an invalid length.
[ 1198.857935][ T7969] bond0: left allmulticast mode
[ 1198.877475][ T6204] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1198.880629][ T6204] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[ 1198.884984][ T6204] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1198.894189][ T6204] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[ 1198.897728][ T6204] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1198.901080][ T6204] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[ 1198.904382][ T6204] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1198.909413][ T6204] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[ 1199.003363][ T7986] netlink: 'syz.2.27725': attribute type 4 has an invalid length.
[ 1199.254879][ T8025] Timeout policy `syz0' can only be used by L3 protocol number 34916
[ 1199.254889][ T8022] Timeout policy `syz0' can only be used by L3 protocol number 34916
[ 1199.445645][ T8062] syzkaller0: entered promiscuous mode
[ 1199.449019][ T8062] syzkaller0: entered allmulticast mode
[ 1199.665842][ T8075] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004
[ 1199.714144][ T8080] atomic_op ffff888037340198 conn xmit_atomic 0000000000000000
[ 1200.222956][ T8123] atomic_op ffff888037344198 conn xmit_atomic 0000000000000000
[ 1200.273069][ T8125] __nla_validate_parse: 27 callbacks suppressed
[ 1200.273083][ T8125] netlink: 208 bytes leftover after parsing attributes in process `syz.2.27772'.
[ 1200.461316][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27776'.
[ 1200.484190][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27778'.
[ 1200.488091][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27778'.
[ 1200.841140][ T8169] atomic_op ffff88803e8a3998 conn xmit_atomic 0000000000000000
[ 1201.327280][ T8201] netlink: 348 bytes leftover after parsing attributes in process `syz.2.27798'.
[ 1201.418953][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27801'.
[ 1201.701234][ T8246] netlink: 208 bytes leftover after parsing attributes in process `syz.0.27814'.
[ 1201.904133][ T8266] netlink: 208 bytes leftover after parsing attributes in process `syz.1.27822'.
[ 1201.946868][ T8268] netlink: 96 bytes leftover after parsing attributes in process `syz.1.27823'.
[ 1201.950493][ T8268] netlink: 32 bytes leftover after parsing attributes in process `syz.1.27823'.
[ 1202.374666][ T8307] validate_nla: 1 callbacks suppressed
[ 1202.374679][ T8307] netlink: 'syz.1.27838': attribute type 1 has an invalid length.
[ 1202.380156][ T8307] netlink: 'syz.1.27838': attribute type 2 has an invalid length.
[ 1202.731702][ T8332] 8021q: VLANs not supported on ip_vti0
[ 1203.264709][ T8368] sctp: [Deprecated]: syz.2.27863 (pid 8368) Use of int in maxseg socket option.
[ 1203.264709][ T8368] Use struct sctp_assoc_value instead
[ 1203.380796][ T8376] bond37: option min_links: invalid value (18446744073709551612)
[ 1203.383805][ T8376] bond37: option min_links: allowed values 0 - 2147483647
[ 1203.390178][ T8376] bond37 (unregistering): Released all slaves
[ 1203.548435][ T8383] netlink: 'syz.1.27868': attribute type 10 has an invalid length.
[ 1204.079842][ T8407] x_tables: duplicate underflow at hook 2
[ 1204.622486][ T8453] netlink: 'syz.1.27897': attribute type 10 has an invalid length.
[ 1205.631900][ T8542] wg1 speed is unknown, defaulting to 1000
[ 1205.635500][ T8542] syzkaller0 speed is unknown, defaulting to 1000
[ 1206.074008][ T8572] __nla_validate_parse: 17 callbacks suppressed
[ 1206.074024][ T8572] netlink: 208 bytes leftover after parsing attributes in process `syz.2.27942'.
[ 1206.143853][ T8576] netlink: 64 bytes leftover after parsing attributes in process `syz.1.27945'.
[ 1206.211369][ T8582] netlink: 56 bytes leftover after parsing attributes in process `syz.2.27947'.
[ 1206.369306][ T8595] netlink: 208 bytes leftover after parsing attributes in process `syz.2.27953'.
[ 1206.501932][ T8612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.27954'.
[ 1206.634464][ T8626] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1206.638814][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27965'.
[ 1206.711242][ T8639] netlink: 208 bytes leftover after parsing attributes in process `syz.1.27970'.
[ 1206.771670][ T8641] netlink: 'syz.2.27971': attribute type 10 has an invalid length.
[ 1206.829312][ T8650] netlink: 'syz.2.27971': attribute type 10 has an invalid length.
[ 1206.832296][ T8650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.27971'.
[ 1207.130176][ T8669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.27981'.
[ 1207.303263][ T8680] block nbd13: Unsupported socket: should be TCP or UNIX.
[ 1207.649457][ T8701] netlink: 44 bytes leftover after parsing attributes in process `syz.0.27994'.
[ 1208.507350][ T8759] netpci0: tun_chr_ioctl cmd 1074025673
[ 1208.525676][ T8759] netpci0: tun_chr_ioctl cmd 1074025673
[ 1208.527707][ T8759] netpci0: tun_chr_ioctl cmd 1074025673
[ 1208.529526][ T8759] netpci0: tun_chr_ioctl cmd 1074025673
[ 1208.531331][ T8759] netpci0: tun_chr_ioctl cmd 1074025673
[ 1208.531836][ T8763] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1208.533182][ T8759] netpci0: tun_chr_ioctl cmd 1074025673
[ 1208.547163][ T8759] netpci0: tun_chr_ioctl cmd 1074025673
[ 1208.550674][ T8759] netpci0: tun_chr_ioctl cmd 1074025673
[ 1208.911384][ T8804] netlink: 'syz.0.28027': attribute type 10 has an invalid length.
[ 1208.969423][ T8807] netlink: 'syz.0.28027': attribute type 10 has an invalid length.
[ 1209.324444][ T8829] netlink: 'syz.2.28035': attribute type 3 has an invalid length.
[ 1209.327114][ T8829] netlink: 'syz.2.28035': attribute type 1 has an invalid length.
[ 1209.342993][ T8829] can: request_module (can-proto-4) failed.
[ 1209.504225][ T8843] netlink: 'syz.2.28040': attribute type 15 has an invalid length.
[ 1210.419611][ T8914] netlink: 'syz.2.28065': attribute type 1 has an invalid length.
[ 1210.441472][ T8914] 8021q: adding VLAN 0 to HW filter on device bond37
[ 1210.487591][ T8914] 8021q: adding VLAN 0 to HW filter on device bond37
[ 1210.490731][ T8914] bond37: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 1210.499968][ T8914] bond37: (slave vxcan1): Error -95 calling set_mac_address
[ 1210.552217][ T8924] veth1: entered promiscuous mode
[ 1210.567802][ T8924] bond37: (slave veth1): Enslaving as an active interface with a down link
[ 1211.212083][ T8984] __nla_validate_parse: 14 callbacks suppressed
[ 1211.212092][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28090'.
[ 1211.247583][   T59] block nbd13: Receive control failed (result -107)
[ 1211.298824][ T8994] bond0: (slave rose0): Releasing backup interface
[ 1211.413395][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28101'.
[ 1211.417279][ T9006] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1211.431000][ T9006] syzkaller1: entered promiscuous mode
[ 1211.432922][ T9006] syzkaller1: entered allmulticast mode
[ 1211.601709][ T9029] 8021q: VLANs not supported on sit0
[ 1211.603904][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28107'.
[ 1211.686923][ T9038] netlink: 348 bytes leftover after parsing attributes in process `syz.0.28112'.
[ 1213.969513][ T9061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28120'.
[ 1214.047425][ T9070] netlink: 208 bytes leftover after parsing attributes in process `syz.0.28123'.
[ 1214.218424][ T9087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.28128'.
[ 1214.227035][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28128'.
[ 1214.231700][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28128'.
[ 1214.280183][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28130'.
[ 1214.853804][ T9157] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1214.877145][ T9157] xt_hashlimit: max too large, truncated to 1048576
[ 1216.469978][ T9256] __nla_validate_parse: 15 callbacks suppressed
[ 1216.469988][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28185'.
[ 1216.675299][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28192'.
[ 1216.729275][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28192'.
[ 1216.747632][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28193'.
[ 1216.751308][ T9278] gretap0: Device is already in use.
[ 1217.103503][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28203'.
[ 1217.182499][ T9320] netlink: 208 bytes leftover after parsing attributes in process `syz.1.28209'.
[ 1217.394784][ T9337] netlink: 'syz.2.28215': attribute type 10 has an invalid length.
[ 1217.491079][ T9337] bond37: (slave veth1): Releasing active interface
[ 1217.493020][ T9345] netlink: 208 bytes leftover after parsing attributes in process `syz.1.28217'.
[ 1217.510685][ T9346] netlink: 'syz.2.28215': attribute type 10 has an invalid length.
[ 1217.513871][ T9346] netlink: 40 bytes leftover after parsing attributes in process `syz.2.28215'.
[ 1217.701877][ T9366] netlink: 208 bytes leftover after parsing attributes in process `syz.1.28226'.
[ 1217.780295][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28230'.
[ 1217.954765][ T9400] netlink: 'syz.0.28238': attribute type 29 has an invalid length.
[ 1218.208193][ T9416] sctp: [Deprecated]: syz.0.28243 (pid 9416) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1218.208193][ T9416] Use struct sctp_sack_info instead
[ 1218.243699][ T9421] xt_hashlimit: invalid rate
[ 1218.248248][ T9423] netlink: 'syz.2.28244': attribute type 10 has an invalid length.
[ 1218.544986][ T9432] wg1 speed is unknown, defaulting to 1000
[ 1218.549554][ T9432] syzkaller0 speed is unknown, defaulting to 1000
[ 1218.575352][ T9450] netlink: 'syz.0.28254': attribute type 10 has an invalid length.
[ 1218.631128][ T9456] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[ 1218.632341][ T9464] netlink: 'syz.0.28254': attribute type 10 has an invalid length.
[ 1219.155026][ T9504] netlink: 'syz.2.28269': attribute type 12 has an invalid length.
[ 1219.210942][   T33] audit: type=1800 audit(1765960440.027:24): pid=9510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.28271" name="blkio.bfq.time_recursive" dev="tmpfs" ino=46255 res=0 errno=0
[ 1219.513870][ T9549] netlink: 'syz.1.28286': attribute type 10 has an invalid length.
[ 1219.600544][ T9560] netlink: 'syz.1.28286': attribute type 10 has an invalid length.
[ 1219.606723][ T9560] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[ 1219.706547][ T9569] bond0: (slave rose0): Enslaving as an active interface with an up link
[ 1219.735666][ T9577] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1219.739260][ T9577] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[ 1219.741444][ T9577] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[ 1220.625632][ T9642] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[ 1220.659968][ T9644] SET target dimension over the limit!
[ 1220.871934][ T9665] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1221.690615][ T9678] mac80211_hwsim hwsim48 syzkaller0: left promiscuous mode
[ 1221.693444][ T9678] mac80211_hwsim hwsim48 syzkaller0: left allmulticast mode
[ 1221.948059][ T9698] __nla_validate_parse: 18 callbacks suppressed
[ 1221.948069][ T9698] netlink: 208 bytes leftover after parsing attributes in process `syz.0.28340'.
[ 1221.953494][ T9700] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[ 1222.003294][ T9708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.28344'.
[ 1222.009649][ T9710] netlink: 'syz.1.28344': attribute type 2 has an invalid length.
[ 1222.012220][ T9710] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.28344'.
[ 1222.015473][ T9709] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.28344'.
[ 1222.306039][ T9741] sctp: [Deprecated]: syz.2.28354 (pid 9741) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1222.306039][ T9741] Use struct sctp_sack_info instead
[ 1222.312113][ T9743] sctp: [Deprecated]: syz.2.28354 (pid 9743) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1222.312113][ T9743] Use struct sctp_sack_info instead
[ 1222.319873][ T9741] netlink: 36 bytes leftover after parsing attributes in process `syz.2.28354'.
[ 1222.323031][ T9742] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.28352'.
[ 1222.326591][ T9737] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.28352'.
[ 1222.429562][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28359'.
[ 1222.764031][ T9789] validate_nla: 3 callbacks suppressed
[ 1222.764045][ T9789] netlink: 'syz.0.28370': attribute type 10 has an invalid length.
[ 1222.823190][ T9796] netlink: 'syz.0.28370': attribute type 10 has an invalid length.
[ 1222.826106][ T9796] netlink: 40 bytes leftover after parsing attributes in process `syz.0.28370'.
[ 1222.935496][ T9804] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1223.193114][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28383'.
[ 1223.360909][ T9846] netlink: 'syz.1.28389': attribute type 6 has an invalid length.
[ 1223.365266][ T9846] netlink: 'syz.1.28389': attribute type 1 has an invalid length.
[ 1223.943588][ T9904] netlink: 'syz.1.28410': attribute type 4 has an invalid length.
[ 1224.016849][ T9921] netlink: 'syz.0.28417': attribute type 1 has an invalid length.
[ 1224.019304][ T9921] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1224.151963][ T9933] bond38 (unregistering): Released all slaves
[ 1224.443514][ T9961] netlink: 'syz.2.28433': attribute type 2 has an invalid length.
[ 1224.764043][ T9998] vxcan1: entered allmulticast mode
[ 1224.902864][T10013] netlink: 'syz.0.28452': attribute type 10 has an invalid length.
[ 1224.962392][T10023] netlink: 'syz.0.28452': attribute type 10 has an invalid length.
[ 1224.971211][T10024] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1224.975190][T10024] mac80211_hwsim hwsim48 syzkaller0: entered promiscuous mode
[ 1224.978493][T10024] mac80211_hwsim hwsim48 syzkaller0: entered allmulticast mode
[ 1225.451769][T10050] Cannot find set identified by id 65534 to match
[ 1225.788565][T10083] netlink: 'syz.0.28477': attribute type 6 has an invalid length.
[ 1226.332080][T10109] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1226.335236][T10109] IPVS: set_ctl: invalid protocol: 912 0.0.0.0:143
[ 1226.338344][T10110] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1226.341824][T10110] sctp: [Deprecated]: syz.2.28487 (pid 10110) Use of int in maxseg socket option.
[ 1226.341824][T10110] Use struct sctp_assoc_value instead
[ 1227.160186][T10190] __nla_validate_parse: 32 callbacks suppressed
[ 1227.160196][T10190] netlink: 44 bytes leftover after parsing attributes in process `syz.0.28510'.
[ 1227.263936][T10204] netlink: 'syz.1.28514': attribute type 11 has an invalid length.
[ 1227.268029][T10204] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.28514'.
[ 1227.314171][T10214] x_tables: duplicate underflow at hook 1
[ 1227.318435][T10214] IPVS: length: 4096 != 24
[ 1227.386795][T10218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28517'.
[ 1227.391337][T10218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28517'.
[ 1227.881886][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28526'.
[ 1228.594213][T10288] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[ 1228.596879][T10288] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[ 1228.641457][T10294] netlink: 148 bytes leftover after parsing attributes in process `syz.0.28541'.
[ 1228.729088][T10308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28543'.
[ 1228.730230][T10307] netlink: 256 bytes leftover after parsing attributes in process `syz.1.28544'.
[ 1228.894845][T10330] netlink: 19 bytes leftover after parsing attributes in process `syz.1.28550'.
[ 1228.900443][T10331] tipc: Bearer <ib:macvlan0>: already 2 bearers with priority 10
[ 1228.903638][T10331] tipc: Bearer <ib:macvlan0>: trying with adjusted priority
[ 1228.914833][T10331] tipc: Enabling of bearer <ib:macvlan0> rejected, max 3 bearers permitted
[ 1228.922994][T10331] bridge0: entered allmulticast mode
[ 1229.109387][T10353] bridge0: entered allmulticast mode
[ 1229.293707][T10365] validate_nla: 5 callbacks suppressed
[ 1229.293720][T10365] netlink: 'syz.1.28561': attribute type 10 has an invalid length.
[ 1230.137171][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28569'.
[ 1230.275399][T10414] netlink: 'syz.2.28575': attribute type 10 has an invalid length.
[ 1230.923993][T10457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1231.134346][T10470] IPVS: stopping backup sync thread 12933 ...
[ 1231.298013][T10489] netlink: 'syz.2.28600': attribute type 10 has an invalid length.
[ 1231.452855][T10518] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[ 1231.455793][T10518] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[ 1231.459047][T10517] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1232.197169][T10534] openvswitch: netlink: IP tunnel dst address not specified
[ 1232.319018][T10542] netlink: 'syz.2.28616': attribute type 10 has an invalid length.
[ 1232.522481][T10553] netlink: 'syz.1.28619': attribute type 23 has an invalid length.
[ 1232.536771][T10553] netlink: 'syz.1.28619': attribute type 23 has an invalid length.
[ 1232.715005][T10589] SET target dimension over the limit!
[ 1232.794133][T10598] SET target dimension over the limit!
[ 1232.824614][T10598] __nla_validate_parse: 10 callbacks suppressed
[ 1232.824627][T10598] netlink: 88 bytes leftover after parsing attributes in process `syz.1.28631'.
[ 1232.830366][T10598] netlink: 116 bytes leftover after parsing attributes in process `syz.1.28631'.
[ 1232.975984][T10619] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[ 1233.002678][T10616] bond44: option arp_validate: invalid value (18446744073491447809)
[ 1233.007226][T10616] bond44 (unregistering): Released all slaves
[ 1233.035515][T10618] bond44: option arp_validate: invalid value (18446744073491447809)
[ 1233.039096][T10618] bond44 (unregistering): Released all slaves
[ 1233.185731][T10631] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1233.342362][T10652] syzkaller0: entered promiscuous mode
[ 1233.345124][T10652] syzkaller0: entered allmulticast mode
[ 1233.924099][T10696] x_tables: duplicate underflow at hook 4
[ 1233.934895][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28661'.
[ 1233.990732][T10702] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1234.103348][T10719] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1234.244094][T10736] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.28674'.
[ 1234.349722][T10749] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 1, id = 0
[ 1234.491069][T10757] netlink: 'syz.2.28684': attribute type 10 has an invalid length.
[ 1234.955721][T10789] netlink: 'syz.1.28693': attribute type 4 has an invalid length.
[ 1234.958830][T10789] netlink: 224 bytes leftover after parsing attributes in process `syz.1.28693'.
[ 1235.362301][T10830] netlink: 'syz.0.28701': attribute type 5 has an invalid length.
[ 1235.540989][T10855] geneve0: entered allmulticast mode
[ 1235.713764][T10877] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[ 1235.834674][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28718'.
[ 1235.834680][T10902] set match dimension is over the limit!
[ 1235.834757][T10902] set match dimension is over the limit!
[ 1235.842529][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28719'.
[ 1235.843635][T10902] set match dimension is over the limit!
[ 1235.851068][T10902] set match dimension is over the limit!
[ 1235.852216][T10905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28719'.
[ 1235.852995][T10902] set match dimension is over the limit!
[ 1235.856265][T10905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28719'.
[ 1235.859869][T10902] set match dimension is over the limit!
[ 1235.862243][T10905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28719'.
[ 1235.864558][T10902] set match dimension is over the limit!
[ 1235.869443][T10902] set match dimension is over the limit!
[ 1235.871330][T10902] set match dimension is over the limit!
[ 1235.873403][T10902] set match dimension is over the limit!
[ 1236.292292][T10952] x_tables: duplicate underflow at hook 2
[ 1236.359395][T10955] netlink: 'syz.0.28735': attribute type 21 has an invalid length.
[ 1236.993167][T10977] netlink: 'syz.2.28740': attribute type 10 has an invalid length.
[ 1237.050525][T10977] netlink: 'syz.2.28740': attribute type 10 has an invalid length.
[ 1237.151311][T10980] nbd: must specify at least one socket
[ 1237.215043][T10985] netlink: 'syz.0.28741': attribute type 12 has an invalid length.
[ 1237.228452][T10985] netlink: 'syz.0.28741': attribute type 4 has an invalid length.
[ 1237.379101][T28504] smc: removing ib device syz1
[ 1237.382462][T10999] bond0 (unregistering): Released all slaves
[ 1237.869204][   T33] audit: type=1800 audit(1765960458.687:25): pid=11004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.28750" name="memory.events" dev="tmpfs" ino=47136 res=0 errno=0
[ 1238.045344][T11019] 8021q: VLANs not supported on ip_vti0
[ 1238.119584][T11026] wg1 speed is unknown, defaulting to 1000
[ 1238.122053][T11026] syzkaller0 speed is unknown, defaulting to 1000
[ 1238.424767][T11043] openvswitch: netlink: Message has 127 unknown bytes.
[ 1238.464287][T11045] lo: entered allmulticast mode
[ 1238.469185][T11045] lo: left allmulticast mode
[ 1238.471772][T11046] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1238.555917][T11051] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1238.562237][T11051] syzkaller0: entered promiscuous mode
[ 1238.564261][T11051] syzkaller0: entered allmulticast mode
[ 1241.623282][T11074] __nla_validate_parse: 69 callbacks suppressed
[ 1241.623293][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28772'.
[ 1241.902729][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28779'.
[ 1242.400144][T11120] bond38: Removing last arp target with arp_interval on
[ 1242.652322][T11132] netlink: 'syz.2.28789': attribute type 13 has an invalid length.
[ 1242.755754][T11129] netlink: 71 bytes leftover after parsing attributes in process `syz.2.28789'.
[ 1242.775994][T11129] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.28789'.
[ 1242.779881][T11129] SET target dimension over the limit!
[ 1242.899436][T11148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28795'.
[ 1242.903809][T11148] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1242.982398][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28797'.
[ 1242.985832][T11152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28797'.
[ 1243.488108][T11160] netlink: 40 bytes leftover after parsing attributes in process `syz.2.28800'.
[ 1243.491423][T11160] netlink: 560 bytes leftover after parsing attributes in process `syz.2.28800'.
[ 1244.489538][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28808'.
[ 1245.181393][T11187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1246.843788][T11298] __nla_validate_parse: 4 callbacks suppressed
[ 1246.843803][T11298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28834'.
[ 1247.030994][T11318] netlink: 16 bytes leftover after parsing attributes in process `syz.0.28841'.
[ 1247.032370][T11315] pim6reg1: entered promiscuous mode
[ 1247.035990][T11315] pim6reg1: entered allmulticast mode
[ 1247.040426][T11318] netlink: 456 bytes leftover after parsing attributes in process `syz.0.28841'.
[ 1247.040753][T11315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28840'.
[ 1247.054665][T11315] syzkaller0: entered promiscuous mode
[ 1247.058782][T11315] syzkaller0: entered allmulticast mode
[ 1247.250463][T11324] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.28842'.
[ 1247.417328][T11332] syzkaller0: entered promiscuous mode
[ 1247.419747][T11332] syzkaller0: entered allmulticast mode
[ 1247.489441][T11332] netlink: 'syz.2.28844': attribute type 16 has an invalid length.
[ 1247.492611][T11332] netlink: 'syz.2.28844': attribute type 17 has an invalid length.
[ 1247.507926][T11332] tipc: Resetting bearer <eth:gre0>
[ 1247.527761][T11332] tipc: Resetting bearer <eth:ip6gre0>
[ 1247.533342][T11332] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1247.557668][T11332] netlink: 68 bytes leftover after parsing attributes in process `syz.2.28844'.
[ 1247.561447][T11332] netlink: 64 bytes leftover after parsing attributes in process `syz.2.28844'.
[ 1247.565228][ T5924] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1248.036812][ T5924] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1249.021249][T10954] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1249.214969][T11372] netlink: 6 bytes leftover after parsing attributes in process `syz.2.28853'.
[ 1249.251538][T11374] netlink: 232 bytes leftover after parsing attributes in process `syz.2.28854'.
[ 1249.789959][T11404] netlink: 208 bytes leftover after parsing attributes in process `syz.2.28865'.
[ 1250.068300][ T1933] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1250.075981][ T1933] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1250.295825][T11430] dvmrp0: entered allmulticast mode
[ 1250.323527][T11429] dvmrp0: left allmulticast mode
[ 1250.681025][T11447] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1251.114096][T11499] netlink: 'syz.0.28898': attribute type 21 has an invalid length.
[ 1251.117487][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1251.598455][T11543] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1252.674694][T11578] __nla_validate_parse: 5 callbacks suppressed
[ 1252.674705][T11578] netlink: 208 bytes leftover after parsing attributes in process `syz.2.28922'.
[ 1252.812361][   T57] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1252.820236][   T57] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1252.825566][   T57] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1252.829353][   T57] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1252.832813][   T57] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1252.848178][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1252.851245][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1252.854423][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1252.858238][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1252.861507][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1252.900043][T11586] wg1 speed is unknown, defaulting to 1000
[ 1252.903643][T11586] syzkaller0 speed is unknown, defaulting to 1000
[ 1253.052775][T11586] chnl_net:caif_netlink_parms(): no params data found
[ 1253.118388][T11586] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1253.121074][T11586] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1253.123882][T11586] bridge_slave_0: entered allmulticast mode
[ 1253.127428][T11586] bridge_slave_0: entered promiscuous mode
[ 1253.131431][T11586] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1253.134037][T11586] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1253.137019][T11586] bridge_slave_1: entered allmulticast mode
[ 1253.140307][T11586] bridge_slave_1: entered promiscuous mode
[ 1253.162600][T11586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1253.170528][T11586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1253.192079][T11586] team0: Port device team_slave_0 added
[ 1253.196181][T11586] team0: Port device team_slave_1 added
[ 1253.215244][T11586] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1253.218293][T11586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1253.228258][T11586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1253.238928][T11586] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1253.241371][T11586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1253.255055][T11586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1253.289835][T11586] hsr_slave_0: entered promiscuous mode
[ 1253.292643][T11586] hsr_slave_1: entered promiscuous mode
[ 1253.295170][T11586] debugfs: 'hsr0' already exists in 'hsr'
[ 1253.297719][T11586] Cannot create hsr debugfs directory
[ 1253.450729][T11586] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1253.456688][T11586] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1253.461981][T11586] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1253.467720][T11586] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1253.493511][T11586] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1253.496222][T11586] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1253.499096][T11586] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1253.501839][T11586] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1253.554457][T11586] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1253.564512][T11304] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1253.568941][T11304] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1253.580221][T11586] 8021q: adding VLAN 0 to HW filter on device team0
[ 1253.586731][T11304] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1253.589350][T11304] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1253.594909][T11304] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1253.597184][T11304] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1253.696740][T11586] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1253.724458][T11586] veth0_vlan: entered promiscuous mode
[ 1253.729454][T11586] veth1_vlan: entered promiscuous mode
[ 1253.746948][T11586] veth0_macvtap: entered promiscuous mode
[ 1253.751315][T11586] veth1_macvtap: entered promiscuous mode
[ 1253.763973][T11586] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1253.777120][T11586] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1253.785746][ T1933] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1253.796771][ T1933] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1253.800488][ T1933] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1253.819747][ T1933] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1253.864597][T11304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1253.871019][T11304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1253.890913][T28960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1253.893844][T28960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1254.033325][T11667] netlink: 'syz.0.28941': attribute type 8 has an invalid length.
[ 1254.037364][T11667] sch_fq: defrate 0 ignored.
[ 1254.043911][T11665] netlink: 277 bytes leftover after parsing attributes in process `syz.3.28942'.
[ 1254.142029][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28944'.
[ 1254.146233][T11674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1254.148581][T11674] IPv6: NLM_F_CREATE should be set when creating new route
[ 1254.151692][T11674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1254.153974][T11674] IPv6: NLM_F_CREATE should be set when creating new route
[ 1254.467111][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1254.500915][T11689] netlink: 40 bytes leftover after parsing attributes in process `syz.2.28950'.
[ 1254.632238][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28950'.
[ 1254.638621][T11689] openvswitch: netlink: EtherType 50a is less than min 600
[ 1254.730137][T11692] netlink: 232 bytes leftover after parsing attributes in process `syz.2.28951'.
[ 1254.932569][T11701] netlink: 36 bytes leftover after parsing attributes in process `syz.2.28955'.
[ 1254.946469][ T5877] Bluetooth: hci3: command tx timeout
[ 1255.116000][T11715] netlink: 'syz.2.28959': attribute type 10 has an invalid length.
[ 1255.119521][T11715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.28959'.
[ 1255.122745][T11715] geneve0: left allmulticast mode
[ 1255.124862][T11715] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1255.159126][T11717] netlink: 3320 bytes leftover after parsing attributes in process `syz.0.28960'.
[ 1255.162561][T11717] openvswitch: netlink: Flow key attr not present in new flow.
[ 1255.288822][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28963'.
[ 1256.190990][T11778] bridge_slave_0: mtu less than device minimum
[ 1256.203962][T11778] netlink: 'syz.3.28982': attribute type 1 has an invalid length.
[ 1257.026505][ T5877] Bluetooth: hci3: command tx timeout
[ 1258.303521][T11901] netlink: 'syz.2.29028': attribute type 1 has an invalid length.
[ 1258.305945][T11901] netlink: 'syz.2.29028': attribute type 2 has an invalid length.
[ 1258.520748][T11925] netlink: 'syz.2.29038': attribute type 1 has an invalid length.
[ 1258.524046][T11925] __nla_validate_parse: 15 callbacks suppressed
[ 1258.524142][T11925] netlink: 224 bytes leftover after parsing attributes in process `syz.2.29038'.
[ 1258.612384][T11941] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[ 1258.615136][T11941] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[ 1258.731461][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29049'.
[ 1258.781601][T11964] netlink: 'syz.3.29050': attribute type 1 has an invalid length.
[ 1258.898263][T11973] 8021q: VLANs not supported on lo
[ 1259.106995][ T5877] Bluetooth: hci3: command tx timeout
[ 1259.129377][T11989] netlink: 'syz.0.29059': attribute type 1 has an invalid length.
[ 1259.134586][T11989] netlink: 'syz.0.29059': attribute type 1 has an invalid length.
[ 1259.140167][T11989] netlink: 'syz.0.29059': attribute type 1 has an invalid length.
[ 1259.143900][T11989] netlink: 'syz.0.29059': attribute type 1 has an invalid length.
[ 1259.149746][T11989] netlink: 'syz.0.29059': attribute type 1 has an invalid length.
[ 1259.165188][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29057'.
[ 1259.173947][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29057'.
[ 1259.283079][T11999] netlink: 168 bytes leftover after parsing attributes in process `syz.2.29062'.
[ 1259.357534][T12001] wg1 speed is unknown, defaulting to 1000
[ 1259.360363][T12001] syzkaller0 speed is unknown, defaulting to 1000
[ 1259.551772][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29070'.
[ 1259.554784][T12027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29070'.
[ 1259.711545][T12038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.29071'.
[ 1259.715680][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29074'.
[ 1259.778244][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29076'.
[ 1259.881828][T12059] syzkaller1: entered promiscuous mode
[ 1259.884205][T12059] syzkaller1: entered allmulticast mode
[ 1260.708816][T12064] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[ 1260.861118][ T1933] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 1260.927334][T12080] dvmrp1: entered allmulticast mode
[ 1261.193014][ T5877] Bluetooth: hci3: command tx timeout
[ 1261.997832][T12122] syzkaller1: entered promiscuous mode
[ 1262.000077][T12122] syzkaller1: entered allmulticast mode
[ 1262.162233][T12138] validate_nla: 32 callbacks suppressed
[ 1262.162248][T12138] netlink: 'syz.3.29106': attribute type 1 has an invalid length.
[ 1262.169468][T12138] netlink: 'syz.3.29106': attribute type 4 has an invalid length.
[ 1262.173257][T12138] netlink: 'syz.3.29106': attribute type 1 has an invalid length.
[ 1262.179070][T12138] netlink: 'syz.3.29106': attribute type 4 has an invalid length.
[ 1262.584589][T12170] syzkaller0: entered promiscuous mode
[ 1262.586680][T12170] syzkaller0: entered allmulticast mode
[ 1262.601105][T12170] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1262.847548][T12183] netlink: 'syz.3.29124': attribute type 1 has an invalid length.
[ 1262.947398][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1263.010532][T12194] syzkaller0: entered promiscuous mode
[ 1263.013088][T12194] syzkaller0: entered allmulticast mode
[ 1263.596572][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1264.558359][T12219] __nla_validate_parse: 17 callbacks suppressed
[ 1264.558375][T12219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29138'.
[ 1264.600646][T12221] netlink: 208 bytes leftover after parsing attributes in process `syz.3.29139'.
[ 1264.787085][T12242] Bluetooth: MGMT ver 1.23
[ 1265.012858][T12268] netlink: 36 bytes leftover after parsing attributes in process `syz.0.29153'.
[ 1265.018127][T12268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.29153'.
[ 1265.131313][T12278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.29158'.
[ 1265.134891][T12277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.29158'.
[ 1265.155263][T12276] wg1 speed is unknown, defaulting to 1000
[ 1265.162265][T12276] syzkaller0 speed is unknown, defaulting to 1000
[ 1265.795374][T12285] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 1265.801320][T12285] CPU: 1 UID: 0 PID: 12285 Comm: syz.0.29160 Not tainted syzkaller #0 PREEMPT(full) 
[ 1265.801341][T12285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1265.801349][T12285] Call Trace:
[ 1265.801355][T12285]  <TASK>
[ 1265.801360][T12285]  dump_stack_lvl+0x189/0x250
[ 1265.801383][T12285]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1265.801399][T12285]  ? __pfx__printk+0x10/0x10
[ 1265.801419][T12285]  ? kernfs_path_from_node+0x2f/0x290
[ 1265.801437][T12285]  ? kernfs_path_from_node+0x250/0x290
[ 1265.801450][T12285]  ? kernfs_path_from_node+0x2f/0x290
[ 1265.801469][T12285]  sysfs_warn_dup+0x8e/0xa0
[ 1265.801487][T12285]  sysfs_do_create_link_sd+0xc0/0x110
[ 1265.801502][T12285]  device_add_class_symlinks+0x1cf/0x240
[ 1265.801521][T12285]  device_add+0x475/0xb50
[ 1265.801542][T12285]  wiphy_register+0x1d2e/0x2d20
[ 1265.801570][T12285]  ? __pfx_wiphy_register+0x10/0x10
[ 1265.801585][T12285]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1265.801625][T12285]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1265.801650][T12285]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1265.801670][T12285]  ieee80211_register_hw+0x3473/0x40d0
[ 1265.801697][T12285]  ? ieee80211_register_hw+0x1441/0x40d0
[ 1265.801721][T12285]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1265.801737][T12285]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1265.801753][T12285]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1265.801775][T12285]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1265.801794][T12285]  ? __hrtimer_setup+0x181/0x200
[ 1265.801809][T12285]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1265.801829][T12285]  mac80211_hwsim_new_radio+0x2f8b/0x5240
[ 1265.801870][T12285]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1265.801884][T12285]  ? __kmalloc_node_track_caller_noprof+0x58b/0x810
[ 1265.801900][T12285]  ? kstrndup+0xbf/0x160
[ 1265.801919][T12285]  hwsim_new_radio_nl+0xf5b/0x1bd0
[ 1265.801938][T12285]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1265.801963][T12285]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1265.801981][T12285]  ? rcu_is_watching+0x15/0xb0
[ 1265.801996][T12285]  ? __nla_parse+0x40/0x60
[ 1265.802012][T12285]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1265.802054][T12285]  genl_family_rcv_msg_doit+0x215/0x300
[ 1265.802077][T12285]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1265.802102][T12285]  ? bpf_lsm_capable+0x9/0x20
[ 1265.802114][T12285]  ? security_capable+0x7e/0x2e0
[ 1265.802139][T12285]  genl_rcv_msg+0x60e/0x790
[ 1265.802158][T12285]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1265.802173][T12285]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1265.802198][T12285]  netlink_rcv_skb+0x208/0x470
[ 1265.802212][T12285]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1265.802229][T12285]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1265.802254][T12285]  ? down_read+0x274/0x2e0
[ 1265.802268][T12285]  ? genl_rcv+0xd/0x40
[ 1265.802285][T12285]  genl_rcv+0x28/0x40
[ 1265.802298][T12285]  netlink_unicast+0x82f/0x9e0
[ 1265.802320][T12285]  ? __pfx_netlink_unicast+0x10/0x10
[ 1265.802340][T12285]  ? netlink_sendmsg+0x642/0xb30
[ 1265.802350][T12285]  ? skb_put+0x11b/0x210
[ 1265.802369][T12285]  netlink_sendmsg+0x805/0xb30
[ 1265.802390][T12285]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1265.802404][T12285]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1265.802417][T12285]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1265.802433][T12285]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1265.802447][T12285]  __sock_sendmsg+0x21c/0x270
[ 1265.802463][T12285]  ____sys_sendmsg+0x505/0x820
[ 1265.802486][T12285]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1265.802511][T12285]  ? import_iovec+0x74/0xa0
[ 1265.802527][T12285]  ___sys_sendmsg+0x21f/0x2a0
[ 1265.802543][T12285]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1265.802563][T12285]  ? futex_wait+0x285/0x360
[ 1265.802621][T12285]  ? __fget_files+0x2a/0x420
[ 1265.802635][T12285]  ? __fget_files+0x3a0/0x420
[ 1265.802657][T12285]  __x64_sys_sendmsg+0x19b/0x260
[ 1265.802676][T12285]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1265.802736][T12285]  ? do_syscall_64+0xbe/0xf80
[ 1265.802758][T12285]  do_syscall_64+0xfa/0xf80
[ 1265.802781][T12285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1265.802795][T12285]  ? exc_page_fault+0xab/0x100
[ 1265.802812][T12285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1265.802824][T12285] RIP: 0033:0x7fdaa5d8f7c9
[ 1265.802838][T12285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1265.802848][T12285] RSP: 002b:00007fdaa6c29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1265.802862][T12285] RAX: ffffffffffffffda RBX: 00007fdaa5fe5fa0 RCX: 00007fdaa5d8f7c9
[ 1265.802872][T12285] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[ 1265.802880][T12285] RBP: 00007fdaa5df297f R08: 0000000000000000 R09: 0000000000000000
[ 1265.802888][T12285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1265.802894][T12285] R13: 00007fdaa5fe6038 R14: 00007fdaa5fe5fa0 R15: 00007ffce4498aa8
[ 1265.802918][T12285]  </TASK>
[ 1266.395857][T12321] tipc: Started in network mode
[ 1266.398196][T12321] tipc: Node identity 0a6c0f2dbf77, cluster identity 4711
[ 1266.401054][T12321] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1266.406719][T12321] tipc: Disabling bearer <eth:syzkaller0>
[ 1266.415481][T12323] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1267.211160][T12345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.29179'.
[ 1267.216007][T12345] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1267.273419][T12352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.29180'.
[ 1267.607411][T12372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29186'.
[ 1267.717467][T12372] netlink: 'syz.3.29186': attribute type 3 has an invalid length.
[ 1267.810824][T12381] netlink: 516 bytes leftover after parsing attributes in process `syz.0.29189'.
[ 1268.067383][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1268.344623][T12412] netlink: 'syz.0.29202': attribute type 1 has an invalid length.
[ 1268.350358][T12412] netlink: 'syz.0.29202': attribute type 1 has an invalid length.
[ 1268.381242][T12418] Cannot find del_set index 49151 as target
[ 1268.404610][T12422] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[ 1268.407068][T12422] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[ 1268.461102][T12426] netlink: 'syz.0.29208': attribute type 1 has an invalid length.
[ 1268.571974][T12437] block nbd0: Unsupported socket: should be TCP or UNIX.
[ 1268.861314][T12456] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1268.948857][T12460] veth0: entered promiscuous mode
[ 1269.110440][T12482] netlink: 'syz.0.29229': attribute type 2 has an invalid length.
[ 1269.119822][T12482] netlink: 'syz.0.29229': attribute type 1 has an invalid length.
[ 1269.128208][T12482] netlink: 'syz.0.29229': attribute type 1 has an invalid length.
[ 1269.239560][T12498] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000
[ 1269.324024][T12504] netlink: 'syz.2.29238': attribute type 21 has an invalid length.
[ 1269.332165][T12504] netlink: 'syz.2.29238': attribute type 1 has an invalid length.
[ 1269.626869][T12534] netlink: 'syz.0.29246': attribute type 1 has an invalid length.
[ 1269.685946][T12534] gretap7: entered allmulticast mode
[ 1269.696990][T12534] bond39: (slave gretap7): making interface the new active one
[ 1269.701012][T12534] bond39: (slave gretap7): Enslaving as an active interface with an up link
[ 1270.003821][T12573] sctp: [Deprecated]: syz.3.29260 (pid 12573) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1270.003821][T12573] Use struct sctp_sack_info instead
[ 1270.254299][T12591] __nla_validate_parse: 11 callbacks suppressed
[ 1270.254314][T12591] netlink: 28 bytes leftover after parsing attributes in process `syz.0.29266'.
[ 1270.261162][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29266'.
[ 1270.264599][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29266'.
[ 1270.268151][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29266'.
[ 1270.271338][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29266'.
[ 1270.274106][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29266'.
[ 1270.276806][T12591] netlink: 6236 bytes leftover after parsing attributes in process `syz.0.29266'.
[ 1270.321822][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29268'.
[ 1270.325523][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29268'.
[ 1270.578968][T12611] wg1 speed is unknown, defaulting to 1000
[ 1270.582079][T12611] syzkaller0 speed is unknown, defaulting to 1000
[ 1270.770984][T12630] tc_dump_action: action bad kind
[ 1270.891953][T12639] syzkaller0: entered promiscuous mode
[ 1270.893863][T12639] syzkaller0: entered allmulticast mode
[ 1270.901849][T12639] netlink: 44 bytes leftover after parsing attributes in process `syz.3.29283'.
[ 1271.424433][T12676] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1271.506847][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1271.572855][T12682] ipvlan0: entered promiscuous mode
[ 1271.575265][T12682] bridge0: port 1(ipvlan0) entered blocking state
[ 1271.577681][T12682] bridge0: port 1(ipvlan0) entered disabled state
[ 1271.579844][T12682] ipvlan0: entered allmulticast mode
[ 1271.582551][T12682] ipvlan0: left allmulticast mode
[ 1272.110808][T12725] wg1 speed is unknown, defaulting to 1000
[ 1272.113385][T12725] syzkaller0 speed is unknown, defaulting to 1000
[ 1272.306705][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1272.641645][T12746] xt_CONNSECMARK: invalid mode: 66
[ 1272.772673][T12751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1273.179047][T12778] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1273.252610][T12783] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1273.254978][T12783] IPv6: NLM_F_CREATE should be set when creating new route
[ 1273.257349][T12783] IPv6: NLM_F_CREATE should be set when creating new route
[ 1273.408358][T12802] syzkaller1: entered promiscuous mode
[ 1273.410429][T12802] syzkaller1: entered allmulticast mode
[ 1274.535800][T12836] veth1_to_bridge: Caught tx_queue_len zero misconfig
[ 1274.562843][T12837] lo: Caught tx_queue_len zero misconfig
[ 1275.111445][T12892] tipc: MTU too low for tipc bearer
[ 1275.115312][T12892] tipc: MTU too low for tipc bearer
[ 1275.240385][T12904] tipc: Resetting bearer <eth:ip6gre0>
[ 1275.242743][T12904] ip6gre0: entered promiscuous mode
[ 1275.248153][T12904] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[ 1275.257266][T12904] __nla_validate_parse: 16 callbacks suppressed
[ 1275.257281][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29368'.
[ 1275.591608][T12930] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1275.907444][T12955] validate_nla: 4 callbacks suppressed
[ 1275.907454][T12955] netlink: 'syz.3.29382': attribute type 1 has an invalid length.
[ 1275.912502][T12955] netlink: 228 bytes leftover after parsing attributes in process `syz.3.29382'.
[ 1276.018659][T12967] sctp: [Deprecated]: syz.3.29386 (pid 12967) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1276.018659][T12967] Use struct sctp_sack_info instead
[ 1276.168675][T12977] bond40: entered allmulticast mode
[ 1276.170804][T12977] 8021q: adding VLAN 0 to HW filter on device bond40
[ 1276.178859][T12984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29391'.
[ 1276.195360][T12985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29391'.
[ 1276.244316][T12992] netlink: 'syz.3.29395': attribute type 1 has an invalid length.
[ 1276.274914][T12992] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1276.299806][T12992] bond1: (slave ip6erspan0): making interface the new active one
[ 1276.303436][T12992] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[ 1276.308609][T12990] syzkaller0: entered promiscuous mode
[ 1276.310325][T12990] syzkaller0: entered allmulticast mode
[ 1276.357754][T12990] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1276.364864][T12997] netlink: 36 bytes leftover after parsing attributes in process `syz.0.29397'.
[ 1276.395268][T12997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.29397'.
[ 1276.618070][T13018] netlink: 36 bytes leftover after parsing attributes in process `syz.2.29405'.
[ 1276.627771][T13018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.29405'.
[ 1276.685167][T13028] syzkaller0: entered promiscuous mode
[ 1276.689064][T13028] syzkaller0: entered allmulticast mode
[ 1276.692231][T13028] netlink: 56 bytes leftover after parsing attributes in process `syz.2.29408'.
[ 1276.707835][T13028] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1276.741459][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29410'.
[ 1277.154091][T13060] netlink: 'syz.2.29419': attribute type 10 has an invalid length.
[ 1277.433946][T13088] syzkaller0: entered promiscuous mode
[ 1277.438621][T13088] syzkaller0: entered allmulticast mode
[ 1277.456447][T13088] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1277.860652][T13104] netlink: 'syz.2.29433': attribute type 5 has an invalid length.
[ 1278.051578][T13114] netlink: 'syz.0.29437': attribute type 2 has an invalid length.
[ 1278.062449][T13114] netlink: 'syz.0.29437': attribute type 2 has an invalid length.
[ 1278.245390][T13124] netlink: 'syz.0.29441': attribute type 3 has an invalid length.
[ 1278.333172][ T5939] IPVS: starting estimator thread 0...
[ 1278.355993][T13147] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1278.413712][T13152] netlink: 'syz.0.29450': attribute type 13 has an invalid length.
[ 1278.416440][T13145] IPVS: using max 50 ests per chain, 120000 per kthread
[ 1278.637453][T13173] syzkaller0: entered promiscuous mode
[ 1278.639205][T13173] syzkaller0: entered allmulticast mode
[ 1278.643516][T13173] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1278.647942][T13171] tipc: Resetting bearer <eth:syzkaller0>
[ 1278.660879][T13171] tipc: Disabling bearer <eth:syzkaller0>
[ 1278.888203][T13203] syzkaller1: entered promiscuous mode
[ 1278.890320][T13203] syzkaller1: entered allmulticast mode
[ 1278.913033][T13201] netlink: 'syz.3.29464': attribute type 1 has an invalid length.
[ 1279.081764][T13217] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1279.085081][T13218] syzkaller1: entered promiscuous mode
[ 1279.087492][T13218] syzkaller1: entered allmulticast mode
[ 1279.090692][T13218] openvswitch: netlink: Flow key attr not present in new flow.
[ 1279.094624][T13218] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001
[ 1279.094672][T13217] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[ 1279.942224][T13231] netem: invalid attributes len -18
[ 1279.944490][T13231] netem: change failed
[ 1280.254177][T13248] netlink: 'syz.2.29482': attribute type 21 has an invalid length.
[ 1280.876935][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1281.149237][T13268] mac80211_hwsim hwsim85 wlan1: entered allmulticast mode
[ 1281.175439][T13268] bridge_slave_0: left allmulticast mode
[ 1281.178226][T13268] bridge_slave_0: left promiscuous mode
[ 1281.180151][T13268] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1281.189681][T13268] bridge_slave_1: left allmulticast mode
[ 1281.191848][T13268] bridge_slave_1: left promiscuous mode
[ 1281.193672][T13268] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1281.206991][T13268] bond0: (slave bond_slave_0): Releasing backup interface
[ 1281.215606][T13268] bond0: (slave bond_slave_1): Releasing backup interface
[ 1281.235276][T13268] team0: Port device team_slave_0 removed
[ 1281.240848][T13278] validate_nla: 4 callbacks suppressed
[ 1281.240861][T13278] netlink: 'syz.3.29487': attribute type 10 has an invalid length.
[ 1281.246242][T13268] team0: Port device team_slave_1 removed
[ 1281.253073][T13268] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1281.255758][T13268] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1281.274287][T13268] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1281.277382][T13268] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1281.281319][T13268] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1281.292995][T13278] mac80211_hwsim hwsim85 wlan1: left allmulticast mode
[ 1281.326571][T13278] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1281.345415][T13278] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1281.357387][T13287] xt_TCPMSS: Only works on TCP SYN packets
[ 1281.552654][T13305] __nla_validate_parse: 16 callbacks suppressed
[ 1281.552671][T13305] netlink: 56 bytes leftover after parsing attributes in process `syz.0.29499'.
[ 1281.571650][T13305] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1281.819584][T13319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29503'.
[ 1281.825802][   T33] audit: type=1800 audit(1765960502.637:26): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.29503" name="blkio.bfq.time_recursive" dev="tmpfs" ino=52312 res=0 errno=0
[ 1282.190636][T13351] rdma_rxe: rxe_newlink: failed to add bond0
[ 1282.352111][T13364] mac80211_hwsim hwsim86 wlan1: entered allmulticast mode
[ 1282.359793][T13364] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1282.369673][T13364] netlink: 'syz.0.29518': attribute type 10 has an invalid length.
[ 1282.794031][T13399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.29532'.
[ 1282.797200][T13399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.29532'.
[ 1282.812391][T13398] vlan0: entered promiscuous mode
[ 1282.815343][T13401] netlink: 228 bytes leftover after parsing attributes in process `syz.2.29534'.
[ 1282.827787][T13401] netlink: 228 bytes leftover after parsing attributes in process `syz.2.29534'.
[ 1282.841674][T13401] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1282.867812][T13401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.29534'.
[ 1282.889224][T13405] netlink: 'syz.3.29536': attribute type 10 has an invalid length.
[ 1282.944393][T13408] netlink: 56 bytes leftover after parsing attributes in process `syz.0.29538'.
[ 1282.960979][T13408] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1283.049765][T13419] syzkaller0: entered promiscuous mode
[ 1283.051841][T13419] syzkaller0: entered allmulticast mode
[ 1283.064414][T13415] wg1 speed is unknown, defaulting to 1000
[ 1283.077924][T13415] syzkaller0 speed is unknown, defaulting to 1000
[ 1283.140724][T13428] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1283.717038][T13450] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1283.725725][T13450] netlink: 'syz.2.29549': attribute type 10 has an invalid length.
[ 1283.752035][T11651] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1283.777131][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29550'.
[ 1284.709874][ T1781] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1285.405332][T13459] veth0_to_bridge: Caught tx_queue_len zero misconfig
[ 1285.609999][T13474] wg1 speed is unknown, defaulting to 1000
[ 1285.613403][T13474] syzkaller0 speed is unknown, defaulting to 1000
[ 1285.786873][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29559'.
[ 1286.762678][T13501] mac80211_hwsim hwsim85 wlan1: entered allmulticast mode
[ 1286.781044][T13501] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1286.800150][T13501] netlink: 'syz.3.29565': attribute type 10 has an invalid length.
[ 1286.803133][T13501] mac80211_hwsim hwsim85 wlan1: left allmulticast mode
[ 1286.832304][T13503] __nla_validate_parse: 1 callbacks suppressed
[ 1286.832314][T13503] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29566'.
[ 1286.939105][T13517] netlink: 40 bytes leftover after parsing attributes in process `syz.3.29571'.
[ 1288.172084][T13553] netlink: 52 bytes leftover after parsing attributes in process `syz.2.29583'.
[ 1288.178055][T13553] netlink: 52 bytes leftover after parsing attributes in process `syz.2.29583'.
[ 1289.032691][T13577] wg1 speed is unknown, defaulting to 1000
[ 1289.036607][T13577] syzkaller0 speed is unknown, defaulting to 1000
[ 1289.167243][T13583] netlink: 'syz.3.29591': attribute type 4 has an invalid length.
[ 1289.874484][T13592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29593'.
[ 1289.935788][T13596] netlink: 168 bytes leftover after parsing attributes in process `syz.2.29595'.
[ 1289.940569][T13596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.29595'.
[ 1289.944606][T13597] netlink: 168 bytes leftover after parsing attributes in process `syz.2.29595'.
[ 1289.948807][T13597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.29595'.
[ 1290.089426][T13604] netlink: 'syz.3.29597': attribute type 1 has an invalid length.
[ 1290.092913][T13604] netlink: 228 bytes leftover after parsing attributes in process `syz.3.29597'.
[ 1290.196909][T11650] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1290.596841][ T5939] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1291.359285][T13655] netlink: 'syz.2.29612': attribute type 2 has an invalid length.
[ 1291.447147][T13661] netlink: 'syz.2.29613': attribute type 4 has an invalid length.
[ 1291.524821][T13665] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1291.799939][T13687] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1291.821273][T13686] tipc: Disabling bearer <eth:syzkaller0>
[ 1291.863154][T13691] vlan0: entered promiscuous mode
[ 1291.865302][T13691] bond17: entered promiscuous mode
[ 1291.907803][T13693] __nla_validate_parse: 5 callbacks suppressed
[ 1291.907819][T13693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.29628'.
[ 1291.917527][T13693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29628'.
[ 1291.921715][T13693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29628'.
[ 1291.958084][T13699] netlink: 'syz.2.29631': attribute type 1 has an invalid length.
[ 1291.960733][T13699] netlink: 'syz.2.29631': attribute type 3 has an invalid length.
[ 1291.968181][T13699] netlink: 64 bytes leftover after parsing attributes in process `syz.2.29631'.
[ 1292.112323][T13712] tipc: Enabling of bearer <dth:s> rejected, media not registered
[ 1292.184390][T13722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29639'.
[ 1292.522656][T13741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29643'.
[ 1293.182286][T13754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29647'.
[ 1293.225001][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29648'.
[ 1293.229944][T13756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.29648'.
[ 1294.454078][T13764] netlink: 32 bytes leftover after parsing attributes in process `syz.2.29651'.
[ 1294.508822][T13764] netlink: 'syz.2.29651': attribute type 4 has an invalid length.
[ 1294.709591][T13781] netlink: 'syz.2.29656': attribute type 1 has an invalid length.
[ 1294.886041][T13784] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1294.894585][T13784] netlink: 'syz.2.29657': attribute type 10 has an invalid length.
[ 1294.916893][ T1781] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1294.948199][ T1781] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1295.220131][T13808] syzkaller0: entered promiscuous mode
[ 1295.222672][T13808] syzkaller0: entered allmulticast mode
[ 1295.323578][T13814] ip6_vti0: Caught tx_queue_len zero misconfig
[ 1295.478928][T13831] netlink: 'syz.2.29671': attribute type 2 has an invalid length.
[ 1295.511766][T13831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1295.635342][T13841] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1296.528415][T13879] netlink: 'syz.2.29685': attribute type 7 has an invalid length.
[ 1296.541280][T13879] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1296.695489][T13892] netlink: 'syz.3.29691': attribute type 21 has an invalid length.
[ 1296.699083][T13892] netlink: 'syz.3.29691': attribute type 1 has an invalid length.
[ 1296.904631][T13907] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1297.070630][T13921] x_tables: duplicate underflow at hook 2
[ 1297.318906][T13931] __nla_validate_parse: 14 callbacks suppressed
[ 1297.318918][T13931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29703'.
[ 1297.389927][T13935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29705'.
[ 1297.575037][T13946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29709'.
[ 1297.770369][T13960] netlink: 'syz.2.29714': attribute type 1 has an invalid length.
[ 1297.780157][T13960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29714'.
[ 1297.783769][T13960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29714'.
[ 1297.879043][T13962] netlink: 116 bytes leftover after parsing attributes in process `syz.2.29715'.
[ 1298.224254][   T57] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1298.228150][   T57] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1298.231429][   T57] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1298.234588][   T57] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1298.239870][   T57] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1298.271676][T13986] wg1 speed is unknown, defaulting to 1000
[ 1298.276757][T13986] syzkaller0 speed is unknown, defaulting to 1000
[ 1298.408391][T13986] chnl_net:caif_netlink_parms(): no params data found
[ 1298.507401][T13986] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1298.516546][T13986] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1298.519687][T13986] bridge_slave_0: entered allmulticast mode
[ 1298.523540][T13986] bridge_slave_0: entered promiscuous mode
[ 1298.529128][T13986] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1298.532722][T13986] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1298.535627][T13986] bridge_slave_1: entered allmulticast mode
[ 1298.541860][T13986] bridge_slave_1: entered promiscuous mode
[ 1298.568981][T13986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1298.573768][T13986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1298.592242][T13986] team0: Port device team_slave_0 added
[ 1298.595702][T13986] team0: Port device team_slave_1 added
[ 1298.619667][T13986] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1298.621910][T13986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1298.629888][T13986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1298.633589][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29728'.
[ 1298.638824][T13986] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1298.641257][T13986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1298.653336][T13986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1298.687539][T13986] hsr_slave_0: entered promiscuous mode
[ 1298.689950][T13986] hsr_slave_1: entered promiscuous mode
[ 1298.692180][T13986] debugfs: 'hsr0' already exists in 'hsr'
[ 1298.694145][T13986] Cannot create hsr debugfs directory
[ 1298.802196][T14023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.29733'.
[ 1298.808087][T14023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.29733'.
[ 1298.818248][T13986] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1298.825439][T13986] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1298.837294][T13986] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1298.853577][T13986] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1298.904733][T13986] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1298.907253][T13986] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1298.909715][T13986] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1298.912011][T13986] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1299.008854][T14029] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1299.021807][T13986] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1299.031030][T11304] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1299.034542][T11304] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1299.037871][ T5939] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1299.051027][T13986] 8021q: adding VLAN 0 to HW filter on device team0
[ 1299.054162][T14029] netlink: 'syz.2.29734': attribute type 10 has an invalid length.
[ 1299.063998][T11304] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1299.066783][T11304] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1299.079378][T11304] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1299.082114][T11304] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1299.102167][T14041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29736'.
[ 1299.314650][T13986] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1299.562240][T13986] veth0_vlan: entered promiscuous mode
[ 1299.600552][T13986] veth1_vlan: entered promiscuous mode
[ 1299.656780][T13986] veth0_macvtap: entered promiscuous mode
[ 1299.668295][T13986] veth1_macvtap: entered promiscuous mode
[ 1299.681436][T14077] syzkaller0: entered promiscuous mode
[ 1299.683598][T14077] syzkaller0: entered allmulticast mode
[ 1299.732615][T14083] mac80211_hwsim hwsim85 wlan1: entered allmulticast mode
[ 1299.748117][T14083] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1299.761698][T13986] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1299.774676][T14083] netlink: 'syz.3.29746': attribute type 10 has an invalid length.
[ 1299.782799][T13986] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1299.808757][T14083] mac80211_hwsim hwsim85 wlan1: left allmulticast mode
[ 1299.814306][T10954] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1299.819097][T10954] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1299.822627][T10954] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1299.835708][T10954] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1299.927419][ T5939] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1299.977643][T11304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1299.980720][T11304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1299.982170][T14087] wg1 speed is unknown, defaulting to 1000
[ 1299.993715][T14087] syzkaller0 speed is unknown, defaulting to 1000
[ 1300.008354][T14089] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1300.012852][T30576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1300.015577][T30576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1300.069613][T14094] netlink: 'syz.3.29750': attribute type 11 has an invalid length.
[ 1300.307019][   T57] Bluetooth: hci4: command tx timeout
[ 1300.403675][T14127] bond2: entered promiscuous mode
[ 1300.409110][T14127] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1300.412373][T14126] 8021q: VLANs not supported on ip6_vti0
[ 1300.470218][T14137] syzkaller1: entered promiscuous mode
[ 1300.473188][T14137] syzkaller1: entered allmulticast mode
[ 1300.566602][T14145] bridge0: entered allmulticast mode
[ 1300.638040][T14151] sctp: [Deprecated]: syz.3.29767 (pid 14151) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1300.638040][T14151] Use struct sctp_sack_info instead
[ 1300.738838][T14162] mac80211_hwsim hwsim85 wlan1: entered allmulticast mode
[ 1300.749772][T14162] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1300.758559][T14162] netlink: 'syz.3.29773': attribute type 10 has an invalid length.
[ 1300.761212][T14162] mac80211_hwsim hwsim85 wlan1: left allmulticast mode
[ 1301.835197][T14171] vlan2: entered promiscuous mode
[ 1302.386578][   T57] Bluetooth: hci4: command tx timeout
[ 1302.832782][T14233] __nla_validate_parse: 15 callbacks suppressed
[ 1302.832795][T14233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29799'.
[ 1303.223251][T14254] x_tables: duplicate underflow at hook 1
[ 1303.264590][T14259] vlan0: entered promiscuous mode
[ 1303.523270][T14268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29812'.
[ 1303.942557][T14297] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1304.297470][T14317] mac80211_hwsim hwsim85 wlan1: entered allmulticast mode
[ 1304.313681][T14317] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1304.328457][T14317] netlink: 'syz.3.29827': attribute type 10 has an invalid length.
[ 1304.331311][T14317] mac80211_hwsim hwsim85 wlan1: left allmulticast mode
[ 1304.334033][T14319] syzkaller0: entered promiscuous mode
[ 1304.337179][T14319] syzkaller0: entered allmulticast mode
[ 1304.373677][T14319] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1304.466738][   T57] Bluetooth: hci4: command tx timeout
[ 1304.471589][T14332] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.29833'.
[ 1304.568205][T14339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.29836'.
[ 1304.626195][T14348] ip6erspan1: entered allmulticast mode
[ 1305.451809][T14397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29852'.
[ 1305.465008][T14391] netlink: 'syz.2.29852': attribute type 10 has an invalid length.
[ 1305.505544][T14409] netlink: 32 bytes leftover after parsing attributes in process `syz.2.29857'.
[ 1305.514133][T14409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.29857'.
[ 1305.659746][T14418] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1305.671942][T14418] netlink: 'syz.3.29862': attribute type 10 has an invalid length.
[ 1305.789523][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29863'.
[ 1306.555664][   T57] Bluetooth: hci4: command tx timeout
[ 1306.750448][T14446] syzkaller0: entered promiscuous mode
[ 1306.752539][T14446] syzkaller0: entered allmulticast mode
[ 1306.767553][T14446] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1307.037962][T14455] netlink: 'syz.3.29874': attribute type 18 has an invalid length.
[ 1307.041108][T14455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29874'.
[ 1307.272882][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29879'.
[ 1307.817994][T14470] syzkaller0: entered promiscuous mode
[ 1307.820743][T14470] syzkaller0: entered allmulticast mode
[ 1307.890736][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29881'.
[ 1307.904818][T14478] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 1307.908110][T14478] CPU: 0 UID: 0 PID: 14478 Comm: syz.3.29881 Not tainted syzkaller #0 PREEMPT(full) 
[ 1307.908126][T14478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1307.908133][T14478] Call Trace:
[ 1307.908139][T14478]  <TASK>
[ 1307.908144][T14478]  dump_stack_lvl+0x189/0x250
[ 1307.908165][T14478]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1307.908179][T14478]  ? __pfx__printk+0x10/0x10
[ 1307.908200][T14478]  ? kernfs_path_from_node+0x2f/0x290
[ 1307.908215][T14478]  ? kernfs_path_from_node+0x250/0x290
[ 1307.908229][T14478]  ? kernfs_path_from_node+0x2f/0x290
[ 1307.908247][T14478]  sysfs_warn_dup+0x8e/0xa0
[ 1307.908261][T14478]  sysfs_do_create_link_sd+0xc0/0x110
[ 1307.908277][T14478]  device_add_class_symlinks+0x1cf/0x240
[ 1307.908297][T14478]  device_add+0x475/0xb50
[ 1307.908317][T14478]  wiphy_register+0x1d2e/0x2d20
[ 1307.908345][T14478]  ? __pfx_wiphy_register+0x10/0x10
[ 1307.908357][T14478]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1307.908370][T14478]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1307.908402][T14478]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1307.908449][T14478]  ieee80211_register_hw+0x3473/0x40d0
[ 1307.908479][T14478]  ? ieee80211_register_hw+0x1441/0x40d0
[ 1307.908503][T14478]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1307.908518][T14478]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1307.908536][T14478]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1307.908550][T14478]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1307.908569][T14478]  ? __hrtimer_setup+0x181/0x200
[ 1307.908583][T14478]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1307.908603][T14478]  mac80211_hwsim_new_radio+0x2f8b/0x5240
[ 1307.908641][T14478]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1307.908654][T14478]  ? __kmalloc_node_track_caller_noprof+0x58b/0x810
[ 1307.908671][T14478]  ? kstrndup+0xbf/0x160
[ 1307.908690][T14478]  hwsim_new_radio_nl+0xf5b/0x1bd0
[ 1307.908710][T14478]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1307.908739][T14478]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1307.908759][T14478]  ? rcu_is_watching+0x15/0xb0
[ 1307.908777][T14478]  ? __nla_parse+0x40/0x60
[ 1307.908795][T14478]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1307.908818][T14478]  genl_family_rcv_msg_doit+0x215/0x300
[ 1307.908839][T14478]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1307.908865][T14478]  ? bpf_lsm_capable+0x9/0x20
[ 1307.908877][T14478]  ? security_capable+0x7e/0x2e0
[ 1307.908899][T14478]  genl_rcv_msg+0x60e/0x790
[ 1307.908919][T14478]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1307.908933][T14478]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1307.908956][T14478]  netlink_rcv_skb+0x208/0x470
[ 1307.908967][T14478]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1307.908980][T14478]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1307.909002][T14478]  ? down_read+0x274/0x2e0
[ 1307.909015][T14478]  ? genl_rcv+0xd/0x40
[ 1307.909028][T14478]  genl_rcv+0x28/0x40
[ 1307.909038][T14478]  netlink_unicast+0x82f/0x9e0
[ 1307.909058][T14478]  ? __pfx_netlink_unicast+0x10/0x10
[ 1307.909072][T14478]  ? netlink_sendmsg+0x642/0xb30
[ 1307.909081][T14478]  ? skb_put+0x11b/0x210
[ 1307.909097][T14478]  netlink_sendmsg+0x805/0xb30
[ 1307.909113][T14478]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1307.909125][T14478]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1307.909136][T14478]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1307.909151][T14478]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1307.909163][T14478]  __sock_sendmsg+0x21c/0x270
[ 1307.909179][T14478]  ____sys_sendmsg+0x505/0x820
[ 1307.909198][T14478]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1307.909220][T14478]  ? import_iovec+0x74/0xa0
[ 1307.909237][T14478]  ___sys_sendmsg+0x21f/0x2a0
[ 1307.909256][T14478]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1307.909278][T14478]  ? futex_wait+0x285/0x360
[ 1307.909309][T14478]  ? __fget_files+0x2a/0x420
[ 1307.909320][T14478]  ? __fget_files+0x3a0/0x420
[ 1307.909337][T14478]  __x64_sys_sendmsg+0x19b/0x260
[ 1307.909356][T14478]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1307.909390][T14478]  ? do_syscall_64+0xbe/0xf80
[ 1307.909431][T14478]  do_syscall_64+0xfa/0xf80
[ 1307.909447][T14478]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1307.909459][T14478]  ? exc_page_fault+0xab/0x100
[ 1307.909475][T14478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1307.909486][T14478] RIP: 0033:0x7f4af838f7c9
[ 1307.909498][T14478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1307.909508][T14478] RSP: 002b:00007f4af65d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1307.909522][T14478] RAX: ffffffffffffffda RBX: 00007f4af85e6180 RCX: 00007f4af838f7c9
[ 1307.909531][T14478] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a
[ 1307.909538][T14478] RBP: 00007f4af83f297f R08: 0000000000000000 R09: 0000000000000000
[ 1307.909546][T14478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1307.909553][T14478] R13: 00007f4af85e6218 R14: 00007f4af85e6180 R15: 00007fff9bbb6898
[ 1307.909577][T14478]  </TASK>
[ 1308.073381][T14423] Set syz1 is full, maxelem 65536 reached
[ 1308.119896][T14481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29882'.
[ 1308.131372][T14481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29882'.
[ 1308.241873][T14494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29887'.
[ 1308.254730][T14494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29887'.
[ 1308.259349][T14494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29887'.
[ 1308.313961][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29891'.
[ 1308.681153][T14548] syzkaller0: entered promiscuous mode
[ 1308.683167][T14548] syzkaller0: entered allmulticast mode
[ 1308.720028][T14548] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1308.729239][T14547] tipc: Resetting bearer <eth:syzkaller0>
[ 1308.752946][T14547] tipc: Disabling bearer <eth:syzkaller0>
[ 1308.784694][T14550] netlink: 'syz.2.29906': attribute type 3 has an invalid length.
[ 1308.789783][T14550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29906'.
[ 1308.795765][T14549] delete_channel: no stack
[ 1308.965484][T14576] syzkaller0: entered promiscuous mode
[ 1308.971090][T14576] syzkaller0: entered allmulticast mode
[ 1308.991688][T14579] syzkaller0: entered promiscuous mode
[ 1308.993497][T14579] syzkaller0: entered allmulticast mode
[ 1308.997783][T14576] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1309.044168][T14579] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1309.049422][T14577] tipc: Resetting bearer <eth:syzkaller0>
[ 1309.071720][T14577] tipc: Disabling bearer <eth:syzkaller0>
[ 1310.044647][T14604] macsec1: entered allmulticast mode
[ 1310.048537][T14604] macsec0: entered allmulticast mode
[ 1310.051621][T14604] veth1_macvtap: entered allmulticast mode
[ 1310.058663][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29927'.
[ 1310.061826][T14604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.29927'.
[ 1310.081000][T14611] syzkaller0: entered promiscuous mode
[ 1310.082957][T14611] syzkaller0: entered allmulticast mode
[ 1310.116961][T14615] veth0_vlan: mtu less than device minimum
[ 1310.152959][T14611] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1310.737024][T14659] ip6gre0: left promiscuous mode
[ 1310.744907][T14659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1310.767824][T11651] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1310.799912][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 1311.270378][T14682] wg1 speed is unknown, defaulting to 1000
[ 1311.281028][T14682] syzkaller0: entered promiscuous mode
[ 1311.283472][T14682] syzkaller0: entered allmulticast mode
[ 1311.317137][T11651] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1311.611491][T14689] pim6reg1: entered promiscuous mode
[ 1311.613343][T14689] pim6reg1: entered allmulticast mode
[ 1311.739887][T14706] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1311.919205][T14719] mac80211_hwsim hwsim85 wlan1: entered allmulticast mode
[ 1311.947097][T14719] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1311.955604][T14719] netlink: 'syz.3.29959': attribute type 10 has an invalid length.
[ 1311.958422][T14719] mac80211_hwsim hwsim85 wlan1: left allmulticast mode
[ 1312.045659][T14727] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1312.052206][T14727] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1312.161732][T14737] netlink: 'syz.3.29964': attribute type 1 has an invalid length.
[ 1312.454830][T14755] sctp: [Deprecated]: syz.3.29971 (pid 14755) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1312.454830][T14755] Use struct sctp_sack_info instead
[ 1312.626959][T14759] netlink: 'syz.3.29973': attribute type 1 has an invalid length.
[ 1312.630152][T14759] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1312.759806][T14762] wg1 speed is unknown, defaulting to 1000
[ 1312.763580][T14762] syzkaller0 speed is unknown, defaulting to 1000
[ 1312.872709][T14770] netlink: 'syz.3.29977': attribute type 4 has an invalid length.
[ 1313.121604][T14791] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1313.132095][T14791] netlink: 'syz.3.29984': attribute type 10 has an invalid length.
[ 1313.132149][T14789] wg1 speed is unknown, defaulting to 1000
[ 1313.141476][T14789] syzkaller0 speed is unknown, defaulting to 1000
[ 1313.242194][T14799] __nla_validate_parse: 27 callbacks suppressed
[ 1313.242209][T14799] netlink: 40 bytes leftover after parsing attributes in process `syz.4.29987'.
[ 1313.480084][T14815] netlink: 'syz.4.29992': attribute type 4 has an invalid length.
[ 1313.488416][T14815] netlink: 'syz.4.29992': attribute type 4 has an invalid length.
[ 1313.555196][T14815] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1313.558636][T14815] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1313.667304][T14815] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1313.684712][T14815] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1313.761678][T14815] veth1_macvtap: left allmulticast mode
[ 1313.789840][T14815] macsec0: left allmulticast mode
[ 1313.794242][ T5903] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1313.802324][ T5903] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1313.805269][ T5903] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1313.812366][ T5903] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1313.850436][T14819] netlink: 'syz.4.29993': attribute type 3 has an invalid length.
[ 1314.090547][T14822] x_tables: ip_tables: ah match: only valid for protocol 51
[ 1314.343203][T14829] netlink: 40 bytes leftover after parsing attributes in process `syz.3.29996'.
[ 1314.444129][T14835] netlink: 'syz.3.29999': attribute type 11 has an invalid length.
[ 1314.446725][T14835] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.29999'.
[ 1314.511367][T14840] netlink: 76 bytes leftover after parsing attributes in process `syz.3.30001'.
[ 1314.517795][T14840] netlink: 48 bytes leftover after parsing attributes in process `syz.3.30001'.
[ 1314.521178][T14840] netlink: 16 bytes leftover after parsing attributes in process `syz.3.30001'.
[ 1314.524202][T14840] mac80211_hwsim hwsim85 wlan1: Master is either lo or non-ether device
[ 1314.628182][T14842] syzkaller0: entered promiscuous mode
[ 1314.630273][T14842] syzkaller0: entered allmulticast mode
[ 1314.838502][T14858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30008'.
[ 1315.091238][T14877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30014'.
[ 1315.219774][T14886] netlink: 76 bytes leftover after parsing attributes in process `syz.3.30018'.
[ 1315.504363][T14891] wg1 speed is unknown, defaulting to 1000
[ 1315.508653][T14891] syzkaller0 speed is unknown, defaulting to 1000
[ 1315.542405][T14893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30019'.
[ 1316.111969][T14927] syzkaller0: entered promiscuous mode
[ 1316.114003][T14927] syzkaller0: entered allmulticast mode
[ 1317.347188][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1317.503500][T14934] wg1 speed is unknown, defaulting to 1000
[ 1317.509178][T14934] syzkaller0 speed is unknown, defaulting to 1000
[ 1317.639939][T14949] IPv6: sit1: Disabled Multicast RS
[ 1317.643614][T14949] sit1: entered promiscuous mode
[ 1317.645720][T14949] sit1: entered allmulticast mode
[ 1317.735205][T14953] pim6reg1: tun_chr_ioctl cmd 21731
[ 1318.844295][T14968] __nla_validate_parse: 2 callbacks suppressed
[ 1318.844310][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30044'.
[ 1318.850613][T14968] netlink: 24 bytes leftover after parsing attributes in process `syz.4.30044'.
[ 1320.082092][T14977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30048'.
[ 1320.179981][T14982] netlink: 'syz.4.30050': attribute type 1 has an invalid length.
[ 1320.193978][T14982] bond1: entered promiscuous mode
[ 1320.195679][T14982] bond1: entered allmulticast mode
[ 1320.198304][T14982] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1320.208045][T14982] erspan1: entered allmulticast mode
[ 1320.212671][T14982] bond1: (slave erspan1): making interface the new active one
[ 1320.215032][T14982] erspan1: entered promiscuous mode
[ 1320.218811][T14982] bond1: (slave erspan1): Enslaving as an active interface with an up link
[ 1320.302789][T14989] mac80211_hwsim hwsim89 wlan0: entered promiscuous mode
[ 1320.305245][T14989] mac80211_hwsim hwsim89 wlan0: entered allmulticast mode
[ 1320.310659][T14989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.30052'.
[ 1320.437948][T14998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30055'.
[ 1320.438873][T14999] bridge_slave_0: left allmulticast mode
[ 1320.443309][T14999] bridge_slave_0: left promiscuous mode
[ 1320.445236][T14999] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1320.450411][T14999] bridge_slave_1: left allmulticast mode
[ 1320.452404][T14999] bridge_slave_1: left promiscuous mode
[ 1320.454751][T14999] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1320.460744][T14999] bond0: (slave bond_slave_0): Releasing backup interface
[ 1320.465334][T14999] bond0: (slave bond_slave_1): Releasing backup interface
[ 1320.470980][T14999] team0: Port device team_slave_0 removed
[ 1320.474240][T14999] team0: Port device team_slave_1 removed
[ 1320.476729][T14999] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1320.480050][T14999] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1320.483442][T14999] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1320.622880][T15005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1320.873995][T15024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30063'.
[ 1322.555872][T15074] netlink: ct family unspecified
[ 1322.558453][T15074] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1323.691060][T15100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30090'.
[ 1323.693863][T15100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.30090'.
[ 1325.156203][T15129] Unknown options in mask b7f2
[ 1326.279738][T15211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30107'.
[ 1326.283249][T15211] SET target dimension over the limit!
[ 1326.365231][T15214] netlink: 'syz.4.30108': attribute type 13 has an invalid length.
[ 1326.579191][T15223] netlink: 48 bytes leftover after parsing attributes in process `syz.4.30111'.
[ 1326.581920][T15223] netlink: 48 bytes leftover after parsing attributes in process `syz.4.30111'.
[ 1326.621696][T15225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30112'.
[ 1326.625613][T15225] netlink: 'syz.4.30112': attribute type 1 has an invalid length.
[ 1326.629305][T15225] netlink: 'syz.4.30112': attribute type 2 has an invalid length.
[ 1326.665567][T15227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30113'.
[ 1326.708975][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30115'.
[ 1326.732461][T15234] netlink: 'syz.4.30116': attribute type 3 has an invalid length.
[ 1326.734864][T15234] netlink: 'syz.4.30116': attribute type 3 has an invalid length.
[ 1326.737583][T15234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30116'.
[ 1327.237076][T15258] delete_channel: no stack
[ 1327.681559][T15273] wg1 speed is unknown, defaulting to 1000
[ 1327.684097][T15273] syzkaller0 speed is unknown, defaulting to 1000
[ 1327.893281][T15286] netlink: 'syz.4.30134': attribute type 16 has an invalid length.
[ 1327.893598][T15287] netlink: 'syz.4.30134': attribute type 16 has an invalid length.
[ 1327.899252][T15287] netlink: 148 bytes leftover after parsing attributes in process `syz.4.30134'.
[ 1327.899771][T15286] netlink: 148 bytes leftover after parsing attributes in process `syz.4.30134'.
[ 1327.902102][T15287] veth0: entered promiscuous mode
[ 1327.910662][T15285] veth0: left promiscuous mode
[ 1327.954961][T15292] netlink: 176 bytes leftover after parsing attributes in process `syz.4.30136'.
[ 1328.010651][T15297] bond3: option arp_validate: invalid value (18446744073491447809)
[ 1328.014188][T15297] bond3 (unregistering): Released all slaves
[ 1328.042664][T15299] netlink: 'syz.4.30137': attribute type 13 has an invalid length.
[ 1328.253416][ T5877] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1328.257999][ T5877] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1328.261970][ T5877] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1328.265085][ T5877] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1328.268111][ T5877] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1328.304889][T15316] wg1 speed is unknown, defaulting to 1000
[ 1328.312741][T15316] syzkaller0 speed is unknown, defaulting to 1000
[ 1328.399267][T15316] chnl_net:caif_netlink_parms(): no params data found
[ 1328.452339][T15316] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1328.454619][T15316] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1328.457117][T15316] bridge_slave_0: entered allmulticast mode
[ 1328.459821][T15316] bridge_slave_0: entered promiscuous mode
[ 1328.463423][T15316] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1328.465685][T15316] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1328.468695][T15316] bridge_slave_1: entered allmulticast mode
[ 1328.471616][T15316] bridge_slave_1: entered promiscuous mode
[ 1328.489434][T15316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1328.494008][T15316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1328.513184][T15316] team0: Port device team_slave_0 added
[ 1328.516926][T15316] team0: Port device team_slave_1 added
[ 1328.547277][T15316] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1328.549798][T15316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1328.558381][T15316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1328.562938][T15316] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1328.565109][T15316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1328.574464][T15316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1328.609903][T15316] hsr_slave_0: entered promiscuous mode
[ 1328.613110][T15316] hsr_slave_1: entered promiscuous mode
[ 1328.615613][T15316] debugfs: 'hsr0' already exists in 'hsr'
[ 1328.618012][T15316] Cannot create hsr debugfs directory
[ 1328.686039][T15345] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[ 1328.720200][T15316] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1328.724586][T15316] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1328.729726][T15316] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1328.734096][T15316] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1328.751749][T15316] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1328.754033][T15316] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1328.756484][T15316] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1328.758723][T15316] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1328.783013][T15353] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1328.798071][T15316] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1328.805726][T30576] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1328.809531][T30576] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1328.825506][T15316] 8021q: adding VLAN 0 to HW filter on device team0
[ 1328.832382][T30576] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1328.834603][T30576] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1328.850078][T30576] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1328.852865][T30576] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1328.941590][T15359] bond3: entered promiscuous mode
[ 1328.944093][T15359] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1328.993417][T15316] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1329.132996][T15316] veth0_vlan: entered promiscuous mode
[ 1329.140826][T15316] veth1_vlan: entered promiscuous mode
[ 1329.161738][T15316] veth0_macvtap: entered promiscuous mode
[ 1329.168748][T15316] veth1_macvtap: entered promiscuous mode
[ 1329.180201][T15316] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1329.189785][T15316] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1329.211837][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1329.214714][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1329.220542][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1329.223553][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1329.284845][  T728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1329.294069][  T728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1329.306532][  T728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1329.309004][  T728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1329.773626][T15404] netlink: 'syz.5.30159': attribute type 83 has an invalid length.
[ 1330.118939][T15413] netlink: 'syz.4.30162': attribute type 1 has an invalid length.
[ 1330.307376][   T57] Bluetooth: hci5: command tx timeout
[ 1330.812684][ T1781] IPVS: starting estimator thread 0...
[ 1330.906421][T15453] IPVS: using max 84 ests per chain, 201600 per kthread
[ 1330.923546][T15457] vlan0: entered promiscuous mode
[ 1331.285722][T15479] vxcan1: tx drop: invalid sa for name 0x0000000000000001
[ 1331.308381][ T5877] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1331.313851][ T5877] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1331.319341][ T5877] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1331.326116][ T5877] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1331.328140][T15483] openvswitch: netlink: IP tunnel dst address not specified
[ 1331.329573][ T5877] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1331.332287][T15485] __nla_validate_parse: 8 callbacks suppressed
[ 1331.332299][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.30188'.
[ 1331.360116][T15480] wg1 speed is unknown, defaulting to 1000
[ 1331.362679][T15480] syzkaller0 speed is unknown, defaulting to 1000
[ 1331.454242][T15480] chnl_net:caif_netlink_parms(): no params data found
[ 1331.479735][T15494] netlink: 108 bytes leftover after parsing attributes in process `syz.5.30190'.
[ 1331.522418][T15480] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1331.524652][T15480] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1331.528374][T15480] bridge_slave_0: entered allmulticast mode
[ 1331.531164][T15480] bridge_slave_0: entered promiscuous mode
[ 1331.547006][T15480] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1331.549275][T15480] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1331.551638][T15480] bridge_slave_1: entered allmulticast mode
[ 1331.554752][T15480] bridge_slave_1: entered promiscuous mode
[ 1331.577166][T15502] sctp: [Deprecated]: syz.4.30192 (pid 15502) Use of int in max_burst socket option.
[ 1331.577166][T15502] Use struct sctp_assoc_value instead
[ 1331.585336][T15480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1331.598341][T15480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1331.650627][T15480] team0: Port device team_slave_0 added
[ 1331.655418][T15510] "syz.4.30195" (15510) uses obsolete ecb(arc4) skcipher
[ 1331.661604][T15480] team0: Port device team_slave_1 added
[ 1331.676173][T15480] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1331.679281][T15480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1331.687440][T15480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1331.691846][T15480] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1331.693958][T15480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1331.702021][T15480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1331.718855][T15512] netlink: 104 bytes leftover after parsing attributes in process `syz.4.30195'.
[ 1331.733663][T15480] hsr_slave_0: entered promiscuous mode
[ 1331.736085][T15480] hsr_slave_1: entered promiscuous mode
[ 1331.738435][T15480] debugfs: 'hsr0' already exists in 'hsr'
[ 1331.740207][T15480] Cannot create hsr debugfs directory
[ 1331.839418][T15480] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1331.844068][T15480] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1331.848811][T15480] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1331.854803][T15480] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1331.884260][T15480] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1331.887108][T15480] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1331.927116][T15480] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1331.934692][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1331.945040][T15480] 8021q: adding VLAN 0 to HW filter on device team0
[ 1331.951792][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1331.954001][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1331.960098][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1331.962443][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1331.991744][T15480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1332.093242][T15480] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1332.225962][T15480] veth0_vlan: entered promiscuous mode
[ 1332.237956][T15480] veth1_vlan: entered promiscuous mode
[ 1332.264325][T15480] veth0_macvtap: entered promiscuous mode
[ 1332.269028][T15480] veth1_macvtap: entered promiscuous mode
[ 1332.278373][T15480] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1332.285513][T15480] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1332.293363][T10954] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1332.296684][T10954] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1332.300697][T10954] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1332.303627][T10954] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1332.359263][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1332.362091][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1332.380517][T31404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1332.382905][T31404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1332.386567][ T5877] Bluetooth: hci5: command tx timeout
[ 1332.790137][T15572] validate_nla: 6 callbacks suppressed
[ 1332.790149][T15572] netlink: 'syz.6.30207': attribute type 2 has an invalid length.
[ 1332.798751][T15572] netlink: 'syz.6.30207': attribute type 1 has an invalid length.
[ 1333.089113][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30213'.
[ 1333.305508][T15605] wg1 speed is unknown, defaulting to 1000
[ 1333.308643][T15605] syzkaller0 speed is unknown, defaulting to 1000
[ 1333.428091][ T5877] Bluetooth: hci6: command tx timeout
[ 1333.531700][T15617] vxcan3: entered allmulticast mode
[ 1333.814865][T15641] netlink: 'syz.6.30230': attribute type 1 has an invalid length.
[ 1333.837355][T15641] bond1 (unregistering): Released all slaves
[ 1333.849960][T15646] netlink: 6 bytes leftover after parsing attributes in process `syz.4.30232'.
[ 1333.871577][T15650] netlink: 40 bytes leftover after parsing attributes in process `syz.6.30230'.
[ 1334.057588][T15678] netlink: 64 bytes leftover after parsing attributes in process `syz.6.30243'.
[ 1334.100080][T15683] netlink: 56 bytes leftover after parsing attributes in process `syz.5.30244'.
[ 1334.124856][T15683] wg1 speed is unknown, defaulting to 1000
[ 1334.129460][T15683] syzkaller0 speed is unknown, defaulting to 1000
[ 1334.301823][T15694] netlink: 'syz.5.30248': attribute type 12 has an invalid length.
[ 1334.321580][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.30248'.
[ 1334.325423][T15694] bridge_slave_1: left allmulticast mode
[ 1334.327970][T15694] bridge_slave_1: left promiscuous mode
[ 1334.330582][T15694] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1334.337651][T15694] bridge_slave_0: left allmulticast mode
[ 1334.340076][T15694] bridge_slave_0: left promiscuous mode
[ 1334.342563][T15694] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1334.467883][   T57] Bluetooth: hci5: command tx timeout
[ 1334.839206][T15721] tipc: Started in network mode
[ 1334.840800][T15721] tipc: Node identity 961b414db4bb, cluster identity 4711
[ 1334.843039][T15721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1334.854917][T15725] tipc: Disabling bearer <eth:syzkaller0>
[ 1334.948867][T15728] sctp: [Deprecated]: syz.4.30259 (pid 15728) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1334.948867][T15728] Use struct sctp_sack_info instead
[ 1335.161756][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz.5.30269'.
[ 1335.218431][T15764] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1335.221035][T15764] syzkaller0: entered promiscuous mode
[ 1335.222947][T15764] syzkaller0: entered allmulticast mode
[ 1335.235564][T15764] tipc: Resetting bearer <eth:syzkaller0>
[ 1335.243040][T15764] mac80211_hwsim hwsim92 wlan0: entered promiscuous mode
[ 1335.245234][T15764] mac80211_hwsim hwsim92 wlan0: entered allmulticast mode
[ 1335.255114][T15763] tipc: Resetting bearer <eth:syzkaller0>
[ 1335.268396][T15763] tipc: Disabling bearer <eth:syzkaller0>
[ 1335.506653][   T57] Bluetooth: hci6: command tx timeout
[ 1335.652627][T15793] wg1 speed is unknown, defaulting to 1000
[ 1335.657558][T15793] syzkaller0 speed is unknown, defaulting to 1000
[ 1335.847755][T15825] wg1 speed is unknown, defaulting to 1000
[ 1335.850799][T15825] syzkaller0 speed is unknown, defaulting to 1000
[ 1336.100934][T15851] mac80211_hwsim hwsim90 wlan1: entered allmulticast mode
[ 1336.108894][T15851] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1336.115648][T15851] netlink: 'syz.4.30297': attribute type 10 has an invalid length.
[ 1336.119931][T15851] mac80211_hwsim hwsim90 wlan1: left allmulticast mode
[ 1336.124429][T15851] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1336.557329][   T57] Bluetooth: hci5: command tx timeout
[ 1336.581164][T15878] __nla_validate_parse: 4 callbacks suppressed
[ 1336.581175][T15878] netlink: 24 bytes leftover after parsing attributes in process `syz.6.30306'.
[ 1336.601631][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30307'.
[ 1336.608461][T15880] veth1: entered promiscuous mode
[ 1336.610785][T15880] bridge2: port 1(macvlan2) entered blocking state
[ 1336.612999][T15880] bridge2: port 1(macvlan2) entered disabled state
[ 1336.615249][T15880] macvlan2: entered allmulticast mode
[ 1336.617362][T15880] veth1: entered allmulticast mode
[ 1336.619968][T15880] macvlan2: entered promiscuous mode
[ 1336.839261][T15901] sctp: [Deprecated]: syz.6.30315 (pid 15901) Use of int in max_burst socket option.
[ 1336.839261][T15901] Use struct sctp_assoc_value instead
[ 1336.873475][T15903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.30316'.
[ 1337.020030][T15910] syzkaller0: entered promiscuous mode
[ 1337.022034][T15910] syzkaller0: entered allmulticast mode
[ 1337.040052][T15910] tipc: Started in network mode
[ 1337.041703][T15910] tipc: Node identity e2a110e81b62, cluster identity 4711
[ 1337.045298][T15910] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1337.049257][T15908] tipc: Resetting bearer <eth:syzkaller0>
[ 1337.061982][T15908] tipc: Disabling bearer <eth:syzkaller0>
[ 1337.169844][T15921] nbd: must specify an index to disconnect
[ 1337.202226][T15918] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1337.494692][T15948] bond2: option arp_validate: invalid value (18446744073491447809)
[ 1337.499905][T15948] bond2 (unregistering): Released all slaves
[ 1337.523410][T15951] netlink: 'syz.5.30330': attribute type 13 has an invalid length.
[ 1337.586657][   T57] Bluetooth: hci6: command 0x040f tx timeout
[ 1337.878429][T15951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1337.896853][T15951] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1338.127990][T10954] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1338.135612][T10954] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1338.148942][T10954] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1338.151674][T10954] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1339.676766][ T5877] Bluetooth: hci6: command 0x040f tx timeout
[ 1341.746564][ T5877] Bluetooth: hci6: command 0x040f tx timeout
[ 1357.095947][T15962] syzkaller0: entered promiscuous mode
[ 1357.098629][T15962] syzkaller0: entered allmulticast mode
[ 1357.102749][T15966] netlink: 32 bytes leftover after parsing attributes in process `syz.5.30337'.
[ 1357.110698][T15966] netlink: 32 bytes leftover after parsing attributes in process `syz.5.30337'.
[ 1357.125581][T15960] netlink: 44 bytes leftover after parsing attributes in process `syz.4.30334'.
[ 1357.168074][T15967] netlink: 36 bytes leftover after parsing attributes in process `syz.5.30337'.
[ 1357.171573][T15967] netlink: 16 bytes leftover after parsing attributes in process `syz.5.30337'.
[ 1357.174434][T15967] netlink: 36 bytes leftover after parsing attributes in process `syz.5.30337'.
[ 1357.178738][T15967] netlink: 36 bytes leftover after parsing attributes in process `syz.5.30337'.
[ 1358.680393][T15984] netlink: 'syz.6.30340': attribute type 27 has an invalid length.
[ 1358.699217][T15984] netlink: 252 bytes leftover after parsing attributes in process `syz.6.30340'.
[ 1358.768939][T15995] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1358.775414][T15994] netlink: 'syz.4.30346': attribute type 6 has an invalid length.
[ 1358.999463][T16018] syzkaller0: entered promiscuous mode
[ 1359.001647][T16018] syzkaller0: entered allmulticast mode
[ 1359.018810][T16018] tipc: Started in network mode
[ 1359.025576][T16018] tipc: Node identity a61d0fdafc0d, cluster identity 4711
[ 1359.029867][T16018] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1359.041785][T16017] tipc: Resetting bearer <eth:syzkaller0>
[ 1359.069971][T16023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30358'.
[ 1359.089622][T16017] tipc: Disabling bearer <eth:syzkaller0>
[ 1359.112212][T16023] netlink: 16 bytes leftover after parsing attributes in process `syz.4.30358'.
[ 1359.173951][T16030] netlink: 'syz.6.30361': attribute type 10 has an invalid length.
[ 1359.322618][T16046] syzkaller0: entered promiscuous mode
[ 1359.324359][T16046] syzkaller0: entered allmulticast mode
[ 1359.359664][T16046] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1359.383020][T16045] tipc: Resetting bearer <eth:syzkaller0>
[ 1359.405541][T16045] tipc: Disabling bearer <eth:syzkaller0>
[ 1359.663097][T16086] wg1 speed is unknown, defaulting to 1000
[ 1359.665749][T16086] syzkaller0 speed is unknown, defaulting to 1000
[ 1359.714696][T16096] netlink: 'syz.5.30384': attribute type 1 has an invalid length.
[ 1359.797713][T16104] syzkaller0: entered promiscuous mode
[ 1359.799870][T16104] syzkaller0: entered allmulticast mode
[ 1359.963210][T16121] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1360.047887][ T6204] syzkaller0: tun_net_xmit 76
[ 1360.049507][ T6204] syzkaller0: tun_net_xmit 48
[ 1360.052360][T16139] netem: change failed
[ 1360.067961][T16135] syzkaller0: create flow: hash 73243941 index 1
[ 1360.086629][   T10] syzkaller0: tun_net_xmit 76
[ 1360.164141][T16151] vlan0: entered promiscuous mode
[ 1360.186532][T15384] syzkaller0: tun_net_xmit 76
[ 1360.190300][T16134] syzkaller0: delete flow: hash 73243941 index 1
[ 1361.735133][T16175] wg1 speed is unknown, defaulting to 1000
[ 1361.738927][T16175] syzkaller0 speed is unknown, defaulting to 1000
[ 1361.890638][T16185] syzkaller0: entered promiscuous mode
[ 1361.892621][T16185] syzkaller0: entered allmulticast mode
[ 1363.309538][T16189] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[ 1363.310219][T16190] veth1_to_batadv: entered promiscuous mode
[ 1363.452442][T16215] netlink: 'syz.6.30422': attribute type 21 has an invalid length.
[ 1363.454879][T16215] __nla_validate_parse: 133 callbacks suppressed
[ 1363.454887][T16215] netlink: 128 bytes leftover after parsing attributes in process `syz.6.30422'.
[ 1363.468545][T16215] netlink: 3 bytes leftover after parsing attributes in process `syz.6.30422'.
[ 1363.495057][T16225] ipt_ECN: cannot use operation on non-tcp rule
[ 1363.533909][T16222] netlink: 4 bytes leftover after parsing attributes in process `syz.5.30424'.
[ 1363.537263][T16229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.30424'.
[ 1363.711451][T16239] openvswitch: netlink: ct_state flags 010000e0 unsupported
[ 1363.823042][T16253] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1363.853720][T16261] syzkaller0: entered promiscuous mode
[ 1363.855735][T16261] syzkaller0: entered allmulticast mode
[ 1363.882575][T16261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1363.954865][T16266] wg1 speed is unknown, defaulting to 1000
[ 1363.959724][T16266] syzkaller0 speed is unknown, defaulting to 1000
[ 1363.997952][T16259] tipc: Resetting bearer <eth:syzkaller0>
[ 1364.018273][T16259] tipc: Disabling bearer <eth:syzkaller0>
[ 1364.102363][T16277] netlink: 64 bytes leftover after parsing attributes in process `syz.4.30439'.
[ 1364.278518][T16295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30446'.
[ 1364.282201][T16295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.30446'.
[ 1365.742535][T16295] netlink: 52 bytes leftover after parsing attributes in process `syz.4.30446'.
[ 1365.824374][T16311] syzkaller0: entered promiscuous mode
[ 1365.827264][T16311] syzkaller0: entered allmulticast mode
[ 1365.829285][T16312] netlink: 'syz.4.30449': attribute type 4 has an invalid length.
[ 1365.838411][T16311] syzkaller1: entered promiscuous mode
[ 1365.840140][T16311] syzkaller1: entered allmulticast mode
[ 1366.207095][T16343] netlink: 112 bytes leftover after parsing attributes in process `syz.4.30463'.
[ 1367.877010][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.30477'.
[ 1367.880925][T16383] netlink: 'syz.5.30477': attribute type 13 has an invalid length.
[ 1367.968428][T16400] netlink: 'syz.6.30484': attribute type 21 has an invalid length.
[ 1368.254948][T16437] netlink: 'syz.6.30498': attribute type 21 has an invalid length.
[ 1368.263487][T16436] netlink: 'syz.4.30497': attribute type 1 has an invalid length.
[ 1368.495773][T16462] netlink: 'syz.5.30507': attribute type 21 has an invalid length.
[ 1368.506541][T16462] __nla_validate_parse: 8 callbacks suppressed
[ 1368.506550][T16462] netlink: 128 bytes leftover after parsing attributes in process `syz.5.30507'.
[ 1368.511315][T16462] netlink: 3 bytes leftover after parsing attributes in process `syz.5.30507'.
[ 1368.578751][T16472] xt_hashlimit: max too large, truncated to 1048576
[ 1368.782049][T16490] wg1 speed is unknown, defaulting to 1000
[ 1368.798629][T16490] syzkaller0 speed is unknown, defaulting to 1000
[ 1368.943120][T16505] netlink: 4 bytes leftover after parsing attributes in process `syz.5.30521'.
[ 1368.973629][T16505] team1: entered promiscuous mode
[ 1368.975660][T16505] team1: entered allmulticast mode
[ 1368.989823][T16505] 8021q: adding VLAN 0 to HW filter on device team1
[ 1369.029789][T16512] netlink: 'syz.4.30516': attribute type 83 has an invalid length.
[ 1369.127010][T16515] syzkaller0: entered promiscuous mode
[ 1369.129253][T16515] syzkaller0: entered allmulticast mode
[ 1369.160566][T16515] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1369.165321][T16514] tipc: Resetting bearer <eth:syzkaller0>
[ 1369.181769][T16514] tipc: Disabling bearer <eth:syzkaller0>
[ 1369.351764][T16522] wg1 speed is unknown, defaulting to 1000
[ 1369.356545][T16522] syzkaller0 speed is unknown, defaulting to 1000
[ 1369.368504][T16530] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.30528'.
[ 1369.386954][T16530] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.30528'.
[ 1369.832926][T16562] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.30540'.
[ 1369.836785][T16562] ksmbd: Unknown IPC event: 1, ignore.
[ 1369.851074][T16567] syzkaller0: entered promiscuous mode
[ 1369.852866][T16567] syzkaller0: entered allmulticast mode
[ 1370.113401][T16612] mac80211_hwsim hwsim92 wlan0: left promiscuous mode
[ 1370.116211][T16612] mac80211_hwsim hwsim92 wlan0: left allmulticast mode
[ 1370.155432][T16619] netlink: 28 bytes leftover after parsing attributes in process `syz.5.30558'.
[ 1370.331736][T16639] netlink: 'syz.6.30565': attribute type 1 has an invalid length.
[ 1370.335575][T16638] netlink: 52 bytes leftover after parsing attributes in process `syz.6.30565'.
[ 1370.354733][T16643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30566'.
[ 1370.364856][T16639] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1370.412857][T16648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30567'.
[ 1370.515206][T16657] rdma_rxe: rxe_newlink: failed to add ip6_vti0
[ 1370.543402][T16659] syzkaller0: entered promiscuous mode
[ 1370.545241][T16659] syzkaller0: entered allmulticast mode
[ 1371.247534][T16661] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1371.263096][T16658] tipc: Resetting bearer <eth:syzkaller0>
[ 1371.291833][T16658] tipc: Disabling bearer <eth:syzkaller0>
[ 1371.298933][T16669] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1371.302067][T16668] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1371.398885][T16689] netlink: 'syz.5.30580': attribute type 8 has an invalid length.
[ 1371.887040][T16752] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[ 1371.910493][T16752] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1372.037832][T16762] netlink: 'syz.4.30607': attribute type 1 has an invalid length.
[ 1372.451606][T16800] syzkaller0: entered promiscuous mode
[ 1372.457900][T16800] syzkaller0: entered allmulticast mode
[ 1372.473555][T16800] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1372.476849][T16799] tipc: Resetting bearer <eth:syzkaller0>
[ 1372.490096][T16799] tipc: Disabling bearer <eth:syzkaller0>
[ 1372.792250][T16822] syzkaller0: entered promiscuous mode
[ 1372.794047][T16822] syzkaller0: entered allmulticast mode
[ 1372.811257][T16822] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1372.814736][T16821] tipc: Resetting bearer <eth:syzkaller0>
[ 1372.829191][T16821] tipc: Disabling bearer <eth:syzkaller0>
[ 1373.007958][T16833] pim6reg: entered allmulticast mode
[ 1373.010447][T16833] pim6reg: left allmulticast mode
[ 1373.047672][T16833] netlink: 'syz.4.30630': attribute type 6 has an invalid length.
[ 1373.439805][T16850] netlink: 'syz.6.30637': attribute type 1 has an invalid length.
[ 1373.629375][T16859] __nla_validate_parse: 20 callbacks suppressed
[ 1373.629386][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.6.30641'.
[ 1373.777997][T16868] netlink: 'syz.6.30644': attribute type 298 has an invalid length.
[ 1374.061563][T16902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30654'.
[ 1374.092405][T16902] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1374.099908][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30654'.
[ 1374.102748][T16902] netlink: 'syz.4.30654': attribute type 29 has an invalid length.
[ 1374.116445][T16902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30654'.
[ 1374.208190][T16914] SET target dimension over the limit!
[ 1374.267580][T16921] netlink: 40 bytes leftover after parsing attributes in process `syz.4.30664'.
[ 1374.272830][T16922] netlink: 40 bytes leftover after parsing attributes in process `syz.4.30664'.
[ 1374.294647][T16919] syzkaller0: entered promiscuous mode
[ 1374.296615][T16919] syzkaller0: entered allmulticast mode
[ 1374.302013][T16920] pim6reg: entered allmulticast mode
[ 1374.303977][T16921] pim6reg: left allmulticast mode
[ 1374.354367][T16920] netlink: 'syz.4.30664': attribute type 6 has an invalid length.
[ 1374.357785][T16920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.30664'.
[ 1374.410426][T16922] netlink: 84 bytes leftover after parsing attributes in process `syz.4.30664'.
[ 1374.414467][T16921] netlink: 84 bytes leftover after parsing attributes in process `syz.4.30664'.
[ 1375.776960][T16945] wg1 speed is unknown, defaulting to 1000
[ 1375.796190][T16945] syzkaller0 speed is unknown, defaulting to 1000
[ 1375.849780][T16959] syzkaller0: entered promiscuous mode
[ 1375.851547][T16959] syzkaller0: entered allmulticast mode
[ 1376.039428][T16975] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1376.153431][T16981] syzkaller0: entered promiscuous mode
[ 1376.155269][T16981] syzkaller0: entered allmulticast mode
[ 1376.161692][T16981] netlink: 144 bytes leftover after parsing attributes in process `syz.5.30684'.
[ 1377.705457][T17004] mac80211_hwsim hwsim94 syzkaller0: entered promiscuous mode
[ 1377.716613][T17004] mac80211_hwsim hwsim94 syzkaller0: entered allmulticast mode
[ 1377.732061][T17004] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1377.847953][T17009] netlink: 'syz.5.30689': attribute type 1 has an invalid length.
[ 1377.865784][T17009] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1377.946539][T10999] unregister_netdevice: waiting for bond0 to become free. Usage count = 2
[ 1377.949636][T10999] ref_tracker: netdev@ffff888113920618 has 1/1 users at
[ 1377.949636][T10999]      ib_device_set_netdev+0x31f/0x6d0
[ 1377.949636][T10999]      rxe_register_device+0x1bb/0x320
[ 1377.949636][T10999]      rxe_net_add+0x81/0x110
[ 1377.949636][T10999]      rxe_newlink+0xdd/0x190
[ 1377.949636][T10999]      nldev_newlink+0x4a5/0x5a0
[ 1377.949636][T10999]      rdma_nl_rcv+0x6ae/0x980
[ 1377.949636][T10999]      netlink_unicast+0x82f/0x9e0
[ 1377.949636][T10999]      netlink_sendmsg+0x805/0xb30
[ 1377.949636][T10999]      __sock_sendmsg+0x21c/0x270
[ 1377.949636][T10999]      ____sys_sendmsg+0x505/0x820
[ 1377.949636][T10999]      ___sys_sendmsg+0x21f/0x2a0
[ 1377.949636][T10999]      __x64_sys_sendmsg+0x19b/0x260
[ 1377.949636][T10999]      do_syscall_64+0xfa/0xf80
[ 1377.949636][T10999]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1377.949636][T10999] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1378.846575][   T51] tipc: Node number set to 1511002074
[ 1379.589791][ T5877] Bluetooth: hci3: command 0x0406 tx timeout
[ 1381.347287][   T34] INFO: task kworker/u9:2:28504 blocked for more than 143 seconds.
[ 1381.350123][   T34]       Not tainted syzkaller #0
[ 1381.352110][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1381.355612][   T34] task:kworker/u9:2    state:D stack:22072 pid:28504 tgid:28504 ppid:2      task_flags:0x4208160 flags:0x00080000
[ 1381.360641][   T34] Workqueue: ib-unreg-wq ib_unregister_work
[ 1381.363101][   T34] Call Trace:
[ 1381.364474][   T34]  <TASK>
[ 1381.365721][   T34]  __schedule+0x14bc/0x5000
[ 1381.369477][   T34]  ? lockdep_unlock+0x89/0x120
[ 1381.371472][   T34]  ? __ib_unregister_device+0x2cb/0x3f0
[ 1381.373719][   T34]  ? ib_unregister_work+0x19/0x30
[ 1381.375792][   T34]  ? __pfx___schedule+0x10/0x10
[ 1381.378272][   T34]  ? schedule+0x91/0x360
[ 1381.380000][   T34]  schedule+0x165/0x360
[ 1381.381711][   T34]  schedule_timeout+0x9a/0x270
[ 1381.383679][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[ 1381.385883][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1381.388255][   T34]  ? lockdep_hardirqs_on+0x98/0x140
[ 1381.390374][   T34]  ? wait_for_completion+0x267/0x5d0
[ 1381.392526][   T34]  wait_for_completion+0x2bf/0x5d0
[ 1381.394639][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[ 1381.397060][   T34]  ? remove_client_context+0x19c/0x1e0
[ 1381.399310][   T34]  disable_device+0x1c6/0x320
[ 1381.401274][   T34]  ? __pfx_disable_device+0x10/0x10
[ 1381.403329][   T34]  __ib_unregister_device+0x2cb/0x3f0
[ 1381.405508][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1381.407926][   T34]  ib_unregister_work+0x19/0x30
[ 1381.409947][   T34]  ? process_scheduled_works+0x9ef/0x1770
[ 1381.412282][   T34]  process_scheduled_works+0xad1/0x1770
[ 1381.414582][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1381.417191][   T34]  worker_thread+0x8a0/0xda0
[ 1381.419108][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1381.421619][   T34]  ? __kthread_parkme+0x7b/0x200
[ 1381.423630][   T34]  kthread+0x711/0x8a0
[ 1381.425346][   T34]  ? __pfx_worker_thread+0x10/0x10
[ 1381.429393][   T34]  ? __pfx_kthread+0x10/0x10
[ 1381.431344][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1381.433469][   T34]  ? lockdep_hardirqs_on+0x98/0x140
[ 1381.435602][   T34]  ? __pfx_kthread+0x10/0x10
[ 1381.437645][   T34]  ret_from_fork+0x599/0xb30
[ 1381.439559][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 1381.441664][   T34]  ? __switch_to_asm+0x39/0x70
[ 1381.443609][   T34]  ? __switch_to_asm+0x33/0x70
[ 1381.445553][   T34]  ? __pfx_kthread+0x10/0x10
[ 1381.447563][   T34]  ret_from_fork_asm+0x1a/0x30
[ 1381.449541][   T34]  </TASK>
[ 1381.450905][   T34] 
[ 1381.450905][   T34] Showing all locks held in the system:
[ 1381.453990][   T34] 1 lock held by khungtaskd/34:
[ 1381.455989][   T34]  #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1381.460205][   T34] 2 locks held by getty/5657:
[ 1381.462151][   T34]  #0: ffff88811323e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1381.465991][   T34]  #1: ffffc9000357b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 1381.470312][   T34] 4 locks held by kworker/u8:7/20834:
[ 1381.472505][   T34]  #0: ffff888100ef7948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[ 1381.478892][   T34]  #1: ffffc90009487b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[ 1381.483162][   T34]  #2: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0
[ 1381.487008][   T34]  #3: ffff88816bf44700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[ 1381.491597][   T34] 3 locks held by kworker/u9:2/28504:
[ 1381.493725][   T34]  #0: ffff888167337948 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[ 1381.498478][   T34]  #1: ffffc90007fafb80 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[ 1381.503695][   T34]  #2: ffff88816bf44700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[ 1381.508517][   T34] 2 locks held by syz.0.29540/13415:
[ 1381.510658][   T34]  #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570
[ 1381.514445][   T34]  #1: ffff88816bf44700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[ 1381.519140][   T34] 2 locks held by syz.2.29983/14789:
[ 1381.521303][   T34]  #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570
[ 1381.525100][   T34]  #1: ffff88816bf44700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[ 1381.529581][   T34] 2 locks held by syz.3.30035/14934:
[ 1381.531693][   T34]  #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570
[ 1381.535350][   T34]  #1: ffff88816bf44700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[ 1381.538925][   T34] 
[ 1381.539713][   T34] =============================================
[ 1381.539713][   T34] 
[ 1381.542256][   T34] NMI backtrace for cpu 0
[ 1381.542263][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1381.542271][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1381.542276][   T34] Call Trace:
[ 1381.542279][   T34]  <TASK>
[ 1381.542284][   T34]  dump_stack_lvl+0x189/0x250
[ 1381.542295][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1381.542303][   T34]  ? __pfx__printk+0x10/0x10
[ 1381.542317][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1381.542325][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1381.542333][   T34]  ? __pfx__printk+0x10/0x10
[ 1381.542343][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1381.542354][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1381.542362][   T34]  watchdog+0xf3c/0xf80
[ 1381.542372][   T34]  ? watchdog+0x1e2/0xf80
[ 1381.542382][   T34]  kthread+0x711/0x8a0
[ 1381.542392][   T34]  ? __pfx_watchdog+0x10/0x10
[ 1381.542400][   T34]  ? __pfx_kthread+0x10/0x10
[ 1381.542409][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1381.542417][   T34]  ? lockdep_hardirqs_on+0x98/0x140
[ 1381.542425][   T34]  ? __pfx_kthread+0x10/0x10
[ 1381.542433][   T34]  ret_from_fork+0x599/0xb30
[ 1381.542444][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 1381.542457][   T34]  ? __switch_to_asm+0x39/0x70
[ 1381.542465][   T34]  ? __switch_to_asm+0x33/0x70
[ 1381.542472][   T34]  ? __pfx_kthread+0x10/0x10
[ 1381.542480][   T34]  ret_from_fork_asm+0x1a/0x30
[ 1381.542493][   T34]  </TASK>
[ 1381.542496][   T34] Sending NMI from CPU 0 to CPUs 1:
[ 1381.595761][    C1] NMI backtrace for cpu 1
[ 1381.595773][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[ 1381.595781][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1381.595786][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1381.595798][    C1] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 1381.595804][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 00000286
[ 1381.595811][    C1] RAX: 160d5e77600b0200 RBX: ffffffff8197438a RCX: 160d5e77600b0200
[ 1381.595816][    C1] RDX: 0000000000000001 RSI: ffffffff8d76bd39 RDI: ffffffff8bbfc660
[ 1381.595821][    C1] RBP: ffffc90000197f10 R08: ffff88823c63359b R09: 1ffff110478c66b3
[ 1381.595825][    C1] R10: dffffc0000000000 R11: ffffed10478c66b4 R12: ffffffff8f805a70
[ 1381.595830][    C1] R13: 1ffff1102c1d3000 R14: 0000000000000001 R15: 0000000000000001
[ 1381.595834][    C1] FS:  0000000000000000(0000) GS:ffff8882a9eb1000(0000) knlGS:0000000000000000
[ 1381.595847][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1381.595852][    C1] CR2: 00007fc29b487e20 CR3: 000000000dd3a000 CR4: 00000000000006f0
[ 1381.595880][    C1] Call Trace:
[ 1381.595886][    C1]  <TASK>
[ 1381.595889][    C1]  default_idle+0x13/0x20
[ 1381.595899][    C1]  default_idle_call+0x73/0xb0
[ 1381.595910][    C1]  do_idle+0x1ea/0x520
[ 1381.595917][    C1]  ? irqentry_exit+0x5ba/0x660
[ 1381.595926][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1381.595935][    C1]  cpu_startup_entry+0x44/0x60
[ 1381.595942][    C1]  start_secondary+0x101/0x110
[ 1381.595951][    C1]  common_startup_64+0x13e/0x147
[ 1381.595962][    C1]  </TASK>
