last executing test programs:

10m13.142941129s ago: executing program 0 (id=6100):
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000580)={{<r0=>0xffffffffffffffff, &(0x7f00000003c0)='syz_tun\x00', 0x2400, &(0x7f0000000400)={@align, {0xfffe, 0x0, 0xffffffff, 0x5ce1}}, 0x9, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x19}, {[0x4, 0x3ff, 0x8000, 0x8]}, 0x1, 0x19, &(0x7f00000004c0)=""/25})
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x90, 0x1, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0x6c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040}, 0x288c0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x54, 0x0, 0x82716b5ce1cf13f8, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x7ff}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xcd}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'syz_tun\x00'}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x1}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0xd0)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='.'])
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$FICLONE(r7, 0x40049409, r5)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r8=>0x0})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)={0x164, r10, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc0}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e1f, 0x400, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @loopback, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0x7ff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "4f68a7840225c11b53b204d1fa78b6ce102aaf86921c33696088632dbd"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x40016}, 0x2404c884)
sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x9c, r10, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x500000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "92c5dad0312fb03254a86a960d8114a9a8ae6fbc8372105ecce322a273837d0392"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x81}, 0x4000000)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4)
sendto$packet(r4, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)

10m13.022399991s ago: executing program 0 (id=6104):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5483745a000000060a010400000000000000000a0000010900010073797a3100000000280004802400018008000100636d70001800028008000140000000100800024000000001040003800900020073797a32000000001400000011000100000000000000000005"], 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20004080)
r6 = socket(0x21, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x40)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
setsockopt$packet_int(r9, 0x107, 0x13, &(0x7f0000000240)=0x8, 0x4)
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000340)={@nl=@unspec, {&(0x7f0000000200)=""/5, 0x5}, &(0x7f0000000300), 0x2a}, 0xa0)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x7, 0x2, 0x3, 0x100}, 0x50)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r12, 0xd}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r13}, &(0x7f0000000880), &(0x7f00000008c0)=r11}, 0x20)
shutdown(r10, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={<r14=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x74, &(0x7f0000000080)={r14, 0x8, 0x20, 0x2000000002}, &(0x7f0000000840)=0x18)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r7, 0x17}, 0x80, &(0x7f0000003500)=[{&(0x7f00000001c0)="27030200dc0f14000e00", 0xa}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b28400a1b7ff9", 0xfffe}], 0x2}, 0x8000)

10m9.94262168s ago: executing program 0 (id=6106):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r4=>0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async)
connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x304, 0x3a}, "56db7a2700f91000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1\x00', <r7=>0x0}) (async)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x670, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x31}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

10m9.823608033s ago: executing program 0 (id=6113):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000002000010027bd7000000000000a000040000000000000000014000300687372300000000000000000000000001400110076"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x70bd2e, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x20000090)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002f00090027bd70000000000004000000080018000bac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4)

10m9.634227621s ago: executing program 0 (id=6116):
syz_emit_ethernet(0x44, &(0x7f0000000000)={@broadcast, @broadcast, @val={@void, {0x8100, 0x1}}, {@generic={0x8809, "38aba98452758a8f75c81e9c2a8a189cdb4e4aa8d1dcd6cf28315d70c5da7cde6a97cbcbcd2c709a48d8a16c9de8fd0b3288"}}}, &(0x7f0000000080)={0x1, 0x2, [0x6a7, 0x51f, 0x8dc, 0xdfe]}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', <r0=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r1=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x50) (async)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8)
write$tun(r3, &(0x7f0000000300)={@void, @val={0x4, 0x4, 0x4, 0x7, 0x3ff, 0x400}, @ipv6=@tipc_packet={0x1, 0x6, "5b65dd", 0xb9, 0x6, 0xfe, @private0, @loopback, {[@hopopts={0xc, 0x7, '\x00', [@calipso={0x7, 0x30, {0x4, 0xa, 0x0, 0xebf, [0x80, 0x3, 0x7f1, 0x905, 0x400]}}, @ra={0x5, 0x2, 0x7f}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x1d, 0xa, 0x0, 0x0, 0x0, [@empty, @mcast1, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @private2]}], @payload_conn={{{0x19, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, 0x2, 0xf, 0x4, 0x0, 0x8, 0x8000, 0x0, 0x4e21, 0x4e23}}, [0x0]}}}}, 0xeb) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r4)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getgid() (async, rerun: 32)
r6 = openat$cgroup_ro(r3, &(0x7f0000000440)='blkio.bfq.idle_time\x00', 0x0, 0x0) (rerun: 32)
sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5b, 0x3, "131a93fdb821e6fafc36a7bb6d097634fca60bc8b8f0f9b258a1ff618f98666d85c2c0bb888bb098e35a2655634d88c212601170d1bbdba3a4f79fbd7ae35703dc9ce085bacee4d9bd7f1a9567850eafd202828d8e3f5e"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48845}, 0x0) (async)
getgid() (async)
r7 = openat$cgroup_ro(r3, &(0x7f00000005c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r7) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000780)={'gre0\x00', &(0x7f0000000680)={'syztnl0\x00', <r9=>0x0, 0x8, 0x8000, 0x400, 0x5, {{0x2e, 0x4, 0x2, 0x17, 0xb8, 0x66, 0x0, 0x80, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@noop, @rr={0x7, 0x1f, 0xd6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty, @multicast1, @loopback, @private=0xa010102, @local]}, @ssrr={0x89, 0x17, 0xb8, [@local, @dev={0xac, 0x14, 0x14, 0x1f}, @broadcast, @empty, @multicast1]}, @timestamp={0x44, 0x24, 0xc1, 0x0, 0x8, [0xb, 0x3, 0x1, 0x930, 0x8, 0x0, 0x7, 0x6]}, @lsrr={0x83, 0x13, 0xe2, [@dev={0xac, 0x14, 0x14, 0x2c}, @empty, @local, @multicast2]}, @generic={0x83, 0xe, "2f1c165e15817a55b6e531dc"}, @cipso={0x86, 0x28, 0x1, [{0x2, 0xa, "292927e5ed0b7d10"}, {0x6, 0x8, "93ab9aa5dcb2"}, {0x7, 0x10, "74ec6c5def82f4e1d6cb9407dcf9"}]}]}}}}})
sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r8, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r9}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_FAMILY={0x5, 0xd, 0xf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x4000000)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r4)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r10, 0x482, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc0c0)
setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000009c0)={0xffffffffffffffff, 0x1, 0x9, r9, 0x1}, 0xc) (async)
sendmsg$nl_generic(r6, &(0x7f0000001bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000a40)={0x1130, 0x25, 0x400, 0x70bd28, 0x25dfdbfe, {0xf}, [@nested={0x1038, 0xe6, 0x0, 0x1, [@typed={0xc, 0xcf, 0x0, 0x0, @u64=0xbe6}, @typed={0x14, 0x122, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0xbd}, @typed={0x1004, 0xdc, 0x0, 0x0, @binary="b0f0f7263166be7495ecbe83b1e90266547168ccf421c3c0d8f8f31bb68ea4e3049a47b6f5a5a8a20423dc876b39e29bc5389647b03867bf649c5d87cf3643bd933bc3f722e0397b9b2ead4cf24c4283b901345085f06e0c26cd05746e463341a2f7971113d844291aa26453f8edde2070f07f4868acd08d00cf24a52604e95f9314b4385781f5daeeed1d64e5432b9233bc5a70e58dfc286a54f8185593f85dd8458fff5565f8206fd24ede3aa85f2a639a2c72937869ad197c8e044d21c4525a5a203fec3cd57f5abf30072e8c07b6098f5a946f775955d377c014cc9d002112e01b680d6e749ebe6b3da879f098292777dee7083da489fba9b6f50e479cd98ffe9ef68b8ac583399bfddf8c75a81d2918e7d4ee22e9201cd403e4b1bd0092bb14ab3c211a52e68f38a7306ba112cd7fffa01352f9bc3275717e8cf7ab84578cd95b0f2a7cc88bc53c753a30e0bc2c5ea0a3841d3a8dfc18918859fdee751ebf58276939786eeb27419fcaed1a77283d517c95901caa7a17c4e7481c5e755e9375c6cdf5aa848e1ef1bd03304c5b839ac42bdd047debb20b760063c9c06c9ecbf262e7f5d5511a50611344fd56f4746c9e4d3c19588d469babbd543d48a113c26d47c3464b10d6a4cb60977ac6e710668a9e988905736a32fc6d425f447b01dcf860c052f5a6bde7df8972abb116c412a7045a9340319b465b22234234ec99e9d395ce17abc4762cb47813b53186e09cb969607654ff53d727a5ec41eed11564763dd987f6cc37b94bb49668c26217ae4a70d8bc2c2d247e5bffc550e94f409d5193f14b7e05e3f389a9fb95c95d89d87640215349a437b15b65966947266d1c55c7d4ebdcae22e8d7153942ff54ca8f27251b8bfd3847e31a5c555891fe7bc38508713a38beae9ef44c5281fff93a972abd76065c6ae92b7b788d3a740aefbf5ebb4dbe3ef986e1b9c3f3af0c4325a00043e7d764e277e855d6828a3198976b03af61155e82a8e900feb6411b69110342b6b07016d811a6c971879b63267a251ac3f51a7ee06257506052868bd6aebe3768464d4f1d1111dff7de06a40eee09a1a759bf8b61a16d943a5dcba15e4f34154629478059ddf2bbb9c5347983e03bbcf9559d4cd45912072fd37849a5dba4be0aac50e04c9faf7960813369e475f8c9b27e4731caeb8fbb0379b6e81376b87b399b2eef08018daa7fb84331a2ed88776cccac19cdded3ae3bf20b12654f86042ab6f7d4fdcbf7ecbbc6f743920fde3b644735dde4c7808b4bc8f66b5f7d7a63985a6bf76a34201d8143fd06568514f23ae8f3cfe72f26a0b5a96df6a0689062e2d9884b3b12186a12c1e1252a037ec76a7d5f465009b9871fc39d015ad5e9e8993f7dbfd99a6dd0481b14b77afd87ca10ab5af4a5f60364cca2d3f7e7c13f50f8c8730531ecd958b42a13f22aa2a1201f5e1b9e6a6d722524f534fa187b8d57dec0b24dd2fd4c2ae977a66db421bd7bd98c745757fda95352338c1c8ae96bd955835b11b60755804a8f18f34b81d4047f5da1f79e337e39ec0c324a2df61dfd2446bf78cc1047b2de45aea381fc4a4d4a5047f26635b605bd34e9c9123ea7f1d8e321ab6ca405789b7de1dd27c9c6c4ddb2acc30cb617ac822388595b405a4f142074630262237f519bb246acfdce0e55e4d971db5ebec918160d5b902ffb54148d319806998b8b371ff19464bdbe5737ceb6376e24e92da355c136efba2ba4e3f57b978d332415dd78559b7d1d5bf159d4783c6e778eb923ca1a0df1112844401608c5ded0717bf20616dde7a61ffa9eb7076c8c13a59c4b63365718caa3e507f6c3fd1652c348a7ae26cd92837f3db8f31e35f6bcfd4ae02a930f7eb864732b49a34c69fec61adaee97b296af042fce70023b730d57b6d2d11aeea20ab93d4acdacbf08af137617f2b141393798c457e3d2201939a58210aae70df3b512907691d0a0d058f06fcbf2ae6caa4dfba046752ff6057fac354c13c686b9cc88d0712e93f862bc30782db68c6ccf540a0dcd5b513f4f921e26f90884c5bd647807a983d3e27268083d825c48af4818a66821c0a7ff76da47c67e423256e4ebc2e90d2ea2b3026611a5f49b995346cdf58feb19d35f5f0dbf6fded4e4b518f781f34cc5cbe2718e9410fd20d171920503622d33e5f0f50470272560fdb746770802d42702427fa47db75d2d88615a96910d62673c1307cfdae30b45b080a37b6b187d35b3f7cf638c4666f5e20d0d0682741f863e48436d6393bcaee57f73d500fcf7417533274c650be1e5c44491442ad89b666b162d7ad4376b4becc9bcc68e77850a31a41d65648efab6179c2fb031ec1debe9289d7aac42a2570e385515265124a186e5fd5bfff7c4640712088dd0072e1325312ce0f51c855f01ba63ec512e548cd31e4f9644fd6ca7ab05c107b2c258f0763918296dc6726b255beeef097e4b426c13a37c53e2435f205a20aaafa09cbaf1ae6a1a1294c97cf4f493a01d0aaf5f7cd5c2828d100b901a91b2e706d6d72537a6413058ad260a7b61a08e5a18f05fcbec898090a74716f4627505ce40d08b5e716768d2210d1e64771b853a7402defeca462be4b85b61e12d9efe6cc5edf572226f5e1cb0118102d31f354bc38a274b1c19b4e8559ad38ccc2592d09fb4feae0147cce9b16f183cdc0f342932cf5e638269f0c37ce692197f4d3c04466aa33f27601bb045b98ec5965593245c35c0385326649587303a0aa5e85945f5c126dcf9f35512d1c8df53aa1cc1ca1bd4dad22ee13f570c0f36a13af1fcb0a91126aded57f51954a753b59ebbd498295428914692089839b920d8cfa8ea9050f37a38729350b1a0f60ae6da26a87b20ce2fb2536b9b923f4a55e9c4499daeeb65019ecb67e0a886198f55d7f52aeeaf5aab08aa0f496dda096fb9c47a46f67cd9975e41c7d0470eea796dd84d37efdc6e723e61d7780dc6bca671aa451114268dd53e5dd7069bc28c4016f9251ff2b88bb9d7e3b1036e19d0e2f295d9239878f6701740218adc0eb5988bd2432e94a5c6b6412da6c48446dff87a9773a0418c990c716b5144d4cec29612bcfab955817c1e9b0f8aed61173a9b9cd39cd70743e374097bc089f8523616b97d7be9563c37375904465961f3b78c24e5ef479a668240f100a9b577c258fcff5e017f7335b342cacb53bc84130bbef0e44eedc0b5143d512fc03f4b3b90c8592ee5cf3bb4f27a6036cd92477504fe1cee68f7b0a933f461de3460b8189f4b104db09bcc0278391fee62acde152ec49517dfa8ed47a0d0e520d37d10e0462fcaa8b383c541bf46ab01bd1ab38b6e0bd48d82fdd78b965f21a97be90cd643b19b054b631bc4860aab00e06417a753a6d1c8e12bf6c9dec260181309b195234c449223343b88d7c25ca0c1b1312324a9fa00d8126e65302528a99678e692654370951cae15446a98d6b89636fc2f30a3c3b1ba667f4276ee400a6da69d72983d6fbb09e79b926a2e912330a8de9225c2e2de104c880a3be538a1d02f0bd00cf4693319187969c5e5c25bf16c325d54717b4c9a05c6ded9f2692be604013ea1d05545777249f6764c90779355c77b759a6d41882ac5fddacf74548bdf64105558a838b0331385840622421e8b6dc74e408601496144dd29252677e47b018569e36251eb77d1416f311778296bb6c9001fff739243d4b9bcf8b83e526ebaa99655e5fa36fd1da6bb49b38c450e29572c2c75e5a3f94e80c625d512e189eb3036a87ec7f3d0db5075e76c6f6281e4bb05dd10bed81ab114203503247109c01c9d91824838c7efddd76f86ff21a43ea238d6eeb6a731d4a31aa8f6adbe32f98970469de9d0ac1f0afb4ed1f10edcc06e558ad249dea15f9102826fb2ad0cb7942ab195260da5f24ec17d13de655576eac9868bdcd45ba51375365014a0c53af4f3672e7505ef8742fc7501f419481b3bda3ea4f11d7fb52c6a80c850018ca7fd912e18e92adf67fc3434d3baadecd31b9d793d97804a9995c57506cbf8954ec5c34e9e8781bc96f720f4f17a33688f0c4459c8b13eac2de57fc160d7b874a74791594de543cef8c6331d2e86d099e4bfa7b2434ef2e6a7509b1c28e8edfd26c8a33d7a26806ffcc7bae61437bfbf9e1af4cbc05d6fe0177b205b0740ec73612bead086c3429e5b705acb37c13e24942e28711f05451053853cf91902e92e7b8154d4dc3919c2f65badc5a9d612d6d94c30410e7e15c776fecd5b67e5fbc072e4ba991cf67e1a2a37535f223063df30db3d25b26d397c0a2273ea26a9574ce7db2e391ba78ae99f10ac4befe74a9df56a97b718e8dc8432fe303d806f9bb6bbb3794af9add8b811205bfba3f8f9e01ecdc0740d2936b3eaa3e26dd5a4eab8bddf0f06ac57b0fab45e7b88d1f7382af2a3373e9a398d479b70e98a1fd87e35a631dd999e3f2488a2a3320f38f42d7ff01ce1ff9bd60f09cbd296a771b96534aa391750ebf481056b2b57be5f46745ac47509293ec387c44c25ece15df8b3c04507fe571dacd5402287ad38d431aba23c614ae943180716571868130a8930f9ce2a830e6c550262b70fcff0855e111386a8aec9b97f336843bc8183d88a5ffe060ff5ae09014ef017ece539cbca66e07b78c2ca57f510302e4a6c5784943a23fbce6dc06dea352859e292faea484d95ee1fb21defc3d95f8cb9b9a2f9ae19432665b134a1e995fc8f2d4d022e8f4c5b24113e4b93d84e384914a2caae5005b074497e559a1bce2802ac20f64c3bf960a386659ae281b2560d2a95cc9c71bc721fe60a65b4a028158997e5eb7e38219971816f818abbbedab50c24fb603a80d57d824bfae9c6b57706000769621fa6395047b355e86b3e1a9a31a15d8a57dcc31f88c3a8b1bf801dbb6d19de5b916142cc8961c6095b580226a1480e0f8ca553e9cebb98cf87e700dd8a369699db2315b876ddc75c5e3baab3522bf7d9735b38db29e529ef39ee2f2ffea295bb974afe18fbdbb50c78e2656c3848ed79b73dc70c6548488e9a936ca08916a319c2b8ce52243f8dc5b2fb89ae96dbabfdd377c91742f48e560986cfba3a7f62780b84f29056a7c0b3b6b00bfa5c89b5e72a4fbe40dfaa5a4112f2786f9d74c5fb112f368cb26e31c3d497d94b7596479fa387e03cd2bf81426c6a5166b97584b3e70fb2ddb69e234e91255a13bad4655a1aefdc4deacb692e6373d0fa1008c7f4591a9fa33df659231f799f1ae96ddc0d4dd86318604d60ac9965f37916b97255c281cf6656c75ee13f061b8ea4f839b7d9c60873aa23ff062de3fba659b181023d0c9570cbcd566ede90b2d27432a750ff10cd4fd0c7c9bbdd64a7d50a108b3e4dcd20ade55323ed76fd3b551cdf008e6e588f051753f862e1b905ec19701c1e255a7a29564f8c6096b1eb84099c202d49bc86f9d632ace2c815b3987d8661090ee6fd71c60cae0e8972c98c3bbd58ecd80a8b028505b0c101a6c7f8e096547f4e0aca3602a90250514221c2dcf5f85935352b04fa72db1cf9fcf1bbdd708090ed3976ffeeefaf441ccbf70b1f5c6f33cd2a35178feb3f0ce38db58861bd03f4a67514ee8b355f417c9cbde59cdbb718fa0a8ee822939174f2477b4b3bdfb91807ae7be97efb2fe15fef731d0ee256e41235a0b571bc7bfe0a5590b373907771d8733789e32baebbc5079808ca5412bb83138917bcc6b61c245697b3d9de94c7f63860140226af34faf7ffd876689ae21a11eda8708e05e36d94b9a96ffa3a92f0b1251967dd5c54bae4df"}, @nested={0x4, 0x14a}, @nested={0x4, 0x113}, @nested={0x4, 0xd9}]}, @nested={0x39, 0xd0, 0x0, 0x1, [@nested={0x4, 0xaa}, @generic="a467130040cd100cbd1616307f4a389ce4bde3aad8800ebb1104874f4488378d1782aa8797886d5407", @nested={0x4, 0x143}, @nested={0x4, 0xd8}]}, @generic="2e4465b5f398e6777134f50b5a5a61d7c848309740565356650ccb93f1e2827f5ca0e7ea4da9003e9c4bb0562d9392963df3c4135753940a0d2465694a87d9ea9161b5c021544c59122f9502a91091486cd522b6c70e15e9d696c3718020b6ece29f5a51c06162d3499aed711592e9bd5d63e9774370ce6f45ea89225ea1a8b21358f925cf3c66e38a38b58a3959b62abdb559e910163b5efda4fb6903a862f0350b1eae46"]}, 0x1130}, 0x1, 0x0, 0x0, 0x40000}, 0x8080)
syz_emit_ethernet(0xb6, &(0x7f0000001c00)={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "abcf4e", 0x80, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x5c, 0x0, 0xf, 0x1, 0x0, 0x1c, 0x68}], {{0x4e23, 0x4e24, 0x4, 0x1, 0x4, 0x0, 0x0, 0x0, 0x4, "877061", 0x1, '=YD'}, "43bc768902c6636829dba24393a0ed9ad9eeca078bce910775a34c57b48ed6aeec7b9f85c7aa4276630ad85a9f8adc1e120fac5fdacff3901a43cfbc914332390e0b7ff8e8cecf92049fe800eccd799a7a3d96ee181a8a878f8208faea22a891d1bd548e6b71add1"}}}}}}, &(0x7f0000001cc0)={0x0, 0x2, [0xbc2, 0x1a5, 0xfce, 0xf28]}) (async)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000001d00)={<r11=>0x0, 0xfff}, &(0x7f0000001d40)=0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000001d80)={r11, 0x2}, 0x8)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r7) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001e40)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r12, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x4c, r13, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x2, 0x7a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c001}, 0x20000008)

10m9.552757204s ago: executing program 0 (id=6118):
r0 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'veth1\x00', 0x9})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000180), 0x12)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) (async)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) (async)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x40010, r0, 0xd065d000) (async)
sendmsg$SOCK_DESTROY(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec0000001500200028bdbaa797245ca9836df2a3fb05827000008000001e06d700010054a75696f5c79359f6e1a33b37319c0980010083ca7a8adf881448eb93213e8b9a6607acf7a03be288bd2e914b3cad72b261a522bdc07f5ab04ce0aad9c9fc4cd7995b5b9f1a36f01ec51745da52de67a73c07bfd1bbd8d3b41d4a6616b825d8b348371693363e0b21793a286fbddb2ba340de04bd70e1bd2511c04924da3d38bb9dd0e5fdfac84a42576fb209f6170197884face8df6bf74e5d1de58c6473cc8dd8c90f2f5f43877d26238fd1aa3132584487313e33d01095fd423316d23c41c3637bdfd7ecbbfd596b7305d674f1c1ec90609cfa09fca077848b473f000000"], 0xec}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvlan1\x00', <r5=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

9m54.12299026s ago: executing program 32 (id=6118):
r0 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'veth1\x00', 0x9})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000180), 0x12)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) (async)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) (async)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x40010, r0, 0xd065d000) (async)
sendmsg$SOCK_DESTROY(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xec}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvlan1\x00', <r5=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

1m50.742022054s ago: executing program 1 (id=11870):
socket$inet(0x10, 0x3, 0x0) (async)
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\x00\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) (async)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\x00\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x19, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x2, 0x1}, @call={0x85, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94)
recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01, 0x600}}, {{0x0, 0x0, &(0x7f0000000380), 0x5}, 0x10}, {{0x0, 0x0, 0x0}, 0x1}], 0x4000000000001b2, 0x48, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b40)={0x1c, 0x38, 0x119, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="1888ad47"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48814}, 0xc000)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', <r4=>0x0, 0x1, 0x7fd0, 0x7fff, 0x80000001, {{0x13, 0x4, 0x1, 0x20, 0x4c, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x28}, {[@timestamp={0x44, 0x28, 0x3a, 0x0, 0x1, [0x10f3, 0x4, 0x6, 0x44, 0xa, 0x9, 0x80000000, 0xeda, 0x0]}, @timestamp_prespec={0x44, 0xc, 0xd7, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x41}, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}}}})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f00000000c0)={0x70004, 0x200}, 0x8)
shutdown(r7, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2)
r8 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) (async)
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', <r9=>0x0, 0x7, 0x700, 0xe37c, 0x7, {{0xa, 0x4, 0x1, 0x1f, 0x28, 0x66, 0x0, 0x7, 0x29, 0x0, @multicast2, @local, {[@ssrr={0x89, 0xb, 0x4d, [@rand_addr=0x64010101, @empty]}, @rr={0x7, 0x7, 0x48, [@loopback]}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xa4, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x41, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xa4, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x41, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl2\x00', <r11=>0x0, 0x4, 0x5, 0x2, 0x7fff, 0x5, @rand_addr=' \x01\x00', @remote, 0x7800, 0x1, 0x0, 0x41}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2002800}, 0xc, &(0x7f0000000900)={&(0x7f0000001780)={0x168, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x168}}, 0x24008001)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r12 = socket(0x10, 0x3, 0x0)
r13 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x39c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xb, 0xffff}, {0x10, 0xfffb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x36c, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8065, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x6}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb1d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038d88646faa6e9053502000000e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55f9b9881d15633717817c7383e41ec2f119a6a6364d68900c1cce4a3b3225a9009e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2a783f691be9eba75cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221004000"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffc, 0x9, 0xffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x1}, 0x4010)
socket$nl_netfilter(0x10, 0x3, 0xc)

1m49.867755355s ago: executing program 1 (id=11879):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0) (async)
r2 = socket$unix(0x1, 0x5, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000009060102000000000000000002e2ebf2e20002007315349d05c034eb0507f117894d31000000000500010007000000340007801800018014000240fe80000000000000000000000007d46c623700bb0600044000040000050f000000000057fc9315b1d4962e19"], 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x101141, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0x40603d10, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000100)='nl80211\x00', 0x218c00, &(0x7f0000000140)={@align=0x3, {0x8, 0x7ff, 0x3, 0x2}}, 0x3, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000280)=0xfffffff8}) (async)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0x40603d10, &(0x7f0000000300)={<r4=>0xffffffffffffffff, &(0x7f0000000100)='nl80211\x00', 0x218c00, &(0x7f0000000140)={@align=0x3, {0x8, 0x7ff, 0x3, 0x2}}, 0x3, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000280)=0xfffffff8})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000340)=@assoc_value, &(0x7f00000006c0)=0x8)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast})
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) (async)
r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r9, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000008000000000000000100000018110000d6c5bde20a95bf7ec0bf880ed60da15e413574b41e4e4279c64fd3ed30d1135b160372d5e9953dcc2cda74d2f6f2569c6a4bd2783e629cbf200558a4f651ba4be32aa0c55c939b16cd39", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bca900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000008000000000000000100000018110000d6c5bde20a95bf7ec0bf880ed60da15e413574b41e4e4279c64fd3ed30d1135b160372d5e9953dcc2cda74d2f6f2569c6a4bd2783e629cbf200558a4f651ba4be32aa0c55c939b16cd39", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bca900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0xc}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x2e8, 0x7}, 0x7d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x33)
r10 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r8, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff88", 0x14}], 0x1}, 0x4005)

1m49.756407457s ago: executing program 1 (id=11881):
r0 = socket$phonet(0x23, 0x2, 0x1)
recvfrom$phonet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000030427bd70000800000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="08800000084400001c0012800b00010067010000006500000c00028005000c000100000008000a00", @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1m49.657355929s ago: executing program 1 (id=11883):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x5, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYBLOB="800100001a000004feffffff00010000ac1414aa00000000000000000000000000000000000000000000000000000000000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/312], 0x180}}, 0x844)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60)
ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000140)={{r3}, 0xa, &(0x7f00000000c0)=[0xcf4b, 0xfffffffffffffffb, 0x9, 0x2, 0x3, 0x2, 0x6, 0x1, 0x200, 0x68], 0x3, 0x1})
r4 = socket(0x11, 0xa, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4)
getsockname$packet(r4, 0x0, &(0x7f0000000200))

1m49.656851254s ago: executing program 1 (id=11884):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040), 0x6) (async)
bind$bt_hci(r4, &(0x7f0000000040), 0x6)
getsockname(r4, 0x0, &(0x7f0000000100))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) (async)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)}, 0x0)

1m49.597647246s ago: executing program 1 (id=11885):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}], 0x1, 0x10002, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/160, 0xa0}], 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4c, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8}, @TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xb9}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x7}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x4}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x53fe0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)={0xc8, 0x35, 0x8, 0x70bd29, 0x25dfdbff, "", [@typed={0xc, 0xf8, 0x0, 0x0, @u64=0x4}, @generic="fe9e915fcd7a001241d8795e796a3560e55e431fd394fd0cfcd840ea7cb11073d7c1b22475bc21060cc407e97f63b3e0de3b9bc9889788f1584cd055e91c1564260e9e09ba5a7a7ac71d789fdf364904de70cc98b90abe68563c22ab326179a2ef0469aef644b7e67dfb749e8ca9307fc6a3111b23cd98472f81d1c625717c040b36c7fdf83b419850ecf4cc7ec72fdbb0067d85", @nested={0x18, 0xda, 0x0, 0x1, [@nested={0x4, 0x8b}, @typed={0x7, 0x15e, 0x0, 0x0, @str='\xff@\x00'}, @nested={0x4, 0x160}, @nested={0x4, 0x124}]}]}, 0xc8}], 0x1, 0x0, 0x0, 0x20000080}, 0x40001)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

1m33.808665037s ago: executing program 33 (id=11885):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}], 0x1, 0x10002, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/160, 0xa0}], 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4c, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8}, @TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xb9}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x7}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x4}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x53fe0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)={0xc8, 0x35, 0x8, 0x70bd29, 0x25dfdbff, "", [@typed={0xc, 0xf8, 0x0, 0x0, @u64=0x4}, @generic="fe9e915fcd7a001241d8795e796a3560e55e431fd394fd0cfcd840ea7cb11073d7c1b22475bc21060cc407e97f63b3e0de3b9bc9889788f1584cd055e91c1564260e9e09ba5a7a7ac71d789fdf364904de70cc98b90abe68563c22ab326179a2ef0469aef644b7e67dfb749e8ca9307fc6a3111b23cd98472f81d1c625717c040b36c7fdf83b419850ecf4cc7ec72fdbb0067d85", @nested={0x18, 0xda, 0x0, 0x1, [@nested={0x4, 0x8b}, @typed={0x7, 0x15e, 0x0, 0x0, @str='\xff@\x00'}, @nested={0x4, 0x160}, @nested={0x4, 0x124}]}]}, 0xc8}], 0x1, 0x0, 0x0, 0x20000080}, 0x40001)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

1.220644794s ago: executing program 2 (id=12497):
r0 = socket$alg(0x26, 0x5, 0x0) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0x8, 0x2, 0xe0, 0xb}, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="100026bd7000010000002500000008002c000000000008002c001000000005002a2577ae35dd9742721321f08c4b000700000008002c000700000005002a000000000008002f0006000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000a014}, 0x20004000) (async)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000540)=0x28) (async)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) (async)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
socket(0x10, 0x3, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), 0xffffffffffffffff) (async)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}}, 0x810) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4, 0xe}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) (async)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="85e79a00", @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRESOCT], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x8044) (async)
socket(0x26, 0x80000, 0xfffffff7) (async)
accept$alg(r0, 0x0, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

1.115275051s ago: executing program 2 (id=12499):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @local, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts={{0x18, 0x29, 0x3b, {0x16}}}], 0x18}, 0x3400c8d4)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x1c, 0x140f, 0x1, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x8)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, r4, 0x2, 0x5}, 0x50)
r5 = socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0xfffffffffffffffd, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000000c0)=0x80, 0x4)
sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x40, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}]}, 0x40}, 0x1, 0x40030000000000, 0x0, 0x40408c0}, 0x80)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=@newqdisc={0x3b4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x384, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x3d, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3b4}}, 0x0)

994.148431ms ago: executing program 2 (id=12502):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r3, &(0x7f0000000140)={0x1a, 0x110, 0x3, 0x5, 0x40}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x4, 0x78bd28, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884)

843.954977ms ago: executing program 2 (id=12505):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10)
close(0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000e00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r1, r2, 0x4, r0}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
socket(0xa, 0x3, 0xff)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=<r6=>r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES16=0x0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x800, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000061197c000000000064b57489080000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0xe}, 0x94)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESDEC=r6, @ANYRES16=r0, @ANYRESHEX=r3, @ANYRES32=r2, @ANYRESOCT=0x0], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/63}, 0x20)

711.924651ms ago: executing program 2 (id=12509):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x1b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002200)=ANY=[@ANYBLOB="3c00000010004b042bbd7000000000007a000000", @ANYRES32=0x0, @ANYBLOB="6100000081100000140035006d616373656330000000007ef0a557000800040009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x810)

710.823554ms ago: executing program 3 (id=12510):
r0 = getpid()
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x400, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = getpid()
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x1, 0x1, r6}}, 0x40)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x1, 0x1, 0x8}, 0x20)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e25, 0x20080000, @loopback, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0xba, 0x0, [@mcast1]}}}], 0x28}, 0x880)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000000f00)={<r10=>0x0, 0x3, 0x4, 0x1})
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000b00)={r10, 0x400, 0x9})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r11, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x9}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040000}, 0x4)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r12=>0x0})
sendto$packet(r9, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r12, 0x1, 0x0, 0x6, @multicast}, 0x14)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r13, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r9, 0x10040)

654.581726ms ago: executing program 2 (id=12511):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x1, 0x25dfdbfd, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x6, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x2000000, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@loopback, 0x3503, 0x4, 0x3, 0x0, 0x0, 0x200, 0x48e6}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in6=@mcast1, 0x3504, 0x1, 0x1, 0x1, 0x0, 0xabf, 0x1000000}]}]}, 0x1bc}}, 0x4000) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x800})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000040)={0x0, 0x0, "e54411f73177ae6bfecb35409f6aacb9"}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x3, 0x9}, {0xf}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xdc, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xb0, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xd, 0x2}}, @TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
r6 = socket(0x1, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0x2, 0x2, {{0x5, 0x4, 0x3, 0x2, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @empty, @empty}}}}) (async, rerun: 32)
r7 = socket$kcm(0x2, 0x0, 0x2) (rerun: 32)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @void, @mpls={[{0x6}, {0x3, 0x0, 0x1}], @llc={@llc={0xf8, 0x8e, "aa", "cb4a39bc9d"}}}}, 0x14)

533.479839ms ago: executing program 4 (id=12513):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64)
r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0}) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async, rerun: 32)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfd, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xf, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c9}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) (async, rerun: 32)
r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x40}}, 0x0) (async)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x380, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x1000, 0xf2e})

529.207614ms ago: executing program 3 (id=12514):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000900)=ANY=[@ANYBLOB="cc0000001b00030027bd7000fddbdf25fe8000000000000000000000000000bb0a0101020000000000000000000000004e2000004e2300020a00002032000000687275dd0b44a2f503ce8cd2810b394d63134de3e7e363eaa598c8aabb54770ef710ab8a6cbaba0f250d6602e8b79f368f1e172e7ce388970a744ef219a0a9a1c2ab6d48bccc0a65224a424f301ec8c05564d03790b0c4e6465f0a67cabe99e9eb03cd67883b645d627bfe16ae75e38fd8d5"], 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async)
r7 = getpid()
write$cgroup_pid(r6, &(0x7f0000000180)=r7, 0x12) (async)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@gettclass={0x24, 0x2a, 0x10, 0x70bd2b, 0x25d79bfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {0xa, 0x5}, {0x8, 0x512478f7240ed591}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890)
r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, r10, 0x25, 0x9, @void}, 0x10)
ioctl$NILFS_IOCTL_GET_CPSTAT(r11, 0x80186e83, &(0x7f00000004c0)) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}) (async)
r12 = accept4$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @private}, &(0x7f0000000380)=0x10, 0xc00)
connect$inet(r12, &(0x7f0000000440)={0x2, 0x4e21, @loopback}, 0x10)
r13 = socket$kcm(0x11, 0x0, 0x0)
r14 = accept(r13, &(0x7f0000000280)=@ax25={{0x3, @bcast}, [@remote, @null, @remote, @bcast, @remote, @rose, @rose, @rose]}, &(0x7f0000000300)=0x80)
setsockopt$TIPC_GROUP_JOIN(r14, 0x10f, 0x87, &(0x7f0000000340)={0x41, 0x2, 0x3}, 0x10)
r15 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

444.539096ms ago: executing program 4 (id=12515):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000))
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804)
shutdown(r4, 0x1)
r5 = socket(0x26, 0x1, 0xfffffffd)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x40, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000327bd7000fefdffff047c440701803e07108014"], 0x760}, 0x1, 0x0, 0x0, 0x4048011}, 0x6a1ba72b97a5257f)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x40480d0)
setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000390400000000000006006e8b5700", @ANYRES32=r7, @ANYBLOB="01980000000000002800128008000100677265001c00028006000e000200000008000700ac1414bb060010004e220000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000000)
socket(0x1e, 0x5, 0x7)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x40010, r9, 0x44fd0000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r8, 0x0, 0xe, 0x0, &(0x7f0000000680)="0100000000002d9d742e4350b83d", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16", 0x1a, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r7, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14)

444.013353ms ago: executing program 3 (id=12516):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x2, 0x100e, &(0x7f0000001880)=""/4110, 0x40f00, 0x39}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r4)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c000000c817a0c58f490b6251959f1d48d7924e974ce91b1364113360bc95925e2d507a906efbd65f6105401089ea9a964078f8d29fd3edbf4a616585afceb7605a86db8e363110ca0a00a30f488baff70dd48b613211e0000000000000000000", @ANYRES16=r5, @ANYBLOB="01000010000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500870000000000"], 0x4c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', <r6=>0x0})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x7f}, 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2, r6, 0x25, 0x0, @void}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r6, @ANYBLOB="000000002c12070008000400a1"], 0x28}}, 0x4004090)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), r8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r9)
sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="7824040b16378c0b7d7f47e871e6d8aeee058ecee745d70ddcdefc939c805ff2ef47d56a60da830561d169a38fe4e59072fc571a8f97d90f", @ANYRES8=r7], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r11 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYRESOCT=r10, @ANYBLOB="e066b99dcf154c1741f5dc403ae4c136147d610e49b0a2c2e3f70d54d63b013926301bf13074fdb43dba3e2590fb6fa698fab48425db9ebde3c83d2d78ab8bb7105f2b00105f84ae44ee83d8fbba5dabd33d3735dbaae96fa6cc60e15e46d41c26c105ced1704dab45df0cd795a8fd8b049bb74680b93affa826cdf4f950315a318f0eb16c63278efd57bdaa5ad06e10b305c58b5017ba7aec340b53", @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000009000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000882)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r12, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000003840)=""/157, 0x9d}, {&(0x7f00000001c0)=""/154, 0x9a}, {&(0x7f0000000280)=""/101, 0x65}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0)
sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000300000000020020001280080001006774700014000280050005000100006b46c67f5805c88b786d66980c86e800"], 0x40}}, 0x40)

334.985629ms ago: executing program 3 (id=12517):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c80000002000000ffff000005"], 0x48) (async)
r2 = socket(0x10, 0x3, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0)
close(r5) (async)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)=0xfffffdfd) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r9 = socket$kcm(0x11, 0x3, 0x0) (async)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, <r13=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r12}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r13, &(0x7f0000000380)="0099", &(0x7f0000000480)=@tcp6=r2, 0x2}, 0x20) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x80, r1}, 0x38)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r14, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000007a00)={0x28, 0x26, 0x723, 0x0, 0x0, "", [@nested={0x15, 0xa9, 0x0, 0x1, [@generic="57d753865b", @nested={0xc, 0xeb, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @fd=r14}]}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) (async)
sendmsg$NFT_MSG_GETTABLE(r14, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0xb0, 0x1, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x77, 0x6, "9795e2adaa35b7e728dd59d6be346eff85ec1c5703261e813e4c68ed9824bb3500c030fa8e78c79d2ea67c5979c8a43850629583dc70183db3727a433a6479625b5336fae5b674c736155bee1434e488bbf5977e50ad9ed10a2a316931f4a47a5982c9417581fc9125bc8713c5dd95b24b345c"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24000041}, 0x4040801)
r15 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f00000000c0))

275.628018ms ago: executing program 4 (id=12518):
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(0xffffffffffffffff, &(0x7f0000000040)="07000000010003", 0x7) (async)
write(0xffffffffffffffff, &(0x7f0000000040)="07000000010003", 0x7)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="b80000001900010025bd7000ffdbdf25e000000200000000000000000000000000000000000000000000ffffac1414bb00000000000800000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000100000000000000000000000000002000000000000000000080000b06b6e000001000100"/112], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x20040084)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5400000002060500000000000000000000000006050004000000000005000100070000000900020073797a320000000005000500000000000c000780080012407fffffff0d000300686173683a6d6163"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x20890)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe6a272e7c4e2b636}, 0x24004011) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe6a272e7c4e2b636}, 0x24004011)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'geneve1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'geneve1\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r4, @ANYBLOB="57000100", @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x38}, 0x1, 0x2000000, 0x0, 0x2000c844}, 0x20000114)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
unshare(0x2a060400)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@ptr]}, {0x0, [0x71, 0x30]}}, 0x0, 0x28}, 0x28)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000000000002820010000000000000000000000000000fe8000000000000000000000000000bb00000005000010000a000001"], 0xb8}}, 0x0) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000000000002820010000000000000000000000000000fe8000000000000000000000000000bb00000005000010000a000001"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="a00000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000000a00e0802f000000834d5fed29ea0a183f7533436aaffd81447789b08594f563a1b4c23fe0cd36370df791828eab396052145ed2de5b4da15ea1fb2351acc9bef495809634b851a6d51e1e51ad", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b26b6e000000000050001100fe800000000000000000000000000011fe800000000000000000000000000028ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000fdff00000a000200"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="a00000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000000a00e0802f000000834d5fed29ea0a183f7533436aaffd81447789b08594f563a1b4c23fe0cd36370df791828eab396052145ed2de5b4da15ea1fb2351acc9bef495809634b851a6d51e1e51ad", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b26b6e000000000050001100fe800000000000000000000000000011fe800000000000000000000000000028ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000fdff00000a000200"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
listen(0xffffffffffffffff, 0x6)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x38) (async)
bind$alg(r7, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x38)
r8 = accept4(r7, 0x0, 0x0, 0x80800)
ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, &(0x7f0000000280)={0x80})
sendmmsg$unix(r8, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0)
write(r5, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) (async)
write(r5, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)

186.231269ms ago: executing program 4 (id=12519):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f00000006c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002}, 0x94)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@remote, <r0=>0x0}, &(0x7f0000000440)=0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000480)={'ip_vti0\x00', r0, 0x7800, 0x7f90, 0x7, 0x6, {{0x6, 0x4, 0x1, 0x2, 0xfffffffffffffff4, 0x67, 0x0, 0x2a, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x1c)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r4 = socket(0xe, 0x803, 0xf)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRES32=r5, @ANYRESDEC=r0], 0x3c}}, 0x800)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x800}}, 0x40)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e02, @loopback}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
socket(0x29, 0x80805, 0xffffffff)
r8 = socket(0x29, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES16=r7, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200000, 0x0)
close(r9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x300, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4044801)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)

113.045055ms ago: executing program 4 (id=12520):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="df545e9c2e1bdf7510f72cd55d547f92535f2404001ac942e9836d397d1644c91547d85149516019ace4f78639f7", @ANYRESOCT=r0], &(0x7f00000006c0)='syzkaller\x00', 0x57, 0xba, &(0x7f000000cf3d)=""/186, 0x40f00, 0x28, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x1a, 0x0, @val=@perf_event={0x7}}, 0x18)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r4=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x834, 0x800, 0x70bd28, 0x25dfdbfc, {0x14}, [@typed={0x8, 0x142, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000700)={{0x6, 0x7}, {0x400, 0x6}, 0xffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'sit0\x00', <r6=>r4, 0x7, 0x80, 0x1, 0x7f, {{0xd, 0x4, 0x2, 0x2f, 0x34, 0x69, 0x0, 0xd, 0x4, 0x0, @private=0xa010100, @local, {[@noop, @rr={0x7, 0x13, 0x1e, [@rand_addr=0x64010102, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @generic={0x7, 0x5, "4f6793"}, @end]}}}}})
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000680)={r6, 0x1, 0x6, @remote}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r4, 0x2, 0x6, @local}, 0x10)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000180)={r4, 0x1, 0x6, @multicast}, 0x10)
r7 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r7, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r7, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0x4, &(0x7f0000001a40)=ANY=[@ANYRES8=r6, @ANYRES32, @ANYBLOB="100800000000002505000000000000009502000000000000ae3c0e1cd634475812d9f79bf1b510c98863935a789947e322346c0000000074d303cc0923c5b038485f774e1bd5f87d9c57fd005be2a13f7b1cc1ec3bdcd9acf173f9faab493dc1ffbe5d02a4fef61db4154b7045bea384d2eb7d5a6c4f723812384f1ef35c4773f935e956c36c2c8edd77a91d9c0ccb1033d3462dcd9fb18fd4b885997161a943fb19a4189858914f2f24eb989fa31add91493693f855f1f5aabcdc73192e5546a225084919e06d60b4bd34e9650b3441b5ae82e1"], &(0x7f0000000140)='GPL\x00', 0x1, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x4720}, 0x94)
recvmmsg(r8, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f0000003800)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000a40)=""/4093, 0xffd}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000300)=""/22, 0x16}], 0x7}, 0xd}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}}], 0x4, 0x40000102, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r9, &(0x7f0000000000)=@file={0x1}, 0x6e)
connect$unix(r9, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
shutdown(r7, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', r6, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x3ff, 0x1, 0xffffffffffffffff, 0x6da443c8}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r10}, 0x20)

112.366676ms ago: executing program 3 (id=12521):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005081000418e00000004fcff", 0x58}], 0x1) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newqdisc={0x5c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async)
sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

14.520281ms ago: executing program 4 (id=12522):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) (async, rerun: 32)
r3 = socket$unix(0x1, 0x1, 0x0) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r4=>0x0}) (async, rerun: 64)
r5 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64)
connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) (async)
sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRESDEC=r3, @ANYRES64=r5, @ANYRES64=r4, @ANYRES64=r5], 0x20000600}}, 0x4000) (async)
sendmsg$sock(r5, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) (async, rerun: 64)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) (async)
close(r6) (async)
r8 = socket(0x15, 0x5, 0x0)
getsockopt(r8, 0x200000000114, 0x2710, &(0x7f0000c35fff), &(0x7f0000000000)) (async)
getpeername$packet(r8, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000340)={@rand_addr=' \x01\x00', 0x33, r9})
r10 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_int(r10, 0x1, 0x10, 0x0, &(0x7f00000000c0)) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1f4ffffffffff06010000f8ffffffbf", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000ec0000001e0000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
socket$packet(0x11, 0x2, 0x300) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010040"], 0x12) (async)
r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x14, 0x3c, 0x1, 0x70bd27, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880)

0s ago: executing program 3 (id=12523):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, 0x0, 0x880)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNGETVNETHDRSZ(r6, 0x800454d7, &(0x7f0000000100))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a30000000004c000000030a010200000000000000000a0000000900010073797a30000000000900030073797a31000000000a000700736f757465000000140004800800014000000000080002"], 0x94}}, 0x0)
r9 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r9, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="d800", 0x2}], 0x1}, 0x20000885)

kernel console output (not intermixed with test programs):

ter on device bond51
[ 1082.549756][T21478] syzkaller0: left promiscuous mode
[ 1082.549824][T21478] syzkaller0: left allmulticast mode
[ 1082.676353][T21489] syzkaller0: entered promiscuous mode
[ 1082.676414][T21489] syzkaller0: entered allmulticast mode
[ 1082.806524][T21497] netlink: 'syz.3.11344': attribute type 1 has an invalid length.
[ 1082.834672][T21497] bond52: entered promiscuous mode
[ 1082.835063][T21497] 8021q: adding VLAN 0 to HW filter on device bond52
[ 1082.953537][T21512] netlink: 'syz.1.11348': attribute type 13 has an invalid length.
[ 1082.957432][T21514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1082.957577][T21514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1082.957690][T21514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1082.957978][T21514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1082.958155][T21514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1082.958272][T21514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1082.958386][T21514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1082.958536][T21514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1082.958728][T21514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1082.958954][T21514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1083.002223][T21512] syzkaller0: Caught tx_queue_len zero misconfig
[ 1083.246927][T21542] netlink: 'syz.2.11356': attribute type 21 has an invalid length.
[ 1083.316317][T21551] lo speed is unknown, defaulting to 1000
[ 1083.322903][T21551] syzkaller0 speed is unknown, defaulting to 1000
[ 1083.890350][T21620] syzkaller0: left promiscuous mode
[ 1083.890397][T21620] syzkaller0: left allmulticast mode
[ 1083.998049][T21631] syzkaller0: entered promiscuous mode
[ 1083.999936][T21631] syzkaller0: entered allmulticast mode
[ 1084.311466][T21663] veth0: Caught tx_queue_len zero misconfig
[ 1084.468750][T21672] bond53: entered promiscuous mode
[ 1084.469094][T21672] 8021q: adding VLAN 0 to HW filter on device bond53
[ 1084.649761][T21685] ip6gretap2: entered allmulticast mode
[ 1085.689388][T21757] __nla_validate_parse: 51 callbacks suppressed
[ 1085.692260][T21757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11403'.
[ 1085.730142][T21760] vcan0: Caught tx_queue_len zero misconfig
[ 1085.828411][T21767] syzkaller0: left promiscuous mode
[ 1085.828461][T21767] syzkaller0: left allmulticast mode
[ 1085.866778][T21769] syzkaller0: entered promiscuous mode
[ 1085.866872][T21769] syzkaller0: entered allmulticast mode
[ 1085.920993][T21776] syzkaller0: left promiscuous mode
[ 1085.921030][T21776] syzkaller0: left allmulticast mode
[ 1086.010907][T21786] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1086.138983][T21791] wireguard: wg2: Could not create IPv4 socket
[ 1086.139057][   T33] lo speed is unknown, defaulting to 1000
[ 1086.139091][   T33] syz0: Port: 1 Link ACTIVE
[ 1086.260056][T21789] macvlan0: entered promiscuous mode
[ 1086.260095][T21789] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[ 1086.299484][T21789] validate_nla: 4 callbacks suppressed
[ 1086.301442][T21789] netlink: 'syz.1.11412': attribute type 2 has an invalid length.
[ 1086.363131][T21814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11419'.
[ 1086.464505][T21823] nbd: must specify an index to disconnect
[ 1086.502225][T21823] SET target dimension over the limit!
[ 1087.303578][T21858] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11431'.
[ 1087.315468][T21864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1087.356499][T21863] 8021q: adding VLAN 0 to HW filter on device team0
[ 1087.371732][T21863] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1087.487663][T21867] --map-set only usable from mangle table
[ 1087.597336][T21875] syzkaller0: entered promiscuous mode
[ 1087.597389][T21875] syzkaller0: entered allmulticast mode
[ 1087.685818][T21882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11438'.
[ 1087.991203][T21896] syzkaller0: left promiscuous mode
[ 1087.991269][T21896] syzkaller0: left allmulticast mode
[ 1088.006182][T21894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11441'.
[ 1088.006234][T21894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11441'.
[ 1088.079307][T21901] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1088.136891][T21906] syzkaller0: entered promiscuous mode
[ 1088.136943][T21906] syzkaller0: entered allmulticast mode
[ 1088.328084][T21936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1088.647221][T21945] bridge0 (unregistering): left allmulticast mode
[ 1088.677608][T21947] tunl0: Caught tx_queue_len zero misconfig
[ 1088.682862][T21947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11456'.
[ 1088.696262][T21947] netlink: 'syz.3.11456': attribute type 13 has an invalid length.
[ 1088.749013][T21954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11456'.
[ 1088.754541][T21952] netlink: 'syz.3.11456': attribute type 13 has an invalid length.
[ 1088.760440][T21947] netlink: 'syz.3.11456': attribute type 13 has an invalid length.
[ 1088.796025][T21952] netlink: 'syz.3.11456': attribute type 13 has an invalid length.
[ 1088.832463][T21958] veth0_to_team: Caught tx_queue_len zero misconfig
[ 1088.988323][T21967] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11461'.
[ 1089.117472][T21976] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.11464'.
[ 1089.268463][T21989] x_tables: unsorted entry at hook 3
[ 1089.272618][T21990] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[ 1089.288107][T21994] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[ 1089.399051][T22008] xt_cgroup: path and classid specified
[ 1089.460872][T22012] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[ 1089.530258][T22014] syzkaller0: left promiscuous mode
[ 1089.532147][T22014] syzkaller0: left allmulticast mode
[ 1089.673056][T22032] net_ratelimit: 94 callbacks suppressed
[ 1089.675935][T22032] openvswitch: netlink: IP tunnel attribute has 5405 unknown bytes.
[ 1089.702984][T22031] sch_tbf: burst 0 is lower than device syzkaller0 mtu (65589) !
[ 1089.743279][T22031] syzkaller0: entered promiscuous mode
[ 1089.745501][T22031] syzkaller0: entered allmulticast mode
[ 1089.951294][T22056] syzkaller0: left promiscuous mode
[ 1089.951421][T22056] syzkaller0: left allmulticast mode
[ 1090.170436][T22069] ip_tables: iptables: counters copy to user failed while replacing table
[ 1090.358014][T22075] syzkaller0: entered promiscuous mode
[ 1090.360087][T22075] syzkaller0: entered allmulticast mode
[ 1090.880775][T22123] syzkaller0: left promiscuous mode
[ 1090.883670][T22123] syzkaller0: left allmulticast mode
[ 1090.942373][T22130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1091.000587][T22135] __nla_validate_parse: 10 callbacks suppressed
[ 1091.000653][T22135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11498'.
[ 1091.004723][T22138] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1091.030443][T22138] syzkaller0: entered promiscuous mode
[ 1091.030490][T22138] syzkaller0: entered allmulticast mode
[ 1091.203019][T22147] bond56: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[ 1091.208552][T22147] bond56 (unregistering): Released all slaves
[ 1091.365438][T22156] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11504'.
[ 1091.450426][T22165] syzkaller0: left promiscuous mode
[ 1091.450487][T22165] syzkaller0: left allmulticast mode
[ 1091.555129][T22180] vlan0: Caught tx_queue_len zero misconfig
[ 1091.566209][T22181] netlink: 'syz.1.11509': attribute type 1 has an invalid length.
[ 1091.608802][T22181] 8021q: adding VLAN 0 to HW filter on device bond56
[ 1091.620677][T22176] syzkaller0: entered promiscuous mode
[ 1091.620736][T22176] syzkaller0: entered allmulticast mode
[ 1091.698096][T22212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11511'.
[ 1091.775141][T22214] 0: reclassify loop, rule prio 0, protocol 800
[ 1091.818451][T22224] IPVS: set_ctl: invalid protocol: 47 172.20.20.28:20002
[ 1092.201238][T22253] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11524'.
[ 1092.267333][T22264] netlink: 'syz.1.11526': attribute type 1 has an invalid length.
[ 1092.267383][T22264] netlink: 756 bytes leftover after parsing attributes in process `syz.1.11526'.
[ 1092.708148][T22290] syzkaller0: left promiscuous mode
[ 1092.708195][T22290] syzkaller0: left allmulticast mode
[ 1092.771292][T22296] syzkaller0: entered promiscuous mode
[ 1092.771339][T22296] syzkaller0: entered allmulticast mode
[ 1092.980078][T22316] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11536'.
[ 1093.000128][T22316] vxcan6: entered allmulticast mode
[ 1093.183369][T22331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11539'.
[ 1093.189647][T22331] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[ 1093.236251][T22336] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20000
[ 1093.332891][T22347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11545'.
[ 1093.396802][T22357] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1093.445773][T22362] netlink: 'syz.1.11546': attribute type 1 has an invalid length.
[ 1093.466212][T22362] 8021q: adding VLAN 0 to HW filter on device bond57
[ 1096.291356][T22345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1096.291643][T22346] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1096.373299][T22375] netlink: 'syz.2.11551': attribute type 1 has an invalid length.
[ 1096.457903][T22390] veth1: entered promiscuous mode
[ 1096.457954][T22390] veth1: entered allmulticast mode
[ 1096.533047][T22401] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11553'.
[ 1096.827559][T22429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11558'.
[ 1097.174252][T22447] TC_ACT_REPEAT abuse ?
[ 1097.272144][T22458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11562'.
[ 1097.274024][T22458] netlink: 220 bytes leftover after parsing attributes in process `syz.3.11562'.
[ 1097.274033][T22458] tc_dump_action: action bad kind
[ 1097.310532][T22462] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11563'.
[ 1097.335095][T22461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11563'.
[ 1097.335514][T22462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11563'.
[ 1097.491511][T22476] netlink: 'syz.3.11564': attribute type 3 has an invalid length.
[ 1097.492125][T22477] netlink: 'syz.3.11564': attribute type 4 has an invalid length.
[ 1097.492136][T22477] netlink: 17 bytes leftover after parsing attributes in process `syz.3.11564'.
[ 1097.589176][T22476] xt_CT: No such helper "snmp_trap"
[ 1097.784861][T22506] veth1_macvtap: left promiscuous mode
[ 1097.792963][T22506] veth0_macvtap: left promiscuous mode
[ 1097.793622][T22506] veth0_macvtap: entered promiscuous mode
[ 1097.794242][T22506] veth1_macvtap: entered promiscuous mode
[ 1097.799612][T22506] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1097.800103][T22506] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1097.800560][T22506] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1097.801236][T22506] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1097.808801][T22506] mac80211_hwsim hwsim45 wlan0: left promiscuous mode
[ 1097.825836][T22514] openvswitch: netlink: Message has 8 unknown bytes.
[ 1097.857428][T22506] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1097.882217][T22506] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1097.887074][T22506] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1097.888025][T22506] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1097.888658][T22506] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1097.889021][T22506] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1097.890369][T22506] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1097.892698][T22506] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1097.897226][T22506] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1097.911284][T22506] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1097.939935][T22506] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1097.941394][T22506] 8021q: adding VLAN 0 to HW filter on device bond12
[ 1097.941898][T22506] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1097.942442][T22506] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1097.942912][T22506] 8021q: adding VLAN 0 to HW filter on device bond15
[ 1097.943447][T22506] 8021q: adding VLAN 0 to HW filter on device bond16
[ 1097.943916][T22506] 8021q: adding VLAN 0 to HW filter on device bond17
[ 1097.944436][T22506] 8021q: adding VLAN 0 to HW filter on device bond18
[ 1097.944905][T22506] 8021q: adding VLAN 0 to HW filter on device bond19
[ 1097.951906][T22506] 8021q: adding VLAN 0 to HW filter on device bond20
[ 1097.952482][T22506] 8021q: adding VLAN 0 to HW filter on device bond21
[ 1097.952923][T22506] 8021q: adding VLAN 0 to HW filter on device bond22
[ 1097.953462][T22506] 8021q: adding VLAN 0 to HW filter on device bond23
[ 1097.953924][T22506] 8021q: adding VLAN 0 to HW filter on device bond24
[ 1097.954426][T22506] 8021q: adding VLAN 0 to HW filter on device bond25
[ 1097.954923][T22506] 8021q: adding VLAN 0 to HW filter on device bond26
[ 1097.956033][T22506] 8021q: adding VLAN 0 to HW filter on device bond27
[ 1097.956539][T22506] 8021q: adding VLAN 0 to HW filter on device bond28
[ 1097.971790][T22506] bond30: left promiscuous mode
[ 1097.974239][T22506] 8021q: adding VLAN 0 to HW filter on device bond32
[ 1097.975117][T22506] bridge24: left promiscuous mode
[ 1097.976778][T22506] macsec1: left promiscuous mode
[ 1097.978706][T22506] bridge26: left promiscuous mode
[ 1097.984407][T22506] geneve3: left promiscuous mode
[ 1097.984419][T22506] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[ 1097.990280][T22516] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11572'.
[ 1098.035901][ T3416] openvswitch: cpu_id mismatch with handler threads
[ 1098.063176][T22526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11574'.
[ 1098.070599][T22528] syzkaller0: left promiscuous mode
[ 1098.070682][T22528] syzkaller0: left allmulticast mode
[ 1098.079993][T22528] tunl0: Caught tx_queue_len zero misconfig
[ 1098.112575][T22525] netlink: 'syz.3.11574': attribute type 1 has an invalid length.
[ 1098.591969][T22559] syzkaller0: entered promiscuous mode
[ 1098.592019][T22559] syzkaller0: entered allmulticast mode
[ 1098.975931][ T3416] openvswitch: cpu_id mismatch with handler threads
[ 1099.438668][T22594] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1099.989408][T22628] netlink: 'syz.2.11599': attribute type 1 has an invalid length.
[ 1100.085059][T22630] veth1_virt_wifi: entered allmulticast mode
[ 1100.739838][T22671] netlink: 'syz.2.11609': attribute type 30 has an invalid length.
[ 1100.798211][T22667] nbd: device at index 64 is going down
[ 1101.553670][T22711] __nla_validate_parse: 11 callbacks suppressed
[ 1101.555876][T22711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11621'.
[ 1101.698193][T22726] bridge0: entered promiscuous mode
[ 1101.711783][T22728] bridge79: entered promiscuous mode
[ 1101.827562][T22740] netlink: 100 bytes leftover after parsing attributes in process `syz.3.11626'.
[ 1101.853991][T22736] netlink: 168 bytes leftover after parsing attributes in process `syz.2.11627'.
[ 1101.989388][T22744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11626'.
[ 1104.783985][T22746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11628'.
[ 1104.810990][T22748] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11629'.
[ 1105.029768][T22771] netlink: 'syz.3.11635': attribute type 13 has an invalid length.
[ 1105.091369][   T33] openvswitch: cpu_id mismatch with handler threads
[ 1105.108375][ T3424] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1105.161365][T22778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11637'.
[ 1105.222056][T22780] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11638'.
[ 1105.696128][   T33] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1105.936594][   T33] openvswitch: cpu_id mismatch with handler threads
[ 1106.023190][T22787] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1106.031416][T22787] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1108.070385][T22796] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11641'.
[ 1108.095735][T22804] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11641'.
[ 1108.202197][T22818] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11644'.
[ 1108.423615][T22830] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1108.483390][T22832] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11649'.
[ 1108.601637][T22835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11650'.
[ 1108.612763][T22835] ip6_vti0: Caught tx_queue_len zero misconfig
[ 1108.655148][T22838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11651'.
[ 1108.658119][T22839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11651'.
[ 1108.827744][T22843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11652'.
[ 1108.830838][T22843] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1109.000577][T22847] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11653'.
[ 1109.080157][T22850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11654'.
[ 1109.903396][T22890] syzkaller0: left promiscuous mode
[ 1109.905441][T22890] syzkaller0: left allmulticast mode
[ 1109.958005][T22892] netlink: 'syz.2.11666': attribute type 1 has an invalid length.
[ 1110.098966][T22906] netlink: 'syz.3.11670': attribute type 6 has an invalid length.
[ 1110.111897][T22906] syzkaller0: left promiscuous mode
[ 1110.113783][T22906] syzkaller0: left allmulticast mode
[ 1110.164143][T22913] syzkaller0: entered promiscuous mode
[ 1110.164752][T22913] syzkaller0: entered allmulticast mode
[ 1110.348695][T22924] syzkaller0: Caught tx_queue_len zero misconfig
[ 1110.377379][T22924] syzkaller0: entered promiscuous mode
[ 1110.377526][T22924] syzkaller0: entered allmulticast mode
[ 1110.444810][T22932] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[ 1110.523388][T22942] netlink: 'syz.1.11680': attribute type 1 has an invalid length.
[ 1110.538408][T22947] veth0: entered promiscuous mode
[ 1110.740377][T22958] netlink: 'syz.1.11686': attribute type 49 has an invalid length.
[ 1110.807630][T22964] syzkaller0: left promiscuous mode
[ 1110.810031][T22964] syzkaller0: left allmulticast mode
[ 1110.978233][T22973] syzkaller0: entered promiscuous mode
[ 1110.978297][T22973] syzkaller0: entered allmulticast mode
[ 1111.022739][T22975] netlink: 'syz.1.11690': attribute type 2 has an invalid length.
[ 1111.179949][T22979] xt_policy: neither incoming nor outgoing policy selected
[ 1111.689179][T23012] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[ 1112.692744][T23067] syzkaller0: left promiscuous mode
[ 1112.692807][T23067] syzkaller0: left allmulticast mode
[ 1112.693964][T23067] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[ 1112.763542][T23070] veth0_to_hsr: Caught tx_queue_len zero misconfig
[ 1112.849624][T23074] syzkaller0: entered promiscuous mode
[ 1112.849687][T23074] syzkaller0: entered allmulticast mode
[ 1113.435148][T23085] __nla_validate_parse: 95 callbacks suppressed
[ 1113.438876][T23085] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11718'.
[ 1113.642739][T23087] netlink: 'syz.1.11719': attribute type 6 has an invalid length.
[ 1113.731761][T23094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11721'.
[ 1113.808769][T23092] netlink: 100 bytes leftover after parsing attributes in process `syz.1.11720'.
[ 1113.818589][T23092] netlink: zone id is out of range
[ 1113.820737][T23092] netlink: zone id is out of range
[ 1113.822623][T23092] netlink: zone id is out of range
[ 1113.825625][T23092] netlink: zone id is out of range
[ 1113.827772][T23092] netlink: zone id is out of range
[ 1113.829918][T23092] netlink: zone id is out of range
[ 1113.832021][T23092] netlink: zone id is out of range
[ 1113.833961][T23092] netlink: zone id is out of range
[ 1113.836188][T23092] netlink: zone id is out of range
[ 1113.838321][T23092] netlink: zone id is out of range
[ 1113.875602][T23100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11722'.
[ 1113.875639][T23100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11722'.
[ 1113.875951][T23100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11722'.
[ 1113.875977][T23100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11722'.
[ 1113.876216][T23100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11722'.
[ 1113.876240][T23100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11722'.
[ 1113.876494][T23100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11722'.
[ 1114.092041][T23122] NCSI netlink: No device for ifindex 0
[ 1114.128002][T23133] tipc: Enabling of bearer <eth:macvtap0> rejected, max 3 bearers permitted
[ 1114.206400][T23133] syzkaller0: left promiscuous mode
[ 1114.206467][T23133] syzkaller0: left allmulticast mode
[ 1114.218267][T23135] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1114.438005][T23151] sch_tbf: burst 128 is lower than device syzkaller0 mtu (1806) !
[ 1114.474659][T23155] netlink: 'syz.3.11736': attribute type 2 has an invalid length.
[ 1114.475731][T23154] netlink: 'syz.3.11736': attribute type 2 has an invalid length.
[ 1114.534224][T23158] syzkaller0: left promiscuous mode
[ 1114.534288][T23158] syzkaller0: left allmulticast mode
[ 1114.541620][T23158] netlink: 'syz.1.11737': attribute type 2 has an invalid length.
[ 1114.546349][T23159] bridge0: entered allmulticast mode
[ 1114.609614][T23168] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40
[ 1114.617218][T23168] syzkaller0: entered promiscuous mode
[ 1114.620214][T23168] syzkaller0: entered allmulticast mode
[ 1114.642366][T23169] bond60 (unregistering): Released all slaves
[ 1114.655502][T23172] netlink: 'syz.3.11741': attribute type 1 has an invalid length.
[ 1114.866265][T23186] syzkaller0: left promiscuous mode
[ 1114.869175][T23186] syzkaller0: left allmulticast mode
[ 1114.934049][T23193] syzkaller0: entered promiscuous mode
[ 1114.934108][T23193] syzkaller0: entered allmulticast mode
[ 1115.197584][T23204] syzkaller0: entered promiscuous mode
[ 1115.200012][T23204] syzkaller0: entered allmulticast mode
[ 1115.460140][T23214] netlink: 'syz.2.11754': attribute type 4 has an invalid length.
[ 1115.466944][   T33] lo speed is unknown, defaulting to 1000
[ 1115.467065][   T33] syz0: Port: 1 Link DOWN
[ 1115.481780][T23214] netlink: 'syz.2.11754': attribute type 4 has an invalid length.
[ 1115.493534][   T33] lo speed is unknown, defaulting to 1000
[ 1115.493583][   T33] syz0: Port: 1 Link ACTIVE
[ 1115.500473][T23215] netlink: 'syz.2.11754': attribute type 4 has an invalid length.
[ 1115.507886][T23214] netlink: 'syz.2.11754': attribute type 4 has an invalid length.
[ 1115.511589][   T33] lo speed is unknown, defaulting to 1000
[ 1115.511654][   T33] syz0: Port: 1 Link DOWN
[ 1115.517823][   T33] lo speed is unknown, defaulting to 1000
[ 1115.517858][   T33] syz0: Port: 1 Link ACTIVE
[ 1115.714930][T23231] netlink: 'syz.2.11757': attribute type 9 has an invalid length.
[ 1115.943697][T23242] tcf_pedit_act: 7 callbacks suppressed
[ 1115.943782][T23242] tc action pedit unable to extract header offset for header type (0x5)
[ 1115.943812][T23242] tc action pedit unable to extract header offset for header type (0x5)
[ 1115.943840][T23242] tc action pedit unable to extract header offset for header type (0x5)
[ 1115.943867][T23242] tc action pedit unable to extract header offset for header type (0x5)
[ 1115.945812][T23242] tc action pedit unable to extract header offset for header type (0x5)
[ 1115.945866][T23242] tc action pedit unable to extract header offset for header type (0x5)
[ 1115.945895][T23242] tc action pedit unable to extract header offset for header type (0x5)
[ 1115.945924][T23242] tc action pedit unable to extract header offset for header type (0x5)
[ 1115.945952][T23242] tc action pedit unable to extract header offset for header type (0x5)
[ 1115.945981][T23242] tc action pedit unable to extract header offset for header type (0x5)
[ 1116.072634][T23244] netlink: 'syz.3.11760': attribute type 10 has an invalid length.
[ 1116.822964][T23256] netlink: 'syz.2.11763': attribute type 1 has an invalid length.
[ 1116.830424][T23256] netlink: 'syz.2.11763': attribute type 1 has an invalid length.
[ 1117.264292][T23279] x_tables: duplicate entry at hook 1
[ 1117.550758][T23290] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001
[ 1117.754575][T23298] netlink: 'syz.2.11771': attribute type 5 has an invalid length.
[ 1117.754637][T23298] netlink: 'syz.2.11771': attribute type 6 has an invalid length.
[ 1118.440559][T23304] tipc: Resetting bearer <eth:syzkaller0>
[ 1118.443122][T23304] syzkaller0: left promiscuous mode
[ 1118.443191][T23304] syzkaller0: left allmulticast mode
[ 1118.459537][T23304] bridge0: left allmulticast mode
[ 1118.462637][T23304] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[ 1118.465631][T23304] macvlan0: left promiscuous mode
[ 1118.478763][T23304] bond51: left promiscuous mode
[ 1118.480300][T23304] bridge119: left promiscuous mode
[ 1118.480312][T23304] bridge119: left allmulticast mode
[ 1118.483179][T23304] bond52: left promiscuous mode
[ 1118.483192][T23304] ip6gre10: left promiscuous mode
[ 1118.493204][T23304] gre11: left promiscuous mode
[ 1118.501666][T23304] veth1: left promiscuous mode
[ 1118.501717][T23304] veth1: left allmulticast mode
[ 1118.545424][T23307] __nla_validate_parse: 59 callbacks suppressed
[ 1118.545484][T23307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11776'.
[ 1118.545561][T23307] tipc: Resetting bearer <eth:syzkaller0>
[ 1118.574012][T23307] tipc: Disabling bearer <eth:syzkaller0>
[ 1118.588967][T23310] syzkaller0: entered promiscuous mode
[ 1118.589022][T23310] syzkaller0: entered allmulticast mode
[ 1118.681674][T23321] bond0: Caught tx_queue_len zero misconfig
[ 1118.683644][T23321] syzkaller0: entered promiscuous mode
[ 1118.683654][T23321] syzkaller0: entered allmulticast mode
[ 1119.119899][T23335] lo speed is unknown, defaulting to 1000
[ 1119.122712][T23335] syzkaller0 speed is unknown, defaulting to 1000
[ 1119.240747][T23346] netlink: 112 bytes leftover after parsing attributes in process `syz.1.11784'.
[ 1119.359518][T23361] 8021q: adding VLAN 0 to HW filter on device bond94
[ 1119.394718][T23356] syzkaller0: left promiscuous mode
[ 1119.394775][T23356] syzkaller0: left allmulticast mode
[ 1119.517618][T23374] syzkaller0: entered promiscuous mode
[ 1119.517681][T23374] syzkaller0: entered allmulticast mode
[ 1119.519404][T23374] syzkaller0: left promiscuous mode
[ 1119.519417][T23374] syzkaller0: left allmulticast mode
[ 1119.686044][T23379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11790'.
[ 1119.686119][T23379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11790'.
[ 1120.457387][T23386] ip6gre0: Caught tx_queue_len zero misconfig
[ 1120.510728][T23389] xt_l2tp: v2 doesn't support IP mode
[ 1120.547808][T23391] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[ 1120.658431][T23400] syzkaller0: entered promiscuous mode
[ 1120.660758][T23400] syzkaller0: entered allmulticast mode
[ 1120.837240][T23420] syzkaller0: entered promiscuous mode
[ 1120.839169][T23420] syzkaller0: entered allmulticast mode
[ 1120.984580][T23428] bond95: entered promiscuous mode
[ 1120.984834][T23428] 8021q: adding VLAN 0 to HW filter on device bond95
[ 1123.032554][T23441] syzkaller0: entered promiscuous mode
[ 1123.032603][T23441] syzkaller0: entered allmulticast mode
[ 1123.596735][T23399] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1123.713678][T23450] validate_nla: 4 callbacks suppressed
[ 1123.713745][T23450] netlink: 'syz.3.11809': attribute type 1 has an invalid length.
[ 1123.802990][T23471] netlink: 'syz.1.11812': attribute type 2 has an invalid length.
[ 1123.925042][T23486] netlink: 'syz.3.11817': attribute type 1 has an invalid length.
[ 1123.946054][T23486] bond54: entered promiscuous mode
[ 1123.948103][T23486] 8021q: adding VLAN 0 to HW filter on device bond54
[ 1124.264780][T23506] syzkaller0: left promiscuous mode
[ 1124.266759][T23506] syzkaller0: left allmulticast mode
[ 1124.271301][T23506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11819'.
[ 1124.311362][T23508] syzkaller0: entered promiscuous mode
[ 1124.313314][T23508] syzkaller0: entered allmulticast mode
[ 1124.445116][T23520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11823'.
[ 1124.473493][T23522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11824'.
[ 1124.476556][T23522] tipc: Resetting bearer <eth:syzkaller0>
[ 1124.491991][T23522] tipc: Disabling bearer <eth:syzkaller0>
[ 1124.529186][T23522] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11824'.
[ 1124.716108][T23534] netlink: 'syz.2.11827': attribute type 6 has an invalid length.
[ 1124.721973][T23534] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11827'.
[ 1126.497021][T23537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11828'.
[ 1126.500028][T23537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11828'.
[ 1126.674138][T23544] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11830'.
[ 1126.688293][T23546] syzkaller0: entered promiscuous mode
[ 1126.688342][T23546] syzkaller0: entered allmulticast mode
[ 1126.743032][T23550] net_ratelimit: 6 callbacks suppressed
[ 1126.746316][T23550] openvswitch: netlink: Multiple metadata blocks provided
[ 1126.752201][T23550] netlink: 'syz.2.11832': attribute type 1 has an invalid length.
[ 1126.781430][T23550] 8021q: adding VLAN 0 to HW filter on device bond96
[ 1126.847590][T23559] veth0: entered promiscuous mode
[ 1126.856811][T23559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11835'.
[ 1129.828116][T23560] batadv_slave_0: Caught tx_queue_len zero misconfig
[ 1129.860061][T23558] veth0: left promiscuous mode
[ 1129.924872][T23570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11838'.
[ 1129.924932][T23570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11838'.
[ 1129.933937][T23570] syzkaller0: left promiscuous mode
[ 1129.934004][T23570] syzkaller0: left allmulticast mode
[ 1129.950107][T23569] block nbd0: Unsupported socket: should be TCP or UNIX.
[ 1130.001933][T23579] syzkaller0: entered promiscuous mode
[ 1130.001995][T23579] syzkaller0: entered allmulticast mode
[ 1130.013165][T23581] syzkaller0: entered promiscuous mode
[ 1130.015050][T23581] syzkaller0: entered allmulticast mode
[ 1130.037965][T23572] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11839'.
[ 1130.051473][T23572] wireguard: wg2: Could not create IPv4 socket
[ 1130.051569][T23572] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[ 1130.052400][T23572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11839'.
[ 1130.138398][T23591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11844'.
[ 1130.142328][T23591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11844'.
[ 1130.143251][T23589] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11843'.
[ 1130.207072][T23593] syzkaller0: entered promiscuous mode
[ 1130.209551][T23593] syzkaller0: entered allmulticast mode
[ 1130.212884][T23595] syzkaller0: left promiscuous mode
[ 1130.213244][T23595] syzkaller0: left allmulticast mode
[ 1130.307821][T23602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11848'.
[ 1130.308637][T23602] syzkaller0: entered promiscuous mode
[ 1130.308646][T23602] syzkaller0: entered allmulticast mode
[ 1130.337882][T23604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11849'.
[ 1130.407120][T23608] wireguard: wg2: Could not create IPv4 socket
[ 1130.407212][T23608] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[ 1130.414956][T23610] syzkaller0: left promiscuous mode
[ 1130.421258][T23610] syzkaller0: left allmulticast mode
[ 1130.429756][T23608] openvswitch: netlink: Message has 8 unknown bytes.
[ 1130.499754][T23612] xt_CT: No such helper "syz0"
[ 1130.502511][T23615] sctp: [Deprecated]: syz.1.11852 (pid 23615) Use of int in max_burst socket option deprecated.
[ 1130.502511][T23615] Use struct sctp_assoc_value instead
[ 1130.510086][T23615] netlink: 'syz.1.11852': attribute type 1 has an invalid length.
[ 1130.542504][T23615] bond60: option mode: invalid value (8)
[ 1130.552688][T23615] bond60 (unregistering): Released all slaves
[ 1130.593530][T23612] tipc: Enabling of bearer <eth:batadv0> rejected, failed to enable media
[ 1130.612338][T23622] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 1130.612598][T23622] CPU: 1 UID: 0 PID: 23622 Comm: syz.1.11852 Not tainted syzkaller #0 PREEMPT(full) 
[ 1130.612660][T23622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1130.612670][T23622] Call Trace:
[ 1130.612676][T23622]  <TASK>
[ 1130.612684][T23622]  dump_stack_lvl+0xe8/0x150
[ 1130.612711][T23622]  sysfs_warn_dup+0x8e/0xa0
[ 1130.612733][T23622]  sysfs_do_create_link_sd+0xc0/0x110
[ 1130.612755][T23622]  device_add_class_symlinks+0x1cf/0x240
[ 1130.612778][T23622]  device_add+0x467/0xb80
[ 1130.612798][T23622]  wiphy_register+0x1fc8/0x2ff0
[ 1130.612827][T23622]  ? __pfx_wiphy_register+0x10/0x10
[ 1130.612843][T23622]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1130.612859][T23622]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1130.612886][T23622]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1130.612908][T23622]  ieee80211_register_hw+0x3d3d/0x4a50
[ 1130.612935][T23622]  ? ieee80211_register_hw+0x19f1/0x4a50
[ 1130.612971][T23622]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1130.612991][T23622]  ? __asan_memset+0x22/0x50
[ 1130.613010][T23622]  ? __hrtimer_setup+0x1b7/0x260
[ 1130.613027][T23622]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1130.613047][T23622]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 1130.613089][T23622]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1130.613107][T23622]  ? kstrndup+0xbd/0x160
[ 1130.613122][T23622]  ? kstrndup+0xbd/0x160
[ 1130.613137][T23622]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1130.613166][T23622]  genl_family_rcv_msg_doit+0x233/0x340
[ 1130.613221][T23622]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1130.613249][T23622]  ? bpf_lsm_capable+0x9/0x20
[ 1130.613268][T23622]  ? security_capable+0x7e/0x2c0
[ 1130.613296][T23622]  genl_rcv_msg+0x614/0x7a0
[ 1130.613318][T23622]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1130.613335][T23622]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1130.613362][T23622]  netlink_rcv_skb+0x226/0x4a0
[ 1130.613378][T23622]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1130.613396][T23622]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1130.613421][T23622]  ? down_read+0x2be/0x330
[ 1130.613442][T23622]  genl_rcv+0x28/0x40
[ 1130.613460][T23622]  netlink_unicast+0x7bd/0x940
[ 1130.613490][T23622]  netlink_sendmsg+0x813/0xb40
[ 1130.613514][T23622]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1130.613537][T23622]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1130.613561][T23622]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1130.613575][T23622]  sock_sendmsg_nosec+0x13a/0x180
[ 1130.613596][T23622]  ____sys_sendmsg+0x54e/0x850
[ 1130.613622][T23622]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1130.613644][T23622]  ? import_iovec+0x73/0xa0
[ 1130.613669][T23622]  ___sys_sendmsg+0x2a5/0x360
[ 1130.613682][T23622]  ? __lock_acquire+0x6df/0x2e50
[ 1130.613701][T23622]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1130.613718][T23622]  ? futex_wait+0x2a2/0x390
[ 1130.613758][T23622]  ? __fget_files+0x2a/0x420
[ 1130.613776][T23622]  ? __fget_files+0x3a2/0x420
[ 1130.613800][T23622]  __x64_sys_sendmsg+0x1b1/0x290
[ 1130.613815][T23622]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1130.613845][T23622]  do_syscall_64+0x166/0x520
[ 1130.613861][T23622]  ? trace_irq_disable+0x3b/0x140
[ 1130.613874][T23622]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1130.613891][T23622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1130.613904][T23622] RIP: 0033:0x7f919b99e159
[ 1130.613919][T23622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1130.613931][T23622] RSP: 002b:00007f9199bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1130.613947][T23622] RAX: ffffffffffffffda RBX: 00007f919bc26090 RCX: 00007f919b99e159
[ 1130.613958][T23622] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 000000000000000c
[ 1130.613966][T23622] RBP: 00007f919ba35024 R08: 0000000000000000 R09: 0000000000000000
[ 1130.613975][T23622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1130.613983][T23622] R13: 00007f919bc26128 R14: 00007f919bc26090 R15: 00007ffe78915078
[ 1130.614006][T23622]  </TASK>
[ 1130.687046][T23615] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11852'.
[ 1130.823850][T23630] tc action pedit offset must be on 32 bit boundaries
[ 1130.823901][T23630] tc action pedit offset must be on 32 bit boundaries
[ 1130.823933][T23630] tc action pedit offset must be on 32 bit boundaries
[ 1130.823955][T23630] tc action pedit offset must be on 32 bit boundaries
[ 1130.823960][T23630] tc action pedit offset must be on 32 bit boundaries
[ 1130.823964][T23630] tc action pedit offset must be on 32 bit boundaries
[ 1130.823968][T23630] tc action pedit offset must be on 32 bit boundaries
[ 1130.823972][T23630] tc action pedit offset must be on 32 bit boundaries
[ 1130.823976][T23630] tc action pedit offset must be on 32 bit boundaries
[ 1130.823980][T23630] tc action pedit offset must be on 32 bit boundaries
[ 1130.823998][T23630] TC_ACT_REPEAT abuse ?
[ 1130.890934][T23634] ip6gre0: entered promiscuous mode
[ 1130.890985][T23634] ip6gre0: entered allmulticast mode
[ 1130.926212][T23640] netlink: 'syz.3.11858': attribute type 13 has an invalid length.
[ 1130.972833][ T3416] openvswitch: cpu_id mismatch with handler threads
[ 1131.015413][T23645] syzkaller0: entered promiscuous mode
[ 1131.017097][   T33] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1131.024217][T23645] syzkaller0: entered allmulticast mode
[ 1131.037779][T23640] syzkaller0: entered promiscuous mode
[ 1131.037829][T23640] syzkaller0: entered allmulticast mode
[ 1131.068789][T23632] netlink: 'syz.2.11855': attribute type 8 has an invalid length.
[ 1131.102843][T23650] syzkaller0: left promiscuous mode
[ 1131.104200][T23650] syzkaller0: left allmulticast mode
[ 1131.123705][T23648] netlink: 'syz.2.11855': attribute type 8 has an invalid length.
[ 1131.183545][T23652] syzkaller0: entered promiscuous mode
[ 1131.189033][T23652] syzkaller0: entered allmulticast mode
[ 1131.191902][T23655] netlink: 'syz.3.11862': attribute type 6 has an invalid length.
[ 1131.197894][T23654] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1131.290383][T23655] tcf_pedit_act: 22 callbacks suppressed
[ 1131.290494][T23655] tc action pedit 'at' offset 5 out of bounds
[ 1131.346293][   T33] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1131.600849][T23671] syzkaller0: entered promiscuous mode
[ 1131.603689][T23671] syzkaller0: entered allmulticast mode
[ 1131.622632][T23671] 0: reclassify loop, rule prio 0, protocol 800
[ 1131.630144][T23672] syzkaller0: entered promiscuous mode
[ 1131.630214][T23672] syzkaller0: entered allmulticast mode
[ 1131.632609][T23672] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1131.680389][T23670] tipc: Resetting bearer <eth:syzkaller0>
[ 1131.710758][T23670] tipc: Disabling bearer <eth:syzkaller0>
[ 1131.881451][T23677] netlink: 'syz.3.11867': attribute type 9 has an invalid length.
[ 1131.936473][   T33] openvswitch: cpu_id mismatch with handler threads
[ 1132.090185][T23668] syz.2.11865 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1132.090229][T23668] CPU: 0 UID: 0 PID: 23668 Comm: syz.2.11865 Not tainted syzkaller #0 PREEMPT(full) 
[ 1132.090254][T23668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1132.090261][T23668] Call Trace:
[ 1132.090265][T23668]  <TASK>
[ 1132.090269][T23668]  dump_stack_lvl+0xe8/0x150
[ 1132.090285][T23668]  dump_header+0xd3/0x4b0
[ 1132.090296][T23668]  oom_kill_process+0x3ab/0x9e0
[ 1132.090308][T23668]  out_of_memory+0x1064/0x1480
[ 1132.090317][T23668]  ? try_charge_memcg+0xc32/0x15e0
[ 1132.090331][T23668]  ? __pfx_out_of_memory+0x10/0x10
[ 1132.090339][T23668]  ? do_raw_spin_unlock+0x4d/0x200
[ 1132.090353][T23668]  try_charge_memcg+0xcdf/0x15e0
[ 1132.090369][T23668]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1132.090386][T23668]  ? charge_memcg+0x47/0x310
[ 1132.090395][T23668]  charge_memcg+0x1dd/0x310
[ 1132.090404][T23668]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[ 1132.090413][T23668]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[ 1132.090423][T23668]  swap_cache_alloc_folio+0x4de/0x990
[ 1132.090439][T23668]  swap_cache_read_folio+0x44/0x120
[ 1132.090451][T23668]  swap_cluster_readahead+0x392/0x630
[ 1132.090463][T23668]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1132.090473][T23668]  ? __css_rstat_updated+0x237/0x540
[ 1132.090491][T23668]  swapin_readahead+0x1a3/0xc50
[ 1132.090506][T23668]  ? __pfx_swapin_readahead+0x10/0x10
[ 1132.090518][T23668]  ? swap_table_get+0x1e/0x260
[ 1132.090527][T23668]  ? swap_table_get+0x1e/0x260
[ 1132.090535][T23668]  ? swap_table_get+0x1e/0x260
[ 1132.090545][T23668]  ? swap_table_get+0x216/0x260
[ 1132.090555][T23668]  ? swap_cache_get_folio+0x2e7/0x2f0
[ 1132.090568][T23668]  do_swap_page+0x3fb/0x4c10
[ 1132.090584][T23668]  ? __lock_acquire+0x6df/0x2e50
[ 1132.090591][T23668]  ? do_swap_page+0x126/0x4c10
[ 1132.090600][T23668]  ? __pfx_do_swap_page+0x10/0x10
[ 1132.090609][T23668]  ? __pte_offset_map+0x1ae/0x240
[ 1132.090625][T23668]  ? pte_offset_map_rw_nolock+0xea/0x160
[ 1132.090635][T23668]  handle_mm_fault+0x1398/0x3750
[ 1132.090649][T23668]  ? handle_mm_fault+0xf1/0x3750
[ 1132.090663][T23668]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1132.090671][T23668]  ? lock_vma_under_rcu+0x45a/0x500
[ 1132.090692][T23668]  do_user_addr_fault+0xa4f/0x1340
[ 1132.090704][T23668]  ? trace_page_fault_user+0x84/0x1e0
[ 1132.090713][T23668]  exc_page_fault+0x6a/0xc0
[ 1132.090723][T23668]  asm_exc_page_fault+0x26/0x30
[ 1132.090731][T23668] RIP: 0033:0x7ff5a6a6b991
[ 1132.090739][T23668] Code: ff e8 23 7f fe ff 49 39 c4 72 76 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 69 3d 0e 9d ee 00 e8 03 00 00 48 8d 1d 0f a6 3b 00 <e8> da 32 13 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 f0 00 00 00
[ 1132.090746][T23668] RSP: 002b:00007ffcf988ad90 EFLAGS: 00010206
[ 1132.090754][T23668] RAX: 000000000011456f RBX: 00007ff5a6e25fa0 RCX: 00000000001141f8
[ 1132.090759][T23668] RDX: 0000000000000377 RSI: 00007ffcf988ad70 RDI: 00000000000003e8
[ 1132.090765][T23668] RBP: 00007ff5a6e27da0 R08: 0000000034e9bbd5 R09: 3fffffffffffffff
[ 1132.090770][T23668] R10: 4000000000000000 R11: 0000000000000246 R12: 00000000001146b4
[ 1132.090775][T23668] R13: 00007ff5a6e2609c R14: 0000000000114411 R15: 00007ff5a6e26090
[ 1132.090788][T23668]  </TASK>
[ 1132.090824][T23668] memory: usage 307200kB, limit 307200kB, failcnt 6007
[ 1132.090848][T23668] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0
[ 1132.090871][T23668] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0
[ 1132.090894][T23668] Memory cgroup stats for /syz2:
[ 1132.136648][T23668] cache 0
[ 1132.136655][T23668] rss 0
[ 1132.136658][T23668] rss_huge 0
[ 1132.136661][T23668] shmem 0
[ 1132.136664][T23668] mapped_file 0
[ 1132.136666][T23668] dirty 0
[ 1132.136669][T23668] writeback 0
[ 1132.136672][T23668] workingset_refault_anon 55
[ 1132.136675][T23668] workingset_refault_file 1080
[ 1132.136678][T23668] swap 188416
[ 1132.136681][T23668] swapcached 655360
[ 1132.136683][T23668] pgpgin 676328
[ 1132.136686][T23668] pgpgout 676321
[ 1132.136689][T23668] pgfault 1092851
[ 1132.136692][T23668] pgmajfault 28
[ 1132.136694][T23668] inactive_anon 16384
[ 1132.136697][T23668] active_anon 12288
[ 1132.136700][T23668] inactive_file 0
[ 1132.136702][T23668] active_file 0
[ 1132.136705][T23668] unevictable 0
[ 1132.136708][T23668] hierarchical_memory_limit 314572800
[ 1132.136711][T23668] hierarchical_memsw_limit 9223372036854771712
[ 1132.136714][T23668] total_cache 0
[ 1132.136717][T23668] total_rss 0
[ 1132.136719][T23668] total_rss_huge 0
[ 1132.136722][T23668] total_shmem 0
[ 1132.136725][T23668] total_mapped_file 0
[ 1132.136727][T23668] total_dirty 0
[ 1132.136730][T23668] total_writeback 0
[ 1132.136733][T23668] total_workingset_refault_anon 55
[ 1132.136736][T23668] total_workingset_refault_file 1080
[ 1132.136739][T23668] total_swap 188416
[ 1132.136742][T23668] total_swapcached 655360
[ 1132.136744][T23668] total_pgpgin 676337
[ 1132.136747][T23668] total_pgpgout 676330
[ 1132.136750][T23668] total_pgfault 1092865
[ 1132.136753][T23668] total_pgmajfault 28
[ 1132.136755][T23668] total_inactive_anon 16384
[ 1132.136758][T23668] total_active_anon 12288
[ 1132.136761][T23668] total_inactive_file 0
[ 1132.136764][T23668] total_active_file 0
[ 1132.136767][T23668] total_unevictable 0
[ 1132.136769][T23668] anon_cost 0
[ 1132.136772][T23668] file_cost 0
[ 1132.136775][T23668] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.11865,pid=23668,uid=0
[ 1132.136847][T23668] Memory cgroup out of memory: Killed process 23668 (syz.2.11865) total-vm:102312kB, anon-rss:1256kB, file-rss:23520kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[ 1132.778215][T23703] syzkaller0: entered promiscuous mode
[ 1132.778256][T23703] syzkaller0: entered allmulticast mode
[ 1133.052631][T23715] netlink: 'syz.2.11874': attribute type 1 has an invalid length.
[ 1133.158933][T23719] netlink: 'syz.2.11875': attribute type 2 has an invalid length.
[ 1133.171397][T23719] : entered promiscuous mode
[ 1133.297321][T23730] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) !
[ 1133.297502][T23730] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) !
[ 1133.303322][T23730] syzkaller0: entered promiscuous mode
[ 1133.304794][T23730] syzkaller0: entered allmulticast mode
[ 1133.328732][T23735] syzkaller0: entered promiscuous mode
[ 1133.330534][T23735] syzkaller0: entered allmulticast mode
[ 1133.422166][T23740] syzkaller0: entered promiscuous mode
[ 1133.424168][T23740] syzkaller0: entered allmulticast mode
[ 1133.527563][T23747] netlink: 'syz.1.11881': attribute type 1 has an invalid length.
[ 1133.554180][T23747] 8021q: adding VLAN 0 to HW filter on device bond60
[ 1133.561640][T23746] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1133.561695][T23746] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1134.261701][T23762] syzkaller0: entered promiscuous mode
[ 1134.261765][T23762] syzkaller0: entered allmulticast mode
[ 1134.481857][T23765] syzkaller0: entered promiscuous mode
[ 1134.483673][T23765] syzkaller0: entered allmulticast mode
[ 1134.496867][T23770] syzkaller0: entered promiscuous mode
[ 1134.498759][T23770] syzkaller0: entered allmulticast mode
[ 1136.635380][T23793] syzkaller0: entered promiscuous mode
[ 1136.637535][T23793] syzkaller0: entered allmulticast mode
[ 1136.734599][T23795] syzkaller0: entered promiscuous mode
[ 1136.734652][T23795] syzkaller0: entered allmulticast mode
[ 1137.026129][T23810] __nla_validate_parse: 11 callbacks suppressed
[ 1137.026193][T23810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11896'.
[ 1137.032128][T23812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11896'.
[ 1137.293955][T23817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11898'.
[ 1137.411855][T23821] syzkaller0: entered promiscuous mode
[ 1137.414341][T23821] syzkaller0: entered allmulticast mode
[ 1137.945707][T23839] syzkaller1: entered promiscuous mode
[ 1137.945769][T23839] syzkaller1: entered allmulticast mode
[ 1138.499807][T23852] syzkaller0: entered promiscuous mode
[ 1138.499887][T23852] syzkaller0: entered allmulticast mode
[ 1138.683787][T23855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11905'.
[ 1138.862659][T23857] syzkaller0: entered promiscuous mode
[ 1138.864751][T23857] syzkaller0: entered allmulticast mode
[ 1138.875369][T23859] xt_hl: Unknown Hop Limit match mode: 4
[ 1139.014288][T23868] syzkaller0: entered promiscuous mode
[ 1139.016173][T23868] syzkaller0: entered allmulticast mode
[ 1139.095814][T23873] nbd: couldn't find a device at index 3
[ 1139.116699][T23876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11910'.
[ 1139.181379][T23881] syzkaller0: entered promiscuous mode
[ 1139.181428][T23881] syzkaller0: entered allmulticast mode
[ 1139.253207][T23883] syzkaller0: entered promiscuous mode
[ 1139.253261][T23883] syzkaller0: entered allmulticast mode
[ 1139.353266][T23887] syzkaller0: entered promiscuous mode
[ 1139.359428][T23887] syzkaller0: entered allmulticast mode
[ 1139.479239][T23896] syzkaller0: entered promiscuous mode
[ 1139.481845][T23896] syzkaller0: entered allmulticast mode
[ 1139.491760][T23898] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[ 1139.533139][T23898] syzkaller0: entered promiscuous mode
[ 1139.534949][T23898] syzkaller0: entered allmulticast mode
[ 1139.671089][T23904] syzkaller0: entered promiscuous mode
[ 1139.672920][T23904] syzkaller0: entered allmulticast mode
[ 1139.969257][T23907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11919'.
[ 1141.731800][T23907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11919'.
[ 1141.841039][T23912] syzkaller0: entered promiscuous mode
[ 1141.841082][T23912] syzkaller0: entered allmulticast mode
[ 1141.900482][T23910] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.11920'.
[ 1141.905086][T23910] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.11920'.
[ 1141.952509][T23915] syzkaller0: entered promiscuous mode
[ 1141.952562][T23915] syzkaller0: entered allmulticast mode
[ 1142.084629][T23923] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11924'.
[ 1142.092239][T23923] syzkaller0: entered promiscuous mode
[ 1142.092283][T23923] syzkaller0: entered allmulticast mode
[ 1142.118216][T23925] syzkaller0: entered promiscuous mode
[ 1142.120095][T23925] syzkaller0: entered allmulticast mode
[ 1142.286326][T23940] netlink: 'syz.3.11927': attribute type 1 has an invalid length.
[ 1142.346636][T23943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11928'.
[ 1142.357140][T23943] macvlan0: left promiscuous mode
[ 1142.359644][T23943] netlink: 'syz.2.11928': attribute type 1 has an invalid length.
[ 1142.362363][T23943] netlink: 'syz.2.11928': attribute type 2 has an invalid length.
[ 1142.513458][T23946] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1142.513512][T23946] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1280) !
[ 1142.520498][T23946] syzkaller0: entered promiscuous mode
[ 1142.520551][T23946] syzkaller0: entered allmulticast mode
[ 1142.701551][T23951] syzkaller0: entered promiscuous mode
[ 1142.703729][T23951] syzkaller0: entered allmulticast mode
[ 1142.817522][T23963] netlink: 'syz.3.11932': attribute type 1 has an invalid length.
[ 1142.837358][T23963] 8021q: adding VLAN 0 to HW filter on device bond55
[ 1142.841618][T23963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11932'.
[ 1142.845597][T23964] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11932'.
[ 1142.892838][T23969] tunl0: Caught tx_queue_len zero misconfig
[ 1143.028620][T23978] syzkaller0: entered promiscuous mode
[ 1143.032567][T23978] syzkaller0: entered allmulticast mode
[ 1143.093928][T23983] wg2: Caught tx_queue_len zero misconfig
[ 1143.098665][T23975] netlink: 'syz.3.11934': attribute type 1 has an invalid length.
[ 1143.238137][T23992] syzkaller0: entered promiscuous mode
[ 1143.238188][T23992] syzkaller0: entered allmulticast mode
[ 1143.530760][T24008] netlink: 'syz.3.11940': attribute type 22 has an invalid length.
[ 1145.228733][T24017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11942'.
[ 1145.229382][T24017] syzkaller0: entered promiscuous mode
[ 1145.229396][T24017] syzkaller0: entered allmulticast mode
[ 1146.408345][T24001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1146.504691][T24022] netlink: 'syz.2.11943': attribute type 1 has an invalid length.
[ 1146.546891][T24025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11945'.
[ 1146.584868][T24027] syzkaller0: entered promiscuous mode
[ 1146.584922][T24027] syzkaller0: entered allmulticast mode
[ 1146.787291][T24036] syzkaller0: entered promiscuous mode
[ 1146.787341][T24036] syzkaller0: entered allmulticast mode
[ 1146.818060][T24033] netlink: 216 bytes leftover after parsing attributes in process `syz.3.11949'.
[ 1146.862768][T24041] syzkaller0: entered promiscuous mode
[ 1146.864579][T24041] syzkaller0: entered allmulticast mode
[ 1146.941523][T24043] netlink: 'syz.2.11952': attribute type 1 has an invalid length.
[ 1146.944136][T24043] netlink: 244 bytes leftover after parsing attributes in process `syz.2.11952'.
[ 1146.953349][T24043] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.11952'.
[ 1146.959718][T24043] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.11952'.
[ 1147.185863][T24063] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11958'.
[ 1147.262494][T24079] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11959'.
[ 1147.473016][T24093] syzkaller0: entered promiscuous mode
[ 1147.473079][T24093] syzkaller0: entered allmulticast mode
[ 1147.479463][T24093] netlink: 558 bytes leftover after parsing attributes in process `syz.2.11962'.
[ 1147.763313][T24106] wg0: Master is either lo or non-ether device
[ 1148.004337][T24122] syzkaller0: entered promiscuous mode
[ 1148.004390][T24122] syzkaller0: entered allmulticast mode
[ 1148.259426][T24135] syzkaller0: entered promiscuous mode
[ 1148.259468][T24135] syzkaller0: entered allmulticast mode
[ 1148.428838][T24138] syzkaller0: entered promiscuous mode
[ 1148.431328][T24138] syzkaller0: entered allmulticast mode
[ 1149.743187][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1149.748793][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1149.761132][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1149.780109][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1149.784174][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1150.699012][T24146] syzkaller0: entered promiscuous mode
[ 1150.701422][T24146] syzkaller0: entered allmulticast mode
[ 1150.797261][   T34] audit: type=1107 audit(1788176346.444:16): pid=24162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1150.874410][T24168] openvswitch: netlink: Duplicate or invalid key (type 0).
[ 1150.886638][T24168] bridge86: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[ 1150.976673][T24154] lo speed is unknown, defaulting to 1000
[ 1150.979708][T24154] syzkaller0 speed is unknown, defaulting to 1000
[ 1151.231047][T24154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1151.233527][T24154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1151.236027][T24154] bridge_slave_0: entered allmulticast mode
[ 1151.238917][T24154] bridge_slave_0: entered promiscuous mode
[ 1151.243832][T24154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1151.246535][T24154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1151.248976][T24154] bridge_slave_1: entered allmulticast mode
[ 1151.251967][T24154] bridge_slave_1: entered promiscuous mode
[ 1151.269942][T24154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1151.274367][T24154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1151.296628][T24154] team0: Port device team_slave_0 added
[ 1151.300012][T24154] team0: Port device team_slave_1 added
[ 1151.327384][T24154] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1151.327423][T24154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1151.327457][T24154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1151.328288][T24154] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1151.328318][T24154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1151.328346][T24154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1151.390177][T24154] hsr_slave_0: entered promiscuous mode
[ 1151.392680][T24154] hsr_slave_1: entered promiscuous mode
[ 1151.395187][T24154] debugfs: 'hsr0' already exists in 'hsr'
[ 1151.398014][T24154] Cannot create hsr debugfs directory
[ 1151.400055][T24198] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11978'.
[ 1151.400114][T24198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11978'.
[ 1151.469309][T24202] syzkaller0: entered promiscuous mode
[ 1151.469350][T24202] syzkaller0: entered allmulticast mode
[ 1151.482077][T24202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11979'.
[ 1151.587757][T24154] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1151.592489][T24154] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1151.597092][T24154] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1151.603617][T24154] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1151.609978][T24154] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1151.620062][T24154] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1151.624479][T24154] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1151.636479][T24154] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1151.671659][T24154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1151.671778][T24154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1151.672030][T24154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1151.672135][T24154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1151.766185][T24154] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1151.780983][ T4723] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1151.786593][ T4723] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1151.809846][T24154] 8021q: adding VLAN 0 to HW filter on device team0
[ 1151.815113][T12154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1151.815195][T12154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1151.828166][T12154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1151.828232][T12154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1151.865523][   T55] Bluetooth: hci4: command tx timeout
[ 1151.906789][T24220] bridge_slave_0: entered promiscuous mode
[ 1152.076990][T24229] syzkaller0: entered promiscuous mode
[ 1152.079255][T24229] syzkaller0: entered allmulticast mode
[ 1152.139330][T24154] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1152.322833][T24154] veth0_vlan: entered promiscuous mode
[ 1152.336579][T24154] veth1_vlan: entered promiscuous mode
[ 1152.366912][T24154] veth0_macvtap: entered promiscuous mode
[ 1152.373391][T24154] veth1_macvtap: entered promiscuous mode
[ 1152.392246][T24154] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1152.402613][T24154] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1152.455523][ T9153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1152.455767][ T9153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1152.455816][ T9153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1152.455849][ T9153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1152.577754][ T9110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1152.581698][ T9110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1152.639101][ T4723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1152.648530][ T4723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1152.998662][T24258] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1153.137488][T12155] wlan1: Trigger new scan to find an IBSS to join
[ 1153.941225][   T55] Bluetooth: hci4: command tx timeout
[ 1155.131717][T24277] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11989'.
[ 1155.140719][T24276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11990'.
[ 1155.143712][T24279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11990'.
[ 1155.157468][T24280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11991'.
[ 1155.199986][T24285] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11992'.
[ 1155.619191][T24317] syzkaller0: entered promiscuous mode
[ 1155.619241][T24317] syzkaller0: entered allmulticast mode
[ 1155.623877][T24317] 0: reclassify loop, rule prio 0, protocol 800
[ 1155.736691][T24319] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1155.904986][T24326] syzkaller0: entered promiscuous mode
[ 1155.907753][T24326] syzkaller0: entered allmulticast mode
[ 1156.024803][   T55] Bluetooth: hci4: command tx timeout
[ 1156.088274][T24332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12002'.
[ 1156.102139][T12154] wlan1: Trigger new scan to find an IBSS to join
[ 1158.098501][   T55] Bluetooth: hci4: command tx timeout
[ 1158.609449][T24362] x_tables: ip6_tables: set.2 match: invalid size 8 (kernel) != (user) 16
[ 1159.140522][T12154] wlan1: Trigger new scan to find an IBSS to join
[ 1160.036388][T14764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1160.964029][T24378] syzkaller0: entered promiscuous mode
[ 1160.967150][T24378] syzkaller0: entered allmulticast mode
[ 1161.070293][T24379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12007'.
[ 1161.134324][T24385] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1161.134601][T24385] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1161.201180][T24385] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1161.204328][T24385] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1161.285716][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1161.285903][   T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1161.285989][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1161.286022][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1161.326636][T24388] syzkaller0: entered promiscuous mode
[ 1161.326705][T24388] syzkaller0: entered allmulticast mode
[ 1161.461910][T24409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12013'.
[ 1161.510727][T24400] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12011'.
[ 1163.492660][T24399] syzkaller0: entered promiscuous mode
[ 1163.492735][T24399] syzkaller0: entered allmulticast mode
[ 1163.532697][T24419] syzkaller0: entered promiscuous mode
[ 1163.535468][T24419] syzkaller0: entered allmulticast mode
[ 1167.773576][T24434] syzkaller0: entered promiscuous mode
[ 1167.773642][T24434] syzkaller0: entered allmulticast mode
[ 1167.948147][T24448] syzkaller0: entered promiscuous mode
[ 1167.948210][T24448] syzkaller0: entered allmulticast mode
[ 1168.028010][T24451] netlink: 'syz.2.12017': attribute type 4 has an invalid length.
[ 1168.028071][T24451] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12017'.
[ 1168.048936][T24448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12016'.
[ 1168.381225][T24495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12020'.
[ 1168.463330][T24505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12022'.
[ 1168.530254][T24502] syzkaller0: entered promiscuous mode
[ 1168.530302][T24502] syzkaller0: entered allmulticast mode
[ 1168.580270][T24499] syzkaller0: entered promiscuous mode
[ 1168.580330][T24499] syzkaller0: entered allmulticast mode
[ 1170.898273][T24547] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20004
[ 1170.941127][T24553] syzkaller0: entered promiscuous mode
[ 1170.941194][T24553] syzkaller0: entered allmulticast mode
[ 1170.953640][T24550] netlink: 'syz.2.12026': attribute type 11 has an invalid length.
[ 1170.953686][T24550] netlink: 228 bytes leftover after parsing attributes in process `syz.2.12026'.
[ 1171.052286][T24556] netlink: 'syz.4.12025': attribute type 4 has an invalid length.
[ 1171.118703][T24555] syzkaller0: entered promiscuous mode
[ 1171.118763][T24555] syzkaller0: entered allmulticast mode
[ 1171.148152][T24555] lo: Caught tx_queue_len zero misconfig
[ 1171.204893][T24562] tipc: Enabling <eth:lo> not permitted
[ 1171.207710][T24562] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[ 1171.267283][T24565] syzkaller0: entered promiscuous mode
[ 1171.267344][T24565] syzkaller0: entered allmulticast mode
[ 1171.276934][T24562] syzkaller0: entered promiscuous mode
[ 1171.279442][T24562] syzkaller0: entered allmulticast mode
[ 1172.421278][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1173.574802][T24604] syzkaller0: entered promiscuous mode
[ 1173.574866][T24604] syzkaller0: entered allmulticast mode
[ 1173.583968][T24603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12034'.
[ 1173.687303][T24606] netlink: 'syz.2.12035': attribute type 13 has an invalid length.
[ 1173.728125][T24606] syzkaller0: entered promiscuous mode
[ 1173.730092][T24606] syzkaller0: entered allmulticast mode
[ 1173.761349][T24610] veth1_to_bond: entered allmulticast mode
[ 1173.767989][T24610] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12036'.
[ 1173.781525][T24609] veth1_to_bond: left allmulticast mode
[ 1173.969071][T24629] syzkaller0: entered promiscuous mode
[ 1173.969125][T24629] syzkaller0: entered allmulticast mode
[ 1176.281741][T24664] netlink: 'syz.3.12046': attribute type 3 has an invalid length.
[ 1176.453207][T24669] netlink: 'syz.3.12049': attribute type 1 has an invalid length.
[ 1176.466161][T24671] syzkaller1: entered promiscuous mode
[ 1176.466225][T24671] syzkaller1: entered allmulticast mode
[ 1176.519927][T24673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1176.523866][T24673] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12051'.
[ 1176.613564][T24676] syzkaller0: entered promiscuous mode
[ 1176.615377][T24676] syzkaller0: entered allmulticast mode
[ 1176.707202][T24678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12053'.
[ 1176.707823][T24678] netlink: 'syz.4.12053': attribute type 4 has an invalid length.
[ 1176.707836][T24678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12053'.
[ 1176.827353][T24688] syzkaller0: entered promiscuous mode
[ 1176.827423][T24688] syzkaller0: entered allmulticast mode
[ 1176.929693][T24692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12058'.
[ 1176.985801][T24696] syzkaller0: entered promiscuous mode
[ 1176.985848][T24696] syzkaller0: entered allmulticast mode
[ 1177.024964][T24700] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12060'.
[ 1177.163444][T24706] netlink: 380 bytes leftover after parsing attributes in process `syz.3.12063'.
[ 1177.163500][T24706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12063'.
[ 1177.163585][T24706] netlink: 7 bytes leftover after parsing attributes in process `syz.3.12063'.
[ 1177.171117][T24708] netlink: 'syz.4.12064': attribute type 13 has an invalid length.
[ 1177.280416][T24715] geneve0: entered promiscuous mode
[ 1177.285882][T24715] syzkaller0: entered promiscuous mode
[ 1177.285957][T24715] syzkaller0: entered allmulticast mode
[ 1177.589148][T24731] syzkaller0: entered promiscuous mode
[ 1177.589200][T24731] syzkaller0: entered allmulticast mode
[ 1177.823928][T24742] l2tp_mt_check: 1 callbacks suppressed
[ 1177.825324][T24742] xt_l2tp: invalid flags combination: 8
[ 1177.870704][T24744] syzkaller0: entered promiscuous mode
[ 1177.873208][T24744] syzkaller0: entered allmulticast mode
[ 1178.044674][T24748] syzkaller0: entered promiscuous mode
[ 1178.047062][T24748] syzkaller0: entered allmulticast mode
[ 1178.127482][T24750] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[ 1178.381265][T24769] syzkaller0: entered promiscuous mode
[ 1178.383821][T24769] syzkaller0: entered allmulticast mode
[ 1179.122604][T24776] syzkaller0: entered promiscuous mode
[ 1179.125129][T24776] syzkaller0: entered allmulticast mode
[ 1179.139888][T24778] syzkaller0: entered promiscuous mode
[ 1179.140014][T24778] syzkaller0: entered allmulticast mode
[ 1181.470559][T24785] syzkaller0: entered promiscuous mode
[ 1181.470623][T24785] syzkaller0: entered allmulticast mode
[ 1181.531121][T24791] __nla_validate_parse: 5 callbacks suppressed
[ 1181.531206][T24791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12081'.
[ 1181.638491][T24795] ip6gretap1: entered promiscuous mode
[ 1181.650523][T24795] lo: Caught tx_queue_len zero misconfig
[ 1181.696764][T24797] netlink: 'syz.3.12084': attribute type 15 has an invalid length.
[ 1181.698292][T24797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12084'.
[ 1181.786864][T24806] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12085'.
[ 1181.846843][T24812] netlink: 'syz.3.12087': attribute type 6 has an invalid length.
[ 1182.051116][T24824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12089'.
[ 1182.120123][T24826] netlink: 1080 bytes leftover after parsing attributes in process `syz.4.12090'.
[ 1182.124653][T24826] syzkaller0: entered promiscuous mode
[ 1182.124706][T24826] syzkaller0: entered allmulticast mode
[ 1182.134689][T24826] netlink: 'syz.4.12090': attribute type 1 has an invalid length.
[ 1182.139430][T24826] netlink: 'syz.4.12090': attribute type 1 has an invalid length.
[ 1182.262736][T24838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12092'.
[ 1182.323197][T24835] macvlan0: entered promiscuous mode
[ 1182.593719][T24850] pim6reg: entered allmulticast mode
[ 1182.597385][T24850] pim6reg: left allmulticast mode
[ 1183.176853][T24856] netlink: 'syz.4.12095': attribute type 1 has an invalid length.
[ 1183.199815][T24856] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1183.211112][T24856] macvlan2: entered promiscuous mode
[ 1183.213500][T24856] macvlan2: entered allmulticast mode
[ 1183.216340][T24856] bond1: entered allmulticast mode
[ 1183.218609][T24856] bond1: entered promiscuous mode
[ 1183.219218][T24856] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1183.225969][T24856] team0: Port device macvlan2 added
[ 1183.302070][T24862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12096'.
[ 1183.302132][T24862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12096'.
[ 1183.326271][T24866] syzkaller0: entered promiscuous mode
[ 1183.326324][T24866] syzkaller0: entered allmulticast mode
[ 1183.453398][T24879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12100'.
[ 1183.457469][T24871] syzkaller0: entered promiscuous mode
[ 1183.457488][T24871] syzkaller0: entered allmulticast mode
[ 1185.581859][T24883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12101'.
[ 1185.721580][T24890] syzkaller0: entered promiscuous mode
[ 1185.723970][T24890] syzkaller0: entered allmulticast mode
[ 1186.298615][T24866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1186.439117][T24894] syzkaller0: entered promiscuous mode
[ 1186.442339][T24894] syzkaller0: entered allmulticast mode
[ 1186.502972][T24902] netlink: 'syz.4.12105': attribute type 1 has an invalid length.
[ 1186.535708][T24902] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1186.556712][T24902] bond2: (slave geneve2): making interface the new active one
[ 1186.561086][T24902] bond2: (slave geneve2): Enslaving as an active interface with an up link
[ 1186.571061][T24902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12105'.
[ 1186.602706][T24902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12105'.
[ 1186.625999][ T5655] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1186.636118][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1186.638823][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1186.638851][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1186.656041][T24907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12106'.
[ 1186.669759][T24909] netlink: 'syz.3.12107': attribute type 1 has an invalid length.
[ 1186.681201][T24907] vxlan0: entered allmulticast mode
[ 1186.690913][T24907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12106'.
[ 1186.693616][T14764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1186.693632][T14764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1186.716030][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1186.716184][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1186.716215][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1186.716236][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1186.747748][T24912] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12107'.
[ 1186.752877][T24911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1186.863871][T24918] syzkaller0: entered promiscuous mode
[ 1186.863931][T24918] syzkaller0: entered allmulticast mode
[ 1187.294375][T24928] syzkaller0: entered promiscuous mode
[ 1187.294473][T24928] syzkaller0: entered allmulticast mode
[ 1187.614003][T24956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12120'.
[ 1187.621009][T24958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12120'.
[ 1187.700157][T24961] netlink: 'syz.3.12121': attribute type 13 has an invalid length.
[ 1188.072224][T24972] netlink: 'syz.3.12123': attribute type 2 has an invalid length.
[ 1188.072286][T24972] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12123'.
[ 1188.079112][T24972] netlink: 'syz.3.12123': attribute type 1 has an invalid length.
[ 1190.506581][T24936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1190.556579][T24985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12128'.
[ 1190.706974][T24991] openvswitch: netlink: Message has 8 unknown bytes.
[ 1190.713895][T24992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12130'.
[ 1190.722900][T24987] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[ 1190.727892][   T25] openvswitch: cpu_id mismatch with handler threads
[ 1190.729770][T24988] dummy0: Caught tx_queue_len zero misconfig
[ 1190.827462][T25002] Bluetooth: hci0: unsupported parameter 5135
[ 1190.827513][T25002] Bluetooth: hci0: unsupported parameter 8192
[ 1190.827756][T25002] Bluetooth: hci0: unsupported parameter 5135
[ 1190.827764][T25002] Bluetooth: hci0: unsupported parameter 8192
[ 1190.929687][T25008] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20001
[ 1190.974137][T25009] netlink: 'syz.3.12135': attribute type 8 has an invalid length.
[ 1191.024888][T25012] netlink: 'syz.3.12135': attribute type 8 has an invalid length.
[ 1191.095497][   T25] openvswitch: cpu_id mismatch with handler threads
[ 1192.256013][ T4730] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1193.039890][T25029] netlink: 'syz.4.12138': attribute type 1 has an invalid length.
[ 1193.063851][T25029] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1193.082132][T25029] __nla_validate_parse: 4 callbacks suppressed
[ 1193.082186][T25029] netlink: 564 bytes leftover after parsing attributes in process `syz.4.12138'.
[ 1193.133931][T25037] syzkaller0: entered promiscuous mode
[ 1193.137747][T25037] syzkaller0: entered allmulticast mode
[ 1193.259926][T25046] syzkaller0: entered promiscuous mode
[ 1193.259994][T25046] syzkaller0: entered allmulticast mode
[ 1193.333560][T25054] netlink: 'syz.2.12147': attribute type 1 has an invalid length.
[ 1193.343565][T25054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12147'.
[ 1193.442052][T25060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12149'.
[ 1193.446838][T25060] openvswitch: netlink: Missing key (keys=c0, expected=40300)
[ 1193.454709][T25060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12149'.
[ 1193.480084][T25062] xt_ipcomp: unknown flags 1D
[ 1193.513756][T25063] ip_tables: iptables: counters copy to user failed while replacing table
[ 1193.653869][T25068] netlink: 'syz.3.12152': attribute type 2 has an invalid length.
[ 1193.793054][T25074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12153'.
[ 1193.860157][T25075] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12153'.
[ 1193.862644][T25075] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12153'.
[ 1193.863545][T25075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12153'.
[ 1194.759657][T25100] syzkaller0: entered promiscuous mode
[ 1194.759885][T25100] syzkaller0: entered allmulticast mode
[ 1194.836812][T25101] syzkaller0: entered promiscuous mode
[ 1194.836876][T25101] syzkaller0: entered allmulticast mode
[ 1195.108339][T25113] netlink: 296 bytes leftover after parsing attributes in process `syz.3.12163'.
[ 1195.134595][T25124] netlink: 19 bytes leftover after parsing attributes in process `syz.2.12165'.
[ 1195.156976][T25124] lo: Caught tx_queue_len zero misconfig
[ 1195.203879][T25126] syzkaller0: left promiscuous mode
[ 1195.222933][T25130] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1195.267014][T25133] netlink: 'syz.3.12167': attribute type 4 has an invalid length.
[ 1195.277657][T25133] netlink: 'syz.3.12167': attribute type 4 has an invalid length.
[ 1195.316924][T25135] syzkaller0: entered promiscuous mode
[ 1195.417037][T25137] syzkaller0: entered promiscuous mode
[ 1195.417083][T25137] syzkaller0: entered allmulticast mode
[ 1196.202470][T25150] netlink: 'syz.3.12173': attribute type 13 has an invalid length.
[ 1196.270364][   T33] openvswitch: cpu_id mismatch with handler threads
[ 1196.312562][T25156] syzkaller0: entered promiscuous mode
[ 1196.312701][T25156] syzkaller0: entered allmulticast mode
[ 1196.316627][   T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1196.330491][T25159] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1196.369565][T25159] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[ 1196.374873][T25159] bond4 (unregistering): Released all slaves
[ 1196.494025][T25170] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[ 1196.618646][T25179] syzkaller0: left promiscuous mode
[ 1196.618693][T25179] syzkaller0: left allmulticast mode
[ 1196.663123][T25192] netlink: 'syz.2.12181': attribute type 13 has an invalid length.
[ 1196.730273][T25192] syzkaller0: entered promiscuous mode
[ 1196.732224][T25192] syzkaller0: entered allmulticast mode
[ 1196.827309][T25200] netlink: 'syz.3.12184': attribute type 2 has an invalid length.
[ 1196.831636][T25200] netlink: 'syz.3.12184': attribute type 1 has an invalid length.
[ 1196.851577][T25200] syzkaller0: entered promiscuous mode
[ 1196.851665][T25200] syzkaller0: entered allmulticast mode
[ 1196.970055][T25208] syzkaller0: entered promiscuous mode
[ 1196.974027][T25208] syzkaller0: entered allmulticast mode
[ 1197.044709][T25212] bond56 (unregistering): Released all slaves
[ 1197.068978][T25217] netlink: 'syz.2.12189': attribute type 13 has an invalid length.
[ 1197.099198][T25217] syzkaller0: entered promiscuous mode
[ 1197.101100][T25217] syzkaller0: entered allmulticast mode
[ 1197.211819][T25224] syzkaller0: entered promiscuous mode
[ 1197.211883][T25224] syzkaller0: entered allmulticast mode
[ 1197.216875][   T33] openvswitch: cpu_id mismatch with handler threads
[ 1197.224086][T25225] team_slave_1: Caught tx_queue_len zero misconfig
[ 1197.296059][   T33] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1197.377481][T25235] 8021q: adding VLAN 0 to HW filter on device bond56
[ 1197.519549][T25249] wireguard: wg2: Could not create IPv4 socket
[ 1197.523934][T25249] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[ 1197.618870][   T25] openvswitch: cpu_id mismatch with handler threads
[ 1197.646282][   T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1197.707910][   T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1197.765615][   T25] openvswitch: cpu_id mismatch with handler threads
[ 1200.363130][T25262] __nla_validate_parse: 15 callbacks suppressed
[ 1200.363226][T25262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12199'.
[ 1200.363265][T25262] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1200.383131][T25263] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12199'.
[ 1200.383170][T25263] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1200.387373][T25265] syzkaller0: entered promiscuous mode
[ 1200.387386][T25265] syzkaller0: entered allmulticast mode
[ 1200.509845][T25278] geneve1: entered promiscuous mode
[ 1200.550916][T25276] bridge_slave_0: left promiscuous mode
[ 1200.562081][T25276] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[ 1200.562133][T25276] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[ 1200.593822][T25276] bond89: left promiscuous mode
[ 1200.598538][T25276] bond90: left promiscuous mode
[ 1200.598584][T25276] ip6gre5: left promiscuous mode
[ 1200.605168][T25276] vxcan6: left allmulticast mode
[ 1200.607775][T25276] bridge0: left promiscuous mode
[ 1200.609271][T25276] bridge79: left promiscuous mode
[ 1200.619493][T25276] bond95: left promiscuous mode
[ 1200.641241][   T25] lo speed is unknown, defaulting to 1000
[ 1200.641462][T25281] pim6reg1: entered promiscuous mode
[ 1200.645144][   T25] syz0: Port: 1 Link DOWN
[ 1200.650115][T25281] pim6reg1: entered allmulticast mode
[ 1200.662722][T25282] netlink: 136 bytes leftover after parsing attributes in process `syz.3.12203'.
[ 1200.662772][T25282] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[ 1200.694086][T25285] netlink: 136 bytes leftover after parsing attributes in process `syz.3.12203'.
[ 1200.698319][T25285] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[ 1200.956816][T25298] siw: device registration error -23
[ 1201.164085][   T34] audit: type=1107 audit(1788176396.804:17): pid=25310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ha\K.-C6?:E:Xi]wyǼဘR(̧9Ijy/T۸0t?km;8)cYsq zmW;|!T,Qo.Q811̓*
[ 1201.164085][   T34] OG7.Vļ
[ 1201.164085][   T34] iSnuy:\?4.CM=/'
[ 1201.262491][T25316] validate_nla: 4 callbacks suppressed
[ 1201.264787][T25316] netlink: 'syz.3.12209': attribute type 1 has an invalid length.
[ 1201.267680][T25316] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12209'.
[ 1201.271294][T25316] netlink: 'syz.3.12209': attribute type 1 has an invalid length.
[ 1201.287847][T25316] bond57: entered promiscuous mode
[ 1201.289447][T25316] 8021q: adding VLAN 0 to HW filter on device bond57
[ 1201.319859][T25316] bond57: (slave bridge46): making interface the new active one
[ 1201.322890][T25316] bridge46: entered promiscuous mode
[ 1201.326499][T25316] bond57: (slave bridge46): Enslaving as an active interface with an up link
[ 1201.630272][T25332] syzkaller0: entered promiscuous mode
[ 1201.632816][T25332] syzkaller0: entered allmulticast mode
[ 1201.760844][T25334] syzkaller0: entered promiscuous mode
[ 1201.760899][T25334] syzkaller0: entered allmulticast mode
[ 1201.762670][T25334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12213'.
[ 1201.762686][T25334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12213'.
[ 1201.798829][T25336] tunl0: Caught tx_queue_len zero misconfig
[ 1201.830849][T25343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12215'.
[ 1201.830900][T25343] bond0: invalid ARP target 255.255.255.255 specified for addition
[ 1201.830911][T25343] bond0: option arp_ip_target: invalid value (4294967295)
[ 1201.927940][T25349] netlink: 'syz.2.12218': attribute type 1 has an invalid length.
[ 1201.948144][T25351] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12216'.
[ 1202.804395][T25364] macvlan0: entered promiscuous mode
[ 1205.087188][T25421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12223'.
[ 1205.177154][T25424] syzkaller0: entered promiscuous mode
[ 1205.177218][T25424] syzkaller0: entered allmulticast mode
[ 1207.335773][T25440] wireguard: wg2: Could not create IPv4 socket
[ 1207.338813][T25440] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[ 1207.352885][T25441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12227'.
[ 1207.357234][T22209] lo speed is unknown, defaulting to 1000
[ 1207.357252][T22209] syz0: Port: 1 Link ACTIVE
[ 1207.424897][T25449] geneve1: Caught tx_queue_len zero misconfig
[ 1207.459774][T25451] syzkaller0: entered promiscuous mode
[ 1207.459839][T25451] syzkaller0: entered allmulticast mode
[ 1207.880167][T25479] syzkaller0: entered promiscuous mode
[ 1207.882596][T25479] syzkaller0: entered allmulticast mode
[ 1207.912867][T25481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12238'.
[ 1207.986395][T25485] syzkaller0: entered promiscuous mode
[ 1207.988449][T25485] syzkaller0: entered allmulticast mode
[ 1208.123231][T25501] syzkaller0: entered promiscuous mode
[ 1208.126218][T25501] syzkaller0: entered allmulticast mode
[ 1208.998362][T25542] netlink: 'syz.2.12246': attribute type 5 has an invalid length.
[ 1208.998417][T25542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12246'.
[ 1209.172744][T25549] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12247'.
[ 1209.342719][T25560] syzkaller0: entered promiscuous mode
[ 1209.345207][T25560] syzkaller0: entered allmulticast mode
[ 1209.476447][T25566] C: renamed from veth1_to_team
[ 1209.486723][T25566] netlink: 'syz.4.12252': attribute type 4 has an invalid length.
[ 1209.486786][T25566] netlink: 116 bytes leftover after parsing attributes in process `syz.4.12252'.
[ 1209.486830][T25566] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1209.586553][T25568] xt_l2tp: v2 doesn't support IP mode
[ 1209.609252][T25568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12253'.
[ 1209.617331][T25568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12253'.
[ 1209.683226][T25574] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1210.012257][T25592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12256'.
[ 1210.070407][T25596] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12259'.
[ 1210.500097][T25608] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1211.730739][T25614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12263'.
[ 1212.047006][T25630] syzkaller0: entered promiscuous mode
[ 1212.047106][T25630] syzkaller0: entered allmulticast mode
[ 1212.161354][T25631] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1212.244919][T25637] syzkaller0: entered promiscuous mode
[ 1212.244972][T25637] syzkaller0: entered allmulticast mode
[ 1212.431087][T22209] lo speed is unknown, defaulting to 1000
[ 1212.431138][T22209] syz0: Port: 1 Link DOWN
[ 1212.488164][T25643] syzkaller0: entered promiscuous mode
[ 1212.488227][T25643] syzkaller0: entered allmulticast mode
[ 1212.953801][T25650] pim6reg99999999: entered allmulticast mode
[ 1212.962778][T25650] netlink: 'syz.4.12271': attribute type 10 has an invalid length.
[ 1213.352401][T25672] syzkaller0: entered promiscuous mode
[ 1213.354367][T25672] syzkaller0: entered allmulticast mode
[ 1214.937677][T25692] syzkaller0: entered promiscuous mode
[ 1214.937725][T25692] syzkaller0: entered allmulticast mode
[ 1215.044065][T25698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12285'.
[ 1215.050801][T25698] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12285'.
[ 1215.050921][T25698] openvswitch: netlink: Missing key (keys=c0, expected=40280)
[ 1215.064366][T25698] netlink: 'syz.4.12285': attribute type 12 has an invalid length.
[ 1215.252087][T25711] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12289'.
[ 1215.256453][T25711] gretap0: entered promiscuous mode
[ 1215.258839][T25711] siw: device registration error -23
[ 1215.298177][T25716] syzkaller0: entered promiscuous mode
[ 1215.298242][T25716] syzkaller0: entered allmulticast mode
[ 1215.498783][T25741] netlink: 'syz.4.12294': attribute type 8 has an invalid length.
[ 1215.541141][T25743] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.12293'.
[ 1215.551313][T25745] netlink: 160 bytes leftover after parsing attributes in process `syz.4.12295'.
[ 1215.554655][T25745] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[ 1215.668496][T25750] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[ 1215.788073][T25752] syzkaller0: entered promiscuous mode
[ 1215.790561][T25752] syzkaller0: entered allmulticast mode
[ 1216.072266][T25763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12300'.
[ 1216.090240][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.093309][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.097235][T25761] erspan0: entered allmulticast mode
[ 1216.107361][T25761] erspan0: left allmulticast mode
[ 1216.109873][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.110070][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.110203][T25761] erspan0: entered allmulticast mode
[ 1216.123638][T25761] erspan0: left allmulticast mode
[ 1216.129574][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.129677][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.129817][T25761] erspan0: entered allmulticast mode
[ 1216.142751][T25761] erspan0: left allmulticast mode
[ 1216.147293][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.147354][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.147433][T25761] erspan0: entered allmulticast mode
[ 1216.149315][T25761] erspan0: left allmulticast mode
[ 1216.158318][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.158678][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.158765][T25761] erspan0: entered allmulticast mode
[ 1216.160766][T25761] erspan0: left allmulticast mode
[ 1216.161085][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.161266][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.161359][T25761] erspan0: entered allmulticast mode
[ 1216.163047][T25761] erspan0: left allmulticast mode
[ 1216.163313][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.163415][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.163492][T25761] erspan0: entered allmulticast mode
[ 1216.172238][T25761] erspan0: left allmulticast mode
[ 1216.175177][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.175669][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.175774][T25761] erspan0: entered allmulticast mode
[ 1216.177678][T25761] erspan0: left allmulticast mode
[ 1216.178072][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.178274][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.178371][T25761] erspan0: entered allmulticast mode
[ 1216.179566][T25761] erspan0: left allmulticast mode
[ 1216.179767][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.179834][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.179917][T25761] erspan0: entered allmulticast mode
[ 1216.184261][T25761] erspan0: left allmulticast mode
[ 1216.187181][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.187351][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.187452][T25761] erspan0: entered allmulticast mode
[ 1216.190494][T25761] erspan0: left allmulticast mode
[ 1216.195670][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.196130][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.196238][T25761] erspan0: entered allmulticast mode
[ 1216.201369][T25761] erspan0: left allmulticast mode
[ 1216.201512][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.201557][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.201632][T25761] erspan0: entered allmulticast mode
[ 1216.209962][T25761] erspan0: left allmulticast mode
[ 1216.210798][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.210884][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.211009][T25761] erspan0: entered allmulticast mode
[ 1216.214558][T25761] erspan0: left allmulticast mode
[ 1216.214777][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.215042][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.215123][T25761] erspan0: entered allmulticast mode
[ 1216.218874][T25761] erspan0: left allmulticast mode
[ 1216.220513][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.220560][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.220651][T25761] erspan0: entered allmulticast mode
[ 1216.222902][T25761] erspan0: left allmulticast mode
[ 1216.223844][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.223884][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.223951][T25761] erspan0: entered allmulticast mode
[ 1216.226741][T25761] erspan0: left allmulticast mode
[ 1216.228412][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.228452][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.228519][T25761] erspan0: entered allmulticast mode
[ 1216.230870][T25761] erspan0: left allmulticast mode
[ 1216.231783][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.231868][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.232011][T25761] erspan0: entered allmulticast mode
[ 1216.249188][T25761] erspan0: left allmulticast mode
[ 1216.250343][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.250408][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.250486][T25761] erspan0: entered allmulticast mode
[ 1216.252753][T25761] erspan0: left allmulticast mode
[ 1216.252885][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.252923][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.253048][T25761] erspan0: entered allmulticast mode
[ 1216.254527][T25761] erspan0: left allmulticast mode
[ 1216.255589][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.256067][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.256134][T25761] erspan0: entered allmulticast mode
[ 1216.259651][T25761] erspan0: left allmulticast mode
[ 1216.260076][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.260873][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.260966][T25761] erspan0: entered allmulticast mode
[ 1216.270094][T25761] erspan0: left allmulticast mode
[ 1216.270228][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.270281][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.271137][T25761] erspan0: entered allmulticast mode
[ 1216.277758][T25761] erspan0: left allmulticast mode
[ 1216.278352][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.278392][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.278471][T25761] erspan0: entered allmulticast mode
[ 1216.280211][T25761] erspan0: left allmulticast mode
[ 1216.281719][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.281780][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.281851][T25761] erspan0: entered allmulticast mode
[ 1216.287235][T25761] erspan0: left allmulticast mode
[ 1216.289136][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.289177][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.289250][T25761] erspan0: entered allmulticast mode
[ 1216.294272][T25761] erspan0: left allmulticast mode
[ 1216.296538][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.298262][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.298343][T25761] erspan0: entered allmulticast mode
[ 1216.301451][T25761] erspan0: left allmulticast mode
[ 1216.303085][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.303774][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.303866][T25761] erspan0: entered allmulticast mode
[ 1216.311558][T25761] erspan0: left allmulticast mode
[ 1216.314104][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.314166][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.314260][T25761] erspan0: entered allmulticast mode
[ 1216.319811][T25761] erspan0: left allmulticast mode
[ 1216.320268][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.320339][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.320444][T25761] erspan0: entered allmulticast mode
[ 1216.323376][T25761] erspan0: left allmulticast mode
[ 1216.323712][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.326590][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.326666][T25761] erspan0: entered allmulticast mode
[ 1216.328881][T25761] erspan0: left allmulticast mode
[ 1216.329136][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.329190][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.329252][T25761] erspan0: entered allmulticast mode
[ 1216.330707][T25761] erspan0: left allmulticast mode
[ 1216.331065][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.331129][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.331242][T25761] erspan0: entered allmulticast mode
[ 1216.332432][T25761] erspan0: left allmulticast mode
[ 1216.332613][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.332674][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.332724][T25761] erspan0: entered allmulticast mode
[ 1216.333814][T25761] erspan0: left allmulticast mode
[ 1216.334023][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.334098][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.334148][T25761] erspan0: entered allmulticast mode
[ 1216.335747][T25761] erspan0: left allmulticast mode
[ 1216.336104][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.336536][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.336591][T25761] erspan0: entered allmulticast mode
[ 1216.338649][T25761] erspan0: left allmulticast mode
[ 1216.339035][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.339090][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.339141][T25761] erspan0: entered allmulticast mode
[ 1216.340421][T25761] erspan0: left allmulticast mode
[ 1216.340682][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.340736][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.340786][T25761] erspan0: entered allmulticast mode
[ 1216.341877][T25761] erspan0: left allmulticast mode
[ 1216.342142][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.342213][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.342306][T25761] erspan0: entered allmulticast mode
[ 1216.343786][T25761] erspan0: left allmulticast mode
[ 1216.343967][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.344071][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.344120][T25761] erspan0: entered allmulticast mode
[ 1216.347697][T25761] erspan0: left allmulticast mode
[ 1216.347883][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.347940][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.348572][T25761] erspan0: entered allmulticast mode
[ 1216.350833][T25761] erspan0: left allmulticast mode
[ 1216.351303][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.351410][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.351503][T25761] erspan0: entered allmulticast mode
[ 1216.353795][T25761] erspan0: left allmulticast mode
[ 1216.354316][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.354422][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.354509][T25761] erspan0: entered allmulticast mode
[ 1216.356868][T25761] erspan0: left allmulticast mode
[ 1216.357206][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.357390][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.358537][T25761] erspan0: entered allmulticast mode
[ 1216.363490][T25761] erspan0: left allmulticast mode
[ 1216.363695][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.363733][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.363790][T25761] erspan0: entered allmulticast mode
[ 1216.367455][T25761] erspan0: left allmulticast mode
[ 1216.368595][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.368664][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.368756][T25761] erspan0: entered allmulticast mode
[ 1216.391822][T25761] erspan0: left allmulticast mode
[ 1216.392113][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.392201][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.392281][T25761] erspan0: entered allmulticast mode
[ 1216.394855][T25761] erspan0: left allmulticast mode
[ 1216.396599][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.397593][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.397758][T25761] erspan0: entered allmulticast mode
[ 1216.399613][T25761] erspan0: left allmulticast mode
[ 1216.400865][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.400915][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.401114][T25761] erspan0: entered allmulticast mode
[ 1216.402850][T25761] erspan0: left allmulticast mode
[ 1216.403163][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.403231][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.404261][T25761] erspan0: entered allmulticast mode
[ 1216.408038][T25761] erspan0: left allmulticast mode
[ 1216.409696][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.409762][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.409857][T25761] erspan0: entered allmulticast mode
[ 1216.412460][T25761] erspan0: left allmulticast mode
[ 1216.412764][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.413421][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.413511][T25761] erspan0: entered allmulticast mode
[ 1216.419438][T25761] erspan0: left allmulticast mode
[ 1216.422606][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.422683][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.422783][T25761] erspan0: entered allmulticast mode
[ 1216.428596][T25761] erspan0: left allmulticast mode
[ 1216.430064][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.431414][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.431573][T25761] erspan0: entered allmulticast mode
[ 1216.439379][T25761] erspan0: left allmulticast mode
[ 1216.440333][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.440825][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.440937][T25761] erspan0: entered allmulticast mode
[ 1216.449245][T25761] erspan0: left allmulticast mode
[ 1216.449814][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.450304][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.450417][T25761] erspan0: entered allmulticast mode
[ 1216.453242][T25761] erspan0: left allmulticast mode
[ 1216.453394][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.453467][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.453569][T25761] erspan0: entered allmulticast mode
[ 1216.460142][T25761] erspan0: left allmulticast mode
[ 1216.461639][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.463112][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.463222][T25761] erspan0: entered allmulticast mode
[ 1216.466858][T25761] erspan0: left allmulticast mode
[ 1216.467150][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.467189][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.467256][T25761] erspan0: entered allmulticast mode
[ 1216.474528][T25761] erspan0: left allmulticast mode
[ 1216.474673][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.474714][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.474787][T25761] erspan0: entered allmulticast mode
[ 1216.477033][T25761] erspan0: left allmulticast mode
[ 1216.478659][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.479770][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.479842][T25761] erspan0: entered allmulticast mode
[ 1216.482753][T25761] erspan0: left allmulticast mode
[ 1216.483153][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.483677][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.483745][T25761] erspan0: entered allmulticast mode
[ 1216.486868][T25761] erspan0: left allmulticast mode
[ 1216.489281][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.489721][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.490327][T25761] erspan0: entered allmulticast mode
[ 1216.492120][T25761] erspan0: left allmulticast mode
[ 1216.492380][T25761] bridge90: port 1(erspan0) entered blocking state
[ 1216.493091][T25761] bridge90: port 1(erspan0) entered disabled state
[ 1216.493157][T25761] erspan0: entered allmulticast mode
[ 1216.496861][T25761] erspan0: left allmulticast mode
[ 1216.892926][T25800] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12303'.
[ 1217.050094][T25813] syzkaller0: entered promiscuous mode
[ 1217.050149][T25813] syzkaller0: entered allmulticast mode
[ 1217.270722][T25822] syzkaller0: entered promiscuous mode
[ 1217.270773][T25822] syzkaller0: entered allmulticast mode
[ 1217.416737][T25824] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1217.420089][T25824] syzkaller0: entered promiscuous mode
[ 1217.420165][T25824] syzkaller0: entered allmulticast mode
[ 1217.426080][T25824] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[ 1217.458196][T25824] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) !
[ 1217.466118][T25823] tipc: Resetting bearer <eth:syzkaller0>
[ 1217.516465][T25823] tipc: Disabling bearer <eth:syzkaller0>
[ 1217.549634][T25829] syzkaller0: entered promiscuous mode
[ 1217.549685][T25829] syzkaller0: entered allmulticast mode
[ 1217.554243][T25829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12311'.
[ 1219.941591][T25861] netlink: 'syz.3.12315': attribute type 1 has an invalid length.
[ 1219.944766][T25861] netlink: 'syz.3.12315': attribute type 12 has an invalid length.
[ 1220.047602][T25876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12318'.
[ 1220.078269][T25880] netlink: 'syz.3.12319': attribute type 1 has an invalid length.
[ 1220.099398][T25889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12318'.
[ 1220.217357][T25899] netlink: 'syz.4.12322': attribute type 18 has an invalid length.
[ 1220.332876][T25913] syzkaller0: entered promiscuous mode
[ 1220.332956][T25913] syzkaller0: entered allmulticast mode
[ 1220.384600][T25917] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[ 1220.415759][T25919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12326'.
[ 1223.626050][T12154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1225.154926][T25966] netlink: 'syz.4.12335': attribute type 1 has an invalid length.
[ 1225.192302][T25966] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1225.206114][T25966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12335'.
[ 1225.219170][T25966] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1225.222766][T25966] veth0_to_hsr: Caught tx_queue_len zero misconfig
[ 1225.280319][T25978] gretap0: left promiscuous mode
[ 1225.303176][T25978] macvlan0: left promiscuous mode
[ 1225.308229][T25978] geneve1: left promiscuous mode
[ 1225.310960][T25978] ip6gretap1: left promiscuous mode
[ 1225.324427][T25982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12338'.
[ 1225.329571][T25978] bond1: left allmulticast mode
[ 1225.331760][T25978] bond1: left promiscuous mode
[ 1225.334281][T25978] macvlan2: left promiscuous mode
[ 1225.336957][T25978] macvlan2: left allmulticast mode
[ 1225.342975][T25978] syzkaller0: left promiscuous mode
[ 1225.343095][T25978] syzkaller0: left allmulticast mode
[ 1225.359433][T25978] vxlan0: left allmulticast mode
[ 1225.476422][T24347] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1225.476476][T24347] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1225.476551][T24347] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1225.488399][T24347] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1225.488442][T24347] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1225.488459][T24347] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1225.488482][T24347] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1225.488499][T24347] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1225.700276][T26005] syzkaller0: entered promiscuous mode
[ 1225.700336][T26005] syzkaller0: entered allmulticast mode
[ 1225.819415][T26017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12347'.
[ 1225.819581][T26017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12347'.
[ 1225.865833][T26017] block nbd0: reconnected socket
[ 1225.872424][   T57] block nbd0: Receive control failed (result -32)
[ 1225.931077][T26024] ip_tables: iptables: counters copy to user failed while replacing table
[ 1226.069250][T26025] macvlan0: entered promiscuous mode
[ 1226.071738][T26025] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[ 1226.819278][T26042] pim6reg1: entered promiscuous mode
[ 1226.821223][T26042] pim6reg1: entered allmulticast mode
[ 1226.844365][T26041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12350'.
[ 1227.019210][T26053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12354'.
[ 1227.067931][T26055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12355'.
[ 1227.243728][ T9110] IPVS: starting estimator thread 0...
[ 1227.249177][T26069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12357'.
[ 1227.249281][T26069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12357'.
[ 1227.276996][T26069] syzkaller0: entered promiscuous mode
[ 1227.277049][T26069] syzkaller0: entered allmulticast mode
[ 1227.300224][T26072] syzkaller0: entered promiscuous mode
[ 1227.302304][T26072] syzkaller0: entered allmulticast mode
[ 1227.331943][T26071] IPVS: using max 84 ests per chain, 201600 per kthread
[ 1227.342078][T26074] syzkaller0: left promiscuous mode
[ 1227.344096][T26074] syzkaller0: left allmulticast mode
[ 1227.369199][T26076] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12361'.
[ 1227.414379][T26078] bond0: option arp_validate: invalid value (1701670249)
[ 1227.434484][T26093] bond0: option arp_validate: invalid value (1701670249)
[ 1227.530976][T26095] syzkaller0: entered promiscuous mode
[ 1227.531027][T26095] syzkaller0: entered allmulticast mode
[ 1227.597327][T26099] syzkaller0: entered promiscuous mode
[ 1227.597373][T26099] syzkaller0: entered allmulticast mode
[ 1227.713544][T26111] syzkaller0: entered promiscuous mode
[ 1227.716363][T26111] syzkaller0: entered allmulticast mode
[ 1227.793074][T26117] syzkaller0: entered promiscuous mode
[ 1227.796330][T26117] syzkaller0: entered allmulticast mode
[ 1227.868295][T26121] syzkaller0: entered promiscuous mode
[ 1227.868349][T26121] syzkaller0: entered allmulticast mode
[ 1227.958785][T26129] syzkaller0: entered promiscuous mode
[ 1227.960966][T26129] syzkaller0: entered allmulticast mode
[ 1228.010033][T26130] netlink: 'syz.4.12377': attribute type 1 has an invalid length.
[ 1228.251547][T26136] vlan10: entered promiscuous mode
[ 1228.254184][T26136] bridge0: entered promiscuous mode
[ 1229.110411][T26150] syzkaller0: left promiscuous mode
[ 1229.112204][T26150] syzkaller0: left allmulticast mode
[ 1229.233894][T26152] vlan6: entered promiscuous mode
[ 1229.268624][T26170] syzkaller0: entered promiscuous mode
[ 1229.268671][T26170] syzkaller0: entered allmulticast mode
[ 1229.311341][T26175] syzkaller0: entered promiscuous mode
[ 1229.311397][T26175] syzkaller0: entered allmulticast mode
[ 1229.362956][T26177] netlink: 'syz.4.12388': attribute type 6 has an invalid length.
[ 1229.434081][T26182] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 1229.434172][T26182] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[ 1229.564937][T26191] 0: reclassify loop, rule prio 0, protocol 700
[ 1229.603532][T26196] Unsupported ieee802154 address type: 0
[ 1229.759821][T26201] syzkaller0: left promiscuous mode
[ 1229.759872][T26201] syzkaller0: left allmulticast mode
[ 1229.762641][T26201] tcf_pedit_act: 7 callbacks suppressed
[ 1229.762653][T26201] tc action pedit unable to extract header offset for header type (0x5)
[ 1229.762662][T26201] tc action pedit unable to extract header offset for header type (0x5)
[ 1229.762669][T26201] tc action pedit unable to extract header offset for header type (0x5)
[ 1229.762676][T26201] tc action pedit unable to extract header offset for header type (0x5)
[ 1229.762684][T26201] tc action pedit unable to extract header offset for header type (0x5)
[ 1229.762693][T26201] tc action pedit unable to extract header offset for header type (0x5)
[ 1229.762700][T26201] tc action pedit unable to extract header offset for header type (0x5)
[ 1229.762707][T26201] tc action pedit unable to extract header offset for header type (0x5)
[ 1229.762718][T26201] tc action pedit unable to extract header offset for header type (0x5)
[ 1229.762725][T26201] tc action pedit unable to extract header offset for header type (0x5)
[ 1229.762737][T26201] 0: reclassify loop, rule prio 0, protocol 800
[ 1229.809141][T26203] syzkaller0: entered promiscuous mode
[ 1229.811013][T26203] syzkaller0: entered allmulticast mode
[ 1229.932821][T26211] netlink: 'syz.4.12401': attribute type 1 has an invalid length.
[ 1229.956913][T26211] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1229.986347][T26211] bond7: (slave veth5): Enslaving as an active interface with a down link
[ 1229.997951][T26211] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1230.003171][T26211] bond7: (slave batadv1): making interface the new active one
[ 1230.008179][T26211] batadv1: entered promiscuous mode
[ 1230.013027][T26211] bond7: (slave batadv1): Enslaving as an active interface with an up link
[ 1230.170225][T26217] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1230.187145][T26219] netlink: 'syz.2.12404': attribute type 32 has an invalid length.
[ 1230.302431][T26230] syzkaller0: entered promiscuous mode
[ 1230.302569][T26230] syzkaller0: entered allmulticast mode
[ 1230.610459][T26241] xt_time: invalid argument - start or stop time greater than 23:59:59
[ 1230.642342][T26243] __nla_validate_parse: 20 callbacks suppressed
[ 1230.643465][T26244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1230.649692][T26243] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12408'.
[ 1230.673231][T26249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12411'.
[ 1230.693272][T26249] netlink: 'syz.4.12411': attribute type 4 has an invalid length.
[ 1230.698712][T26249] netlink: 17 bytes leftover after parsing attributes in process `syz.4.12411'.
[ 1230.726325][T26249] xt_CT: No such helper "snmp_trap"
[ 1230.817431][T26259] syzkaller0: left promiscuous mode
[ 1230.819468][T26259] syzkaller0: left allmulticast mode
[ 1230.890737][T26266] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12416'.
[ 1231.102120][T26272] syzkaller0: entered promiscuous mode
[ 1231.102799][T26272] syzkaller0: entered allmulticast mode
[ 1231.145509][ T5602] Bluetooth: hci4: command 0x0405 tx timeout
[ 1231.214474][T26281] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12420'.
[ 1231.235013][T26281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12420'.
[ 1231.254641][T26284] netlink: 300 bytes leftover after parsing attributes in process `syz.4.12421'.
[ 1231.321617][T26285] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12419'.
[ 1231.355027][T26278] syzkaller0: entered promiscuous mode
[ 1231.355082][T26278] syzkaller0: entered allmulticast mode
[ 1231.461597][T26300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12425'.
[ 1231.547303][T26314] netlink: 'syz.2.12426': attribute type 7 has an invalid length.
[ 1233.772357][T26366] syzkaller0: entered promiscuous mode
[ 1233.772402][T26366] syzkaller0: entered allmulticast mode
[ 1233.795019][T26380] wg1: Caught tx_queue_len zero misconfig
[ 1233.844093][T26387] netlink: 'syz.2.12433': attribute type 4 has an invalid length.
[ 1233.989468][T26409] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1233.989516][T26409] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1234.050286][T26397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12436'.
[ 1234.116297][T26418] syzkaller0: entered promiscuous mode
[ 1234.116347][T26418] syzkaller0: entered allmulticast mode
[ 1234.320979][T26427] netlink: 'syz.3.12442': attribute type 1 has an invalid length.
[ 1234.334079][T26427] 8021q: adding VLAN 0 to HW filter on device bond58
[ 1234.370627][T26427] bond58: (slave veth2): Enslaving as an active interface with a down link
[ 1234.382764][T26427] bond58 (unregistering): (slave veth2): Releasing active interface
[ 1234.391666][T26427] bond58 (unregistering): Released all slaves
[ 1234.455088][T26430] syzkaller0: entered promiscuous mode
[ 1234.455138][T26430] syzkaller0: entered allmulticast mode
[ 1234.761746][T26453] syzkaller0: entered promiscuous mode
[ 1234.761891][T26453] syzkaller0: entered allmulticast mode
[ 1234.777759][T26453] netlink: 'syz.3.12446': attribute type 21 has an invalid length.
[ 1234.861245][T26455] netlink: 'syz.2.12447': attribute type 13 has an invalid length.
[ 1234.872376][T26455] syzkaller0: entered promiscuous mode
[ 1234.874981][T26455] syzkaller0: entered allmulticast mode
[ 1235.067696][T26467] syzkaller0: entered promiscuous mode
[ 1235.067783][T26467] syzkaller0: entered allmulticast mode
[ 1235.251477][T26478] bond0: Caught tx_queue_len zero misconfig
[ 1235.254546][T26478] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[ 1235.261028][T26479] syzkaller0: entered promiscuous mode
[ 1235.263003][T26479] syzkaller0: entered allmulticast mode
[ 1236.137994][T26500] syzkaller0: entered promiscuous mode
[ 1236.138061][T26500] syzkaller0: entered allmulticast mode
[ 1236.237562][T26503] syzkaller0: entered promiscuous mode
[ 1236.239862][T26503] syzkaller0: entered allmulticast mode
[ 1236.351004][T26506] xt_connbytes: Forcing CT accounting to be enabled
[ 1236.457964][T26516] syzkaller0: left promiscuous mode
[ 1236.458016][T26516] syzkaller0: left allmulticast mode
[ 1236.478472][T26517] syzkaller0: entered promiscuous mode
[ 1236.478508][T26517] syzkaller0: entered allmulticast mode
[ 1236.573285][T26526] Bluetooth: hci0: unsupported parameter 5134
[ 1236.573335][T26526] Bluetooth: hci0: unsupported parameter 8192
[ 1236.573365][T26526] Bluetooth: hci0: unsupported parameter 5134
[ 1236.573388][T26526] Bluetooth: hci0: unsupported parameter 8192
[ 1236.573958][T26526] __nla_validate_parse: 5 callbacks suppressed
[ 1236.573966][T26526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12468'.
[ 1236.699027][T26541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12471'.
[ 1237.593195][T26556] syzkaller0: entered promiscuous mode
[ 1237.596374][T26556] syzkaller0: entered allmulticast mode
[ 1237.633456][T26555] bond8 (unregistering): Released all slaves
[ 1238.590291][T26569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12477'.
[ 1239.196976][T26581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12478'.
[ 1239.406349][T26597] syzkaller0: entered promiscuous mode
[ 1239.408874][T26597] syzkaller0: entered allmulticast mode
[ 1239.531780][T26599] syzkaller0: entered promiscuous mode
[ 1239.534394][T26599] syzkaller0: entered allmulticast mode
[ 1239.718243][T26611] syzkaller0: entered promiscuous mode
[ 1239.718298][T26611] syzkaller0: entered allmulticast mode
[ 1239.731885][T26611] openvswitch: netlink: EtherType 300 is less than min 600
[ 1241.721831][T26623] syzkaller0: entered promiscuous mode
[ 1241.721893][T26623] syzkaller0: entered allmulticast mode
[ 1241.728471][T26624] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1241.758713][T26624] tipc: Resetting bearer <eth:syzkaller0>
[ 1241.772804][T26622] tipc: Resetting bearer <eth:syzkaller0>
[ 1241.797950][T26622] tipc: Disabling bearer <eth:syzkaller0>
[ 1241.829978][T26633] netlink: 'syz.4.12489': attribute type 13 has an invalid length.
[ 1241.886133][T26633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12489'.
[ 1241.888326][T26636] openvswitch: netlink: IPv4 tun info is not correct
[ 1241.888494][T26636] openvswitch: netlink: IPv4 tun info is not correct
[ 1241.888606][T26636] openvswitch: netlink: IPv4 tun info is not correct
[ 1241.888757][T26636] openvswitch: netlink: IPv4 tun info is not correct
[ 1241.888861][T26636] openvswitch: netlink: IPv4 tun info is not correct
[ 1241.888967][T26636] openvswitch: netlink: IPv4 tun info is not correct
[ 1241.889075][T26636] openvswitch: netlink: IPv4 tun info is not correct
[ 1241.889177][T26636] openvswitch: netlink: IPv4 tun info is not correct
[ 1241.889307][T26636] openvswitch: netlink: IPv4 tun info is not correct
[ 1241.889412][T26636] openvswitch: netlink: IPv4 tun info is not correct
[ 1241.894612][T26640] syzkaller0: entered promiscuous mode
[ 1241.894653][T26640] syzkaller0: entered allmulticast mode
[ 1241.984912][T26649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12494'.
[ 1241.985098][T26649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12494'.
[ 1241.995937][ T5655] batadv1: left promiscuous mode
[ 1242.072761][T26654] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12496'.
[ 1242.081127][T26660] syzkaller0: Caught tx_queue_len zero misconfig
[ 1242.249558][T26667] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1242.309129][T26684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12502'.
[ 1242.333820][T26684] 8021q: adding VLAN 0 to HW filter on device bond99
[ 1242.370555][T26671] 0{X: left allmulticast mode
[ 1242.388169][T26684] macvlan1: entered promiscuous mode
[ 1242.388227][T26684] macvlan1: entered allmulticast mode
[ 1242.389315][T26684] bond99: entered promiscuous mode
[ 1242.389927][T26684] 8021q: adding VLAN 0 to HW filter on device macvlan1
[ 1242.400516][T26684] bond99: left promiscuous mode
[ 1242.483101][T26696] netlink: 'syz.2.12505': attribute type 13 has an invalid length.
[ 1242.521479][T26701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12507'.
[ 1242.521634][T26701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12507'.
[ 1242.521654][T26701] bond0: invalid ARP target 255.255.255.255 specified for addition
[ 1242.521664][T26701] bond0: option arp_ip_target: invalid value (4294967295)
[ 1242.521776][T26701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12507'.
[ 1242.521797][T26701] bond0: invalid ARP target 255.255.255.255 specified for addition
[ 1242.521812][T26701] bond0: option arp_ip_target: invalid value (4294967295)
[ 1242.591252][T26706] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12508'.
[ 1242.662962][T26716] syzkaller0: entered promiscuous mode
[ 1242.667038][T26716] syzkaller0: entered allmulticast mode
[ 1242.701954][T26720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12512'.
[ 1242.801151][T26734] syzkaller0: entered allmulticast mode
[ 1242.873210][T26742] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[ 1243.204681][T26769] veth1_to_bond: entered allmulticast mode
[ 1243.229680][T26767] veth1_to_bond: left allmulticast mode
[ 1243.370813][T26779] 
[ 1243.371641][T26779] ======================================================
[ 1243.373801][T26779] WARNING: possible circular locking dependency detected
[ 1243.376080][T26779] syzkaller #0 Not tainted
[ 1243.377644][T26779] ------------------------------------------------------
[ 1243.379895][T26779] syz.4.12522/26779 is trying to acquire lock:
[ 1243.381869][T26779] ffff88810436d918 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0
[ 1243.384798][T26779] 
[ 1243.384798][T26779] but task is already holding lock:
[ 1243.387264][T26779] ffff88810aacd958 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[ 1243.390345][T26779] 
[ 1243.390345][T26779] which lock already depends on the new lock.
[ 1243.390345][T26779] 
[ 1243.393954][T26779] 
[ 1243.393954][T26779] the existing dependency chain (in reverse order) is:
[ 1243.396864][T26779] 
[ 1243.396864][T26779] -> #6 (&q->elevator_lock){+.+.}-{4:4}:
[ 1243.399400][T26779]        __mutex_lock+0x19d/0x1550
[ 1243.401062][T26779]        elevator_change+0x1af/0x480
[ 1243.402757][T26779]        elevator_set_none+0xb5/0x140
[ 1243.404468][T26779]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[ 1243.406497][T26779]        nbd_start_device+0x189/0xb30
[ 1243.408268][T26779]        nbd_genl_connect+0x167d/0x1cd0
[ 1243.410071][T26779]        genl_family_rcv_msg_doit+0x233/0x340
[ 1243.412022][T26779]        genl_rcv_msg+0x614/0x7a0
[ 1243.413685][T26779]        netlink_rcv_skb+0x226/0x4a0
[ 1243.415419][T26779]        genl_rcv+0x28/0x40
[ 1243.416959][T26779]        netlink_unicast+0x7bd/0x940
[ 1243.418712][T26779]        netlink_sendmsg+0x813/0xb40
[ 1243.420465][T26779]        sock_sendmsg_nosec+0x13a/0x180
[ 1243.422303][T26779]        ____sys_sendmsg+0x54e/0x850
[ 1243.424108][T26779]        ___sys_sendmsg+0x2a5/0x360
[ 1243.426054][T26779]        __x64_sys_sendmsg+0x1b1/0x290
[ 1243.427932][T26779]        do_syscall_64+0x166/0x520
[ 1243.429852][T26779]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1243.432317][T26779] 
[ 1243.432317][T26779] -> #5 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[ 1243.435342][T26779]        blk_alloc_queue+0x544/0x690
[ 1243.437084][T26779]        __blk_mq_alloc_disk+0x194/0x390
[ 1243.438951][T26779]        nbd_dev_add+0x494/0xb60
[ 1243.440560][T26779]        nbd_init+0x168/0x1f0
[ 1243.442117][T26779]        do_one_initcall+0x250/0x870
[ 1243.443815][T26779]        do_initcall_level+0x10a/0x1a0
[ 1243.445572][T26779]        do_initcalls+0x59/0xa0
[ 1243.447362][T26779]        kernel_init_freeable+0x29d/0x3e0
[ 1243.449188][T26779]        kernel_init+0x22/0x1d0
[ 1243.450751][T26779]        ret_from_fork+0x514/0xb70
[ 1243.452311][T26779]        ret_from_fork_asm+0x1a/0x30
[ 1243.453991][T26779] 
[ 1243.453991][T26779] -> #4 (fs_reclaim){+.+.}-{0:0}:
[ 1243.456344][T26779]        fs_reclaim_acquire+0x71/0x100
[ 1243.458247][T26779]        __kmalloc_cache_node_noprof+0x66/0x620
[ 1243.460237][T26779]        create_worker+0x112/0x7c0
[ 1243.461884][T26779]        workqueue_prepare_cpu+0xe4/0x170
[ 1243.463716][T26779]        cpuhp_invoke_callback+0x434/0x810
[ 1243.465644][T26779]        _cpu_up+0x2ce/0x5b0
[ 1243.467188][T26779]        cpu_up+0x1d2/0x220
[ 1243.468702][T26779]        cpuhp_bringup_mask+0xb2/0x1a0
[ 1243.470463][T26779]        cpuhp_bringup_cpus_parallel+0x109/0x120
[ 1243.472492][T26779]        bringup_nonboot_cpus+0x17/0x30
[ 1243.474281][T26779]        smp_init+0x32/0x110
[ 1243.475895][T26779]        kernel_init_freeable+0x27f/0x3e0
[ 1243.477759][T26779]        kernel_init+0x22/0x1d0
[ 1243.479322][T26779]        ret_from_fork+0x514/0xb70
[ 1243.480971][T26779]        ret_from_fork_asm+0x1a/0x30
[ 1243.482710][T26779] 
[ 1243.482710][T26779] -> #3 (cpu_hotplug_lock){++++}-{0:0}:
[ 1243.485149][T26779]        cpus_read_lock+0x42/0x160
[ 1243.486763][T26779]        static_key_slow_inc+0x12/0x30
[ 1243.488418][T26779]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[ 1243.490313][T26779]        nbd_genl_foreach_sock+0x265/0x450
[ 1243.492160][T26779]        nbd_genl_reconfigure+0xbbb/0x1040
[ 1243.493992][T26779]        genl_family_rcv_msg_doit+0x233/0x340
[ 1243.495994][T26779]        genl_rcv_msg+0x614/0x7a0
[ 1243.497613][T26779]        netlink_rcv_skb+0x226/0x4a0
[ 1243.499475][T26779]        genl_rcv+0x28/0x40
[ 1243.500965][T26779]        netlink_unicast+0x7bd/0x940
[ 1243.502670][T26779]        netlink_sendmsg+0x813/0xb40
[ 1243.504338][T26779]        sock_sendmsg_nosec+0x13a/0x180
[ 1243.506177][T26779]        ____sys_sendmsg+0x54e/0x850
[ 1243.507878][T26779]        ___sys_sendmsg+0x2a5/0x360
[ 1243.509552][T26779]        __x64_sys_sendmsg+0x1b1/0x290
[ 1243.511359][T26779]        do_syscall_64+0x166/0x520
[ 1243.513002][T26779]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1243.515094][T26779] 
[ 1243.515094][T26779] -> #2 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1243.517587][T26779]        __mutex_lock+0x19d/0x1550
[ 1243.519250][T26779]        nbd_queue_rq+0x373/0xff0
[ 1243.520882][T26779]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1243.522940][T26779]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1243.525179][T26779]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1243.527368][T26779]        blk_mq_run_work_fn+0x16c/0x300
[ 1243.529205][T26779]        process_scheduled_works+0xc3d/0x1630
[ 1243.531575][T26779]        worker_thread+0xa47/0xfb0
[ 1243.533644][T26779]        kthread+0x38b/0x480
[ 1243.535400][T26779]        ret_from_fork+0x514/0xb70
[ 1243.537264][T26779]        ret_from_fork_asm+0x1a/0x30
[ 1243.539087][T26779] 
[ 1243.539087][T26779] -> #1 (&cmd->lock){+.+.}-{4:4}:
[ 1243.541691][T26779]        __mutex_lock+0x19d/0x1550
[ 1243.543427][T26779]        nbd_queue_rq+0xc1/0xff0
[ 1243.545416][T26779]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1243.547371][T26779]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1243.549676][T26779]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1243.551775][T26779]        blk_mq_run_work_fn+0x16c/0x300
[ 1243.553507][T26779]        process_scheduled_works+0xc3d/0x1630
[ 1243.555588][T26779]        worker_thread+0xa47/0xfb0
[ 1243.557154][T26779]        kthread+0x38b/0x480
[ 1243.558676][T26779]        ret_from_fork+0x514/0xb70
[ 1243.560345][T26779]        ret_from_fork_asm+0x1a/0x30
[ 1243.562024][T26779] 
[ 1243.562024][T26779] -> #0 (set->srcu){.+.+}-{0:0}:
[ 1243.564198][T26779]        __lock_acquire+0x15ff/0x2e50
[ 1243.565857][T26779]        lock_sync+0xb3/0x130
[ 1243.567300][T26779]        __synchronize_srcu+0xc9/0x2f0
[ 1243.569011][T26779]        elevator_switch+0x1e8/0x7b0
[ 1243.570648][T26779]        elevator_change+0x2fa/0x480
[ 1243.572254][T26779]        elevator_set_default+0x375/0x440
[ 1243.573986][T26779]        blk_register_queue+0x3f3/0x4e0
[ 1243.575788][T26779]        __add_disk+0x6cb/0xe30
[ 1243.577416][T26779]        add_disk_fwnode+0x100/0x3a0
[ 1243.579315][T26779]        nbd_dev_add+0x733/0xb60
[ 1243.581145][T26779]        nbd_genl_connect+0x96c/0x1cd0
[ 1243.582942][T26779]        genl_family_rcv_msg_doit+0x233/0x340
[ 1243.584847][T26779]        genl_rcv_msg+0x614/0x7a0
[ 1243.586501][T26779]        netlink_rcv_skb+0x226/0x4a0
[ 1243.588168][T26779]        genl_rcv+0x28/0x40
[ 1243.589610][T26779]        netlink_unicast+0x7bd/0x940
[ 1243.591394][T26779]        netlink_sendmsg+0x813/0xb40
[ 1243.593154][T26779]        sock_sendmsg_nosec+0x13a/0x180
[ 1243.594906][T26779]        ____sys_sendmsg+0x54e/0x850
[ 1243.596645][T26779]        ___sys_sendmsg+0x2a5/0x360
[ 1243.598281][T26779]        __x64_sys_sendmsg+0x1b1/0x290
[ 1243.600132][T26779]        do_syscall_64+0x166/0x520
[ 1243.601891][T26779]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1243.604052][T26779] 
[ 1243.604052][T26779] other info that might help us debug this:
[ 1243.604052][T26779] 
[ 1243.607082][T26779] Chain exists of:
[ 1243.607082][T26779]   set->srcu --> &q->q_usage_counter(io)#51 --> &q->elevator_lock
[ 1243.607082][T26779] 
[ 1243.611259][T26779]  Possible unsafe locking scenario:
[ 1243.611259][T26779] 
[ 1243.613609][T26779]        CPU0                    CPU1
[ 1243.615307][T26779]        ----                    ----
[ 1243.617011][T26779]   lock(&q->elevator_lock);
[ 1243.618479][T26779]                                lock(&q->q_usage_counter(io)#51);
[ 1243.620910][T26779]                                lock(&q->elevator_lock);
[ 1243.623108][T26779]   sync(set->srcu);
[ 1243.624373][T26779] 
[ 1243.624373][T26779]  *** DEADLOCK ***
[ 1243.624373][T26779] 
[ 1243.627025][T26779] locks held by syz.4.12522/26779: 6, last CPU#1:
[ 1243.629005][T26779]  #0: ffffffff902c07e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1243.631517][T26779]  #1: ffffffff902c0620 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1243.634309][T26779]  #2: ffff88810bc161c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0
[ 1243.637801][T26779]  #3: ffff88810aacd9e0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0
[ 1243.640936][T26779]  #4: ffff88810aacd468 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x194/0x480
[ 1243.644400][T26779]  #5: ffff88810aacd958 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[ 1243.647544][T26779] 
[ 1243.647544][T26779] stack backtrace:
[ 1243.649426][T26779] CPU: 1 UID: 0 PID: 26779 Comm: syz.4.12522 Not tainted syzkaller #0 PREEMPT(full) 
[ 1243.652347][T26779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1243.655573][T26779] Call Trace:
[ 1243.656716][T26779]  <TASK>
[ 1243.657674][T26779]  dump_stack_lvl+0xe8/0x150
[ 1243.659156][T26779]  print_circular_bug+0x2e2/0x300
[ 1243.660764][T26779]  check_noncircular+0x12f/0x150
[ 1243.662418][T26779]  __lock_acquire+0x15ff/0x2e50
[ 1243.663988][T26779]  ? check_noncircular+0xdb/0x150
[ 1243.665714][T26779]  ? lockdep_unlock+0x5c/0xd0
[ 1243.667215][T26779]  ? __lock_acquire+0x14b9/0x2e50
[ 1243.668802][T26779]  lock_sync+0xb3/0x130
[ 1243.670301][T26779]  ? __synchronize_srcu+0xb5/0x2f0
[ 1243.672221][T26779]  ? __synchronize_srcu+0xb5/0x2f0
[ 1243.673824][T26779]  __synchronize_srcu+0xc9/0x2f0
[ 1243.675511][T26779]  ? __pfx___synchronize_srcu+0x10/0x10
[ 1243.677369][T26779]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1243.679014][T26779]  ? kvm_clock_get_cycles+0x49/0x60
[ 1243.680697][T26779]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[ 1243.682369][T26779]  ? synchronize_srcu+0x20a/0x260
[ 1243.683945][T26779]  elevator_switch+0x1e8/0x7b0
[ 1243.685491][T26779]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[ 1243.687230][T26779]  elevator_change+0x2fa/0x480
[ 1243.688745][T26779]  ? do_raw_spin_unlock+0x4d/0x200
[ 1243.690344][T26779]  elevator_set_default+0x375/0x440
[ 1243.691961][T26779]  ? __pfx_elevator_set_default+0x10/0x10
[ 1243.693721][T26779]  ? disk_register_independent_access_ranges+0x2d8/0x380
[ 1243.696082][T26779]  ? blk_crypto_sysfs_register+0x11c/0x170
[ 1243.697976][T26779]  blk_register_queue+0x3f3/0x4e0
[ 1243.699611][T26779]  __add_disk+0x6cb/0xe30
[ 1243.701018][T26779]  add_disk_fwnode+0x100/0x3a0
[ 1243.702478][T26779]  nbd_dev_add+0x733/0xb60
[ 1243.703889][T26779]  ? __pfx_nbd_dev_add+0x10/0x10
[ 1243.705523][T26779]  ? __pfx_nbd_genl_foreach_sock+0x10/0x10
[ 1243.707405][T26779]  ? bpf_lsm_capable+0x9/0x20
[ 1243.708911][T26779]  ? security_capable+0x7e/0x2c0
[ 1243.710874][T26779]  ? radix_tree_lookup+0x25c/0x290
[ 1243.712884][T26779]  nbd_genl_connect+0x96c/0x1cd0
[ 1243.714828][T26779]  ? __pfx_nbd_genl_connect+0x10/0x10
[ 1243.716585][T26779]  ? rcu_is_watching+0x16/0xb0
[ 1243.718172][T26779]  ? trace_kmalloc+0x2a/0xf0
[ 1243.719687][T26779]  ? __kmalloc_noprof+0x38c/0x720
[ 1243.721261][T26779]  ? __nla_parse+0x40/0x60
[ 1243.722654][T26779]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[ 1243.724633][T26779]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[ 1243.726706][T26779]  genl_family_rcv_msg_doit+0x233/0x340
[ 1243.728431][T26779]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1243.730321][T26779]  ? __lock_acquire+0x6df/0x2e50
[ 1243.731882][T26779]  ? __lock_acquire+0x6df/0x2e50
[ 1243.733395][T26779]  genl_rcv_msg+0x614/0x7a0
[ 1243.734829][T26779]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1243.736446][T26779]  ? __pfx_nbd_genl_connect+0x10/0x10
[ 1243.738164][T26779]  netlink_rcv_skb+0x226/0x4a0
[ 1243.739729][T26779]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1243.741292][T26779]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1243.743025][T26779]  ? down_read+0x2be/0x330
[ 1243.744450][T26779]  genl_rcv+0x28/0x40
[ 1243.745970][T26779]  netlink_unicast+0x7bd/0x940
[ 1243.747541][T26779]  netlink_sendmsg+0x813/0xb40
[ 1243.749096][T26779]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1243.750780][T26779]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1243.752556][T26779]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1243.754396][T26779]  sock_sendmsg_nosec+0x13a/0x180
[ 1243.756193][T26779]  ____sys_sendmsg+0x54e/0x850
[ 1243.757955][T26779]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1243.759687][T26779]  ? import_iovec+0x73/0xa0
[ 1243.761121][T26779]  ___sys_sendmsg+0x2a5/0x360
[ 1243.762764][T26779]  ? __lock_acquire+0x6df/0x2e50
[ 1243.764566][T26779]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1243.766405][T26779]  ? futex_wait+0x2a2/0x390
[ 1243.768026][T26779]  ? __fget_files+0x2a/0x420
[ 1243.769745][T26779]  ? __fget_files+0x3a2/0x420
[ 1243.771568][T26779]  __x64_sys_sendmsg+0x1b1/0x290
[ 1243.773253][T26779]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1243.775025][T26779]  do_syscall_64+0x166/0x520
[ 1243.776856][T26779]  ? trace_irq_disable+0x3b/0x140
[ 1243.778667][T26779]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1243.780501][T26779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1243.782279][T26779] RIP: 0033:0x7fb3c059e159
[ 1243.784003][T26779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1243.791667][T26779] RSP: 002b:00007fb3c1531028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1243.794987][T26779] RAX: ffffffffffffffda RBX: 00007fb3c0825fa0 RCX: 00007fb3c059e159
[ 1243.798156][T26779] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 00000000000000ab
[ 1243.801266][T26779] RBP: 00007fb3c0635024 R08: 0000000000000000 R09: 0000000000000000
[ 1243.804384][T26779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1243.807475][T26779] R13: 00007fb3c0826038 R14: 00007fb3c0825fa0 R15: 00007ffc4c884028
[ 1243.810428][T26779]  </TASK>
