last executing test programs:

3.578508669s ago: executing program 1 (id=1871):
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

2.737184123s ago: executing program 1 (id=1882):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000040))

2.678863722s ago: executing program 1 (id=1883):
r0 = socket$kcm(0x11, 0x2, 0x300)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe)
recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xa}], 0x40000f6, 0x102, 0x0)
shutdown(r1, 0x1)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000100)={r0, &(0x7f0000000380)='\x7f[g\xd8C\xc39\xfdo\x91\x06*|O\xb0g\\\xda\x91\xa9\xe2\x8c\x81\x8c\xd6\xff\xff\xff\x7f\x00\x00\x00\x00Y2\x02\x82r`n8u\xd8\xb9\x05Pj\x84u\xc6\xc2\xf9U\xcd\x8d\xec\xc8\xa1C\xc6P:\xc1\xdcp\xb8\xfd\xccw&\x9eC\xaa\x86j>\x80\\\x1153', 0x541600, &(0x7f00000001c0)={@align=0x5, {0xcd, 0x5, 0x8, 0x6f}}, 0xd1c1, 0x0, &(0x7f0000000240)=0x8000})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip_vti0\x00', 0x0})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x7, 0xc, 0x0, 0x1, 0x3, 0x9, 0x7, 0x1}, &(0x7f00000003c0)=0x20)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, 0x0)

1.010516049s ago: executing program 1 (id=1918):
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x28000600)
ppoll(&(0x7f0000000180)=[{}, {r1, 0x1c}], 0x2, 0x0, 0x0, 0x0)

459.130472ms ago: executing program 2 (id=1928):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81})
write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6)

400.750909ms ago: executing program 0 (id=1929):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

400.200219ms ago: executing program 2 (id=1930):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x134, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x104, 0x2, {{0xfffffffe, 0x2, 0x40, 0xa, 0xe7, 0xcc36}, [@TCA_NETEM_LOSS={0xb8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x40, 0xf, 0xa, 0x4006559, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xfffffffa, 0xa, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0xd82c, 0x8, 0x6, 0x0, 0xc5e0}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1000, 0x2, 0x0, 0x8, 0x1}}, @NETEM_LOSS_GI={0x9, 0x1, {0x4, 0x4, 0x9de, 0x9, 0xb502}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5b, 0x20000, 0x3, 0xa}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x40003, 0x0, 0x6}}]}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x40009, 0xae}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x100020}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4546cfee17049510}, 0x0)

399.829652ms ago: executing program 0 (id=1931):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c43b38c4d557951dab95269ab90b920e96b236776d7b59f5e1c0e93280a0264ffe4767bcd"], 0x50)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d968119f68f58d94773b9ab884100003c"], 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

289.366735ms ago: executing program 2 (id=1932):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xa, &(0x7f0000000300)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fcb}, 0x94)

289.14638ms ago: executing program 0 (id=1933):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

220.648999ms ago: executing program 2 (id=1934):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff)
r1 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000380)='syz1\x00', 0x1ff)

149.909395ms ago: executing program 2 (id=1935):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000200), 0x0}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x50)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x87, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000380)={{0x2, 0x4e23, @broadcast}, {0x0, @remote}, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 'macvtap0\x00'})
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r3 = socket$inet(0x2, 0x3, 0xa)
sendmsg$inet(r3, 0x0, 0x0)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)

149.534025ms ago: executing program 0 (id=1936):
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044080}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000680)=@ethtool_drvinfo={0x3, "4c8c7347e32aa9e1919c70c199bc62daad66ce3db4830992be0a07d0e2edda49", "43ef0626e0c081542132d0ce4926e3c71697d7b2861b69fd144fbdd555d2b463", "48fc56f4f7189546b945e630bca6536abb8675503d0db872c33a48925fe26d22", "caf0c036527a0de8195ff3b19db6bee4baa2f54d3422c3f42344f6ba6e042706", "b5e2c9e1b009a67f0335ead0bda0c05ce1595fe59060e5efc038ddc648d30394", "356b668d9c9fd670b74d5817", 0xa51d, 0x612780, 0x4, 0x2, 0x7}})
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

68.390061ms ago: executing program 1 (id=1937):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c)
syz_emit_ethernet(0xd81, &(0x7f0000001980)={@empty, @random="0f22f07b8a02", @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x0, 0x1, 0x2}}, {@x25={0x805, {0x0, 0x5, 0x0, "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"}}}}, 0x0)

68.128145ms ago: executing program 0 (id=1938):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
connect(r0, &(0x7f00000001c0)=@ax25={{0x3, @bcast, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

486.443µs ago: executing program 2 (id=1939):
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10)
sendmmsg$inet(r1, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}], 0x1, 0xc000)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'erspan0\x00'})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00')
ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00')
r5 = socket$inet(0x2, 0x80001, 0x84)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b000008001700", @ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20000080)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="05042fbd7000ffdbdf250100000008000100", @ANYRES32=r9], 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x400e8c0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c001880080001400100000000000000000000020800034000000002240001801400018008000100e000000108000200e00000010c000280050001000000000004001640440010"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
getsockopt$inet_mreqsrc(r0, 0x0, 0x25, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r10, 0x0, 0x20}, 0xc)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r12, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)

178.13µs ago: executing program 1 (id=1940):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800)

0s ago: executing program 0 (id=1941):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:34414' (ED25519) to the list of known hosts.
syzkaller login: [   56.125404][ T5593] cgroup: Unknown subsys name 'net'
[   56.233276][ T5593] cgroup: Unknown subsys name 'cpuset'
[   56.237483][ T5593] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.901315][ T5593] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.055372][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.059531][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.062905][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.067132][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.071035][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.101185][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.106843][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.110748][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.114531][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.117496][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.143930][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.148656][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.154360][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.158651][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.161687][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.810007][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.812916][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.815389][ T5612] bridge_slave_0: entered allmulticast mode
[   63.817996][ T5612] bridge_slave_0: entered promiscuous mode
[   63.837374][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.839687][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.841994][ T5621] bridge_slave_0: entered allmulticast mode
[   63.844899][ T5621] bridge_slave_0: entered promiscuous mode
[   63.848860][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.851401][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.853641][ T5612] bridge_slave_1: entered allmulticast mode
[   63.856288][ T5612] bridge_slave_1: entered promiscuous mode
[   63.873800][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.876719][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.879418][ T5621] bridge_slave_1: entered allmulticast mode
[   63.882884][ T5621] bridge_slave_1: entered promiscuous mode
[   63.893197][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.896040][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.898438][ T5616] bridge_slave_0: entered allmulticast mode
[   63.901299][ T5616] bridge_slave_0: entered promiscuous mode
[   63.914681][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.920800][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.924555][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.927517][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.930023][ T5616] bridge_slave_1: entered allmulticast mode
[   63.935723][ T5616] bridge_slave_1: entered promiscuous mode
[   63.948840][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.975489][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.996760][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.014475][ T5612] team0: Port device team_slave_0 added
[   64.018088][ T5612] team0: Port device team_slave_1 added
[   64.022707][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.060069][ T5621] team0: Port device team_slave_0 added
[   64.063404][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.066133][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.075784][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.095124][ T5621] team0: Port device team_slave_1 added
[   64.097622][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.100744][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.111238][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.125542][ T5616] team0: Port device team_slave_0 added
[   64.149339][ T5616] team0: Port device team_slave_1 added
[   64.152647][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.155225][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.163595][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.168887][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.171124][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.178620][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.214222][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.216780][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.225248][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.247588][ T5612] hsr_slave_0: entered promiscuous mode
[   64.251487][ T5612] hsr_slave_1: entered promiscuous mode
[   64.255682][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.258217][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.266729][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.342473][ T5621] hsr_slave_0: entered promiscuous mode
[   64.345057][ T5621] hsr_slave_1: entered promiscuous mode
[   64.347656][ T5621] debugfs: 'hsr0' already exists in 'hsr'
[   64.349801][ T5621] Cannot create hsr debugfs directory
[   64.365493][ T5616] hsr_slave_0: entered promiscuous mode
[   64.368131][ T5616] hsr_slave_1: entered promiscuous mode
[   64.370460][ T5616] debugfs: 'hsr0' already exists in 'hsr'
[   64.372195][ T5616] Cannot create hsr debugfs directory
[   64.688557][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.703836][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.711845][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.719445][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.723986][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.736811][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.752629][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.757783][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.811734][ T5621] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.817322][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.822127][ T5621] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.829915][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.833952][ T5621] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.838837][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.853493][ T5621] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.858282][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.907285][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.912967][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.916368][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.920990][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.929518][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.934806][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.937744][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.943304][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.993641][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.035566][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[   65.049354][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.058444][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.061740][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.077563][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.079871][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.107480][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[   65.129736][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.131550][   T54] Bluetooth: hci0: command tx timeout
[   65.131983][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.134665][ T5614] Bluetooth: hci1: command tx timeout
[   65.157957][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.161094][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.171333][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.210771][ T5614] Bluetooth: hci2: command tx timeout
[   65.219747][ T5616] 8021q: adding VLAN 0 to HW filter on device team0
[   65.248170][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.251131][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.273641][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.275876][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.295909][ T5621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.534747][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.579605][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.618132][ T5612] veth0_vlan: entered promiscuous mode
[   65.638621][ T5612] veth1_vlan: entered promiscuous mode
[   65.676158][ T5616] veth0_vlan: entered promiscuous mode
[   65.689002][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.696895][ T5616] veth1_vlan: entered promiscuous mode
[   65.719156][ T5612] veth0_macvtap: entered promiscuous mode
[   65.739012][ T5612] veth1_macvtap: entered promiscuous mode
[   65.745834][ T5616] veth0_macvtap: entered promiscuous mode
[   65.756534][ T5616] veth1_macvtap: entered promiscuous mode
[   65.787523][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.793925][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.809540][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.818246][ T5621] veth0_vlan: entered promiscuous mode
[   65.822369][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.838101][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.843765][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.848073][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.862060][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.867681][ T5621] veth1_vlan: entered promiscuous mode
[   65.881903][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.904041][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.933301][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.945211][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.990757][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.997224][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.049526][  T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.054427][  T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.071872][ T5621] veth0_macvtap: entered promiscuous mode
[   66.089860][ T5621] veth1_macvtap: entered promiscuous mode
[   66.099127][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.104264][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.134857][ T5616] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.139068][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.144166][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.158317][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.174133][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.225129][ T5693] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.228161][ T5693] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.233595][ T5693] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.236715][ T5693] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.356122][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.368174][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.387870][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.391120][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.529624][ T5728] warning: `syz.1.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.614084][ T5730] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'.
[   66.706743][ T5741] Driver unsupported XDP return value 0 on prog  (id 2) dev N/A, expect packet loss!
[   66.777467][ T5746] bridge_slave_1: left allmulticast mode
[   66.781684][ T5746] bridge_slave_1: left promiscuous mode
[   66.786247][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.796409][ T5746] bridge_slave_0: left allmulticast mode
[   66.799977][ T5746] bridge_slave_0: left promiscuous mode
[   66.804762][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.211345][   T54] Bluetooth: hci0: command tx timeout
[   67.213501][ T5614] Bluetooth: hci1: command tx timeout
[   67.290628][ T5614] Bluetooth: hci2: command tx timeout
[   67.510802][ T5753] netlink: 'syz.2.9': attribute type 30 has an invalid length.
[   67.813650][ T5774] netlink: 'syz.2.18': attribute type 1 has an invalid length.
[   67.996940][ T5782] tipc: Started in network mode
[   68.000215][ T5782] tipc: Node identity 26a140563ba2, cluster identity 4711
[   68.002790][ T5782] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.082886][ T5777] syzkaller0: entered promiscuous mode
[   68.087142][ T5777] syzkaller0: entered allmulticast mode
[   68.095837][ T5777] tipc: Resetting bearer <eth:syzkaller0>
[   68.145727][ T5776] tipc: Resetting bearer <eth:syzkaller0>
[   69.112671][ T5776] tipc: Disabling bearer <eth:syzkaller0>
[   69.290852][ T5614] Bluetooth: hci1: command tx timeout
[   69.292174][   T54] Bluetooth: hci0: command tx timeout
[   69.370380][   T54] Bluetooth: hci2: command tx timeout
[   69.638673][ T5818] syzkaller0: entered promiscuous mode
[   69.646011][ T5818] syzkaller0: entered allmulticast mode
[   70.040432][ T5853] netlink: 'syz.1.52': attribute type 8 has an invalid length.
[   70.380801][ T5886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'.
[   70.384258][ T5886] netlink: 'syz.1.61': attribute type 1 has an invalid length.
[   71.063222][ T5870] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   71.069733][ T5870] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   71.371388][   T54] Bluetooth: hci1: command tx timeout
[   71.371682][ T5614] Bluetooth: hci0: command tx timeout
[   71.451925][ T5614] Bluetooth: hci2: command tx timeout
[   71.459963][ T5870] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   71.465007][ T5870] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   71.517114][ T5870] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   71.521456][ T5870] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   72.048757][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.71'.
[   72.053423][ T5931] netlink: 15 bytes leftover after parsing attributes in process `syz.0.72'.
[   72.121953][ T5929] veth3: entered allmulticast mode
[   72.224233][ T5946] netlink: 'syz.2.79': attribute type 4 has an invalid length.
[   72.448876][ T5954] dvmrp0: entered allmulticast mode
[   72.466743][ T5964] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.478778][ T5954] syz.0.83 uses obsolete (PF_INET,SOCK_PACKET)
[   72.593637][ T5977] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   72.652621][ T5980] ieee802154 phy0 wpan0: encryption failed: -22
[   73.286118][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'.
[   73.292520][ T6017] hsr_slave_0: left promiscuous mode
[   73.295099][ T6017] hsr_slave_1: left promiscuous mode
[   73.451440][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.108'.
[   73.454462][ T6032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.108'.
[   73.462953][ T6028] block nbd0: server does not support multiple connections per device.
[   73.497323][ T6028] block nbd0: shutting down sockets
[   73.542693][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'.
[   73.573895][ T6037] bridge0: entered allmulticast mode
[   73.581213][ T6037] pim6reg: entered allmulticast mode
[   73.708455][ T6051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.116'.
[   73.788001][ T6058] netlink: 'syz.2.118': attribute type 1 has an invalid length.
[   73.927485][ T6073] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   73.942958][ T6073] Zero length message leads to an empty skb
[   74.762425][ T6141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.151'.
[   74.826593][ T6143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.151'.
[   74.835072][ T6143] nbd: device at index 64 is going down
[   74.986954][ T6153] netlink: 'syz.1.153': attribute type 1 has an invalid length.
[   75.603700][ T6189] netlink: 32 bytes leftover after parsing attributes in process `syz.1.169'.
[   76.375142][ T6253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.573964][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[   76.580265][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[   76.731564][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.959974][ T6313] syzkaller0: entered promiscuous mode
[   76.969657][ T6313] syzkaller0: entered allmulticast mode
[   77.770510][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   77.880633][ T6324] tipc: Started in network mode
[   77.882490][ T6324] tipc: Node identity , cluster identity 4711
[   77.884730][ T6324] tipc: Failed to obtain node identity
[   77.886554][ T6324] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   78.044304][ T6337] __nla_validate_parse: 2 callbacks suppressed
[   78.044315][ T6337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.205'.
[   78.067411][ T6337] netlink: 20 bytes leftover after parsing attributes in process `syz.0.205'.
[   78.112428][ T6341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.180673][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.492850][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.647118][ T6354] netlink: 128 bytes leftover after parsing attributes in process `syz.0.212'.
[   78.811110][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   79.136746][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   79.326258][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'.
[   79.712307][ T6425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.244'.
[   79.777416][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   79.851982][ T5077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   79.862361][ T6437] netlink: 44 bytes leftover after parsing attributes in process `syz.1.245'.
[   79.945988][ T6437] bridge1: entered promiscuous mode
[   79.948076][ T6437] bridge1: entered allmulticast mode
[   79.966095][ T6437] team0: Port device bridge1 added
[   79.983283][ T6430] bridge0: port 1(team0) entered blocking state
[   79.988150][ T6430] bridge0: port 1(team0) entered disabled state
[   79.993729][ T6430] team0: entered allmulticast mode
[   80.000525][ T6430] team_slave_0: entered allmulticast mode
[   80.005212][ T6430] team_slave_1: entered allmulticast mode
[   80.019626][ T6430] team0: entered promiscuous mode
[   80.027323][ T6430] team_slave_0: entered promiscuous mode
[   80.031267][ T6430] team_slave_1: entered promiscuous mode
[   80.052551][ T6446] syzkaller0: entered promiscuous mode
[   80.057391][ T6446] syzkaller0: entered allmulticast mode
[   80.111728][ T6454] netlink: 'syz.1.255': attribute type 2 has an invalid length.
[   80.114886][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'.
[   80.410950][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   80.623971][ T6483] netlink: 'syz.1.266': attribute type 1 has an invalid length.
[   80.893550][ T5077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   81.037144][ T6508] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   81.146152][ T6506] netlink: 32 bytes leftover after parsing attributes in process `syz.1.279'.
[   81.416154][ T6530] netlink: 40 bytes leftover after parsing attributes in process `syz.2.288'.
[   81.565602][ T6547] dummy0: entered allmulticast mode
[   81.927515][ T6565] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   82.005710][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.304'.
[   82.585937][ T6613] bridge1: the hash_elasticity option has been deprecated and is always 16
[   82.595894][ T6613] bridge1: entered allmulticast mode
[   82.853353][ T6632] xt_CT: You must specify a L4 protocol and not use inversions on it
[   82.899163][ T6638] lo speed is unknown, defaulting to 1000
[   82.909691][ T6638] lo speed is unknown, defaulting to 1000
[   82.921620][ T6638] lo speed is unknown, defaulting to 1000
[   82.925036][ T6638] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   82.931447][ T6638] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   82.936663][ T6638] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   82.955569][ T6638] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   82.971983][   T32] net_ratelimit: 4 callbacks suppressed
[   82.971993][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   82.979039][ T6638] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   83.013138][ T6638] lo speed is unknown, defaulting to 1000
[   83.016468][ T6638] lo speed is unknown, defaulting to 1000
[   83.019248][ T6638] lo speed is unknown, defaulting to 1000
[   83.363632][ T6644] infiniband syz0: set down
[   83.366193][ T6644] infiniband syz0: added ipvlan1
[   83.384812][ T6644] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   83.392650][ T6644] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   83.399054][ T6644] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   83.426497][ T6669] __nla_validate_parse: 4 callbacks suppressed
[   83.426513][ T6669] netlink: 56 bytes leftover after parsing attributes in process `syz.2.349'.
[   83.464409][ T6644] RDS/IB: syz0: added
[   83.472856][ T6644] smc: adding ib device syz0 with port count 1
[   83.481882][ T6644] smc:    ib device syz0 port 1 has no pnetid
[   83.612025][ T6677] syzkaller0: entered promiscuous mode
[   83.613871][ T6677] syzkaller0: entered allmulticast mode
[   83.637426][ T6677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.655522][ T6677] tipc: Resetting bearer <eth:syzkaller0>
[   83.667298][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.672844][ T6676] tipc: Resetting bearer <eth:syzkaller0>
[   83.691306][ T6676] tipc: Disabling bearer <eth:syzkaller0>
[   84.012161][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.485797][ T6713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.489766][ T6713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.497503][ T6713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.505453][ T6713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.508725][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.517326][ T6713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.521674][ T6712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.633225][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'.
[   84.722289][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.374'.
[   85.023568][ T6744] netlink: 'syz.0.380': attribute type 1 has an invalid length.
[   85.043973][ T6744] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.063476][ T6744] bond1: (slave syz_tun): Enslaving as a backup interface with an up link
[   85.226864][ T6755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.385'.
[   85.485533][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'.
[   85.585029][ T6767] netlink: 20 bytes leftover after parsing attributes in process `syz.2.390'.
[   86.397928][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'.
[   86.828304][  T811] cfg80211: failed to load regulatory.db
[   87.001309][ T6813] tipc: Started in network mode
[   87.008560][ T6813] tipc: Node identity 7afb7edb065c, cluster identity 4711
[   87.018270][ T6813] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.030065][ T6813] syzkaller0: entered promiscuous mode
[   87.035205][ T6813] syzkaller0: entered allmulticast mode
[   87.071182][ T6813] tipc: Resetting bearer <eth:syzkaller0>
[   87.074371][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'.
[   87.078182][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'.
[   87.078311][ T6812] tipc: Resetting bearer <eth:syzkaller0>
[   87.094764][ T6812] tipc: Disabling bearer <eth:syzkaller0>
[   87.315343][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'.
[   88.002100][ T6878] bond0: entered promiscuous mode
[   88.004284][ T6878] bond_slave_0: entered promiscuous mode
[   88.006893][ T6878] bond_slave_1: entered promiscuous mode
[   88.014619][ T6878] batadv0: entered promiscuous mode
[   88.017599][ T6878] debugfs: 'hsr0' already exists in 'hsr'
[   88.019817][ T6878] Cannot create hsr debugfs directory
[   88.171202][   T32] net_ratelimit: 143 callbacks suppressed
[   88.171211][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.211861][ T6894] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.226705][ T6894] bond2: option mode: unable to set because the bond device is up
[   88.254565][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.389716][ T6909] IPv6: NLM_F_REPLACE set, but no existing node found!
[   88.435680][ T6911] xt_connbytes: Forcing CT accounting to be enabled
[   88.567165][ T6926] netlink: 'syz.2.462': attribute type 39 has an invalid length.
[   88.848880][ T6950] netlink: 'syz.2.471': attribute type 1 has an invalid length.
[   88.852383][ T6950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.973901][ T6961] dummy0: left allmulticast mode
[   89.212750][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   89.375564][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   89.379329][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   89.418094][ T6988] syzkaller1: entered promiscuous mode
[   89.419930][ T6988] syzkaller1: entered allmulticast mode
[   89.454649][ T5719] IPVS: starting estimator thread 0...
[   89.550366][ T6991] IPVS: using max 65 ests per chain, 156000 per kthread
[   89.705086][ T7006] __nla_validate_parse: 3 callbacks suppressed
[   89.705101][ T7006] netlink: 380 bytes leftover after parsing attributes in process `syz.0.497'.
[   89.711749][ T7006] netlink: 380 bytes leftover after parsing attributes in process `syz.0.497'.
[   89.715319][ T7006] netlink: 22 bytes leftover after parsing attributes in process `syz.0.497'.
[   89.960777][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'.
[   90.057041][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'.
[   90.251477][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.176005][ T7065] Bluetooth: MGMT ver 1.23
[   91.180023][ T7065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.184225][ T7065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.186977][ T7065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.239600][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.527'.
[   91.302413][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'.
[   91.683120][ T7092] lo speed is unknown, defaulting to 1000
[   91.839907][ T7098] syzkaller0: entered promiscuous mode
[   91.846581][ T7098] syzkaller0: entered allmulticast mode
[   92.136804][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.540'.
[   92.317661][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.548'.
[   92.893609][ T7163] block nbd0: not configured, cannot reconfigure
[   93.046919][ T7171] ip6tnl1: entered allmulticast mode
[   93.055550][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   93.063266][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   93.081751][   T32] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   93.133240][ T7174] syzkaller0: entered promiscuous mode
[   93.135253][ T7174] syzkaller0: entered allmulticast mode
[   93.272529][   T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   93.370534][   T24] net_ratelimit: 1024 callbacks suppressed
[   93.370556][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.532807][   T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   93.607110][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'.
[   94.020664][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.156417][ T7244] netlink: 'syz.1.580': attribute type 2 has an invalid length.
[   94.173781][ T7244] netlink: 'syz.1.580': attribute type 2 has an invalid length.
[   94.343156][ T7266] macsec1: entered promiscuous mode
[   94.423523][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   94.496129][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.003292][ T7314] __nla_validate_parse: 2 callbacks suppressed
[   95.003306][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'.
[   95.066578][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'.
[   95.298676][ T7337] syzkaller0: entered promiscuous mode
[   95.303893][ T7337] syzkaller0: entered allmulticast mode
[   95.397210][ T7345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.401102][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.407625][ T7345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.413218][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.430069][ T7344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.441345][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.450489][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.136460][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'.
[   96.139390][ T7380] netlink: 'syz.2.625': attribute type 14 has an invalid length.
[   96.150376][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.153220][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'.
[   96.157781][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.161468][ T7380] netlink: 'syz.2.625': attribute type 14 has an invalid length.
[   96.166339][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.169426][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   96.266267][ T7390] netlink: 32 bytes leftover after parsing attributes in process `syz.1.629'.
[   96.313020][ T7389] trusted_key: syz.2.630 sent an empty control message without MSG_MORE.
[   97.052605][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   97.785753][   T32] IPVS: starting estimator thread 0...
[   97.900350][ T7466] IPVS: using max 65 ests per chain, 156000 per kthread
[   98.036234][ T7481] netlink: 'syz.2.670': attribute type 13 has an invalid length.
[   98.039133][ T7481] netlink: 'syz.2.670': attribute type 12 has an invalid length.
[   98.092130][ T7483] lo speed is unknown, defaulting to 1000
[   98.245358][ T7493] 5n: entered promiscuous mode
[   98.570603][   T24] net_ratelimit: 6 callbacks suppressed
[   98.570621][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.896922][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'.
[   99.124888][ T7506] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[   99.134191][ T7506] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[   99.198528][ T7508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.338448][ T7516] netlink: 'syz.2.684': attribute type 12 has an invalid length.
[   99.570926][ T7529] netlink: 'syz.2.690': attribute type 1 has an invalid length.
[   99.616862][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.712932][ T7541] team0: entered promiscuous mode
[   99.715068][ T7541] team_slave_0: entered promiscuous mode
[   99.717166][ T7541] team_slave_1: entered promiscuous mode
[  100.096758][ T7565] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  100.101947][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  100.189786][ T7571] netlink: 'syz.1.711': attribute type 8 has an invalid length.
[  100.275651][ T7575] syzkaller1: tun_chr_ioctl cmd 1074025677
[  100.278059][ T7575] syzkaller1: linktype set to 776
[  100.362710][ T7578] netlink: 'syz.1.714': attribute type 1 has an invalid length.
[  100.365730][ T7578] netlink: 96 bytes leftover after parsing attributes in process `syz.1.714'.
[  100.369306][ T7578] netlink: 1 bytes leftover after parsing attributes in process `syz.1.714'.
[  100.375271][ T7578] netlink: 'syz.1.714': attribute type 1 has an invalid length.
[  100.378902][ T7578] netlink: 'syz.1.714': attribute type 8 has an invalid length.
[  100.651442][  T811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  100.664482][ T7601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  100.666772][ T7601] IPv6: NLM_F_CREATE should be set when creating new route
[  100.669035][ T7601] IPv6: NLM_F_CREATE should be set when creating new route
[  100.941922][ T7632] netlink: 'syz.1.732': attribute type 1 has an invalid length.
[  100.948149][ T7632] netlink: 'syz.1.732': attribute type 1 has an invalid length.
[  100.953489][ T7632] netlink: 264 bytes leftover after parsing attributes in process `syz.1.732'.
[  100.960942][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'.
[  100.969699][ T7632] netlink: 'syz.1.732': attribute type 1 has an invalid length.
[  100.975031][ T7632] netlink: 'syz.1.732': attribute type 1 has an invalid length.
[  100.978251][ T7632] netlink: 264 bytes leftover after parsing attributes in process `syz.1.732'.
[  100.985873][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'.
[  101.438021][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'.
[  101.442059][   T33] audit: type=1107 audit(1778659107.629:2): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  101.692395][  T811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.216792][ T7728] netlink: 108 bytes leftover after parsing attributes in process `syz.1.778'.
[  102.374218][    T9] lo speed is unknown, defaulting to 1000
[  102.730436][  T811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.776901][ T7768] syzkaller0: entered promiscuous mode
[  102.778786][ T7768] syzkaller0: entered allmulticast mode
[  102.839582][ T7768] lo speed is unknown, defaulting to 1000
[  102.865476][  T811] IPVS: starting estimator thread 0...
[  102.873831][ T7776] IPVS: sh: FWM 3 0x00000003 - no destination available
[  102.880063][ T7776] IPVS: sh: FWM 3 0x00000003 - no destination available
[  102.899870][ T7779] tipc: Started in network mode
[  102.903993][ T7779] tipc: Node identity aa9803dbaef8, cluster identity 4711
[  102.907639][ T7779] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.913496][ T7779] syzkaller0: MTU too low for tipc bearer
[  102.915898][ T7779] tipc: Disabling bearer <eth:syzkaller0>
[  102.919208][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'.
[  102.940088][ T7779] bond3: option coupled_control: invalid value (84)
[  102.944883][ T7779] bond3 (unregistering): Released all slaves
[  102.950408][ T7777] IPVS: using max 55 ests per chain, 132000 per kthread
[  103.304608][ T7790] lo speed is unknown, defaulting to 1000
[  103.596545][ T7803] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.773354][ T7803] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.784955][ T7803] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.914495][   T24] lo speed is unknown, defaulting to 1000
[  103.921767][   T24] syz2: Port: 1 Link DOWN
[  103.985997][ T7805] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.992681][ T7805] team0: left promiscuous mode
[  103.997279][ T7805] team_slave_0: left promiscuous mode
[  104.001291][ T7805] team_slave_1: left promiscuous mode
[  104.003697][ T7805] 8021q: adding VLAN 0 to HW filter on device team0
[  104.009610][ T7805] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.016547][ T6285] net_ratelimit: 1 callbacks suppressed
[  104.016556][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.021986][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.028710][  T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.031377][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.037020][ T7263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.041034][ T7259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.052305][ T7819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.055213][ T7819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.061697][ T7805] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.062457][ T7818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.065698][ T7805] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.070976][ T7822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.098923][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.104518][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.124261][ T7812] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.144238][ T5693] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  104.147993][ T5693] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.151190][ T5719] lo speed is unknown, defaulting to 1000
[  104.153243][ T5693] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  104.154871][ T5719] syz2: Port: 1 Link ACTIVE
[  104.158354][ T5693] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.175922][ T5693] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  104.180472][ T5693] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.188536][ T5693] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  104.191775][ T5693] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.856792][ T7881] syzkaller0: entered promiscuous mode
[  104.859276][ T7881] syzkaller0: entered allmulticast mode
[  104.918905][ T7886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.823'.
[  105.029270][ T7889] veth3: entered promiscuous mode
[  105.035921][ T7889] veth3: entered allmulticast mode
[  105.341535][ T7905] lo speed is unknown, defaulting to 1000
[  105.380447][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  105.899563][ T7920] bond3: Unable to set peer notification delay as MII monitoring is disabled
[  105.914293][ T7920] bond3 (unregistering): Released all slaves
[  106.023243][ T7931] validate_nla: 3 callbacks suppressed
[  106.023256][ T7931] netlink: 'syz.0.841': attribute type 3 has an invalid length.
[  106.094395][ T7937] netlink: 'syz.0.844': attribute type 21 has an invalid length.
[  106.416382][ T7954] xt_hashlimit: size too large, truncated to 1048576
[  106.478777][ T7957] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.496600][ T7957] bridge_slave_0 (unregistering): left allmulticast mode
[  106.505102][ T7957] bridge_slave_0 (unregistering): left promiscuous mode
[  106.516852][ T7957] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.522868][ T7961] netlink: 'syz.2.851': attribute type 1 has an invalid length.
[  106.530570][ T7961] __nla_validate_parse: 1 callbacks suppressed
[  106.530589][ T7961] netlink: 224 bytes leftover after parsing attributes in process `syz.2.851'.
[  106.545415][ T7962] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  107.675633][ T8043] netlink: 'syz.0.872': attribute type 15 has an invalid length.
[  107.677150][ T8044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.873'.
[  107.678313][ T8043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.872'.
[  107.959893][ T8064] tc_dump_action: action bad kind
[  108.004539][ T8067] netlink: 'syz.2.880': attribute type 11 has an invalid length.
[  108.014187][ T8069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.885'.
[  108.113315][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'.
[  108.356077][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'.
[  108.359670][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'.
[  109.293140][ T5673] net_ratelimit: 1085 callbacks suppressed
[  109.293156][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.298995][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.386990][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'.
[  109.413712][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.909'.
[  109.505057][ T8130] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  109.509330][ T8130] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  109.531939][   T33] audit: type=1800 audit(1778659115.719:3): pid=8132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.913" name="memory.events" dev="tmpfs" ino=1698 res=0 errno=0
[  109.550867][   T33] audit: type=1804 audit(1778659115.729:4): pid=8132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.913" name="/newroot/332/memory.events" dev="tmpfs" ino=1698 res=1 errno=0
[  109.644013][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.799592][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.924'.
[  109.858594][ T8160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  109.861388][ T8160] IPv6: NLM_F_CREATE should be set when creating new route
[  109.864087][ T8160] IPv6: NLM_F_CREATE should be set when creating new route
[  109.932428][ T8162] macsec1: entered allmulticast mode
[  109.936556][ T8162] dummy0: entered allmulticast mode
[  109.944540][ T8162] dummy0: entered promiscuous mode
[  109.982027][ T8162] dummy0: left allmulticast mode
[  109.996915][ T7829] dummy0: left promiscuous mode
[  110.005981][ T8166] syzkaller0: entered promiscuous mode
[  110.008175][ T8166] syzkaller0: entered allmulticast mode
[  110.307511][ T8192] syzkaller0: entered promiscuous mode
[  110.313698][ T8192] syzkaller0: entered allmulticast mode
[  111.542546][ T8287] lo speed is unknown, defaulting to 1000
[  112.263980][ T8312] lo speed is unknown, defaulting to 1000
[  112.319974][ T8314] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  112.362611][ T8316] geneve2: entered promiscuous mode
[  112.728686][ T8331] IPVS: Error connecting to the multicast addr
[  112.875165][ T8337] netlink: 'syz.2.991': attribute type 2 has an invalid length.
[  113.514800][ T8359] batman_adv: batadv0: Adding interface: macvtap1
[  113.518771][ T8359] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  113.770538][ T8374] sctp: [Deprecated]: syz.2.1005 (pid 8374) Use of int in max_burst socket option.
[  113.770538][ T8374] Use struct sctp_assoc_value instead
[  113.998792][ T8383] syzkaller1: entered promiscuous mode
[  114.005484][ T8383] syzkaller1: entered allmulticast mode
[  114.103872][ T8385] openvswitch: netlink: Message has 1 unknown bytes.
[  114.106648][ T8385] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.244474][ T8395] netlink: 'syz.2.1015': attribute type 3 has an invalid length.
[  114.491324][ T8419] __nla_validate_parse: 4 callbacks suppressed
[  114.491336][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'.
[  114.562884][ T8429] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1031'.
[  114.697939][ T8443] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1038'.
[  114.962500][ T8467] netlink: 'syz.0.1050': attribute type 8 has an invalid length.
[  115.596715][ T8497] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.693852][ T8501] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.716426][ T8501] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.874318][ T8508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1069'.
[  115.891476][ T8508] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  115.896721][ T8508] bond2 (unregistering): Released all slaves
[  116.081665][ T8516] block nbd1: server does not support multiple connections per device.
[  116.082055][ T8520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1074'.
[  116.089317][ T8516] block nbd1: shutting down sockets
[  116.312466][ T8521] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.325058][ T8521] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.486044][ T8520] netlink: 'syz.0.1074': attribute type 8 has an invalid length.
[  116.504824][ T8520] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1074'.
[  116.571766][ T5693] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.575133][ T5693] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.578227][ T5693] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.600432][ T5693] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.804513][ T8557] netlink: 'syz.2.1086': attribute type 1 has an invalid length.
[  116.921724][ T8569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1092'.
[  117.206538][ T8578] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1095'.
[  117.426338][ T8592] netlink: 'syz.0.1100': attribute type 1 has an invalid length.
[  117.496027][ T8596] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1102'.
[  117.698546][ T8605] netlink: 'syz.1.1106': attribute type 1 has an invalid length.
[  117.862101][ T8614] dummy0: entered allmulticast mode
[  117.995134][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1113'.
[  118.704770][ T8684] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.708029][ T8684] syzkaller0: entered promiscuous mode
[  118.712881][ T8684] syzkaller0: entered allmulticast mode
[  118.753102][ T8684] tipc: Resetting bearer <eth:syzkaller0>
[  118.757468][ T8683] tipc: Resetting bearer <eth:syzkaller0>
[  118.783583][ T8683] tipc: Disabling bearer <eth:syzkaller0>
[  118.817310][ T8691] : entered promiscuous mode
[  119.109590][ T8708] lo speed is unknown, defaulting to 1000
[  119.844571][ T8715] __nla_validate_parse: 6 callbacks suppressed
[  119.844638][ T8715] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.1152'.
[  120.489752][ T8737] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  121.326268][ T8785] syzkaller0: entered promiscuous mode
[  121.328663][ T8785] syzkaller0: entered allmulticast mode
[  121.406102][ T8784] lo speed is unknown, defaulting to 1000
[  121.610056][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1186'.
[  121.616368][ T8794] netlink: 'syz.2.1186': attribute type 8 has an invalid length.
[  121.633942][ T8794] geneve2: entered promiscuous mode
[  121.635709][ T8794] geneve2: entered allmulticast mode
[  121.650808][ T5486] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.653778][ T5486] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.689422][ T5486] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.699942][ T5486] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.010330][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  122.283381][ T8848] netlink: 'syz.2.1207': attribute type 1 has an invalid length.
[  122.296091][ T8848] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1207'.
[  122.541320][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'.
[  122.550359][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1213'.
[  122.555377][ T8858] netlink: 'syz.0.1213': attribute type 13 has an invalid length.
[  122.892396][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'.
[  122.912379][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1219'.
[  123.146377][ T8892] netlink: 'syz.1.1225': attribute type 10 has an invalid length.
[  123.149528][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1225'.
[  123.156982][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'.
[  123.160976][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'.
[  123.514791][ T8920] lo speed is unknown, defaulting to 1000
[  123.552862][ T8928] xt_hashlimit: overflow, try lower: 281474976710656/6
[  123.617895][ T8932] netlink: 'syz.0.1243': attribute type 1 has an invalid length.
[  123.625403][ T8932] netlink: 'syz.0.1243': attribute type 1 has an invalid length.
[  123.724048][ T8939] netlink: 'syz.2.1246': attribute type 1 has an invalid length.
[  123.732941][ T8939] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.721700][ T8982] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  124.728201][ T8982] batman_adv: batadv0: Adding interface: ip6gretap1
[  124.731876][ T8982] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  124.739195][ T8982] batman_adv: batadv0: Interface activated: ip6gretap1
[  125.002319][ T9001] __nla_validate_parse: 5 callbacks suppressed
[  125.002330][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1273'.
[  125.272335][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1282'.
[  125.285261][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1282'.
[  125.327163][ T9028] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1278'.
[  125.484679][ T9042] netlink: 'syz.2.1288': attribute type 1 has an invalid length.
[  125.539584][ T9042] bond4: (slave veth7): Enslaving as an active interface with a down link
[  125.558757][ T9042] bond4: (slave veth9): Enslaving as an active interface with a down link
[  125.571394][ T9042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1288'.
[  125.584621][ T9042] 8021q: adding VLAN 0 to HW filter on device bond4
[  125.730063][ T9058] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1296'.
[  126.109857][ T9079] IPv6: addrconf: prefix option has invalid lifetime
[  126.230747][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1311'.
[  126.234442][ T9091] sch_tbf: burst 0 is lower than device lo mtu (32783) !
[  126.567774][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1319'.
[  126.895839][ T9131] netlink: 'syz.1.1329': attribute type 21 has an invalid length.
[  126.899061][ T9131] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1329'.
[  126.902790][ T9131] netlink: 'syz.1.1329': attribute type 4 has an invalid length.
[  126.905411][ T9131] netlink: 'syz.1.1329': attribute type 3 has an invalid length.
[  126.907833][ T9131] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1329'.
[  128.733390][ T9233] netlink: 'syz.0.1371': attribute type 6 has an invalid length.
[  128.785352][ T9237] lo speed is unknown, defaulting to 1000
[  130.310709][ T9344] lo speed is unknown, defaulting to 1000
[  130.479693][ T9357] : renamed from virt_wifi0
[  130.806871][ T9373] __nla_validate_parse: 2 callbacks suppressed
[  130.806887][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'.
[  130.814094][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'.
[  130.836959][ T9373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1433'.
[  131.015649][ T9379] syzkaller0: entered promiscuous mode
[  131.018264][ T9379] syzkaller0: entered allmulticast mode
[  131.409420][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1447'.
[  131.429526][ T9409] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  131.510447][ T5693] bond1: (slave syz_tun): link status up again after 0 ms
[  131.524672][ T5693] bond1: (slave syz_tun): failed to get link speed/duplex
[  131.642027][ T5486] bond1: (slave syz_tun): failed to get link speed/duplex
[  131.752527][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  131.822820][ T9438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1460'.
[  131.861190][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  131.973747][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  132.092891][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  132.200645][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  132.311595][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  132.478294][ T9488] ip6gre2: entered promiscuous mode
[  132.482811][ T9488] ip6gre2: entered allmulticast mode
[  132.485704][   T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  132.494206][ T9488] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  132.497757][   T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  132.520451][ T7823] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  132.640565][ T7823] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  132.821257][ T7823] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  133.250944][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'.
[  133.258890][ T9541] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1503'.
[  133.269077][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'.
[  133.374646][ T9548] ieee802154 phy0 wpan0: encryption failed: -22
[  133.396170][ T9550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.399498][ T9550] syzkaller0: entered promiscuous mode
[  133.402265][ T9550] syzkaller0: entered allmulticast mode
[  133.426146][ T9550] tipc: Resetting bearer <eth:syzkaller0>
[  133.441421][ T9549] tipc: Resetting bearer <eth:syzkaller0>
[  133.465765][ T9549] tipc: Disabling bearer <eth:syzkaller0>
[  135.238430][ T9675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1563'.
[  135.275627][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1565'.
[  136.212597][ T9744] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  136.212597][ T9744] Please contact the netfilter-devel mailing list or update your nftables rules.
[  136.480322][ T5693] net_ratelimit: 36 callbacks suppressed
[  136.480360][ T5693] bond1: (slave syz_tun): failed to get link speed/duplex
[  136.484359][ T9769] netlink: 'syz.0.1604': attribute type 1 has an invalid length.
[  136.492228][ T9769] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1604'.
[  136.500493][ T9769] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1604'.
[  136.570622][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  136.590356][ T5693] bond1: (slave syz_tun): failed to get link speed/duplex
[  136.700302][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  136.820358][ T5693] bond1: (slave syz_tun): failed to get link speed/duplex
[  136.930912][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  137.052957][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  137.170600][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  137.290343][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  137.329409][ T9829] lo speed is unknown, defaulting to 1000
[  137.400549][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  137.531446][ T5693] bond1: (slave syz_tun): failed to get link speed/duplex
[  137.962049][ T9870] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1645'.
[  138.015836][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  138.174687][ T9890] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  138.271696][ T9900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1657'.
[  138.275162][ T9900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1657'.
[  138.385002][ T9909] netlink: 'syz.2.1661': attribute type 1 has an invalid length.
[  138.652760][ T9904] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  138.655685][ T9904] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  139.010982][ T9943] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1677'.
[  139.466660][ T9974] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.488216][ T9974] batadv_slave_0: entered allmulticast mode
[  139.706200][ T9988] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1697'.
[  139.709626][ T9988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1697'.
[  139.715222][ T9988] netlink: 'syz.2.1697': attribute type 1 has an invalid length.
[  139.883229][T10002] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1704'.
[  140.003589][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1707'.
[  140.097369][T10019] syzkaller0: entered promiscuous mode
[  140.099808][T10019] syzkaller0: entered allmulticast mode
[  141.454281][T10036] netlink: 'syz.1.1717': attribute type 1 has an invalid length.
[  141.484177][T10036] 8021q: adding VLAN 0 to HW filter on device bond2
[  141.524779][T10041] bridge0: port 1(vlan2) entered blocking state
[  141.531745][T10041] bridge0: port 1(vlan2) entered disabled state
[  141.534536][T10041] vlan2: entered allmulticast mode
[  141.536232][T10041] bridge0: entered allmulticast mode
[  141.539473][T10041] vlan2: left allmulticast mode
[  141.541802][T10041] bridge0: left allmulticast mode
[  141.555211][T10036] bond2: (slave geneve3): making interface the new active one
[  141.559731][T10036] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  141.565241][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.575316][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.578801][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.582856][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.590395][   T12] net_ratelimit: 23 callbacks suppressed
[  141.590403][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  141.596648][T10036] syz.1.1717 (10036) used greatest stack depth: 20088 bytes left
[  141.700396][ T5486] bond1: (slave syz_tun): failed to get link speed/duplex
[  141.810236][ T5486] bond1: (slave syz_tun): failed to get link speed/duplex
[  141.921269][ T5486] bond1: (slave syz_tun): failed to get link speed/duplex
[  141.967436][T10077] batman_adv: batadv0: Adding interface: dummy0
[  141.969450][T10077] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  141.977816][T10077] batman_adv: batadv0: Interface activated: dummy0
[  141.990087][T10077] batadv0: mtu less than device minimum
[  141.995390][T10077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  141.999721][T10077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  142.004512][T10077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  142.009148][T10077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  142.014365][T10077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  142.205933][T10098] bond3: option lacp_rate: invalid value (128)
[  142.209030][T10098] bond3 (unregistering): Released all slaves
[  142.366723][T10109] 8021q: adding VLAN 0 to HW filter on device macsec1
[  142.786797][T10139] @0: renamed from bond_slave_1 (while UP)
[  143.166938][T10162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1771'.
[  143.612094][T10192] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1785'.
[  143.686854][T10196] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1787'.
[  144.012498][T10231] netlink: 'syz.1.1801': attribute type 7 has an invalid length.
[  144.015554][T10231] netlink: 'syz.1.1801': attribute type 3 has an invalid length.
[  144.018813][T10231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1801'.
[  144.184015][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1811'.
[  144.192746][T10253] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  144.195518][T10253] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  144.201287][T10253] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  144.205649][T10253] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len
[  144.546426][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1825'.
[  144.549265][T10284] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1825'.
[  144.793806][T10314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1840'.
[  144.996544][T10332] 8021q: adding VLAN 0 to HW filter on device bond3
[  145.050373][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  146.161643][T10371] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  146.173781][T10371] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  146.452620][ T5674] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  146.460335][T10378] nbd1: detected capacity change from 0 to 63
[  146.467306][T10381] block nbd1: Receive control failed (result -32)
[  146.467342][ T5617] block nbd1: Send control failed (result -32)
[  146.469881][T10382] block nbd1: Receive control failed (result -32)
[  146.472573][ T5617] block nbd1: Request send failed, requeueing
[  146.500073][  T504] block nbd1: Dead connection, failed to find a fallback
[  146.505530][  T504] block nbd1: shutting down sockets
[  146.508124][  T504] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.512449][  T504] Buffer I/O error on dev nbd1, logical block 0, async page read
[  146.516305][ T5617] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.520745][ T5617] Buffer I/O error on dev nbd1, logical block 1, async page read
[  146.524090][ T5617] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.527559][ T5617] Buffer I/O error on dev nbd1, logical block 2, async page read
[  146.531288][ T5617] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.534752][ T5617] Buffer I/O error on dev nbd1, logical block 3, async page read
[  146.538060][ T5617] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.544851][ T5617] Buffer I/O error on dev nbd1, logical block 0, async page read
[  146.547570][T10386] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1870'.
[  146.548159][ T5617] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.551887][T10386] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1870'.
[  146.555123][ T5617] Buffer I/O error on dev nbd1, logical block 1, async page read
[  146.555268][ T5617] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.555287][ T5617] Buffer I/O error on dev nbd1, logical block 2, async page read
[  146.555388][ T5617] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.573577][ T5617] Buffer I/O error on dev nbd1, logical block 3, async page read
[  146.576864][ T5617] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.580757][ T5617] Buffer I/O error on dev nbd1, logical block 0, async page read
[  146.584568][ T5617] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.588251][ T5617] Buffer I/O error on dev nbd1, logical block 1, async page read
[  146.596753][ T5617] ldm_validate_partition_table(): Disk read failed.
[  146.604167][ T5617] Dev nbd1: unable to read RDB block 0
[  146.607479][ T5617]  nbd1: unable to read partition table
[  146.615686][ T5617] ldm_validate_partition_table(): Disk read failed.
[  146.619737][ T5617] Dev nbd1: unable to read RDB block 0
[  146.625447][ T5617]  nbd1: unable to read partition table
[  146.680498][ T5693] net_ratelimit: 57 callbacks suppressed
[  146.680511][ T5693] bond1: (slave syz_tun): failed to get link speed/duplex
[  146.800224][ T5693] bond1: (slave syz_tun): failed to get link speed/duplex
[  146.920599][ T5486] bond1: (slave syz_tun): failed to get link speed/duplex
[  146.981416][ T5674] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  147.030919][ T5486] bond1: (slave syz_tun): failed to get link speed/duplex
[  147.140412][ T5693] bond1: (slave syz_tun): failed to get link speed/duplex
[  147.250379][ T5693] bond1: (slave syz_tun): failed to get link speed/duplex
[  147.360273][ T5486] bond1: (slave syz_tun): failed to get link speed/duplex
[  147.470379][ T5486] bond1: (slave syz_tun): failed to get link speed/duplex
[  147.580948][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  147.690363][ T5486] bond1: (slave syz_tun): failed to get link speed/duplex
[  148.238240][T10433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1891'.
[  148.248170][T10433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1891'.
[  148.396840][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1896'.
[  148.402471][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1896'.
[  148.517938][T10447] syzkaller0: entered promiscuous mode
[  148.527547][T10447] syzkaller0: entered allmulticast mode
[  149.632906][T10506] netlink: 'syz.0.1926': attribute type 8 has an invalid length.
[  149.636184][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'.
[  149.656724][T10506] veth1_to_team: entered promiscuous mode
[  149.661164][T10506] gretap0: entered promiscuous mode
[  149.665309][T10506] veth1_to_team: left promiscuous mode
[  149.675343][T10506] gretap0: left promiscuous mode
[  149.835053][T10514] netem: incorrect gi model size
[  149.843684][T10514] netem: change failed
[  149.849219][T10516] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1931'.
[  150.196150][T10537] bridge0: port 1(erspan0) entered blocking state
[  150.200559][T10537] bridge0: port 1(erspan0) entered disabled state
[  150.207248][T10537] erspan0: entered allmulticast mode
[  150.230611][T10537] erspan0: entered promiscuous mode
[  150.239480][T10537] bridge0: port 1(erspan0) entered blocking state
[  150.243652][T10537] bridge0: port 1(erspan0) entered forwarding state
[  150.261053][T10542] 
[  150.261927][T10542] ======================================================
[  150.264141][T10542] WARNING: possible circular locking dependency detected
[  150.266289][T10542] syzkaller #0 Not tainted
[  150.267857][T10542] ------------------------------------------------------
[  150.270295][T10542] syz.2.1939/10542 is trying to acquire lock:
[  150.272555][T10542] ffff8881012b4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140
[  150.276224][T10542] 
[  150.276224][T10542] but task is already holding lock:
[  150.278933][T10542] ffff8881012b4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[  150.282967][T10542] 
[  150.282967][T10542] which lock already depends on the new lock.
[  150.282967][T10542] 
[  150.286799][T10542] 
[  150.286799][T10542] the existing dependency chain (in reverse order) is:
[  150.289982][T10542] 
[  150.289982][T10542] -> #11 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  150.292805][T10542]        down_read+0x47/0x2e0
[  150.294521][T10542]        kernfs_remove_by_name_ns+0x3f/0x140
[  150.296805][T10542]        internal_create_group+0x587/0x1180
[  150.299041][T10542]        sysfs_update_groups+0x60/0x130
[  150.301112][T10542]        pmu_dev_alloc+0x29b/0x300
[  150.303076][T10542]        perf_event_sysfs_init+0x76/0x100
[  150.305345][T10542]        do_one_initcall+0x250/0x870
[  150.307349][T10542]        do_initcall_level+0x104/0x190
[  150.309327][T10542]        do_initcalls+0x59/0xa0
[  150.311251][T10542]        kernel_init_freeable+0x2a6/0x3e0
[  150.313397][T10542]        kernel_init+0x1d/0x1d0
[  150.315248][T10542]        ret_from_fork+0x514/0xb70
[  150.317185][T10542]        ret_from_fork_asm+0x1a/0x30
[  150.319200][T10542] 
[  150.319200][T10542] -> #10 (pmus_lock){+.+.}-{4:4}:
[  150.321734][T10542]        __mutex_lock+0x1a3/0x1550
[  150.323792][T10542]        perf_event_init_cpu+0x1df/0x7c0
[  150.325768][T10542]        cpuhp_invoke_callback+0x445/0x860
[  150.327982][T10542]        cpuhp_thread_fun+0x36b/0x780
[  150.330018][T10542]        smpboot_thread_fn+0x541/0xa50
[  150.332145][T10542]        kthread+0x388/0x470
[  150.333937][T10542]        ret_from_fork+0x514/0xb70
[  150.335867][T10542]        ret_from_fork_asm+0x1a/0x30
[  150.337846][T10542] 
[  150.337846][T10542] -> #9 (cpuhp_state-up){+.+.}-{0:0}:
[  150.340623][T10542]        cpuhp_thread_fun+0x127/0x780
[  150.343121][T10542]        smpboot_thread_fn+0x541/0xa50
[  150.345197][T10542]        kthread+0x388/0x470
[  150.346984][T10542]        ret_from_fork+0x514/0xb70
[  150.348919][T10542]        ret_from_fork_asm+0x1a/0x30
[  150.350891][T10542] 
[  150.350891][T10542] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  150.353785][T10542]        cpus_read_lock+0x42/0x160
[  150.355742][T10542]        static_key_slow_inc+0x12/0x30
[  150.357782][T10542]        ipv6_flowlabel_opt+0x1b94/0x29c0
[  150.359895][T10542]        do_ipv6_setsockopt+0xd9f/0x3150
[  150.361608][T10542]        ipv6_setsockopt+0x59/0x170
[  150.363371][T10542]        do_sock_setsockopt+0x17c/0x1b0
[  150.365223][T10542]        __x64_sys_setsockopt+0x13d/0x1b0
[  150.367320][T10542]        do_syscall_64+0x15f/0xf80
[  150.369291][T10542]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.371760][T10542] 
[  150.371760][T10542] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  150.374688][T10542]        lock_sock_nested+0x41/0x100
[  150.376730][T10542]        inet_shutdown+0x6a/0x390
[  150.378581][T10542]        nbd_mark_nsock_dead+0x2e9/0x560
[  150.380735][T10542]        sock_shutdown+0x15e/0x260
[  150.382691][T10542]        nbd_clear_sock+0x24/0x170
[  150.384696][T10542]        nbd_config_put+0x2dd/0x580
[  150.386643][T10542]        nbd_genl_connect+0x19d5/0x1cf0
[  150.388730][T10542]        genl_family_rcv_msg_doit+0x22a/0x330
[  150.391039][T10542]        genl_rcv_msg+0x61c/0x7a0
[  150.392939][T10542]        netlink_rcv_skb+0x232/0x4b0
[  150.394924][T10542]        genl_rcv+0x28/0x40
[  150.396633][T10542]        netlink_unicast+0x75c/0x8e0
[  150.398616][T10542]        netlink_sendmsg+0x813/0xb40
[  150.400665][T10542]        ____sys_sendmsg+0x972/0x9f0
[  150.402647][T10542]        ___sys_sendmsg+0x2a5/0x360
[  150.404607][T10542]        __x64_sys_sendmsg+0x1bd/0x2a0
[  150.406676][T10542]        do_syscall_64+0x15f/0xf80
[  150.408595][T10542]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.411005][T10542] 
[  150.411005][T10542] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  150.413918][T10542]        __mutex_lock+0x1a3/0x1550
[  150.415920][T10542]        nbd_queue_rq+0x37b/0x1100
[  150.417881][T10542]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  150.420105][T10542]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  150.422767][T10542]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  150.425302][T10542]        blk_mq_run_hw_queue+0x348/0x4f0
[  150.427476][T10542]        blk_mq_dispatch_list+0xd16/0xe10
[  150.429641][T10542]        blk_mq_flush_plug_list+0x48d/0x570
[  150.431923][T10542]        __blk_flush_plug+0x3ed/0x4d0
[  150.433971][T10542]        __submit_bio+0x28d/0x580
[  150.435902][T10542]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  150.438240][T10542]        block_read_full_folio+0x599/0x830
[  150.440428][T10542]        filemap_read_folio+0x137/0x3b0
[  150.442522][T10542]        do_read_cache_folio+0x358/0x590
[  150.444645][T10542]        read_part_sector+0xb6/0x2b0
[  150.446720][T10542]        adfspart_check_ICS+0xb1/0x960
[  150.448827][T10542]        bdev_disk_changed+0x817/0x1770
[  150.450967][T10542]        blkdev_get_whole+0x380/0x510
[  150.453041][T10542]        bdev_open+0x31e/0xd30
[  150.454915][T10542]        blkdev_open+0x470/0x610
[  150.456870][T10542]        do_dentry_open+0x785/0x14e0
[  150.458945][T10542]        vfs_open+0x3b/0x340
[  150.460720][T10542]        path_openat+0x2e08/0x3860
[  150.462679][T10542]        do_file_open+0x23e/0x4a0
[  150.464567][T10542]        do_sys_openat2+0x113/0x200
[  150.466509][T10542]        __x64_sys_openat+0x138/0x170
[  150.468527][T10542]        do_syscall_64+0x15f/0xf80
[  150.470498][T10542]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.472910][T10542] 
[  150.472910][T10542] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  150.475661][T10542]        __mutex_lock+0x1a3/0x1550
[  150.477622][T10542]        nbd_queue_rq+0xc6/0x1100
[  150.479598][T10542]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  150.481980][T10542]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  150.484595][T10542]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  150.487095][T10542]        blk_mq_run_hw_queue+0x348/0x4f0
[  150.489253][T10542]        blk_mq_dispatch_list+0xd16/0xe10
[  150.491399][T10542]        blk_mq_flush_plug_list+0x48d/0x570
[  150.493624][T10542]        __blk_flush_plug+0x3ed/0x4d0
[  150.495756][T10542]        __submit_bio+0x28d/0x580
[  150.497734][T10542]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  150.500123][T10542]        block_read_full_folio+0x599/0x830
[  150.502399][T10542]        filemap_read_folio+0x137/0x3b0
[  150.504542][T10542]        do_read_cache_folio+0x358/0x590
[  150.506729][T10542]        read_part_sector+0xb6/0x2b0
[  150.508805][T10542]        adfspart_check_ICS+0xb1/0x960
[  150.510929][T10542]        bdev_disk_changed+0x817/0x1770
[  150.513023][T10542]        blkdev_get_whole+0x380/0x510
[  150.515064][T10542]        bdev_open+0x31e/0xd30
[  150.516916][T10542]        blkdev_open+0x470/0x610
[  150.518828][T10542]        do_dentry_open+0x785/0x14e0
[  150.520853][T10542]        vfs_open+0x3b/0x340
[  150.522659][T10542]        path_openat+0x2e08/0x3860
[  150.524684][T10542]        do_file_open+0x23e/0x4a0
[  150.526641][T10542]        do_sys_openat2+0x113/0x200
[  150.528633][T10542]        __x64_sys_openat+0x138/0x170
[  150.530684][T10542]        do_syscall_64+0x15f/0xf80
[  150.532632][T10542]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.535058][T10542] 
[  150.535058][T10542] -> #4 (set->srcu){.+.+}-{0:0}:
[  150.537749][T10542]        __synchronize_srcu+0xca/0x300
[  150.539833][T10542]        elevator_switch+0x1e8/0x7a0
[  150.541838][T10542]        elevator_change+0x2cc/0x450
[  150.543886][T10542]        elevator_set_default+0x36c/0x430
[  150.546152][T10542]        blk_register_queue+0x3e9/0x4e0
[  150.548266][T10542]        __add_disk+0x677/0xd50
[  150.550122][T10542]        add_disk_fwnode+0xfb/0x480
[  150.552140][T10542]        nbd_dev_add+0x72c/0xb50
[  150.554080][T10542]        nbd_init+0x168/0x1f0
[  150.555902][T10542]        do_one_initcall+0x250/0x870
[  150.557879][T10542]        do_initcall_level+0x104/0x190
[  150.559991][T10542]        do_initcalls+0x59/0xa0
[  150.561881][T10542]        kernel_init_freeable+0x2a6/0x3e0
[  150.564086][T10542]        kernel_init+0x1d/0x1d0
[  150.565966][T10542]        ret_from_fork+0x514/0xb70
[  150.567930][T10542]        ret_from_fork_asm+0x1a/0x30
[  150.569969][T10542] 
[  150.569969][T10542] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  150.572969][T10542]        __mutex_lock+0x1a3/0x1550
[  150.574961][T10542]        elevator_change+0x1b3/0x450
[  150.577014][T10542]        elevator_set_none+0xb5/0x140
[  150.579066][T10542]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  150.581442][T10542]        nbd_start_device+0x17f/0xb10
[  150.583454][T10542]        nbd_genl_connect+0x165b/0x1cf0
[  150.585599][T10542]        genl_family_rcv_msg_doit+0x22a/0x330
[  150.587916][T10542]        genl_rcv_msg+0x61c/0x7a0
[  150.589875][T10542]        netlink_rcv_skb+0x232/0x4b0
[  150.591855][T10542]        genl_rcv+0x28/0x40
[  150.593563][T10542]        netlink_unicast+0x75c/0x8e0
[  150.595626][T10542]        netlink_sendmsg+0x813/0xb40
[  150.597648][T10542]        ____sys_sendmsg+0x972/0x9f0
[  150.599748][T10542]        ___sys_sendmsg+0x2a5/0x360
[  150.601801][T10542]        __x64_sys_sendmsg+0x1bd/0x2a0
[  150.603941][T10542]        do_syscall_64+0x15f/0xf80
[  150.605987][T10542]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.608450][T10542] 
[  150.608450][T10542] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  150.611843][T10542]        blk_alloc_queue+0x546/0x680
[  150.613940][T10542]        __blk_mq_alloc_disk+0x197/0x390
[  150.616141][T10542]        nbd_dev_add+0x499/0xb50
[  150.618065][T10542]        nbd_init+0x168/0x1f0
[  150.619879][T10542]        do_one_initcall+0x250/0x870
[  150.621918][T10542]        do_initcall_level+0x104/0x190
[  150.624013][T10542]        do_initcalls+0x59/0xa0
[  150.625905][T10542]        kernel_init_freeable+0x2a6/0x3e0
[  150.628097][T10542]        kernel_init+0x1d/0x1d0
[  150.629945][T10542]        ret_from_fork+0x514/0xb70
[  150.631921][T10542]        ret_from_fork_asm+0x1a/0x30
[  150.634017][T10542] 
[  150.634017][T10542] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  150.636731][T10542]        fs_reclaim_acquire+0x71/0x100
[  150.638790][T10542]        kmem_cache_alloc_lru_noprof+0x45/0x640
[  150.641133][T10542]        alloc_inode+0xb8/0x1b0
[  150.643015][T10542]        iget_locked+0x131/0x6a0
[  150.644938][T10542]        kernfs_get_inode+0x4f/0x780
[  150.646965][T10542]        kernfs_get_tree+0x5cd/0x980
[  150.649021][T10542]        sysfs_get_tree+0x46/0x110
[  150.650965][T10542]        vfs_get_tree+0x92/0x2a0
[  150.652867][T10542]        do_new_mount+0x341/0xd30
[  150.654802][T10542]        __se_sys_mount+0x31d/0x420
[  150.656851][T10542]        do_syscall_64+0x15f/0xf80
[  150.658888][T10542]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.661379][T10542] 
[  150.661379][T10542] -> #0 (&root->kernfs_rwsem){++++}-{4:4}:
[  150.664418][T10542]        __lock_acquire+0x15a5/0x2cf0
[  150.666483][T10542]        lock_acquire+0x106/0x350
[  150.668393][T10542]        down_write+0x96/0x200
[  150.670275][T10542]        kernfs_remove_by_name_ns+0x4e/0x140
[  150.672596][T10542]        del_nbp+0x91/0xa60
[  150.674406][T10542]        br_del_if+0x143/0x1e0
[  150.676280][T10542]        br_ioctl_stub+0x91d/0xd60
[  150.678208][T10542]        sock_ioctl+0x523/0x7f0
[  150.680094][T10542]        __se_sys_ioctl+0xfc/0x170
[  150.682014][T10542]        do_syscall_64+0x15f/0xf80
[  150.683925][T10542]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.686321][T10542] 
[  150.686321][T10542] other info that might help us debug this:
[  150.686321][T10542] 
[  150.690174][T10542] Chain exists of:
[  150.690174][T10542]   &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem
[  150.690174][T10542] 
[  150.695441][T10542]  Possible unsafe locking scenario:
[  150.695441][T10542] 
[  150.698234][T10542]        CPU0                    CPU1
[  150.700297][T10542]        ----                    ----
[  150.702296][T10542]   rlock(&root->kernfs_supers_rwsem);
[  150.704343][T10542]                                lock(pmus_lock);
[  150.706811][T10542]                                lock(&root->kernfs_supers_rwsem);
[  150.709835][T10542]   lock(&root->kernfs_rwsem);
[  150.711661][T10542] 
[  150.711661][T10542]  *** DEADLOCK ***
[  150.711661][T10542] 
[  150.714738][T10542] 3 locks held by syz.2.1939/10542:
[  150.716758][T10542]  #0: ffffffff8fdb05c0 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4fa/0x7f0
[  150.720308][T10542]  #1: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60
[  150.723844][T10542]  #2: ffff8881012b4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[  150.728168][T10542] 
[  150.728168][T10542] stack backtrace:
[  150.730521][T10542] CPU: 1 UID: 0 PID: 10542 Comm: syz.2.1939 Not tainted syzkaller #0 PREEMPT(full) 
[  150.730540][T10542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.730550][T10542] Call Trace:
[  150.730557][T10542]  <TASK>
[  150.730564][T10542]  dump_stack_lvl+0xe8/0x150
[  150.730585][T10542]  print_circular_bug+0x2e1/0x300
[  150.730606][T10542]  check_noncircular+0x12e/0x150
[  150.730627][T10542]  __lock_acquire+0x15a5/0x2cf0
[  150.730643][T10542]  ? lockdep_unlock+0x5d/0xd0
[  150.730656][T10542]  ? __lock_acquire+0x146e/0x2cf0
[  150.730674][T10542]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  150.730725][T10542]  lock_acquire+0x106/0x350
[  150.730740][T10542]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  150.730765][T10542]  down_write+0x96/0x200
[  150.730778][T10542]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  150.730797][T10542]  ? __pfx_down_write+0x10/0x10
[  150.730813][T10542]  ? down_read+0x270/0x2e0
[  150.730826][T10542]  kernfs_remove_by_name_ns+0x4e/0x140
[  150.730847][T10542]  del_nbp+0x91/0xa60
[  150.730869][T10542]  br_del_if+0x143/0x1e0
[  150.730890][T10542]  br_ioctl_stub+0x91d/0xd60
[  150.730906][T10542]  ? __pfx_br_ioctl_stub+0x10/0x10
[  150.730919][T10542]  ? __mutex_lock+0x608/0x1550
[  150.730939][T10542]  ? sock_ioctl+0x4fa/0x7f0
[  150.730957][T10542]  ? __pfx_br_ioctl_stub+0x10/0x10
[  150.730967][T10542]  sock_ioctl+0x523/0x7f0
[  150.730980][T10542]  ? __pfx_sock_ioctl+0x10/0x10
[  150.730993][T10542]  ? __fget_files+0x2a/0x420
[  150.731009][T10542]  ? __fget_files+0x3a0/0x420
[  150.731022][T10542]  ? __fget_files+0x2a/0x420
[  150.731037][T10542]  ? bpf_lsm_file_ioctl+0x9/0x20
[  150.731057][T10542]  ? __pfx_sock_ioctl+0x10/0x10
[  150.731068][T10542]  __se_sys_ioctl+0xfc/0x170
[  150.731088][T10542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.731102][T10542]  do_syscall_64+0x15f/0xf80
[  150.731121][T10542]  ? trace_irq_disable+0x3b/0x140
[  150.731143][T10542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.731155][T10542] RIP: 0033:0x7efe49f9cdd9
[  150.731172][T10542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  150.731184][T10542] RSP: 002b:00007efe4add9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  150.731199][T10542] RAX: ffffffffffffffda RBX: 00007efe4a216090 RCX: 00007efe49f9cdd9
[  150.731210][T10542] RDX: 0000200000000200 RSI: 00000000000089a3 RDI: 0000000000000005
[  150.731219][T10542] RBP: 00007efe4a032d69 R08: 0000000000000000 R09: 0000000000000000
[  150.731228][T10542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.731236][T10542] R13: 00007efe4a216128 R14: 00007efe4a216090 R15: 00007ffefc70b018
[  150.731251][T10542]  </TASK>
[  150.850854][T10542] erspan0: left allmulticast mode
[  150.853022][T10542] erspan0: left promiscuous mode
[  150.855085][T10542] bridge0: port 1(erspan0) entered disabled state
[  150.862743][T10537] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1939'.
[  150.866261][T10537] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1939'.
[  151.760338][   T12] net_ratelimit: 29 callbacks suppressed
[  151.760356][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  151.870304][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  151.980270][ T5693] bond1: (slave syz_tun): failed to get link speed/duplex
[  152.090426][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  152.200412][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  152.310341][ T5693] bond1: (slave syz_tun): failed to get link speed/duplex
[  152.420465][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  152.530425][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  152.640603][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  152.750374][   T12] bond1: (slave syz_tun): failed to get link speed/duplex
[  155.290402][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  156.850379][ T5486] net_ratelimit: 36 callbacks suppressed
[  156.850402][ T5486] bond1: (slave syz_tun): failed to get link speed/duplex
[  156.960550][ T5486] bond1: (slave syz_tun): failed to get link speed/duplex
[  157.070382][ T5486] bond1: (slave syz_tun): failed to get link speed/duplex
[  157.180392][ T5486] bond1: (slave syz_tun): failed to get link speed/duplex
[  157.300418][ T5486] bond1: (slave syz_tun): failed to get link speed/duplex
[  157.410412][ T5486] bond1: (slave syz_tun): failed to get link speed/duplex
[  157.520370][ T5693] bond1: (slave syz_tun): failed to get link speed/duplex
[  157.630361][ T5693] bond1: (slave syz_tun): failed to get link speed/duplex
[  157.740313][ T5693] bond1: (slave syz_tun): failed to get link speed/duplex
[  157.850313][ T5693] bond1: (slave syz_tun): failed to get link speed/duplex
