last executing test programs:

611.32987ms ago: executing program 0 (id=698):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000040)=0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7fff, 0x4, 0x3, 0x4, 0xf6a2}, 0x2, 0x8}, [{0x5, 0x8, 0x400, 0x6e8, 0x9}, {0x6, 0x9, 0x2, 0x3, 0x2, 0x5}, {0x6, 0x5, 0xffffff80, 0x2, 0x101, 0x3}, {0x6, 0x8, 0xbfa, 0x10000, 0x7, 0x6}, {0x80, 0xd, 0xf, 0x3, 0x4, 0x10000}, {0x80000000, 0xb, 0x1, 0x7b, 0x10000, 0x401}, {0xc6f, 0x9, 0x80000001, 0x200, 0x8, 0x7}, {0x3bbe, 0xffffcd60, 0x80ea, 0x8, 0xc71, 0x8}, {0x10002, 0xffffffff, 0x418b, 0x8, 0x1, 0xa}, {0x4, 0x6, 0x311, 0x4af, 0x8, 0x1}, {0x4, 0x0, 0x55, 0x1, 0x3, 0x4}, {0x1, 0x800000, 0x6, 0x9, 0x23, 0xb5}, {0xfffffff9, 0x3, 0x8, 0x3, 0x7, 0x88d6}, {0x601, 0x3, 0xa58, 0x9, 0x19, 0x3}, {0x6, 0x5, 0x9, 0x9, 0x7fff, 0x8}, {0xfffffffb, 0x1ff, 0x3, 0xe7, 0x200, 0xffff}, {0x1125, 0x0, 0x4d28, 0x5, 0x1, 0x7}, {0x6, 0x8001, 0x3, 0x4, 0x5}, {0x4, 0xdeef, 0x3, 0x6, 0x40, 0x6}, {0x6, 0x1, 0x8, 0x80000000, 0x9, 0xffffff07}, {0x10, 0x6, 0x8, 0xd30, 0x1, 0x6}, {0x4, 0x3, 0x1, 0x8, 0x2, 0x5}, {0x3, 0x3ff, 0xa, 0x6, 0x100, 0x1000}, {0x4, 0x1ff, 0x6861, 0x9, 0x5, 0x8}, {0x2, 0x43, 0x6, 0x2, 0x6, 0x7f}, {0x0, 0x7, 0x7, 0xfffffffe, 0x6, 0x7}, {0x9, 0x8, 0x51, 0x4, 0x723, 0x7fff}, {0x3, 0x1d, 0x1, 0x4, 0x18ab, 0x141}, {0x0, 0x80, 0xf87, 0x1, 0x6}, {0x5, 0x1, 0x89b, 0x4, 0x6, 0x4}, {0x5, 0x60000000, 0x400, 0xa, 0x1}, {0x2a7, 0x36c, 0x80a, 0x100, 0x8, 0x7}, {0x4, 0x8, 0x4, 0x9, 0xffffffff, 0x6}, {0x4, 0xffff0ed5, 0x7, 0x2e, 0x6, 0x1}, {0xffffffff, 0x0, 0x5cd, 0x6, 0xfffff000, 0x8d3}, {0x5, 0x101, 0x2, 0x10000, 0x6, 0x5}, {0x0, 0x800, 0xe, 0x9, 0x454, 0x81}, {0xffffff7f, 0x24847369, 0x8000, 0x4, 0x9}, {0xff, 0x7b, 0x2, 0x2, 0x3ff, 0xfffffffd}, {0x8, 0x4, 0xffff8535, 0x2, 0xb}, {0xfffff801, 0x800, 0x0, 0x4, 0x2, 0xa49}, {0x1, 0x7, 0x8, 0xfff, 0x4, 0x6}, {0x8, 0x4, 0x5, 0xf, 0x9, 0x3}, {0x6, 0xfffffffd, 0x9, 0x4, 0x8, 0x9}, {0x64d8, 0x0, 0x3ae0d4be, 0xb, 0x81, 0x4}, {0x1, 0x5, 0x1882, 0x3, 0x9, 0x3}, {0x8001, 0x7fffffff, 0xfffffffd, 0x3, 0x3, 0xffffffff}, {0xf, 0x2, 0x1, 0xd, 0x7, 0x4}, {0x9, 0xb9, 0x3, 0x0, 0xffff, 0x1000}, {0x7, 0xc, 0x7, 0x4, 0x5, 0x9}, {0x9, 0x5, 0x3, 0x1ff, 0x5, 0x9}, {0x6, 0x6, 0xfffffc01, 0x1, 0x7a2, 0x9}, {0x8000, 0xffffffff, 0x0, 0x1, 0x100, 0x93}, {0xffff12f1, 0x3, 0x0, 0x7, 0x80, 0x8000}, {0x8, 0x6, 0x4, 0x1, 0x7fffffff}, {0x7f, 0x5, 0x5, 0x0, 0x9, 0x6}, {0x3, 0x6, 0x80000000, 0xffffffff, 0x9, 0x9}, {0x7ff, 0xffff, 0x0, 0xfffffff8, 0x8001, 0x50000000}, {0x789, 0x3, 0xff, 0x3, 0x4, 0x78}, {0x8, 0x7, 0xb92, 0x1, 0x7fff, 0x1}, {0x2, 0x7559a01e, 0x5, 0x100, 0xfffff8ee, 0x7}, {0x10001, 0xad, 0x9, 0xb2ad, 0x5, 0x4d4}, {0x6, 0x8c, 0x4e, 0x1, 0x4}, {0xff, 0x4, 0x5, 0x4, 0x6a0, 0x1ff}, {0x8, 0x6ff, 0x5, 0x11f6, 0x80000000, 0x9}, {0x7, 0x9, 0x2, 0x80000000, 0x2}, {0x483, 0x40, 0x0, 0x3, 0xfffffff9, 0x2}, {0x2, 0x10, 0x8, 0x6, 0x7, 0x400}, {0x80000001, 0x57, 0x3, 0xbf06, 0xb, 0x1}, {0x0, 0x9d0c, 0x6, 0xfff, 0x9, 0x1}, {0x1, 0x200, 0x83eb, 0x1, 0x758, 0x5}, {0x1, 0x4, 0x5, 0x3e8, 0xfffffff8, 0x7}, {0x101, 0x9, 0xfffff801, 0x6, 0x2, 0x8}, {0x9, 0x2, 0x0, 0x25, 0x80000001}, {0x6, 0x8, 0x0, 0x3, 0x8, 0x6}, {0x0, 0x9, 0x101, 0x7, 0x3, 0x9}, {0x266, 0xfffffff7, 0xb115, 0x7fff, 0x0, 0x4}, {0x0, 0x4, 0x10001, 0x99b4, 0x3ff, 0x8000}, {0x6, 0x7f, 0x1, 0x8, 0x4, 0x1}, {0x2, 0x3, 0x3, 0x4, 0x6, 0xfffffffb}, {0x4, 0x1, 0x2, 0x5c, 0x100, 0xe}, {0x7ff, 0x8, 0x6, 0x10000, 0x85d, 0x5}, {0x6, 0x2c9e, 0xfffffffc, 0x1, 0x739, 0xa}, {0x5, 0x0, 0x5, 0x5, 0x1, 0x7}, {0x10000d6, 0x401, 0xe3be, 0x9, 0x5, 0xf}, {0x5, 0x6, 0x100, 0x5, 0x4, 0xf0a5}, {0x8001, 0x5, 0x8, 0xfffffff8, 0x5ed, 0xea75}, {0x1, 0xfff, 0x0, 0x1, 0x0, 0x6}, {0x2, 0x8000, 0x6, 0x0, 0xcbf2, 0x4}, {0x5, 0x9, 0x6, 0x9, 0x4, 0x8}, {0x4, 0x9b, 0x8, 0x1, 0xd, 0x1}, {0x231, 0x4, 0x10000, 0x6, 0x3, 0x9}, {0xb0c, 0x61, 0x4, 0x420, 0x401, 0x8}, {0x9, 0x4, 0x9, 0x3, 0x80000000, 0x5}, {0xb, 0x3, 0x1, 0x2000000, 0x8001, 0x7}, {0x7fffffff, 0x0, 0x5, 0x3, 0x2, 0x5}, {0x1, 0xfffffffe, 0xa, 0x2eab, 0x4, 0x10000}, {0x5, 0xa, 0x8, 0x8, 0x7, 0xbc}, {0x401, 0xfffffffe, 0x2ea4eda4, 0x81, 0x473a, 0x400}, {0xfd, 0x0, 0x80000000, 0x0, 0xfffffffb, 0x10001}, {0x1, 0xf, 0x0, 0x797, 0x7, 0x3}, {0x401, 0xffff, 0x5347, 0xf, 0x624, 0x2}, {0x4, 0x1ff, 0x7, 0x3, 0xff, 0xc}, {0xa, 0x2, 0x15b8, 0x5, 0x8000, 0x7fffffff}, {0x0, 0xfffffffb, 0x7, 0x7, 0x7, 0x3}, {0x4, 0x5, 0x7, 0x3e5, 0x9, 0x80000000}, {0x9, 0x2, 0x80000001, 0x50, 0xd, 0x8}, {0x6, 0xb7f, 0x8, 0x9, 0x3ff, 0x8001}, {0x401, 0x100, 0x9, 0x8, 0x3, 0x8}, {0x2a41a072, 0xb38, 0x5, 0x6, 0x80, 0xd}, {0x4, 0x10, 0x0, 0x7, 0xffffff4f, 0xd}, {0x8, 0x5c, 0xe6, 0x57, 0x1, 0x5}, {0x8, 0xfffffffd, 0x9, 0x9, 0xa1, 0x8}, {0x5, 0xf69, 0x0, 0x2, 0x215, 0xd}, {0x14, 0x6, 0x59167a70, 0xde, 0x5, 0x9}, {0xd, 0x200000, 0x0, 0xfffffff7, 0x1, 0x9}, {0x4, 0xffff12d3, 0x3, 0x1c9c7da2, 0x8}, {0x5, 0x2, 0x64, 0x515, 0x101, 0x5}, {0x7, 0xd, 0x0, 0x6, 0x1, 0x8}, {0x5, 0x5, 0xfffffe00, 0x8001, 0x5e, 0x1}, {0x4, 0x10000, 0x2, 0x36d, 0xfffffff1, 0x4e}, {0xfffffffd, 0x0, 0x1, 0x0, 0x788, 0x32d}, {0x47b8, 0xf86, 0x8b7, 0xd, 0x93c0, 0x400}, {0x100000, 0x42, 0x6, 0x8, 0x6, 0x2528}, {0x8, 0x4, 0xffffffa0, 0xff, 0x1, 0x7}, {0x4, 0x5, 0x65f, 0x3, 0x10, 0x800000}, {0x2, 0xffffff42, 0x9, 0x9, 0x1, 0x80000000}, {0x7ff, 0x4, 0x1000, 0x10000, 0x9, 0x9}], [{0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x7}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x1}, {0x3}, {0x3}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x4}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
sendmmsg$inet(r7, &(0x7f00000033c0)=[{{&(0x7f0000000800)={0x2, 0x6e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000cc0)="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", 0x1a4}, {&(0x7f0000000700)="1e9bdb919930b63490b5092febd4ff5a7fdfebce145cf8edd142d88e92908746fe920060d936ca0b89f1a56fa4b26d0657c57a665369d2ce8909af5d00d8d7eb6407c762ebac337367d400cc47fd1d9a15533e4958ec0d45bd6ce376ace04c0b5cb07312b1cae72e32fdcaf7e6aa26737e748d2a83009703ef0a756140a832d841fdec50624cddcbe8a4a7baaf2a2b5a583115", 0x93}, {&(0x7f0000000080)="130c30e22e659c9576b8f2b4fe51", 0xe}, {&(0x7f0000000980)="bbac16fcc4d7f544650412d99d848131e90c3ddb46328254d612a7137dc0fef685c549edea047466f98e315c404278f30041195c9258323be608bc4f3bd7fffb49f496ff336b01064dbda605139f2f216ee4bb009da26bc8b9290bbd3e6e9bf79d62123a72d33f70e6266109cf777dce8b918ea73612fc05d067f822c4006712d8430f698dd7a12f125f17da6d0c0fc5bfec9e243bd269dfce6877fe1529c1cc59e1cb7f50b311986abf05a0ea27cd6877e2b641e23047937ae413a3e174d879479206240ed9f29c702bbdb8aa274844209385fca92af09d2ab7a1a094bd4f3911ff19d17a", 0xe5}, {&(0x7f0000000680)="3b3c0a00000088ac8acfccb718614eb19bad32c259752a0edeffb674542ead31a8921c1f42c1155966e90af9ec0298a9576fdcf6d9d72b3bdf6e7a8cecba8af910000ba7e9b1a84f76c94b3981948ddf1a84cd4be5946b79e4379eb900"/103, 0x67}, {0x0}, {&(0x7f00000008c0)="3ac5dcd0cc302ce4ec6bcc1d80dbdc825f337102590b376ac7a7292663503365324660ad9b2de82843ef59", 0x2b}], 0x7}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000540)="aee1a8e7378565cc05db8e416922cb45d90738e91100af6e79911cd8aba6b363511c2642e2adaed0465fbc36c0a41ba072d513d3a12c16596e81a2812d7ddb4c0a76af3e3d8246058eace356f33a93bd8ff2b5a90a4b8d9aea530a6a82aacb5dcdb3380d3c4c107355c45dc182c5aa56801a138525d24fb54560c7f0b4fb33d0ea440967abce8573bd93d1cd8b72a9afdf3a690b23ad8ab08ac7b5b425e11267a56a48378932bae9", 0xa8}, {&(0x7f0000000b80)}, {&(0x7f0000000c40)="4cd6572d1d8b4085df67", 0xa}, {&(0x7f0000000e80)="0b697e1e3843052f17c96c8d866c6c01cd86b9f087576301088b59c320973b9599175c908071f2f349e827fe1db7f70f2c7d550f5d3c8533d935c63f3162552128b7024727bb2a9fc98cf917342207fa80e8f93df6ff00b6e113e0b672feb1a7e74a95a3047e0b7ba47d6ae26e548b4922e5a5b705630216f05a6b264aa40da11bc79d39e27e880170c8388607643e9515116445e74ec69b1dd9f0a1b61ed5e05e3ba9264e177abc55341fd67783cb0b14daf573f20e5c92ffe9487524ece98ec693128c75db25e8cf1f02c4db8577f8ce4cebd0b5580c8697be8b80fc81c78fb050a3d611d29dc934bf91e7e01a0e73", 0xf0}], 0x4, &(0x7f0000000fc0)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @rand_addr=0x64010101}}}], 0xb8}}, {{0x0, 0x0, 0xfffffffffffffffd}}, {{&(0x7f0000002c00)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x6, 0x24008844)
sendto$inet(r7, &(0x7f0000001740)="e839", 0x2, 0x32000800, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc250}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x52800, 0x4400}}}}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r9 = socket$inet6(0xa, 0x3, 0x7)
r10 = socket$alg(0x26, 0x5, 0x0)
accept4(r10, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0xf, 0x2)
write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500002c00004000002f9078ac1e0301e0000001000088be0018902b47b2f401b178040000005032ab557d16"], 0x3e)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
sendmsg(r9, &(0x7f0000001640)={&(0x7f0000000380)=@x25, 0x80, &(0x7f0000001540)=[{&(0x7f0000000480)="5b9ce2ccbbca76ee0243ba8f159a231b32b357a82d033390eb6833f60fd361a3d4b5af6968ea8fa394ce4103c3b96efe408d8ec8db320a883a405ca673aae50ea649f6bee86f27334a7a77bd0c53822aa3911f62", 0x54}, {&(0x7f0000000a80)="c6244f8cc90b7ef1ee888a5a067eab5ddf8a98a4f55233d6301e7098b3140f6298b64164d830d59ea5c1999d407822df911721163b88fd253a27f4a68d0f1b8f86336e311a1ffc88f484f9cf2753c41aba6e7e16be4867d0b787c1561bb45f22eb696b7f8d445d8d68d37aeb613d5d8b639bf3ade75670c94239b6910ded41f71523658cd63da6988415ac6bcd977e267a181270c9024f3e420aa143c1e6269984868e7fd2dfdd4c960cec9a3ee6f568dab32cdc16b35ece1615bfa8f8b6fd526b0c99e09f38e0", 0xc7}, {&(0x7f0000001080)="20788d49cdfbf232c014047ce26a74709501afe4101391a036425977bc5479a125c0fcf38cac554fde8c771550619a482879b7519747c625b4614675b14590c8b794d4a866aae1b18a1ba6b0982e51e8e4fb75f44df9c2660ba7b7a985c5cd849c2ced17ed1268ca42749b89ec85066ed46518ba05ab97be303d652b568eaec021c092e6141103d05f8d633afafe8f3b5eab2aa266dbfdd748105bbcea230ed999c844fac10dffcc83b0cf088f43716e23271c40d40dbe554885d5c7121086b20089e847fde00c1ef4532cde4e8767c3761fd90cdaed16f55551ea8113b4c4a74f2bf238", 0xe4}, {&(0x7f0000001180)="21f94247953756ac10aaaeb527d960adba8207a763c376dd532799c5fdb0886015c6e5b1a4f55b47a32bac367c5e0b1da2ab208eeb8aa5f468643541dda90cc932d1909142473ce088b9b6d6156e7a3847f70ae07d69a5bd362af53481c8864a0ae04476e098cc78441f5fc1d8dcf6964a", 0x71}, {&(0x7f0000001200)="79113c0207984e636083f08e90a80f6b701783065a1265082021764da826e9e8466ffa2c5064934d88e2", 0x2a}, {&(0x7f0000001240)="36ee4ab8ae803240df83d925adda35525d", 0x11}, {&(0x7f0000001280)="2ce8861a956529d5ff4566957c3d638e931a417e724cdc545c59c340315ce1a4a735050b0b639f3e1f6524df6b830dd3ec4c377a588e9903d784137b4f0f722866430c61929d729e27945c940b149a5251ca3c85fd6adf525b287cdda18786a4229f2926fc0beb13b33dfba067695e172d05b094e4348606f5c5abc5a19c22583d7a70f30ff943b4a2d9232f127523dd2accb095ab261b68772e9257b2a3706e8ede48cc23f89dcb7d482d64240ebe3f4c7fba7cdf23ab32d33392e4ea7f7c575d5bb098bcada98fd3ce29575ee9fe0ce485ad9809473273731590c4d3018628c5", 0xe1}, {&(0x7f0000001380)="1a0f5895cc77c52b359dfe39a70a4255c91ce5e5d0a85faa727c63fbfe3f49ead4b42c3fd08f8cc06d03d831", 0x2c}, {&(0x7f00000013c0)="6b150b5976cfc2ac723d34e7e854609edeab6063ca67c52405b5cde6ce2aada3d970241ea4e9b624551dd0af64629b0c593beb75ad15db547309b3496d26f67e6b0cbd3fd87a246ca4a467d184765fa4d54e4265a15f5af5008e709016e8940d4c4e184cc020719244263c307028b3b7b01ecc7c84e601e39f18ce7b70dfa53de712e8061ea2b8ce7981fdf63692ee74ffc19e5e597be84f8c99fa39a7c53beef37bd820762c2b03af6ccb7281b52ad2e115a4205bba344959c99b2472b2a5ffdc44f329089af071d577ecd588b2d8ee", 0xd0}, {&(0x7f00000014c0)="24dc803c4861556444ce64a519dee2f024c70f05bebc35161b67de65416d4bfe9ead6b1ab23feee95cfbc876836849958c083666da7042987dea6e128569ba796bdd675e535481a8a5ff", 0x4a}], 0xa, &(0x7f0000001600)}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000000180))

489.512309ms ago: executing program 2 (id=700):
r0 = socket$inet(0x2, 0x3, 0xa)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000400002000000400004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a3000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000020000000020a01080000000000000000000000090c000440000000000000000214000000020a010400000000000000000200000a14000000110001000000000000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a00000003"], 0x20}}], 0x1, 0x24000004)
socket(0x10, 0x3, 0x0)
socket(0x1, 0x4, 0x9)
unshare(0x24020400)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x3, 0x6, "e53d2d79723e2e614a791ba8e24e1e340dfa35b12c52ed4e1d3a7be902511feb177b3d2b4b5fd2d7f807eee09e02b0720f9c5c2a4eb765c4ec38ea9353f8ef37cf1fda11b5e36f1348c053b5d7f8879bcd302757e2740e74b724a53c87a743960f0d0f503ca445247d318285b25e3088b7321f3f850a6d203eeb0602a8f7083ca95ddea898aa09e692a56366e476fd3fd2a10a87b2f1dd16cc58d8d202b80d3ee800253b801d40dec7b04ac3e71489f9"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x60, 0x0, 0x20008000}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r4}, 0x14)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000180000000000000", @ANYRES32=0x1, @ANYBLOB="07000000000600"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="00000000040000000200"/28], 0x50)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b36, &(0x7f0000000000)={'wlan0\x00'})
r7 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r7, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
connect$nfc_llcp(r7, 0x0, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = socket(0x40000000015, 0x5, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpu.weight\x00', 0x2, 0x0)
sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r9, &(0x7f00000005c0)="48fcc048c8", 0x5, 0x0, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10)
setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0)

488.008599ms ago: executing program 1 (id=701):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r2, 0x20}, 0x1c}}, 0x0)

431.320367ms ago: executing program 1 (id=702):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
r2 = socket(0x10, 0x803, 0x0)
getsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0), &(0x7f0000000180)=0x8c)
sendmsg$nl_route_sched(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000980)=@delchain={0x24, 0x65, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x2, 0x8}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x40000091)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000000000079a0fffd000000006200000000000000950074000000000002bf7ac06b0bba6dae5599772183b0be1ce6508a4bcdfe52782f28f91e7fdaa8e2e6dbedd2309cbbdb7835c610f677b40089f20c1250843791e0e134073a88cfcabe01ba5e03ab30"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21)

371.339315ms ago: executing program 1 (id=703):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1000}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x5}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x5}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x8af9}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}]}}]}, 0x74}}, 0x4000400)
socket$inet6(0xa, 0x802, 0x0)
ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000480)={r0, &(0x7f0000000380)='ip6tnl0\x00', 0x400000, &(0x7f00000003c0)={@_ha_fsid={[0x1, 0x40]}, {0x9b9, 0x8, 0x7, 0x4}}, 0x7, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0xffffffff})
recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0)

370.798358ms ago: executing program 0 (id=704):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000240), &(0x7f0000000140)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

365.949115ms ago: executing program 2 (id=705):
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xaa0f4000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r4, 0xe6905000)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201)
ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xaa0f4000) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r4, 0xe6905000) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) (async)
ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) (async)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) (async)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) (async)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) (async)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) (async)
mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async)

344.947539ms ago: executing program 1 (id=706):
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xd, 0x4d, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4b)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd700000000000220000001800018014000200766972745f7769666930000000000000f8c93822da8fb829f3e0b2672f84"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32=<r5=>r2], 0x7c}}, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
shutdown(0xffffffffffffffff, 0x0)
close(0x3)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
write(r7, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES16=r10, @ANYBLOB="00042cbd7000fedbdf254c0000000c0058003300"], 0x20}}, 0x4008082)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"/331], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x4004010)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000440)={'veth0\x00', 0x8000})
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000a40)=ANY=[@ANYRES16, @ANYRES64=r6, @ANYBLOB="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", @ANYRES64=r5, @ANYRES8=r4], 0x3261e)

259.654593ms ago: executing program 0 (id=707):
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x10, 0x122, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xe3, 0x0, 0x0, @pid}]}]}]}, 0x24}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x4000003}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xffffffffffffff5e, 0x7, 0x3}]}}]}, 0x48}}, 0x0)
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async)
recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
getpeername$packet(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x14)
accept4(r3, 0x0, 0x0, 0x80000)
write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6) (async)
write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r15, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x58, r16, 0x41, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f0000000e80)=@ethtool_perm_addr={0x4b, 0x44}}) (async)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f0000000e80)=@ethtool_perm_addr={0x4b, 0x44}})

258.603948ms ago: executing program 2 (id=708):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4200, 0x19ede23832c6c0bc}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x3c}}, 0x4000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@deltfilter={0x3c, 0x2d, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffe0, 0xc}, {0xa, 0x3}, {0xffe0, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x7e5d}, @TCA_CHAIN={0x8, 0xb, 0xfffffff8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x2, @empty}, 0x1c)
recvmmsg(r3, &(0x7f0000001440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/19, 0x13}, 0xc}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f00000001c0)=0x9, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4200, 0x19ede23832c6c0bc}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x3c}}, 0x4000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@deltfilter={0x3c, 0x2d, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffe0, 0xc}, {0xa, 0x3}, {0xffe0, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x7e5d}, @TCA_CHAIN={0x8, 0xb, 0xfffffff8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x2, @empty}, 0x1c) (async)
recvmmsg(r3, &(0x7f0000001440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/19, 0x13}, 0xc}], 0x1, 0x0, 0x0) (async)
setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f00000001c0)=0x9, 0x4) (async)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)

212.981628ms ago: executing program 1 (id=709):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000ffffffe04e000000000000005fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="900000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f9a25f0500000000600012800b000100697036746e6c00005000028006000f000000000008000100", @ANYRES32, @ANYBLOB="080014004b030000060012004e21000008001400ffffffff080008003500000014000200fc00000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x90}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000)

152.775811ms ago: executing program 2 (id=710):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000006c0)={'batadv0\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000004000000000000000a00000091115300"/32], &(0x7f0000000c40)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x18, '\x00', r2, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_buf(r3, 0x29, 0x30, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000080c)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000000c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xf0, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp(0x2, 0x3, 0x2)
socket$kcm(0x10, 0x2, 0x4)
r7 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r7], 0x28}}, 0x802)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000000580)={'ip_vti0\x00', r6, 0x40, 0x7, 0x3, 0xffffff7e, {{0x2b, 0x4, 0x0, 0x4, 0xac, 0x65, 0x0, 0x7, 0x2f, 0x0, @remote, @local, {[@noop, @timestamp_addr={0x44, 0x2c, 0x7f, 0x1, 0x3, [{@local, 0x3}, {@local, 0x3}, {@local, 0x3de90cb5}, {@loopback, 0xf}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @generic={0x88, 0x6, "2f6a6ea5"}, @end, @ssrr={0x89, 0x23, 0x44, [@dev={0xac, 0x14, 0x14, 0x32}, @multicast1, @loopback, @rand_addr=0x64010102, @broadcast, @loopback, @private=0xa010101, @rand_addr=0x64010100]}, @cipso={0x86, 0x3d, 0x0, [{0x6, 0x7, "7d796fb756"}, {0x6, 0x2}, {0x5, 0x6, "73f6254d"}, {0x6, 0x12, "c21a6e895dda69be432978de453d2fb0"}, {0x6, 0x6, "ba4766e6"}, {0x6, 0x10, "19e6098f5754850086148a041c94"}]}, @noop]}}}}})
ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000000100)={&(0x7f0000000040)=[{&(0x7f0000000200)="dc9d2cbd9e482ebb16de4c7c55a72678d4192fe2f31938a381968fdb6b033804c6b158be245ca0218f8c7acfe0235e06fad9b1b4d626bb3f1d976931b23f6a6e9448b3a34808ea7639a10a7ccff88fd1869fb766e1fcff93294bef40798385d74e94bc75cc2ea87dc94b1a9decb9036250d7a0c3545fbe762e631b57571c9653715c3585dac3ccb7071fe73c987961111562a1f88ffa2cad2d81439111ae11a756ee4bde914309c25011b92789699666fb4863acdb4b065c682f98168abe8c9a31a1a49d634785dfc0db3ffa20529e6f8c8ed0eb5791b3e00a003adca1bdb9297eccab0653efb9150b981846d558cdc7", 0xf0}], 0x1, 0x4, 0x0, 0xaf9, 0xc6cb, 0x2, 0x0, 0x3})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000080000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0)
socket(0x6, 0x4, 0x7ff)
r9 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000800)=ANY=[@ANYBLOB="2774ebcbde2ff3ac00000000000000000900000037c734295535a4a10943a120b75f9a8870436cd89db500859a3f2e57bd692d3be056"], 0x14}}, 0x0)
ppoll(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0)

151.197152ms ago: executing program 1 (id=711):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c007e29f0a7db7b169eb9e4650000090a010400000000004000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a402f00404b00000000280000000b0a010300000000000000000a00000208000f40000000010c001040000000000000000214000000110001000800000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newtaction={0x4c, 0x30, 0xb, 0x5, 0x0, {}, [{0x38, 0x1, [@m_ct={0x34, 0x1c, 0x0, 0x0, {{0x7}, {0x9, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x890}, 0x20000040)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000080)={'gretap0\x00', <r2=>0x0, 0x788, 0x20, 0x3, 0x10, {{0x16, 0x4, 0x3, 0x5, 0xa9, 0x67, 0x0, 0x8, 0x2f, 0x0, @multicast1, @broadcast}}}})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES32=r2, @ANYBLOB="0c000180080001001b0001000c00018005000300020000000c000180060002000b000000100001800c0004800800020013000000"], 0x4c}, 0x1, 0x0, 0x0, 0x14008895}, 0x20008090)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_1\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5400000010000104050000000300000000000000", @ANYRES32=0x0, @ANYBLOB="0305000000000000340012800900010069706970000000002400028008000300ac1414aa08000100", @ANYRES32=r10, @ANYBLOB="060010000900000005000a0000000000a4cb503d2da3651e64705d94d827d2a9257505fe542380f2f36f4306eb3671b44efc6e5bd570c1b28b6be8ae2c37910e04707c136e9183ab1aa1e71a6e8d68a04bb1e8f304ebff6a163f0ce602b9036e335cdd4b9fdab01ae990d55ef9441acf65d94edb4b9b2645e232eee5e2435aa1682dc461f9e00a0979ebdeaf15de2b6321cab47ae3574c5dab0d05a921ca04c4af"], 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0)
close(r7)
write(r5, 0x0, 0x0)
mmap(&(0x7f0000d64000/0x1000)=nil, 0x1000, 0xc, 0x110, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r7, 0x84, 0x1, &(0x7f0000001280)=""/4093, &(0x7f00000000c0)=0xffd)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x198, 0x20a, 0x278, 0x198, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'ipvlan0\x00', 'caif0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11)
getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x9)

93.307725ms ago: executing program 0 (id=712):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80800000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc00}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_USERDATA={0x86, 0xc, "d40b74054b4afe26df705a3f2b83c01668ee404b68bff3d148716e5453d466b8d1e624168cf0d292a5e577c82a5ac29808ed71185c5c87b5a410d56c71921c1fd35cf9e7346aaffb722d5def34fd04a3828b0005c88a69783d57f4a0e0a1bf87f29143ede53c1ed939b32b60557fb9f34e9e20d7dd40797d27399884d08eed3517c7"}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x401}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6554f0cc}]}, @NFTA_CHAIN_USERDATA={0x9, 0xc, "bbbb5604aa"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1ec}}, 0x0)

91.626889ms ago: executing program 2 (id=713):
r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wlc\x00', 0x11, 0x4}, {@loopback, 0x4e23, 0x10000, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
shutdown(r4, 0x0)
shutdown(r4, 0x1) (async)
sendmsg$inet(r4, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x20008005) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0xb8, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x84, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_hsr\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb8}}, 0x24040084)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) (async)
r10 = socket$unix(0x1, 0x5, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xe, 0xb}, {0x9, 0xc}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x2044000) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r12)
sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={<r14=>0xffffffffffffffff, 0x4, 0xef95, 0x1})
getsockopt$inet_sctp6_SCTP_NODELAY(r14, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

87.768382ms ago: executing program 0 (id=714):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000200000000000000000008500000036000000950000000000000049db185086ea6334aa453ec969352991eb38f162575a68c0e574b1758d28a5aa8e86720031a818d25477fc738a2157e500171427cceeb8adc298f40b9affaa9ceb28e1ac72f4d412696ddf196f7380423f5d1cff072e84bf03770a9bf0bede62157b45b5a2ef59cea5048ffb"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc5, &(0x7f00000001c0)=""/197}, 0x80)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2, 0x25, 0x0, @void}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB="40100000", @ANYRES16=r5, @ANYBLOB="010000000000000000000c0000001410038004100400fc654c187d6eb5f0ca15095cc8787b50b96435ad3147dd10e867248d37187c2a131a62d105462ce34d5cf8ded36159aea612a3460534d8c298556e91590238f40dd2c7148d365ab6cdd5f2a7f74bac8d59f731c655a46917f18b28ed05e58b70287d26677601258a5c0ab9f679e2e520228c3a1f1aede04c6ba82cc38cc2ab6b35a24fb20e032dedf6f6caf4bfea5435f746f746fd46ca192e3744eb6908b358c10833bf484237ba654641e6186a45957c6345e61ea620fdc74383ce1df4a24e7044bae596f018736424a5bfa438865044e7026fa37a3540fadd0e89d87aecd3bc127e0cb10274991d6127224a0f2a4ef19e2c4dedbe45f2471abcc38c584ead0e3df3f9211022b2421fb6b327361e8f58f2b73134fc5444b350ede95ecef5bbbf9950e75c9f772a3ff0180d2cfac287228709726a6abbab2971982de7f1a9149d71dcbfd212e89ff17cf284b7f8ad82a469cb1c1e3d9d1d3689271c8dad0ba89dda651d4242062ac0bc5877e397236fa9476ac5fac7c2c896babca09d74720004cd0e634327de4fd87ed72ae069c095d2c70caed52e3335478c1c3719925e24f2fd7755baebd5cde385727a0f0440dd3b662248c43ff5afc4f186ff0051ba8eaa07623b79c4bb6985f14c5ac15041a6ff7584f921982e5414481d4db4c76798d70a59b5aeccb6e7882aefe70993758b55b4dc4039c2b1c98452113aaf23ccdf68cb6eff6e048f9da6f39a2def3caaf80cdcbadb83b029b8738391f02fec90c8a8b6f036aae8ceaff5dca7d3e0098472bd246c0b3004d1988f802b846d62ca59e9a63ce12814176ec4380e1cf29d27e7b2f7e7eadcaae8f182498ad32e67323fe6ef9508fec40dd38897652053ef92e44a909060c237890c196f0c26ab10248f999001f6231813a81313971bea77a5470f312d185dce689adc99e430e4010a3a341482c51fb71c23c3cdf92303c7580c73775f9a74685a61ce9849eaca52b97ee7ffe2e672dc1be5267c285a102711b1b5d81d6dbb76494f2892fd4f85244ade3cdd3809fd5fdfce5157fc1658f0bceb379489732583707c170fc6392aa4f5b94843aeb18da58e0156e029c2b722918b1b3dc7c151cb9c248ddd18423629b53cd4b0ab2693b0df29c88c04657f4eccdc41357de8186fdc0ec86f92950734975921a2fde57c3e7176b57c871d76ff8a8f36520b67e64930cf34bcde9ad92d057a359ca022b646df18e2b7202845bd8ac4be5e5ebae436dc4b93dfaaf2778a53e7e4be937e83dac7d1d481bdbd8081ab0ac08af067e62580bbdbf397cbc629db9b023734b6fad7824d1a8b3257c1c18d6ebc928140060f004ec484b183560f830a1eb0c527c8600bb2600d761e847454e677aa2948788079c1b17f8330790a066aa407a9e9a5e9dc9542de038e3e55fdfec13184cdb16716556f972eef5c56230c43d146c86a9147265c309a279db6d138647920410896c5397c5f83634fa5e92b5161f786482d84830864388b91c2c1e3e9f9f038d5fa66f7fe904e14df0a60d46066c6b1f37cec6e13c35832f512be21da21a5921b81cc452b0076c2ec10fc5481cd0e1ca917b40cb3aa839b120ce6eb9773e942b74ececac6bdcd22eb8dd6cd9f148e0ebe5ef3094f42adc39bc5ca2259e1eab5059ccf5e82bb57b97d4d13a90747299b2e6b64f962aabf222e4f287503181de3c3a68fb2b0068583f3b97e40ce06e9805a7121eccac0527b8f1b18a62762efe0a9ce4114b7d1ba942bc93533ee0b1bd7f0a607207b976dfa1fbe3ce0868e7f4e31b41a0aada0ac6b291aefe22ea5338f07e57b981b8e4e4a121f231d2f46989fd5dd09a7c1d198f5886b4f1a222eccdabff096a81fef3c9e497621128562880938fe05a1f1c4da81daba55bf326f1e3a1712d79f01fbef2ee230615d4e454be67f0ad4dc2bfffaecbb683742925738b45854ab713ae548b9709e9ea2e28224ef466bced79e3ec6c163d45db187bc01c75afa85f78003927dcd122086acc8dd1b1224de41d62b83e34083dd39fe68aa5a479ba403f5dbddf9b763ca521b7efca6234be16484f1e0112d963672a6d24cdac15e80bcb82b3b22231670c41fe7e8a0a083b6df768e7fb0d94a004f8372f5cf8b9b45cc679eb67828a94d0ffabfe09d95ad2789cb8657f7ea86a46260416a72e6fc7b44e549a2e39fe015c7647cc0bec15fa63d26894be1cc5326331e7e0b1c505934182accf049bab033b026d48fda51de740afc0666e6c891e0c5192f4b2df21493477ff45319d7d8b816f0b73ccfa12d6846362feb4b85063ca42e950eb577c630300dc52698a38ca19cbbb398404a1e8e27d0be49985e59caef03da096d1ccbeed73bd7c9588325b747ab77f4d7c1c1f18388ce1771882ee680ed737ad197ff92f1052e5e79f6ffa5b85ba3fac5db13e0d0046c9dca0ab4b74b20299ba6bdd758940e088df31e1382cee6901503299028467a864d27affae30fd9aef5a6ff948c052124511a75a46d5a316e28fb6c5bfac787be5833c63c535557235b0e09f9a78a338aa8864613fca77a7e252d1975af2c4a6bcc969d1e20e3cd4dfc1b2fe34b70fd7804dbfde4fa4d950e5fb4eb926dece9e4601b12efe322bb42ac808158fef0a26900000000726654987e7de20d1e41e82c607c33c6bae7bb234744b51dc683d5857afd6ba8246cebc734e393806ef102a6baaf04f3a7c3cb888d5830e1c6ae170c5c920e806b4f518be4416b216cdf9b1658a412d9e4eab6c9b20ce99960f27e77fdf9a2e98b35c63859f9db6bdcbef1001a19e12e41370f9358531987851ab64c250e68a8569ace4418e2118caff7d3d4caf1c87bc50a8ae75770fdae88a8490c041b39d08190d8b7c908caddd66331a508929d53dd6bc2dbc86f97115ff0a364b70f96918e6ed354c97e59ea5e2c7b149cd51d7c85a27ac658e78b99326857858df0ac0ee240cbb6ee9d9ee6c2c2ff7c29dd25fd337dc08bddeb50305ed48b9f5d89c55ffedde29ce0412ea8e2c976f961eb0c4966d2a8be0b657a5e51048a8a10005c488e1f637ce208a35b5aed0c2067465191dc42ebf6e4853cc89998bdf2ef755f38a3cd985b62df36a5ebc3b47df32423ee46857f9db9d756ff69ecd4ef2f307dcaefd4a1f399543952df972269c28200df8ebacad4eed1c00b9ce9841799bea583cafdeaa8d4a371a8ae55d8ffe4846833985975d8b234adff63eace9d2c4d1680c370827ebe1831ef311077607e8c4920506e03528861085dcfdb918f1efe91010c390fbca0a38377e1635c402ec1c34eddae986ffa8756b27f6c340907bae99f4a6b328fca8177b4dfaceea5ad3ceb901dbcefc15ded322bece4e750969e81935764ebe88749464af7e692e3d324c519b456013daae93bd63215540380a7fe08f0e050cdeb25db2a8b9b6f5720ad1e7d2c5b6d609712eccd321d6211fb642a4cdf72504aabd017a9b4827d1e0e0264435a5e1045dbe33834968d2db503972995559b1efe1b9ce475405118346b63f637b1abf8e8374e7100d6b41c9c672d2b244c7a82ffb882522efd9e903fc69db14c469685780005843856c6623591f305d383eae55a1a1d5619dfff0027413f26fa6a793a348ba8b192e1b088745a2175d55517a75d4b63cce41cc0dcaca9002cd37a1ccc6710ba2a099297b0824f976919e8abf3b1510b1305a95241fefbd036afa9d4538affc82f005d29b9f2c0e60d6c20f673b8ca28cb088e1e89efe334f25ffe1a3fb3581e5aa63b9a4a49f269b5538788aacbbc04d49902ae2af1f59d2484ab6ba7a9b477be0d92e221fc48cdbc00bef7125bfe36f9afb1cbd58fef21625ec99ffd2e35fb00767e3f22dba7d36163203cfaf1860a8b1afe0d878ea00fe08f68fd592a6395fb357acbdc2834c8ac85571527dbf1dbaaccede3d583e2b9bf076737716785f44aebc7ba917fb426d5541adff1e75836ab70fb0b43565ab5e24c5902879f31701cc006b4ee2f57be0916cf0b6cd489c4fa9129031a4af75a00048f20eb962f0c6f68cda0d7756a4e83f7d065c4a00b8263d95f6b979507b7ca01735e83a5e5ff0b76f077ef6e4c1150f9202b5311a231b76111d48a387e09075edb2448fb19d2869ae420ada8ee7577fe980ed7e057dc963c0a98db790bb5b7920220f8a55213b6530637b832abdf3c6fefdefb712a2c2c9eba8087ce39335ddabdadb86f493061e593981c6b2d70b4bac3b58885787c46f85c1022f5ff6cec16ba227aa5dac2e0be30522c08369f18d170b9cb454f3ebf86d1e923fdd65245d8e0c476bfedddcb772453f4d0e70d059e79b8811c379c9eff6e45d99f81186930b32b24cdcb906a41fe29c147ed834b37e77800a33c15e65d121ee85a924ef6bbc1c8f4a423fbc5d14645a08178229d4c7f111fa318823a6c075ddf9e131c9bca8d56dec4a68fbab9a0c1a128880d8b4dec59b89ec33c19eb76f09f31ad730cba735b60deba54c399119949e45af4de5c758281945fe6b6a25ac1cd57a81b48f11a6575e79b82e529d4ba1b2a1175cfa03ef6d149b165195fa64736b302e28ee6444368fb395a2d89c8747348b546a07ed0306682971539f0031d88ffa020d0b3d40369e0a3d2238293a75a155eb5c0749f64ed37a9af5be26d5a4322a55a23c33d176280bd0e4c5168f2e66bca925304d0f32074f5e68d7c43f9e2e3f14a6bcf3e77e6b71737131c3e90208072e37c8a6cad1cabd756aa694e85b86256ce13b43541a26438374b6029ee461d223ed34ed1e9a3e580cec7b2b41bc9823b3729e683f079a498636d022799dd94c5e870b6aa7f3d36fb51ffb6c5e317fcde6b5ae45073f8e90ee0fc1fa0641ff6f0b789dcc6df2fe9a3b5e6ed9d2be3403f5af96e7c6019b0a0ce4f8342323638a52c121956de068069fe5c44946b5023e1db7742fec29cb749bcdc09d795b683c553dbae1298540b2cf1bc3e5e52adf252bca47ba2182c80541daf1d11b1c67675171e69c1abe3c0bc3a0f2d1a6e2165ca1647c394970a404a6002621a258cef01e2ca12a138888dace9ad06d2f0c0209f286c11b289626aa557cc201560651054a6042e84c6fc5e345e2f702d61851fed5ffa36ade652f76db815dabb7b8eee016ea0836d0086f2a2f7bd1c4a4ceb1d706817b41347a891c34b45eb06a9ecb19041d5a39f050cb0413662dc4700385fac2e1823e1ce4d08c66692fde0862a057f2aa2425d511735fff53d0e3d88bfb245e7724ba4ba8452e469862d333dad5c63bfa778809c043132db3a57e122d0495441f7a07034a3ac1024b8fc063694d8316c29639cb6605ff362a853f976c763f6d10e4e0972760e60f08acdd8a73607e7311819fe24ad8b670bbf0adede086f91bd0839ce37927f43a263e3e8369932db9ab786ba66e1bba664bfa8aa50d98ed18fc90e560933c2e8da72757a4539756740a73c41180cf97fde47cf3e9e6005302459d831eea7a03157e0c3178776e4d4add3999b9a1efca7c99b8234ff9d33492431dd9bd0814301ee49260e30b8b6afc46ce8a733bc9d7850c789e5e98cdefbfb11131a85bc24e75453a16c6780ab4229b985d1fe7a255f71cfe18398e881d493ded88300b54f6c4a5567fd84a6e1f11835433448a00420ab1b3a49fcc0e9938da52b68f9409c94a0de61f0beb69532c4f7a11fae6a9ffd10db7de01e3272448b517ad795a06f3fef8148b7196cb81a80aed42e395c1ac346dd27f9bce87661e19f957a17d54d59b68e023c1516ae9ba4d75f18d4b8fc7e9fe6f70000000000000000000008000200fd7f000004000500180001801400020076657468305f746f5f626f6e640000006e747770fc6104827830e40a4ad10434ff996ebd87d7e91b1312b16baf05f0bc7c6af301e160fc0084e40495b72672c8187e9664f97214ff971c0808a616fb5ba901b02eec3a33349df4dadcdd"], 0x1040}}, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000001200)=ANY=[], 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044044}, 0x4000800)
sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x90)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000012c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20010000", @ANYRES16=r5, @ANYBLOB="020029bd7000ffdbdf25150000006c00018008000100", @ANYRES32=r2, @ANYBLOB="140002006970766c616e310000d1938035f719b0e9177e5c293050d05300000000000000080003000000000008000100", @ANYRES32=r2, @ANYBLOB="140002006261746164765f736c6176655f3000001400020076657468305f746f5f68737200000000140002006970366772653000000000000000000050000180080003000000000008000100", @ANYRES32=r2, @ANYBLOB="080003000200000014000200000000000000000000000000000000000800030000000000080003000200000008000100", @ANYRES32=r2, @ANYBLOB="08000300020000005000018008000100", @ANYRES32=r2, @ANYBLOB="1400020070696d367265670000000000000000001400020065727370616e30000000000000000000080003000100000014000200"/68], 0x120}, 0x1, 0x0, 0x0, 0x44801}, 0x10)

506.939µs ago: executing program 0 (id=715):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000010c0)=@nat={'nat\x00', 0x19, 0x3, 0x166, [0x200000000b00, 0x0, 0x0, 0x200000000cae, 0x200000000f2c], 0x0, 0x0, &(0x7f0000000b00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x51, 0x88a8, 'wg0\x00', 'pim6reg1\x00', 'veth0\x00', 'ipvlan0\x00', @random="f215be810d13", [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x9e, 0xd6, [], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}], @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x1de)
r1 = socket(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38)
write(r1, &(0x7f0000000080)="2400000011005f0414f9f40700090400810000003c0000000000000008000f000100000032c2cdd986ca096a083bd67dde7d6382eace58bbc5b5d6f487ca50b22927d7e812f68da8a13a9929c37ec00b202dea774f36e3bf0405a4897fa901bab2fd8934749549657d7b7b0d2fe7024251db3cdd83300901699232a1a6d455b2f280ef902ec41a3e5005953808766804a84da1014fe917dde6a3c37aa9b486072d0835dfafeb634191bb7d8f6cb45cdb1dcfce7db6377700c5", 0xb9)

0s ago: executing program 2 (id=716):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdbe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x2, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
read(r2, &(0x7f0000000080)=""/41, 0x29)
shutdown(r2, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x5, 0x0, 0x5, 0x0, 0x5}, {0x0, 0x0, 0x800, 0xa000000000000000}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x34ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in=@loopback, 0x2000, 0x2b}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x26}}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x3c}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x4, 0x0, 0x1}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x240408c5}, 0x44000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x16}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000000180)={<r7=>r2, &(0x7f0000000000)=',:!\x00', 0x101000, &(0x7f00000000c0)={@_ha_fsid={[0x5, 0x1]}, {0xfffe, 0x8001, 0xa, 0x200}}, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8})
setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f00000001c0)='wg1\x00', 0x4)
syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:40213' (ED25519) to the list of known hosts.
syzkaller login: [   56.176314][ T5593] cgroup: Unknown subsys name 'net'
[   56.311939][ T5593] cgroup: Unknown subsys name 'cpuset'
[   56.318413][ T5593] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.978723][ T5593] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.597408][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.601555][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.604426][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.611980][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.615155][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.668684][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.672654][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.677884][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.687258][ T5001] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.690706][ T5001] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.693951][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.698294][ T5001] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.700764][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.704055][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.707317][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.150723][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.154769][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.158023][ T5611] bridge_slave_0: entered allmulticast mode
[   63.161717][ T5611] bridge_slave_0: entered promiscuous mode
[   63.180031][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.183696][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.186411][ T5611] bridge_slave_1: entered allmulticast mode
[   63.189705][ T5611] bridge_slave_1: entered promiscuous mode
[   63.258108][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.268648][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.303272][ T5611] team0: Port device team_slave_0 added
[   63.330087][ T5611] team0: Port device team_slave_1 added
[   63.379227][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.381648][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.390278][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.408577][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.410873][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.419776][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.501049][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.503461][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.505899][ T5618] bridge_slave_0: entered allmulticast mode
[   63.508736][ T5618] bridge_slave_0: entered promiscuous mode
[   63.511888][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.514212][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.516626][ T5618] bridge_slave_1: entered allmulticast mode
[   63.519744][ T5618] bridge_slave_1: entered promiscuous mode
[   63.532972][ T5611] hsr_slave_0: entered promiscuous mode
[   63.536251][ T5611] hsr_slave_1: entered promiscuous mode
[   63.560560][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.565418][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.614949][ T5618] team0: Port device team_slave_0 added
[   63.617792][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.620846][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.623938][ T5617] bridge_slave_0: entered allmulticast mode
[   63.627885][ T5617] bridge_slave_0: entered promiscuous mode
[   63.655965][ T5618] team0: Port device team_slave_1 added
[   63.659811][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.662820][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.665725][ T5617] bridge_slave_1: entered allmulticast mode
[   63.670275][ T5617] bridge_slave_1: entered promiscuous mode
[   63.726714][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.730454][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.739041][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.757587][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.759830][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.768660][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.774329][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.791611][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.835474][ T5617] team0: Port device team_slave_0 added
[   63.853441][ T5617] team0: Port device team_slave_1 added
[   63.891444][ T5618] hsr_slave_0: entered promiscuous mode
[   63.895251][ T5618] hsr_slave_1: entered promiscuous mode
[   63.897778][ T5618] debugfs: 'hsr0' already exists in 'hsr'
[   63.899720][ T5618] Cannot create hsr debugfs directory
[   63.911459][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.914019][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.923504][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.938885][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.941261][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.949676][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.022110][ T5617] hsr_slave_0: entered promiscuous mode
[   64.024629][ T5617] hsr_slave_1: entered promiscuous mode
[   64.026978][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[   64.029367][ T5617] Cannot create hsr debugfs directory
[   64.067993][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.077034][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.092248][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.096319][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.110761][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.115952][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.119182][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.125032][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.254389][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.259466][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.262266][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.268642][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.277130][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.282311][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.285268][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.292959][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.352284][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.357465][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.361174][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.365979][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.371097][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.376072][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.386213][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.391533][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.429149][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.459145][ T5611] 8021q: adding VLAN 0 to HW filter on device team0
[   64.473408][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.475705][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.490098][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.492903][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.520203][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.561395][ T5618] 8021q: adding VLAN 0 to HW filter on device team0
[   64.576091][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.583137][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.585571][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.599163][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.601544][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.630498][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   64.651465][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.654063][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.668690][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.671012][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.688694][ T5613] Bluetooth: hci0: command tx timeout
[   64.768371][ T5613] Bluetooth: hci2: command tx timeout
[   64.778990][ T5613] Bluetooth: hci1: command tx timeout
[   64.930981][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.934536][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.987028][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.990641][ T5618] veth0_vlan: entered promiscuous mode
[   64.997426][ T5611] veth0_vlan: entered promiscuous mode
[   65.013907][ T5618] veth1_vlan: entered promiscuous mode
[   65.019537][ T5611] veth1_vlan: entered promiscuous mode
[   65.075949][ T5618] veth0_macvtap: entered promiscuous mode
[   65.081230][ T5611] veth0_macvtap: entered promiscuous mode
[   65.086107][ T5611] veth1_macvtap: entered promiscuous mode
[   65.091527][ T5617] veth0_vlan: entered promiscuous mode
[   65.101169][ T5618] veth1_macvtap: entered promiscuous mode
[   65.114925][ T5617] veth1_vlan: entered promiscuous mode
[   65.124689][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.142524][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.152616][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.155412][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.160542][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.167055][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.172068][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.177110][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.212628][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.221217][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.227108][ T5617] veth0_macvtap: entered promiscuous mode
[   65.233857][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.260118][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.268268][ T5617] veth1_macvtap: entered promiscuous mode
[   65.288177][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.303286][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.326117][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.349779][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.353483][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.360893][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.385825][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.390184][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.396728][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.405400][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.410429][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.414564][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.461389][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.465394][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.480763][ T5611] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.524092][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.531604][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.578815][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.581871][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.673700][ T5726] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   65.703306][ T5726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'.
[   65.744038][ T5726] bond1: entered promiscuous mode
[   65.753933][ T5726] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.825560][ T5732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'.
[   65.829479][ T5732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'.
[   65.832396][ T5732] netlink: 'syz.0.1': attribute type 4 has an invalid length.
[   66.070788][ T5745] xt_TCPMSS: Only works on TCP SYN packets
[   66.072954][ T5745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8'.
[   66.075658][ T5745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8'.
[   66.081174][ T5745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8'.
[   66.083972][ T5745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8'.
[   66.086823][ T5745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8'.
[   66.091173][ T5745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8'.
[   66.095213][ T5745] Zero length message leads to an empty skb
[   66.102938][ T5741] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   66.107836][ T5741] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   66.154769][ T5750] IPv6: NLM_F_CREATE should be specified when creating new route
[   66.161845][ T5750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'.
[   66.557768][ T5761] Bluetooth: MGMT ver 1.23
[   66.768194][ T5613] Bluetooth: hci0: command tx timeout
[   66.820962][ T5774] 8021q: VLANs not supported on sit0
[   66.850084][ T5613] Bluetooth: hci1: command tx timeout
[   66.853239][   T54] Bluetooth: hci2: command tx timeout
[   66.918946][ T5779] : renamed from virt_wifi0
[   67.016668][ T5785] netlink: 'syz.0.17': attribute type 4 has an invalid length.
[   67.023954][ T5785] nbd: must specify a device to reconfigure
[   67.045974][ T5788] GUP no longer grows the stack in syz.2.19 (5788): 200000003000-20000000a000 (200000001000)
[   67.050363][ T5788] CPU: 1 UID: 0 PID: 5788 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full) 
[   67.050377][ T5788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   67.050383][ T5788] Call Trace:
[   67.050387][ T5788]  <TASK>
[   67.050392][ T5788]  dump_stack_lvl+0xe8/0x150
[   67.050408][ T5788]  __get_user_pages+0x2378/0x2720
[   67.050421][ T5788]  ? __gup_longterm_locked+0xc4e/0x1630
[   67.050436][ T5788]  ? __gup_longterm_locked+0xc4e/0x1630
[   67.050446][ T5788]  ? down_read_killable+0x1bb/0x340
[   67.050457][ T5788]  __gup_longterm_locked+0xdcf/0x1630
[   67.050468][ T5788]  ? lock_acquire+0x106/0x350
[   67.050484][ T5788]  gup_fast_fallback+0x1d84/0x20d0
[   67.050504][ T5788]  ? __pfx_gup_fast_fallback+0x10/0x10
[   67.050514][ T5788]  ? is_valid_gup_args+0x11f/0x200
[   67.050524][ T5788]  ? get_user_pages_fast+0x4d/0xb0
[   67.050534][ T5788]  __iov_iter_get_pages_alloc+0x370/0xa10
[   67.050550][ T5788]  ? __pfx_pipe_clear_nowait+0x10/0x10
[   67.050563][ T5788]  iov_iter_get_pages2+0x5e/0xa0
[   67.050576][ T5788]  __se_sys_vmsplice+0x7c7/0x1620
[   67.050593][ T5788]  ? __pfx___se_sys_vmsplice+0x10/0x10
[   67.050604][ T5788]  ? __pfx_futex_wake+0x10/0x10
[   67.050617][ T5788]  ? __local_bh_enable_ip+0xd0/0x130
[   67.050640][ T5788]  ? __fget_files+0x3a0/0x420
[   67.050656][ T5788]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.050665][ T5788]  do_syscall_64+0x15f/0xf80
[   67.050676][ T5788]  ? trace_irq_disable+0x3b/0x140
[   67.050690][ T5788]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.050698][ T5788] RIP: 0033:0x7f3572d9cdd9
[   67.050708][ T5788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.050714][ T5788] RSP: 002b:00007f3573ba4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   67.050724][ T5788] RAX: ffffffffffffffda RBX: 00007f3573015fa0 RCX: 00007f3572d9cdd9
[   67.050730][ T5788] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008
[   67.050735][ T5788] RBP: 00007f3572e32d69 R08: 0000000000000000 R09: 0000000000000000
[   67.050740][ T5788] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   67.050745][ T5788] R13: 00007f3573016038 R14: 00007f3573015fa0 R15: 00007ffeaed919c8
[   67.050757][ T5788]  </TASK>
[   67.147049][ T5790] bond0: entered promiscuous mode
[   67.151035][ T5790] bond_slave_0: entered promiscuous mode
[   67.153364][ T5790] bond_slave_1: entered promiscuous mode
[   67.202679][ T5792] netlink: 'syz.2.21': attribute type 30 has an invalid length.
[   67.442197][ T5800] netlink: 'syz.0.25': attribute type 1 has an invalid length.
[   67.452233][ T5800] batman_adv: batadv0: Adding interface: bridge1
[   67.454427][ T5800] batman_adv: batadv0: The MTU of interface bridge1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.465194][ T5800] batman_adv: batadv0: Not using interface bridge1 (retrying later): interface not active
[   67.600707][ T5813] netlink: 'syz.0.27': attribute type 1 has an invalid length.
[   68.537049][ T5832] veth3: entered allmulticast mode
[   68.568882][ T5846] xt_l2tp: unknown flags: 51
[   68.634163][ T5833] team0: Port device team_slave_0 removed
[   68.848795][ T5613] Bluetooth: hci0: command tx timeout
[   68.939145][ T5613] Bluetooth: hci1: command tx timeout
[   68.941994][   T54] Bluetooth: hci2: command tx timeout
[   68.995454][ T5875] openvswitch: netlink: Flow key attr not present in new flow.
[   69.031622][ T5875] geneve2: entered promiscuous mode
[   69.033842][ T5875] geneve2: entered allmulticast mode
[   69.080519][ T5881] netlink: 'syz.1.42': attribute type 1 has an invalid length.
[   69.781871][ T5943] syzkaller1: entered promiscuous mode
[   69.784661][ T5943] syzkaller1: entered allmulticast mode
[   69.914099][ T5952] syzkaller0: entered promiscuous mode
[   69.916572][ T5952] syzkaller0: entered allmulticast mode
[   70.116227][ T5962] syzkaller1: entered promiscuous mode
[   70.120829][ T5962] syzkaller1: entered allmulticast mode
[   70.128434][ T5962] netlink: 'syz.2.71': attribute type 298 has an invalid length.
[   70.134277][ T5962] netlink: 'syz.2.71': attribute type 1 has an invalid length.
[   70.445812][ T5975] tipc: Can't bind to reserved service type 0
[   70.928953][ T5613] Bluetooth: hci0: command tx timeout
[   71.007685][ T5613] Bluetooth: hci1: command tx timeout
[   71.009584][   T54] Bluetooth: hci2: command tx timeout
[   71.194693][ T6023] tipc: Started in network mode
[   71.197363][ T6023] tipc: Node identity fe93382b803a, cluster identity 4711
[   71.199912][ T6023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.206388][ T6022] tipc: Disabling bearer <eth:syzkaller0>
[   71.474197][ T6044] __nla_validate_parse: 25 callbacks suppressed
[   71.474211][ T6044] netlink: 17 bytes leftover after parsing attributes in process `syz.2.93'.
[   71.527886][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.533783][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.559784][ T6048] netlink: 'syz.1.92': attribute type 16 has an invalid length.
[   71.562593][ T6048] netlink: 'syz.1.92': attribute type 17 has an invalid length.
[   71.598127][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.601254][ T6048] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.625971][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.628987][ T6048] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.687465][ T6048] bond1: left promiscuous mode
[   71.689758][ T6048] veth0_to_team: entered promiscuous mode
[   71.957907][ T6065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.98'.
[   71.977859][ T6065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'.
[   71.986507][ T5615] block nbd64: NBD_DISCONNECT
[   72.054575][ T6072] netlink: 9 bytes leftover after parsing attributes in process `syz.2.99'.
[   72.105818][ T6074] netlink: 1 bytes leftover after parsing attributes in process `syz.2.100'.
[   72.524440][ T6106] warning: `syz.1.110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.604021][ T6108] netlink: 'syz.2.111': attribute type 13 has an invalid length.
[   72.647064][    T9] IPVS: starting estimator thread 0...
[   72.663125][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'.
[   72.737713][ T6109] IPVS: using max 46 ests per chain, 110400 per kthread
[   72.809249][ T6121] syzkaller1: entered promiscuous mode
[   72.817128][ T6121] syzkaller1: entered allmulticast mode
[   72.821715][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'.
[   72.829393][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'.
[   72.833771][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'.
[   72.840028][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'.
[   72.842666][ T6121] netlink: 'syz.1.115': attribute type 298 has an invalid length.
[   72.855223][ T6121] netlink: 'syz.1.115': attribute type 1 has an invalid length.
[   73.100963][ T6149] netlink: 'syz.1.121': attribute type 1 has an invalid length.
[   73.120025][ T6149] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.136988][ T6152] netlink: 'syz.2.122': attribute type 5 has an invalid length.
[   73.395083][ T6168] netlink: 'syz.1.128': attribute type 1 has an invalid length.
[   74.161381][ T6163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   74.182605][ T6202] tipc: Started in network mode
[   74.184699][ T6202] tipc: Node identity eac61dac7edc, cluster identity 4711
[   74.188131][ T6202] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.193248][ T6202] syzkaller0: entered promiscuous mode
[   74.204562][ T6202] syzkaller0: entered allmulticast mode
[   74.289723][ T6202] netlink: 'syz.0.137': attribute type 1 has an invalid length.
[   74.304072][ T6201] tipc: Resetting bearer <eth:syzkaller0>
[   74.318904][ T6201] tipc: Disabling bearer <eth:syzkaller0>
[   74.553941][ T6223] bridge2: the hash_elasticity option has been deprecated and is always 16
[   74.651104][ T6235] bond0: Caught tx_queue_len zero misconfig
[   74.669805][ T6225] netlink: 'syz.2.146': attribute type 11 has an invalid length.
[   74.747364][ T6244] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[   74.820786][ T6248] veth1_to_team: entered promiscuous mode
[   74.826094][ T6248] veth0_to_bridge: entered promiscuous mode
[   74.829207][ T6248] hsr1: entered promiscuous mode
[   74.900021][ T6255] netlink: 'syz.2.154': attribute type 11 has an invalid length.
[   74.977140][ T6261] syzkaller0: entered promiscuous mode
[   74.986449][ T6261] syzkaller0: entered allmulticast mode
[   75.066264][ T6265] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   75.106647][ T6270] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.110132][ T6270] syzkaller0: entered promiscuous mode
[   75.112253][ T6270] syzkaller0: entered allmulticast mode
[   75.145704][ T6270] tipc: Resetting bearer <eth:syzkaller0>
[   75.152692][ T6268] tipc: Resetting bearer <eth:syzkaller0>
[   75.162246][ T6268] tipc: Disabling bearer <eth:syzkaller0>
[   75.254515][ T6274] geneve2: entered promiscuous mode
[   75.256795][ T6274] geneve2: entered allmulticast mode
[   75.261961][ T5669] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   75.265985][ T5669] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   75.272057][ T5669] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   75.275739][ T5669] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   75.284152][ T6274] netlink: 'syz.0.162': attribute type 1 has an invalid length.
[   76.141043][ T6328] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   76.151935][ T6328] bond1: (slave lo): Enslaving as an active interface with an up link
[   76.157932][ T6328] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   76.208660][ T6340] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[   76.692778][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[   76.696171][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[   76.800702][ T6401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.808089][ T6396] validate_nla: 1 callbacks suppressed
[   76.808099][ T6396] netlink: 'syz.0.199': attribute type 1 has an invalid length.
[   76.813107][ T6396] netlink: 'syz.0.199': attribute type 2 has an invalid length.
[   76.851807][ T6401] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[   76.909544][ T6408] netlink: 'syz.0.202': attribute type 1 has an invalid length.
[   76.924951][ T6408] bond2: entered promiscuous mode
[   76.934097][ T6408] 8021q: adding VLAN 0 to HW filter on device bond2
[   76.978977][ T6413] netlink: 'syz.0.204': attribute type 1 has an invalid length.
[   76.979548][ T6414] ip6gre1: entered promiscuous mode
[   76.982164][ T6413] __nla_validate_parse: 24 callbacks suppressed
[   76.982178][ T6413] netlink: 96 bytes leftover after parsing attributes in process `syz.0.204'.
[   76.983853][ T6414] ip6gre1: entered allmulticast mode
[   76.986311][ T6413] netlink: 658 bytes leftover after parsing attributes in process `syz.0.204'.
[   76.995097][ T6413] netlink: 1 bytes leftover after parsing attributes in process `syz.0.204'.
[   77.029760][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'.
[   77.033399][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'.
[   77.207420][ T6428] netlink: 'syz.0.208': attribute type 13 has an invalid length.
[   77.210543][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'.
[   77.251639][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.209'.
[   77.258657][ T6430] : renamed from bond0
[   77.663519][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'.
[   77.784889][ T6411] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   77.788813][ T6411] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   77.846758][ T6442] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.850429][ T6442] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.934405][ T6442] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.934645][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'.
[   77.943512][ T6442] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.048172][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.051780][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.055903][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.065144][ T6442] syz.2.212 (6442) used greatest stack depth: 20704 bytes left
[   78.098583][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.116677][ T6452] netlink: 'syz.0.215': attribute type 1 has an invalid length.
[   78.121019][ T6452] netlink: 'syz.0.215': attribute type 4 has an invalid length.
[   78.123955][ T6452] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.215'.
[   78.129895][ T6452] netlink: 'syz.0.215': attribute type 1 has an invalid length.
[   78.132652][ T6452] netlink: 'syz.0.215': attribute type 4 has an invalid length.
[   78.386760][ T6475] netlink: 'syz.2.223': attribute type 12 has an invalid length.
[   78.860778][ T6514] syzkaller0: entered promiscuous mode
[   78.862806][ T6514] syzkaller0: entered allmulticast mode
[   78.866108][   T13] syzkaller0: tun_net_xmit 70
[   78.869599][   T13] syzkaller0: tun_net_xmit 14
[   78.899262][ T6517] syzkaller0: entered promiscuous mode
[   78.901653][ T6517] syzkaller0: entered allmulticast mode
[   79.029829][ T6518] veth3: entered promiscuous mode
[   79.197083][ T6522] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   79.404999][ T6539] sctp: [Deprecated]: syz.0.241 (pid 6539) Use of int in maxseg socket option.
[   79.404999][ T6539] Use struct sctp_assoc_value instead
[   79.673649][ T6560] sch_tbf: burst 0 is lower than device sit0 mtu (1480) !
[   79.923212][ T6587] Cannot find set identified by id 65534 to match
[   79.987177][ T6584] bond4: entered promiscuous mode
[   80.009838][ T6584] 8021q: adding VLAN 0 to HW filter on device bond4
[   81.078645][ T6669] bond0: (slave vlan3): Opening slave failed
[   81.214055][ T6705] openvswitch: netlink: Message has 8 unknown bytes.
[   81.440033][ T6732] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.476363][ T6732] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.502534][ T6735] sit0: entered promiscuous mode
[   81.518077][ T6738] openvswitch: netlink: IP tunnel dst address not specified
[   81.699058][ T6749] batadv_slave_0: Caught tx_queue_len zero misconfig
[   81.828764][ T6762] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check.
[   82.193354][ T6784] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.204366][ T6784] __nla_validate_parse: 22 callbacks suppressed
[   82.204384][ T6784] netlink: 44 bytes leftover after parsing attributes in process `syz.2.299'.
[   82.215319][ T6792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.301'.
[   82.311179][ T6796] syzkaller0: entered promiscuous mode
[   82.313686][ T6796] syzkaller0: entered allmulticast mode
[   82.319010][ T6794] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.303'.
[   82.333372][ T6794] validate_nla: 7 callbacks suppressed
[   82.333402][ T6794] netlink: 'syz.1.303': attribute type 11 has an invalid length.
[   82.339316][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'.
[   82.363436][ T6796] bond1 (unregistering): Released all slaves
[   82.395467][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'.
[   83.344117][ T6827] Driver unsupported XDP return value 0 on prog  (id 60) dev N/A, expect packet loss!
[   83.961760][ T6841] netlink: 156 bytes leftover after parsing attributes in process `syz.1.314'.
[   83.971333][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'.
[   84.021616][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'.
[   84.022395][ T6843] team1: entered promiscuous mode
[   84.026830][ T6843] team1: entered allmulticast mode
[   84.031247][ T6843] 8021q: adding VLAN 0 to HW filter on device team1
[   84.034597][ T6844] team2 (uninitialized): Failed to send options change via netlink (err -105)
[   84.059885][ T6844] team2: entered promiscuous mode
[   84.061645][ T6844] team2: entered allmulticast mode
[   84.064022][ T6844] 8021q: adding VLAN 0 to HW filter on device team2
[   84.079963][ T6851] netlink: 'syz.2.318': attribute type 29 has an invalid length.
[   84.300993][ T6870] netlink: 84 bytes leftover after parsing attributes in process `syz.2.324'.
[   84.305586][ T6870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.324'.
[   84.560860][ T6881] : (slave vlan3): Opening slave failed
[   84.836561][ T6914] : (slave vlan3): Opening slave failed
[   84.893979][ T6917] syzkaller0: entered promiscuous mode
[   84.896355][ T6917] syzkaller0: entered allmulticast mode
[   86.945567][  T896] cfg80211: failed to load regulatory.db
[   87.775069][ T6905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   87.933375][ T6942] bond1: option arp_validate: invalid value (18446744073709551613)
[   87.939853][ T6942] bond1 (unregistering): Released all slaves
[   87.970908][ T6945] __nla_validate_parse: 2 callbacks suppressed
[   87.970922][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'.
[   87.983346][ T5669] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.983786][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'.
[   87.989816][ T5669] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.994584][ T6945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.345'.
[   88.006472][ T5669] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   88.010392][ T5669] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   88.016405][ T6945] netlink: 36 bytes leftover after parsing attributes in process `syz.1.345'.
[   88.029572][ T6945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.345'.
[   88.034327][ T6945] netlink: 36 bytes leftover after parsing attributes in process `syz.1.345'.
[   88.174803][ T6972] netlink: 156 bytes leftover after parsing attributes in process `syz.0.351'.
[   88.451607][ T7005] tipc: Failed to remove unknown binding: 66,0,0/0:3029934516/3029934518
[   88.455847][ T7005] tipc: Failed to remove unknown binding: 66,0,0/0:3029934516/3029934517
[   88.460017][ T7005] tipc: Failed to remove unknown binding: 66,0,0/0:3029934516/3029934518
[   88.464937][ T7005] tipc: Failed to remove unknown binding: 66,0,0/0:3029934516/3029934517
[   88.469153][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'.
[   88.479580][ T7005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.357'.
[   88.511620][ T7008] TCP: TCP_TX_DELAY enabled
[   88.558881][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'.
[   88.592475][ T7018] netlink: 'syz.1.363': attribute type 23 has an invalid length.
[   88.739229][ T7035] netlink: 'syz.1.367': attribute type 13 has an invalid length.
[   88.743446][ T7033] netlink: 'syz.0.366': attribute type 16 has an invalid length.
[   88.745986][ T7035] netlink: 'syz.1.367': attribute type 17 has an invalid length.
[   88.748956][ T7033] netlink: 'syz.0.366': attribute type 17 has an invalid length.
[   88.756865][ T7035] gretap0: refused to change device tx_queue_len
[   88.760481][ T7035] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   89.340664][ T7044] netlink: 'syz.2.370': attribute type 1 has an invalid length.
[   89.476649][ T7052] geneve0: Caught tx_queue_len zero misconfig
[   89.577454][ T7054] lo: Caught tx_queue_len zero misconfig
[   90.070940][ T7094] x_tables: ip_tables: osf match: only valid for protocol 6
[   90.404096][ T7121] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.418345][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.431874][ T7129] netlink: 'syz.0.393': attribute type 16 has an invalid length.
[   90.445406][ T7129] netlink: 'syz.0.393': attribute type 17 has an invalid length.
[   90.574099][ T7136] netlink: 'syz.2.397': attribute type 22 has an invalid length.
[   90.585015][ T5691] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.588122][ T7136] netlink: 'syz.2.397': attribute type 22 has an invalid length.
[   90.590536][ T5691] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.593463][ T5691] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.597704][ T5691] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.690822][ T7138] ieee802154 phy1 wpan1: encryption failed: -22
[   90.792930][ T7148] xt_hashlimit: size too large, truncated to 1048576
[   90.846633][ T7154] bridge_slave_0 (unregistering): left allmulticast mode
[   90.857741][ T7154] bridge_slave_0 (unregistering): left promiscuous mode
[   90.867371][ T7154] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.905473][ T7154] veth0_to_bridge (unregistering): left promiscuous mode
[   91.654265][ T7233] rdma_op ffff888116bd69f0 conn xmit_rdma 0000000000000000
[   91.709861][ T7238] bond1: entered promiscuous mode
[   91.712935][ T7238] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.724306][ T7237] syzkaller0: entered promiscuous mode
[   91.726461][ T7237] syzkaller0: entered allmulticast mode
[   91.964075][ T7245] team0: Port device dummy0 added
[   92.026412][ T7246] team0: Port device dummy0 removed
[   92.034735][ T7246] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   92.157929][ T7245] nbd0: detected capacity change from 0 to 63
[   92.170406][   T55] block nbd0: Receive control failed (result -104)
[   92.173747][ T7247] block nbd0: Receive control failed (result -32)
[   92.369841][ T7260] bond0: (slave vlan3): Opening slave failed
[   92.590122][ T7273] ip6tnl0: Caught tx_queue_len zero misconfig
[   92.692190][  T896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.014731][ T7318] __nla_validate_parse: 29 callbacks suppressed
[   93.014747][ T7318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.437'.
[   93.176013][ T7336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.440'.
[   93.293478][ T7343] syzkaller0: entered promiscuous mode
[   93.295490][ T7343] syzkaller0: entered allmulticast mode
[   94.538391][ T7347] batadv_slave_0: entered promiscuous mode
[   94.540957][ T7344] batadv_slave_0: left promiscuous mode
[   94.581850][ T7357] validate_nla: 9 callbacks suppressed
[   94.581865][ T7357] netlink: 'syz.0.448': attribute type 3 has an invalid length.
[   95.702684][ T7408] x_tables: ip6_tables: sctp match: only valid for protocol 132
[   95.872620][ T7417] netlink: 32 bytes leftover after parsing attributes in process `syz.1.463'.
[   95.953491][ T7396] syz.2.459 (7396) used greatest stack depth: 19992 bytes left
[   95.977832][ T7419] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[   96.035007][ T7434] syzkaller0: entered promiscuous mode
[   96.041525][ T7434] syzkaller0: entered allmulticast mode
[   96.099909][ T7440] netlink: 'syz.2.470': attribute type 1 has an invalid length.
[   96.105459][ T7440] netlink: 'syz.2.470': attribute type 39 has an invalid length.
[   96.122543][ T7445] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[   96.213598][ T7447] vlan4: entered promiscuous mode
[   96.215671][ T7447] bridge0: entered promiscuous mode
[   96.222343][ T7450] netlink: 'syz.0.472': attribute type 3 has an invalid length.
[   96.234167][ T7447] netlink: 'syz.1.471': attribute type 4 has an invalid length.
[   96.406667][ T7466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.478'.
[   96.422793][ T7466] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[   96.528711][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   97.295623][ T7489] netlink: 156 bytes leftover after parsing attributes in process `syz.2.484'.
[   97.306224][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'.
[   97.316099][ T7491] netlink: 44 bytes leftover after parsing attributes in process `syz.0.483'.
[   97.408964][ T7493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'.
[   97.501973][ T7499] syzkaller0: entered promiscuous mode
[   97.504298][ T7499] syzkaller0: entered allmulticast mode
[   97.571172][ T7505] bond0: Error: Cannot enslave bond to itself.
[   97.627108][ T7509] netlink: 1084 bytes leftover after parsing attributes in process `syz.2.490'.
[   97.760913][ T7526] netlink: 44 bytes leftover after parsing attributes in process `syz.2.492'.
[   97.925810][ T7530] policy can only be matched on NF_INET_PRE_ROUTING
[   97.925833][ T7530] unable to load match
[   97.946916][ T7543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.188121][ T7564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.200567][ T7564] netlink: 'syz.2.504': attribute type 1 has an invalid length.
[   98.208784][ T7564] netlink: 64 bytes leftover after parsing attributes in process `syz.2.504'.
[   98.214818][ T7564] netlink: 658 bytes leftover after parsing attributes in process `syz.2.504'.
[   98.218062][ T7564] netlink: 'syz.2.504': attribute type 1 has an invalid length.
[   98.250831][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.509'.
[   98.758093][ T7597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.518'.
[   98.989619][ T7614] tipc: Started in network mode
[   98.991894][ T7614] tipc: Node identity 0272a2bf8b3e, cluster identity 4711
[   98.995118][ T7614] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.999083][ T7612] syzkaller0: entered promiscuous mode
[   99.001336][ T7612] syzkaller0: entered allmulticast mode
[   99.009372][ T7614] tipc: Resetting bearer <eth:syzkaller0>
[   99.015890][ T7611] tipc: Resetting bearer <eth:syzkaller0>
[   99.028873][ T7611] tipc: Disabling bearer <eth:syzkaller0>
[   99.345888][ T7626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.525'.
[   99.372722][ T7628] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.379358][ T7626] bond5: entered promiscuous mode
[   99.381799][ T7626] 8021q: adding VLAN 0 to HW filter on device bond5
[   99.392051][ T7626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.525'.
[   99.558108][ T7643] syzkaller0: entered promiscuous mode
[   99.560586][ T7643] syzkaller0: entered allmulticast mode
[   99.689092][ T7651] netlink: 128 bytes leftover after parsing attributes in process `syz.1.531'.
[   99.834908][ T7656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.533'.
[   99.876317][ T7659] syzkaller0: entered promiscuous mode
[   99.881020][ T7659] syzkaller0: entered allmulticast mode
[   99.885220][ T7658] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.896663][ T7658] tipc: Resetting bearer <eth:syzkaller0>
[   99.911672][ T7658] tipc: Disabling bearer <eth:syzkaller0>
[  100.122952][ T7666] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.126179][ T7666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.536'.
[  100.126327][ T7667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.536'.
[  100.457438][ T7674] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.577764][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.119919][ T7687] syzkaller0: entered promiscuous mode
[  101.122513][ T7687] syzkaller0: entered allmulticast mode
[  101.327751][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.352603][ T7700] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.400329][ T7705] netlink: 'syz.1.549': attribute type 83 has an invalid length.
[  101.428538][ T7712] netlink: 'syz.1.550': attribute type 49 has an invalid length.
[  101.443122][ T7717] netlink: 'syz.0.551': attribute type 21 has an invalid length.
[  101.451909][ T5669] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.454971][ T7717] netlink: 'syz.0.551': attribute type 21 has an invalid length.
[  101.460992][ T5669] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.469351][ T5669] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.473254][ T5669] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  102.210373][ T7777] netlink: 'syz.2.567': attribute type 83 has an invalid length.
[  102.275378][ T7780] syzkaller0: entered promiscuous mode
[  102.277609][ T7780] syzkaller0: entered allmulticast mode
[  102.289839][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.345651][ T7787] netlink: 'syz.2.571': attribute type 1 has an invalid length.
[  102.350427][ T7787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.354826][ T7787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.360408][ T7787] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  102.365297][ T7787] bond0 (unregistering): Released all slaves
[  102.389885][ T7789] netlink: 'syz.2.571': attribute type 1 has an invalid length.
[  102.430246][ T5669] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.436114][ T5669] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.440826][ T5669] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.444624][ T5669] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.916150][ T7824] netlink: 'syz.2.582': attribute type 26 has an invalid length.
[  102.924501][ T7824] netlink: 'syz.2.582': attribute type 26 has an invalid length.
[  102.931647][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.943278][ T7824] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  102.958007][ T7824] netlink: 'syz.2.582': attribute type 1 has an invalid length.
[  103.281158][ T7854] dvmrp0: entered allmulticast mode
[  103.298800][ T7856] __nla_validate_parse: 12 callbacks suppressed
[  103.298811][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.589'.
[  103.350391][ T7856] bond4: (slave vcan1): refused to change device type
[  103.568078][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'.
[  103.574913][ T7886] nbd: socks must be embedded in a SOCK_ITEM attr
[  103.775695][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'.
[  103.812031][ T7902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.602'.
[  103.823082][ T7902] veth1_to_team: entered promiscuous mode
[  103.825943][ T7902] dummy0: entered promiscuous mode
[  103.832504][ T7902] debugfs: 'hsr1' already exists in 'hsr'
[  103.834856][ T7902] Cannot create hsr debugfs directory
[  103.837010][ T7902] hsr1: entered promiscuous mode
[  103.980729][ T7919] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001
[  104.381566][ T7948] netlink: 96 bytes leftover after parsing attributes in process `syz.1.616'.
[  104.384856][ T7948] netlink: 1 bytes leftover after parsing attributes in process `syz.1.616'.
[  104.388466][ T7948] netlink: 634 bytes leftover after parsing attributes in process `syz.1.616'.
[  104.454060][ T7960] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  104.457409][ T7960] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  104.458932][ T7962] openvswitch: netlink: Missing valid actions attribute.
[  104.462637][ T7962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.758205][ T7916] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  104.761108][ T7916] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  104.956598][ T7980] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  104.960212][ T7980] netlink: 244 bytes leftover after parsing attributes in process `syz.0.628'.
[  105.027466][ T7984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.630'.
[  105.179960][ T7986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.630'.
[  105.514057][ T7995] block nbd0: reconnected socket
[  105.517194][ T7995] block nbd0: reconnected socket
[  105.524583][ T7996] block nbd0: Receive control failed (result -32)
[  105.530987][   T56] block nbd0: Receive control failed (result -32)
[  105.782575][ T8019] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  105.785394][ T8019] CPU: 0 UID: 0 PID: 8019 Comm: syz.1.638 Not tainted syzkaller #0 PREEMPT(full) 
[  105.785406][ T8019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.785412][ T8019] Call Trace:
[  105.785417][ T8019]  <TASK>
[  105.785421][ T8019]  dump_stack_lvl+0xe8/0x150
[  105.785437][ T8019]  sysfs_warn_dup+0x8e/0xa0
[  105.785450][ T8019]  sysfs_do_create_link_sd+0xc0/0x110
[  105.785462][ T8019]  device_add_class_symlinks+0x1cf/0x240
[  105.785476][ T8019]  device_add+0x475/0xbb0
[  105.785488][ T8019]  wiphy_register+0x1dc5/0x2dc0
[  105.785507][ T8019]  ? __pfx_wiphy_register+0x10/0x10
[  105.785520][ T8019]  ? __pfx_netdev_run_todo+0x10/0x10
[  105.785535][ T8019]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  105.785548][ T8019]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  105.785564][ T8019]  ieee80211_register_hw+0x3d82/0x4a70
[  105.785586][ T8019]  ? ieee80211_register_hw+0x1911/0x4a70
[  105.785607][ T8019]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  105.785621][ T8019]  ? __asan_memset+0x22/0x50
[  105.785651][ T8019]  ? __hrtimer_setup+0x1b7/0x260
[  105.785661][ T8019]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  105.785674][ T8019]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  105.785695][ T8019]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  105.785704][ T8019]  ? kstrndup+0xbf/0x160
[  105.785716][ T8019]  hwsim_new_radio_nl+0xf6a/0x1c00
[  105.785735][ T8019]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  105.785750][ T8019]  ? rcu_is_watching+0x15/0xb0
[  105.785762][ T8019]  ? trace_kmalloc+0x2a/0xf0
[  105.785777][ T8019]  ? __nla_parse+0x40/0x60
[  105.785790][ T8019]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  105.785800][ T8019]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  105.785811][ T8019]  genl_family_rcv_msg_doit+0x22a/0x330
[  105.785825][ T8019]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  105.785839][ T8019]  ? bpf_lsm_capable+0x9/0x20
[  105.785847][ T8019]  ? security_capable+0x7e/0x2c0
[  105.785860][ T8019]  genl_rcv_msg+0x61c/0x7a0
[  105.785871][ T8019]  ? __pfx_genl_rcv_msg+0x10/0x10
[  105.785879][ T8019]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  105.785893][ T8019]  netlink_rcv_skb+0x232/0x4b0
[  105.785905][ T8019]  ? __pfx_genl_rcv_msg+0x10/0x10
[  105.785914][ T8019]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  105.785931][ T8019]  ? down_read+0x270/0x2e0
[  105.785938][ T8019]  ? genl_rcv+0xd/0x40
[  105.785947][ T8019]  genl_rcv+0x28/0x40
[  105.785954][ T8019]  netlink_unicast+0x75c/0x8e0
[  105.785968][ T8019]  netlink_sendmsg+0x813/0xb40
[  105.785983][ T8019]  ? __pfx_netlink_sendmsg+0x10/0x10
[  105.785995][ T8019]  ? aa_sock_msg_perm+0xf1/0x1b0
[  105.786007][ T8019]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  105.786019][ T8019]  ____sys_sendmsg+0x972/0x9f0
[  105.786031][ T8019]  ? __might_fault+0xaf/0x130
[  105.786043][ T8019]  ? __pfx_____sys_sendmsg+0x10/0x10
[  105.786058][ T8019]  ? import_iovec+0x73/0xa0
[  105.786072][ T8019]  ___sys_sendmsg+0x2a5/0x360
[  105.786083][ T8019]  ? __lock_acquire+0x6b5/0x2cf0
[  105.786094][ T8019]  ? __pfx____sys_sendmsg+0x10/0x10
[  105.786109][ T8019]  ? futex_wake+0x4ac/0x580
[  105.786130][ T8019]  ? __fget_files+0x2a/0x420
[  105.786140][ T8019]  ? __fget_files+0x3a0/0x420
[  105.786154][ T8019]  __x64_sys_sendmsg+0x1bd/0x2a0
[  105.786194][ T8019]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  105.786211][ T8019]  ? rcu_is_watching+0x15/0xb0
[  105.786228][ T8019]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.786237][ T8019]  do_syscall_64+0x15f/0xf80
[  105.786250][ T8019]  ? trace_irq_disable+0x3b/0x140
[  105.786267][ T8019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.786277][ T8019] RIP: 0033:0x7f0727b9cdd9
[  105.786287][ T8019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.786294][ T8019] RSP: 002b:00007f0728999028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  105.786305][ T8019] RAX: ffffffffffffffda RBX: 00007f0727e15fa0 RCX: 00007f0727b9cdd9
[  105.786311][ T8019] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  105.786316][ T8019] RBP: 00007f0727c32d69 R08: 0000000000000000 R09: 0000000000000000
[  105.786321][ T8019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.786332][ T8019] R13: 00007f0727e16038 R14: 00007f0727e15fa0 R15: 00007fff38709038
[  105.786345][ T8019]  </TASK>
[  106.038729][ T8026] can: request_module (can-proto-5) failed.
[  106.138223][ T8039] veth0: entered promiscuous mode
[  106.165932][ T8038] veth0: left promiscuous mode
[  106.601713][ T8079] validate_nla: 7 callbacks suppressed
[  106.601724][ T8079] netlink: 'syz.1.655': attribute type 1 has an invalid length.
[  107.091883][ T8095] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.381553][ T8103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  107.385255][   T31] IPVS: starting estimator thread 0...
[  107.477673][ T8104] IPVS: using max 51 ests per chain, 122400 per kthread
[  107.496517][ T8113] netlink: 'syz.1.666': attribute type 1 has an invalid length.
[  107.505340][ T8113] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.508889][ T8113] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.579414][ T8121] trusted_key: syz.0.669 sent an empty control message without MSG_MORE.
[  107.703506][ T8133] ip6t_rpfilter: unknown options
[  108.102232][ T8159] netlink: 'syz.1.683': attribute type 1 has an invalid length.
[  108.128922][ T8159] 8021q: adding VLAN 0 to HW filter on device bond6
[  108.150195][ T8159] bond6: (slave geneve2): making interface the new active one
[  108.154874][ T8159] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  108.388978][ T8176] __nla_validate_parse: 12 callbacks suppressed
[  108.388997][ T8176] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.690'.
[  108.429316][ T8178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.477122][ T8178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.691'.
[  108.482323][ T8178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.548871][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'.
[  108.558793][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.692'.
[  108.562587][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.692'.
[  108.571281][ T8185] batadv1: entered promiscuous mode
[  108.577620][ T8185] batadv1: entered allmulticast mode
[  108.581181][ T8185] 8021q: adding VLAN 0 to HW filter on device batadv1
[  108.612767][ T8187] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.693'.
[  108.644558][ T8189] netlink: 'syz.0.694': attribute type 1 has an invalid length.
[  108.672375][ T8189] 8021q: adding VLAN 0 to HW filter on device bond5
[  108.689005][ T8189] bond5: (slave syz_tun): Enslaving as a backup interface with an up link
[  108.987188][ T8205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.700'.
[  108.991776][ T8205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.700'.
[  108.996098][ T8205] netlink: 'syz.2.700': attribute type 4 has an invalid length.
[  109.145282][   T33] audit: type=1804 audit(1778509451.641:2): pid=8220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.705" name="/newroot/239/cgroup.controllers" dev="tmpfs" ino=1242 res=1 errno=0
[  109.164413][   T33] audit: type=1800 audit(1778509451.661:3): pid=8220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.705" name="cgroup.controllers" dev="tmpfs" ino=1242 res=0 errno=0
[  109.191247][   T33] audit: type=1804 audit(1778509451.691:4): pid=8223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.705" name="/newroot/239/cgroup.controllers" dev="tmpfs" ino=1242 res=1 errno=0
[  109.191792][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'.
[  109.235355][ T8227] netlink: 'syz.0.707': attribute type 8 has an invalid length.
[  109.274931][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'.
[  109.280625][ T8232] ip6tnl1: entered allmulticast mode
[  109.395220][ T8242] ipip0: entered promiscuous mode
[  109.401517][ T8244] team_slave_1: Caught tx_queue_len zero misconfig
[  109.414246][ T8244] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.435727][ T8243] tipc: Disabling bearer <eth:syzkaller0>
[  109.449997][ T8250] smc: net device lo applied user defined pnetid SYZ2
[  109.454496][ T8250] smc: net device lo erased user defined pnetid SYZ2
[  109.507458][ T8242] xt_TCPMSS: Only works on TCP SYN packets
[  109.546950][ T8253] 
[  109.548016][ T8253] ======================================================
[  109.550379][ T8253] WARNING: possible circular locking dependency detected
[  109.552522][ T8253] syzkaller #0 Not tainted
[  109.554185][ T8253] ------------------------------------------------------
[  109.556910][ T8253] syz.0.715/8253 is trying to acquire lock:
[  109.559305][ T8253] ffff8881012b4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80
[  109.563167][ T8253] 
[  109.563167][ T8253] but task is already holding lock:
[  109.565918][ T8253] ffffffff8f38d660 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  109.568967][ T8253] 
[  109.568967][ T8253] which lock already depends on the new lock.
[  109.568967][ T8253] 
[  109.572628][ T8253] 
[  109.572628][ T8253] the existing dependency chain (in reverse order) is:
[  109.575867][ T8253] 
[  109.575867][ T8253] -> #10 (gdp_mutex){+.+.}-{4:4}:
[  109.579181][ T8253]        __mutex_lock+0x1a3/0x1550
[  109.581250][ T8253]        get_device_parent+0x16f/0x3a0
[  109.583437][ T8253]        device_add+0x2e1/0xbb0
[  109.585374][ T8253]        device_create+0x269/0x300
[  109.587472][ T8253]        msr_device_create+0x33/0x50
[  109.589739][ T8253]        cpuhp_invoke_callback+0x445/0x860
[  109.592177][ T8253]        cpuhp_thread_fun+0x36b/0x780
[  109.594413][ T8253]        smpboot_thread_fn+0x541/0xa50
[  109.596483][ T8253]        kthread+0x388/0x470
[  109.598197][ T8253]        ret_from_fork+0x514/0xb70
[  109.600008][ T8253]        ret_from_fork_asm+0x1a/0x30
[  109.601842][ T8253] 
[  109.601842][ T8253] -> #9 (cpuhp_state-up){+.+.}-{0:0}:
[  109.604506][ T8253]        cpuhp_thread_fun+0x127/0x780
[  109.606435][ T8253]        smpboot_thread_fn+0x541/0xa50
[  109.608550][ T8253]        kthread+0x388/0x470
[  109.610406][ T8253]        ret_from_fork+0x514/0xb70
[  109.612519][ T8253]        ret_from_fork_asm+0x1a/0x30
[  109.614689][ T8253] 
[  109.614689][ T8253] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  109.617826][ T8253]        cpus_read_lock+0x42/0x160
[  109.619911][ T8253]        static_key_slow_inc+0x12/0x30
[  109.622175][ T8253]        nbd_genl_reconfigure+0x132f/0x1ea0
[  109.624612][ T8253]        genl_family_rcv_msg_doit+0x22a/0x330
[  109.627091][ T8253]        genl_rcv_msg+0x61c/0x7a0
[  109.629049][ T8253]        netlink_rcv_skb+0x232/0x4b0
[  109.631175][ T8253]        genl_rcv+0x28/0x40
[  109.633018][ T8253]        netlink_unicast+0x75c/0x8e0
[  109.635232][ T8253]        netlink_sendmsg+0x813/0xb40
[  109.637347][ T8253]        ____sys_sendmsg+0x972/0x9f0
[  109.639501][ T8253]        ___sys_sendmsg+0x2a5/0x360
[  109.641641][ T8253]        __x64_sys_sendmsg+0x1bd/0x2a0
[  109.643825][ T8253]        do_syscall_64+0x15f/0xf80
[  109.645673][ T8253]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.647734][ T8253] 
[  109.647734][ T8253] -> #7 (&nsock->tx_lock){+.+.}-{4:4}:
[  109.650241][ T8253]        __mutex_lock+0x1a3/0x1550
[  109.651887][ T8253]        nbd_queue_rq+0x37b/0x1100
[  109.653557][ T8253]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  109.655567][ T8253]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  109.658109][ T8253]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  109.660276][ T8253]        blk_mq_run_hw_queue+0x348/0x4f0
[  109.662128][ T8253]        blk_mq_dispatch_list+0xd16/0xe10
[  109.663943][ T8253]        blk_mq_flush_plug_list+0x48d/0x570
[  109.665874][ T8253]        __blk_flush_plug+0x3ed/0x4d0
[  109.667592][ T8253]        __submit_bio+0x28d/0x580
[  109.669333][ T8253]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  109.671390][ T8253]        block_read_full_folio+0x599/0x830
[  109.673263][ T8253]        filemap_read_folio+0x137/0x3b0
[  109.675139][ T8253]        do_read_cache_folio+0x358/0x590
[  109.677313][ T8253]        read_part_sector+0xb6/0x2b0
[  109.678980][ T8253]        adfspart_check_ICS+0xb1/0x960
[  109.680733][ T8253]        bdev_disk_changed+0x817/0x1770
[  109.682607][ T8253]        blkdev_get_whole+0x380/0x510
[  109.684422][ T8253]        bdev_open+0x31e/0xd30
[  109.685965][ T8253]        blkdev_open+0x470/0x610
[  109.687578][ T8253]        do_dentry_open+0x785/0x14e0
[  109.689214][ T8253]        vfs_open+0x3b/0x340
[  109.690877][ T8253]        path_openat+0x2e08/0x3860
[  109.692891][ T8253]        do_file_open+0x23e/0x4a0
[  109.694868][ T8253]        do_sys_openat2+0x113/0x200
[  109.696956][ T8253]        __x64_sys_openat+0x138/0x170
[  109.699122][ T8253]        do_syscall_64+0x15f/0xf80
[  109.701176][ T8253]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.703703][ T8253] 
[  109.703703][ T8253] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  109.706578][ T8253]        __mutex_lock+0x1a3/0x1550
[  109.708663][ T8253]        nbd_queue_rq+0xc6/0x1100
[  109.710669][ T8253]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  109.713167][ T8253]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  109.715882][ T8253]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  109.718526][ T8253]        blk_mq_run_hw_queue+0x348/0x4f0
[  109.720762][ T8253]        blk_mq_dispatch_list+0xd16/0xe10
[  109.723004][ T8253]        blk_mq_flush_plug_list+0x48d/0x570
[  109.725349][ T8253]        __blk_flush_plug+0x3ed/0x4d0
[  109.727464][ T8253]        __submit_bio+0x28d/0x580
[  109.729425][ T8253]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  109.731865][ T8253]        block_read_full_folio+0x599/0x830
[  109.734207][ T8253]        filemap_read_folio+0x137/0x3b0
[  109.736396][ T8253]        do_read_cache_folio+0x358/0x590
[  109.738583][ T8253]        read_part_sector+0xb6/0x2b0
[  109.740689][ T8253]        adfspart_check_ICS+0xb1/0x960
[  109.742847][ T8253]        bdev_disk_changed+0x817/0x1770
[  109.744986][ T8253]        blkdev_get_whole+0x380/0x510
[  109.747044][ T8253]        bdev_open+0x31e/0xd30
[  109.748980][ T8253]        blkdev_open+0x470/0x610
[  109.750865][ T8253]        do_dentry_open+0x785/0x14e0
[  109.752970][ T8253]        vfs_open+0x3b/0x340
[  109.754763][ T8253]        path_openat+0x2e08/0x3860
[  109.756796][ T8253]        do_file_open+0x23e/0x4a0
[  109.758731][ T8253]        do_sys_openat2+0x113/0x200
[  109.760780][ T8253]        __x64_sys_openat+0x138/0x170
[  109.762927][ T8253]        do_syscall_64+0x15f/0xf80
[  109.764955][ T8253]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.767474][ T8253] 
[  109.767474][ T8253] -> #5 (set->srcu){.+.+}-{0:0}:
[  109.770265][ T8253]        __synchronize_srcu+0xca/0x300
[  109.772384][ T8253]        elevator_switch+0x1e8/0x7a0
[  109.774457][ T8253]        elevator_change+0x2cc/0x450
[  109.776554][ T8253]        elevator_set_default+0x36c/0x430
[  109.778750][ T8253]        blk_register_queue+0x3e9/0x4e0
[  109.780932][ T8253]        __add_disk+0x677/0xd50
[  109.782804][ T8253]        add_disk_fwnode+0xfb/0x480
[  109.784818][ T8253]        nbd_dev_add+0x72c/0xb50
[  109.786834][ T8253]        nbd_init+0x168/0x1f0
[  109.788729][ T8253]        do_one_initcall+0x250/0x870
[  109.790821][ T8253]        do_initcall_level+0x104/0x190
[  109.792956][ T8253]        do_initcalls+0x59/0xa0
[  109.794840][ T8253]        kernel_init_freeable+0x2a6/0x3e0
[  109.797125][ T8253]        kernel_init+0x1d/0x1d0
[  109.799023][ T8253]        ret_from_fork+0x514/0xb70
[  109.800926][ T8253]        ret_from_fork_asm+0x1a/0x30
[  109.802984][ T8253] 
[  109.802984][ T8253] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  109.805917][ T8253]        __mutex_lock+0x1a3/0x1550
[  109.807868][ T8253]        elevator_change+0x1b3/0x450
[  109.809911][ T8253]        elevator_set_none+0xb5/0x140
[  109.812024][ T8253]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  109.814436][ T8253]        nbd_start_device+0x17f/0xb10
[  109.816493][ T8253]        nbd_genl_connect+0x165b/0x1cf0
[  109.818600][ T8253]        genl_family_rcv_msg_doit+0x22a/0x330
[  109.821016][ T8253]        genl_rcv_msg+0x61c/0x7a0
[  109.822981][ T8253]        netlink_rcv_skb+0x232/0x4b0
[  109.825043][ T8253]        genl_rcv+0x28/0x40
[  109.826814][ T8253]        netlink_unicast+0x75c/0x8e0
[  109.828942][ T8253]        netlink_sendmsg+0x813/0xb40
[  109.831117][ T8253]        ____sys_sendmsg+0x972/0x9f0
[  109.833248][ T8253]        ___sys_sendmsg+0x2a5/0x360
[  109.835313][ T8253]        __x64_sys_sendmsg+0x1bd/0x2a0
[  109.837459][ T8253]        do_syscall_64+0x15f/0xf80
[  109.839457][ T8253]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.841889][ T8253] 
[  109.841889][ T8253] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  109.845197][ T8253]        blk_alloc_queue+0x546/0x680
[  109.847265][ T8253]        __blk_mq_alloc_disk+0x197/0x390
[  109.849365][ T8253]        nbd_dev_add+0x499/0xb50
[  109.851239][ T8253]        nbd_init+0x168/0x1f0
[  109.852984][ T8253]        do_one_initcall+0x250/0x870
[  109.855022][ T8253]        do_initcall_level+0x104/0x190
[  109.857122][ T8253]        do_initcalls+0x59/0xa0
[  109.859001][ T8253]        kernel_init_freeable+0x2a6/0x3e0
[  109.861219][ T8253]        kernel_init+0x1d/0x1d0
[  109.863084][ T8253]        ret_from_fork+0x514/0xb70
[  109.865116][ T8253]        ret_from_fork_asm+0x1a/0x30
[  109.867126][ T8253] 
[  109.867126][ T8253] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  109.869996][ T8253]        fs_reclaim_acquire+0x71/0x100
[  109.872200][ T8253]        kmem_cache_alloc_lru_noprof+0x45/0x640
[  109.874786][ T8253]        alloc_inode+0xb8/0x1b0
[  109.876774][ T8253]        iget_locked+0x131/0x6a0
[  109.878620][ T8253]        kernfs_get_inode+0x4f/0x780
[  109.880703][ T8253]        kernfs_get_tree+0x5cd/0x980
[  109.882402][ T8253]        sysfs_get_tree+0x46/0x110
[  109.884011][ T8253]        vfs_get_tree+0x92/0x2a0
[  109.885659][ T8253]        do_new_mount+0x341/0xd30
[  109.887550][ T8253]        __se_sys_mount+0x31d/0x420
[  109.889617][ T8253]        do_syscall_64+0x15f/0xf80
[  109.891649][ T8253]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.894241][ T8253] 
[  109.894241][ T8253] -> #1 (&root->kernfs_rwsem){++++}-{4:4}:
[  109.897387][ T8253]        down_write+0x96/0x200
[  109.899312][ T8253]        kernfs_remove_by_name_ns+0x4e/0x140
[  109.901712][ T8253]        device_links_driver_bound+0x54f/0x14e0
[  109.904200][ T8253]        driver_bound+0xd8/0x2e0
[  109.906229][ T8253]        really_probe+0x789/0xaf0
[  109.908193][ T8253]        __driver_probe_device+0x1ef/0x380
[  109.910078][ T8253]        driver_probe_device+0x4f/0x240
[  109.912307][ T8253]        __device_attach_driver+0x279/0x430
[  109.914681][ T8253]        bus_for_each_drv+0x258/0x2f0
[  109.918255][ T8253]        __device_attach+0x2c5/0x450
[  109.920259][ T8253]        device_initial_probe+0xa1/0xd0
[  109.922354][ T8253]        bus_probe_device+0x12a/0x220
[  109.924360][ T8253]        device_add+0x7e9/0xbb0
[  109.926285][ T8253]        faux_device_create_with_groups+0x189/0x290
[  109.928917][ T8253]        regulator_dummy_init+0x19/0x40
[  109.931034][ T8253]        regulator_init+0xca/0x110
[  109.932962][ T8253]        do_one_initcall+0x250/0x870
[  109.934951][ T8253]        do_initcall_level+0x104/0x190
[  109.937111][ T8253]        do_initcalls+0x59/0xa0
[  109.938902][ T8253]        kernel_init_freeable+0x2a6/0x3e0
[  109.941039][ T8253]        kernel_init+0x1d/0x1d0
[  109.942882][ T8253]        ret_from_fork+0x514/0xb70
[  109.944840][ T8253]        ret_from_fork_asm+0x1a/0x30
[  109.946887][ T8253] 
[  109.946887][ T8253] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  109.950090][ T8253]        __lock_acquire+0x15a5/0x2cf0
[  109.952179][ T8253]        lock_acquire+0x106/0x350
[  109.954125][ T8253]        down_read+0x47/0x2e0
[  109.955912][ T8253]        kernfs_remove+0x35/0x80
[  109.957866][ T8253]        __kobject_del+0xe1/0x330
[  109.959878][ T8253]        kobject_del+0x45/0x60
[  109.961764][ T8253]        cleanup_glue_dir+0x1a3/0x220
[  109.963859][ T8253]        device_del+0x780/0x8f0
[  109.965740][ T8253]        device_destroy+0xb2/0x1a0
[  109.967680][ T8253]        macvtap_device_event+0x226/0x400
[  109.969851][ T8253]        notifier_call_chain+0x1ad/0x3d0
[  109.972019][ T8253]        unregister_netdevice_many_notify+0x17a5/0x22c0
[  109.974732][ T8253]        macvlan_device_event+0x7ec/0x890
[  109.976996][ T8253]        notifier_call_chain+0x1ad/0x3d0
[  109.979329][ T8253]        unregister_netdevice_many_notify+0x17a5/0x22c0
[  109.982008][ T8253]        rtnl_dellink+0x5d4/0x820
[  109.983983][ T8253]        rtnetlink_rcv_msg+0x7d5/0xbe0
[  109.986126][ T8253]        netlink_rcv_skb+0x232/0x4b0
[  109.988244][ T8253]        netlink_unicast+0x75c/0x8e0
[  109.990275][ T8253]        netlink_sendmsg+0x813/0xb40
[  109.992413][ T8253]        sock_write_iter+0x49b/0x4f0
[  109.994534][ T8253]        vfs_write+0x61d/0xb90
[  109.996497][ T8253]        ksys_write+0x150/0x270
[  109.998442][ T8253]        do_syscall_64+0x15f/0xf80
[  110.000353][ T8253]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.002794][ T8253] 
[  110.002794][ T8253] other info that might help us debug this:
[  110.002794][ T8253] 
[  110.006512][ T8253] Chain exists of:
[  110.006512][ T8253]   &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex
[  110.006512][ T8253] 
[  110.011373][ T8253]  Possible unsafe locking scenario:
[  110.011373][ T8253] 
[  110.014250][ T8253]        CPU0                    CPU1
[  110.016366][ T8253]        ----                    ----
[  110.018474][ T8253]   lock(gdp_mutex);
[  110.020057][ T8253]                                lock(cpuhp_state-up);
[  110.022685][ T8253]                                lock(gdp_mutex);
[  110.025036][ T8253]   rlock(&root->kernfs_supers_rwsem);
[  110.027027][ T8253] 
[  110.027027][ T8253]  *** DEADLOCK ***
[  110.027027][ T8253] 
[  110.030193][ T8253] 2 locks held by syz.0.715/8253:
[  110.032112][ T8253]  #0: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x42a/0x820
[  110.035629][ T8253]  #1: ffffffff8f38d660 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  110.039107][ T8253] 
[  110.039107][ T8253] stack backtrace:
[  110.041532][ T8253] CPU: 1 UID: 0 PID: 8253 Comm: syz.0.715 Not tainted syzkaller #0 PREEMPT(full) 
[  110.041550][ T8253] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.041558][ T8253] Call Trace:
[  110.041567][ T8253]  <TASK>
[  110.041575][ T8253]  dump_stack_lvl+0xe8/0x150
[  110.041596][ T8253]  print_circular_bug+0x2e1/0x300
[  110.041616][ T8253]  check_noncircular+0x12e/0x150
[  110.041635][ T8253]  __lock_acquire+0x15a5/0x2cf0
[  110.041655][ T8253]  ? kernfs_remove+0x35/0x80
[  110.041672][ T8253]  lock_acquire+0x106/0x350
[  110.041686][ T8253]  ? kernfs_remove+0x35/0x80
[  110.041706][ T8253]  down_read+0x47/0x2e0
[  110.041721][ T8253]  ? kernfs_remove+0x35/0x80
[  110.041738][ T8253]  kernfs_remove+0x35/0x80
[  110.041755][ T8253]  __kobject_del+0xe1/0x330
[  110.041768][ T8253]  kobject_del+0x45/0x60
[  110.041780][ T8253]  cleanup_glue_dir+0x1a3/0x220
[  110.041798][ T8253]  device_del+0x780/0x8f0
[  110.041814][ T8253]  ? __pfx_device_del+0x10/0x10
[  110.041829][ T8253]  device_destroy+0xb2/0x1a0
[  110.041845][ T8253]  ? __pfx_device_destroy+0x10/0x10
[  110.041861][ T8253]  ? kernfs_remove_by_name_ns+0x101/0x140
[  110.041880][ T8253]  macvtap_device_event+0x226/0x400
[  110.041899][ T8253]  ? __pfx_macvtap_device_event+0x10/0x10
[  110.041916][ T8253]  ? igmp_netdev_event+0x7c/0x750
[  110.041944][ T8253]  notifier_call_chain+0x1ad/0x3d0
[  110.041963][ T8253]  unregister_netdevice_many_notify+0x17a5/0x22c0
[  110.041982][ T8253]  ? unregister_netdevice_queue+0x19b/0x360
[  110.042005][ T8253]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  110.042021][ T8253]  ? netdev_upper_dev_unlink+0x99/0xe0
[  110.042036][ T8253]  ? __pfx_netdev_upper_dev_unlink+0x10/0x10
[  110.042052][ T8253]  ? macvlan_dellink+0x3e2/0x470
[  110.042067][ T8253]  macvlan_device_event+0x7ec/0x890
[  110.042085][ T8253]  ? __pfx_macvlan_device_event+0x10/0x10
[  110.042102][ T8253]  ? igmp_netdev_event+0x7c/0x750
[  110.042120][ T8253]  notifier_call_chain+0x1ad/0x3d0
[  110.042138][ T8253]  unregister_netdevice_many_notify+0x17a5/0x22c0
[  110.042188][ T8253]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  110.042202][ T8253]  ? unregister_netdevice_queue+0x19b/0x360
[  110.042221][ T8253]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  110.042241][ T8253]  ? __pfx_veth_dellink+0x10/0x10
[  110.042255][ T8253]  ? __pfx_veth_dellink+0x10/0x10
[  110.042268][ T8253]  rtnl_dellink+0x5d4/0x820
[  110.042285][ T8253]  ? __pfx_rtnl_dellink+0x10/0x10
[  110.042318][ T8253]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  110.042336][ T8253]  ? __pfx_rtnl_dellink+0x10/0x10
[  110.042350][ T8253]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  110.042366][ T8253]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  110.042381][ T8253]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  110.042396][ T8253]  ? ref_tracker_free+0x693/0x840
[  110.042415][ T8253]  ? __pfx_ref_tracker_free+0x10/0x10
[  110.042430][ T8253]  ? __asan_memcpy+0x40/0x70
[  110.042447][ T8253]  ? __skb_clone+0x63/0x7a0
[  110.042467][ T8253]  netlink_rcv_skb+0x232/0x4b0
[  110.042485][ T8253]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  110.042501][ T8253]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  110.042520][ T8253]  ? netlink_deliver_tap+0x2e/0x1b0
[  110.042536][ T8253]  ? netlink_deliver_tap+0x2e/0x1b0
[  110.042553][ T8253]  netlink_unicast+0x75c/0x8e0
[  110.042571][ T8253]  netlink_sendmsg+0x813/0xb40
[  110.042590][ T8253]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.042607][ T8253]  ? aa_sock_msg_perm+0xf1/0x1b0
[  110.042625][ T8253]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  110.042643][ T8253]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.042659][ T8253]  sock_write_iter+0x49b/0x4f0
[  110.042671][ T8253]  ? __pfx_sock_write_iter+0x10/0x10
[  110.042685][ T8253]  ? bpf_lsm_file_permission+0x9/0x20
[  110.042703][ T8253]  ? security_file_permission+0x75/0x260
[  110.042719][ T8253]  vfs_write+0x61d/0xb90
[  110.042741][ T8253]  ? __pfx_vfs_write+0x10/0x10
[  110.042759][ T8253]  ? __fget_files+0x2a/0x420
[  110.042777][ T8253]  ksys_write+0x150/0x270
[  110.042794][ T8253]  ? __pfx_ksys_write+0x10/0x10
[  110.042813][ T8253]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.042826][ T8253]  do_syscall_64+0x15f/0xf80
[  110.042845][ T8253]  ? trace_irq_disable+0x3b/0x140
[  110.042867][ T8253]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.042882][ T8253] RIP: 0033:0x7f1bd459cdd9
[  110.042898][ T8253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.042910][ T8253] RSP: 002b:00007f1bd550c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  110.042926][ T8253] RAX: ffffffffffffffda RBX: 00007f1bd4815fa0 RCX: 00007f1bd459cdd9
[  110.042945][ T8253] RDX: 00000000000000b9 RSI: 0000200000000080 RDI: 0000000000000004
[  110.042953][ T8253] RBP: 00007f1bd4632d69 R08: 0000000000000000 R09: 0000000000000000
[  110.042961][ T8253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.042969][ T8253] R13: 00007f1bd4816038 R14: 00007f1bd4815fa0 R15: 00007ffc48ea35d8
[  110.042983][ T8253]  </TASK>
[  110.236733][ T8256] tipc: MTU too low for tipc bearer
[  112.528477][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.288620][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
