last executing test programs:

3m56.893548536s ago: executing program 1 (id=31515):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x81, @none, 0x0, 0x1}, 0xe) (async)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10001)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async)
listen(r0, 0x5) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10)
getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x20) (async)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000004c0)=ANY=[], 0x8)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_generic(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000067c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)
getsockopt$inet6_opts(r4, 0x29, 0x36, 0xffffffffffffffff, &(0x7f00000000c0)) (async)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async)
r7 = accept4$unix(r0, 0x0, 0x0, 0x0)
sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) (async)
recvmsg(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012)

3m56.814877849s ago: executing program 1 (id=31517):
getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000200))
socket(0x5, 0x803, 0x0)
socket$inet6(0xa, 0x808, 0x0)
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c4)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xffffffff}, 0x8)
close(r1)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0x752a}, @multicast1, @broadcast, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m56.724833252s ago: executing program 1 (id=31519):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)

3m56.721479152s ago: executing program 1 (id=31520):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)={0x2c, 0x75, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str=']\a\x00'}, @typed={0x14, 0x86, 0x0, 0x0, @ipv6=@mcast2}]}, 0x2c}], 0x1}, 0x786e61159cb8f959)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r3 = socket(0x1, 0x80000, 0x1006)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000100)={0x80, 0xd, 0x7, 0x6, 0x9, 0x80, 0xfffc}, 0xc)
r4 = accept4(r1, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)

3m55.924143216s ago: executing program 1 (id=31524):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000040000100800000014100000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r2, 0x10000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r3}, 0x38)
r4 = socket$inet(0x2, 0x1, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
listen(r5, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @empty=0xe0000002}, 0x10)
connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080)=0x9, 0x8)

3m53.814679877s ago: executing program 1 (id=31550):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x7d4165cc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x7d4165c9)
listen(r2, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8)
listen(r5, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e23, 0x4, @remote, 0xe3}}, 0x0, 0x0, 0x3f, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c1000feffffff00000000", 0x58}], 0x1)

3m53.593736446s ago: executing program 32 (id=31550):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x7d4165cc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x7d4165c9)
listen(r2, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8)
listen(r5, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e23, 0x4, @remote, 0xe3}}, 0x0, 0x0, 0x3f, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c1000feffffff00000000", 0x58}], 0x1)

1.171303727s ago: executing program 2 (id=34729):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0xffffff00, 'veth0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x89, 0x6, 0x14}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x6, 0x3, 'pptp\x00', {0x760}}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x11}}, @common=@inet=@set2={{0x28}, {{0x1, 0x6, 0x2}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x10000, 0x2, 'syz1\x00', {0xe0000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3)
r6 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x8, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, 0x0, 0x4c050)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10)
write$tun(r8, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xfdef)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r10=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="21000000200000002800128008000100687372001c00028008000100", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r10, @ANYBLOB="0d080000000002", @ANYBLOB="243f4c95186f42c023253711bbff1dba39c1ce611c0507aba8ca667d951b472bca99f286da85b1937bd4de408c568cb0f006b502d732496035a480d07b917a380e4f8f0ff5f22ca34132a92659c5cba55bef5b913e27e29dea6e7369bc0f3a46531649b79d8b46913f5db2b2f8fe2114eb14f2c2b5d50d7f2461d7f53dfdc365f2f139b055b0ce035a5e0981bca4ae1e9d89f8411816806dec59798560c62726ff2f054afe170693281aaf3e7dcfcdd92c612fea68dead9825180a59ca305ad4843b463d4d922d51325bfad94f6f4382", @ANYRES8, @ANYRESOCT=0x0], 0x48}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040010010250400050010000500000008001b000000000083762a00140b6bdad98a9b38fae2dd5589efb5db275ffbf45c8a4f97c0d1394905282bd069b80713771aa11f7c854403d5f50180b891ca3f90518c31dc"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

1.111033828s ago: executing program 3 (id=34732):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000340))
preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0xf9, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001200)=ANY=[@ANYBLOB="80010000100033060200000c00000000ac14145a000000000000000000000000ac1e0001d5ac3b73c4fab9d70000000000000000000000000000ba13f8cfdada", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x20000881}, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x8d, &(0x7f00000001c0)=""/141, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x6, 0x4, 0xfffffff7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x4, 0x1, 0x10, 0x1}, {0x4, 0x3, 0x5, 0x6}], 0x10, 0xffffffa7}, 0x94)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x110, r1, 0x28fea000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0xe6, 0xe1, &(0x7f0000000480)="0560776eacb505d019a6f383c2300ff35946ce8a0ef4e25f12c30a66d92243200bbf6538d53ddb71cf915cca5ff012c3dfcbcde6b96376fa309019c0a6306fdfd8fee64ec97b6fce2973a420ccd4736cbe0b9fef73d748f5f067abb4372b8a4850bf56e05ac6eb08160cc7544a554d23df4450d2d690cb707c192c0a5264ab377d888342d0fc582da19c25761e3bfb807251898ab6a4c5ee6ba6f2b5d03e1bf1ac9f5ad7259d16b70663efadfdde2bf33b6de5a697f0564ea62ac7e1fba11780b04c6bfb1802d800cfce08a0d00d63f05324832eb701305798132067ea6b3fe1ac9ff3fb0cce", &(0x7f0000000580)=""/225, 0x0, 0x0, 0xf0, 0x11, &(0x7f0000000680)="a9a7dbe62745895134618b60e7b606d46c24d5fca7d73dc7167102f88e58acdb13b9fdca4b77ef213a0bc3bd1525f3c1dc7122f5c2ebdfe515cd27cced2da0de96f41293b82d715f2e2f0a82ea28428649a2c165de56ac10efda737b7a642023e507114d243039d65bba295f26685288eeb55d9277793327dc78ba089821f5d642de666b9cf214429a0baeb315552541f9a957cb9037a8ac1f42021b0c60f630df88fd445098c0f4404967cf9413b52c9cd1bbce209331ab7e4f8b2d4ae72167cf81786b2c949d2682608e78641475cc047e838c53bf7d007b7e8dc13ee9e5fd82073b0667f76e416a5650c1499ba2e0", &(0x7f0000000780)="2257458d5490de8d86a5489fa90981f9d9", 0x4, 0x0, 0x5}, 0x50)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xffe3, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x5, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)

1.01051593s ago: executing program 3 (id=34733):
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) (async)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8})
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x3, 0xc})
writev(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="80", 0x1}], 0x1) (async)
writev(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="80", 0x1}], 0x1)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r3, &(0x7f0000000940), &(0x7f00000002c0)=@tcp6=r2}, 0x20)
recvmmsg$unix(r2, &(0x7f0000000c40), 0x40002ce, 0x80, 0x0)
socket$rds(0x15, 0x5, 0x0) (async)
r6 = socket$rds(0x15, 0x5, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40)
bind$rds(r6, 0x0, 0x0) (async)
bind$rds(r6, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x11, r6, 0xfffff000)

1.009594951s ago: executing program 3 (id=34734):
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
accept4(r0, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) (async)
recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)

920.865785ms ago: executing program 3 (id=34735):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2e0000005ee5373526a0b79f3cd77bed09c1e33f071edb000000000000000000000000b1"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000001bc0)=[{{&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)="1e1dbe8de0351b4054a8bfa9cdd3f02f80c6b7a630ae4ad4f025c205591757e2b6c0666b4a7b288bfda1a1c1163421169d3c19311d77b58db87f75c1a2f4b7852d52ae9e29cb10f909a9ac0ecba687b199427508b5c3eeb983c3293f5d636015b2c506c6349c26537b6a5fb64103370577f9e8e5de09ea7b9d64ea70000102b2b60a34e7e7b5", 0x86}], 0x1, &(0x7f0000001580)=[{0x70, 0x101, 0x6, "e07f13ac496d4110ed79c355152cd6b370f3c426ea232fbd01feab0de01f39bbb33e71b5189075d5b7135f8c0ebb5a5a34d0141e3caa921f5ed79be018f7b453032b741bb4de153e1db55edc9ce150c2c354e27a3ce957285f2dd692d2b1fcfb"}, {0x50, 0x110, 0x7, "5fc25dacfee41aa49ee522526d7fc27f185f5aef64703c2bab301388a89a07bcf2bd57a4d18d4d645802f00883fff0c445c62932d34f75512936790d"}, {0x108, 0x115, 0x200, "2fd9c5aa8d7077c9d725a98d62f81dfed284706290e9adb5e07b01b73cc8d92c0b8c3d85c5f1e7f5779b2b8c289bf08774affaa67fbedb40f15726abedcbee52864e18dc4b0d3ecfadd0e649d694c6fff49ddde7adec40a7f882438f8fd9f55e3278fb231ccc1d2b5f2fc7b42ee2712fe02c0a1bd694c5324cc1ba0e58fa570bf6a35ff5cf75b1defefce04bb027d8b880d0a0efabb5cba082904dc9c7817493af841bedce5395d662640d0f756e7814cb78b83ab78e03538c0a1f643c3ccfe9864e5c039133aaeddb25c1e3c401b58b73ad96f0f39753a145aedae4309433f06cb5ef0673f552a7f9c93944ad92718c6b8da796"}, {0xc0, 0x10e, 0x1, "e21c9bf7b2c25ddd40af1e4de1a26579484a785f101dcec45e44c64bf0d8531a12d918223ab680a510fbc86fe3f98776e07d6348ca4bfe4c5a51ecf293e66caf00ac9b4840d50f6108f462c51fe86507140697520cb0328632fe38f875bd9210eda78794bbb8e62eaa1c8605978eb84cecfcbf4c5c29818c75e18dbbf4160d5634a8757b8dd6c96a5138b3f73ed861f57240c4e04075b2e1b1b3ea80980f8d00d5c04abd9835b8ac8f817f29a7"}], 0x288}}, {{&(0x7f0000001840)=@rc={0x1f, @any, 0xe}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000018c0)="623c3bb59be8f7b88caf606c295920ef7a409f9edfd2d849460a79eae11c3ef9d2caa9af582910516fef825da68f3733bfa70c2194044590abb08496aa890771e75307a876ffbfb8ce7e3fac5da02b35697cffb82b4d29c6ef221f3bedae026885414a9c9ab7f7218f352e1e4da936871c84832d9b81b329f6a93efdb5cd55bc48518a66e80062388f91c5758d253c67e50fa2290ef04993b4e4628a16ee9c5b13183fcdbf9407c9d688582fc060311573901780503770417098613061594edec399458a71c1b13352a11cb7010928ab7b8bbc50db273356cdc82090fd257fe5905faf0d4e8b", 0xe6}, {&(0x7f00000019c0)="2283c7fb8a7e4798042bdebd6d36fe", 0xf}, {&(0x7f0000001a00)="f01f11581f0633003a1c0f291be62c87f32dbfc53415426946d1727cbdebd8701b7b825378fa71e3fe94ae47892745065936914416b1529a4a9f03", 0x3b}], 0x3, &(0x7f0000001a80)=[{0x68, 0x10b, 0x13ce, "da670e1591a520f87f86b2ccbfe32e8dc20c5a895e1099dcfb1fefcb5cbbbd80d4b4cb47e11eb1afb8f3f9eee18c8d4e4ac3d4e408037d3d6a78893a73340e7705d1f07377426260c649b3de32fd41a10ae5683c68a520"}, {0xa8, 0x104, 0xfff, "2412a863d03fc18d6089451ea424989be69cf60c5009698da2f099727227c116a85df8d03d47663a7ac2edb98cfc329efb6da4f49d0f172b8b69eb236708662ed014f3c345684b9873b6a4a198825096558100f4ff3cd9a8f1d2655129eee46fd8577624a8e7d85320fcf9686c529c72a16980e8b4dc426b7611bb4cff5387562aa8ce72c02cdaf0e324c274eebc3c08f7ba"}], 0x110}}], 0x2, 0xc000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$packet(0x11, 0x2, 0x300)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000005080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)=ANY=[@ANYBLOB="500000000303000000000000000000000a0000080c00020400000000000000050c000200fffffffc000000020c000200ffff88fe0000ffff0c000200ffffffff000000070c000200fffffffd00000000"], 0x50}, 0x1, 0x0, 0x0, 0x10894}, 0x4000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000aefff000900020073797a310000ffdf0900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
recvmmsg(r4, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x34, 0x40, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x1c, 0x1c2, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@typed={0x12, 0x91, 0x0, 0x0, @str='/dev/qrtr-tun\x00'}]}]}, @nested={0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x38, r5, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x4000880)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={<r8=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x3, 0x76c1, 0xfffff801, r8}, 0x10)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000040)={r8, 0x1, 0x204}, 0x8)
recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r9, &(0x7f0000009100)={0x0, 0x0, &(0x7f00000090c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000030701010000000000000000070000030900010073797a31000000000c00064000000000000000050c00080000000000000000010c00024000000000000000016a09271969728ba1c932d6365cbc0031a3c47e372d68862ad06a36b89e54d1020aac587d759f59cc37bae1439918cefdc28c5b120c22b0ba8e40b908b932fc"], 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x44880)

287.744603ms ago: executing program 2 (id=34736):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$can_bcm(0x1d, 0x2, 0x2)
socket(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)

287.380589ms ago: executing program 0 (id=34737):
r0 = socket(0x27, 0xb64811f48bfac744, 0x20000)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @typedef, @fwd={0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x0, 0x6}]}, @ptr, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x0, 0x796}]}]}}, 0x0, 0x8a}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r1}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000340)="a9", 0x0}, 0x20)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
close(0x4)
close(0x3)

286.957417ms ago: executing program 2 (id=34738):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1f}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
listen(r0, 0x5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

208.515909ms ago: executing program 0 (id=34739):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xffff, 0x4}, {}, {0xffe0, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80010001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x240488d0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db394", 0x23}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000540)=""/83, 0x53}], 0x2}, 0x0)
r6 = socket(0x28, 0x5, 0x0)
r7 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r7, 0x4)
connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000cc5293daeca0890ef003b7fbd9ff5cdab9f628f18307b1f8d5b3955f8857a8f260a78fc7712f4897c100e1a5c8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
close(0x4)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000200)=r8, 0x4)

129.647062ms ago: executing program 0 (id=34740):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x1c, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_DATA_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004007}, 0x40)
listen(r0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r3 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)

128.887372ms ago: executing program 2 (id=34741):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x7, 0x8}}, [@TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x7, 0x1c, 0x5, 0x1, 0x0, 0x5d08002, 0x8}}, {0x14, 0x2, [0x4, 0x5, 0x401, 0x1, 0x5, 0x7f, 0x800, 0x9]}}]}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0xb, 0x3}}, {0xa, 0x2, [0xa37, 0xfff, 0x8]}}, {{0x1c, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe, 0x3}}, {0xa, 0x2, [0x6, 0x8, 0x9]}}]}]}, 0x2c}}, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000002c0))
listen(r0, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0) (async)
r6 = socket$pppoe(0x18, 0x1, 0x0)
getpeername(r6, 0x0, &(0x7f0000004b40)) (async)
connect$unix(r5, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x3}, 0x28) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1f0bd26, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x2, {@in6_addr=@loopback, 0x800}}}]}, 0x38}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000406010100000000000900000000000005000100074b81c0cce701913070dfb47835cb850e6f60adc2505da1ccae3d1abb743ffdad19c0a9953c72e7d84fea192708710900000000000000036f90bc444852fb48d57f6e83e15642171c941c33eabe58f89af9b041b040577e0d4c67118e8cf367c5a0deaa024b205b8cfccc8444ffabf7f23174ef98b18ff440e190"], 0x1c}, 0x1, 0xfff0, 0x0, 0x200400c0}, 0x20004844) (async)
unshare(0x400)
r10 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r10, &(0x7f00000012c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="59b6c909", 0x4}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000200)="f87be602784b", 0x6}], 0x1}}], 0x2, 0x4c040) (async)
shutdown(r10, 0x1) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9, 0x1}, 0x8)

70.870779ms ago: executing program 0 (id=34742):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa, 0x0, 0xffe0}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xffe3, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x5, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)

70.471538ms ago: executing program 3 (id=34743):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) (async)
r4 = socket$vsock_stream(0x28, 0x1, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r5)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="e06cbbaec39fea1ccd2b75cfdea62f4084b3c18df3ce1e7ac90a01eda01d2d63207cc289d165fecb2b05f052d38927cfac4bf7c2e635062d3c05ddd4ff7f1b542d93ab312d02fc880771628739c019423b4608da52a4afb06c694a94fb72bef21cf81e2cbb48bbf24ad0dc4b661fd2caeb78158da1b2aef31c5fd551a9b3c0e8f299565cf3e3e7c98b972904", @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000009}, 0x8040840)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
listen(r4, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async)
writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x30004}], 0x2)

69.792451ms ago: executing program 2 (id=34744):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa0440, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x3})
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x80)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=r2], 0x3c}}, 0x0)
listen(r2, 0x0)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080), 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x2c, r6, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000002340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002300)={&(0x7f0000000f00)={0x13cc, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1ff, 0x49}}}}, [@NL80211_ATTR_TESTDATA={0x87, 0x45, "ef1ac6b34295097add3f72aceb549bd9b7acb3b86949ffa10b307ac589c0bf873978d5166d24e6cdab88e873638e366caebe8bb23f5dd1a6855fe3e973c6caf1d6f3a9e62b55ef9bc96fb254f2d36b8f36e3486b1ff00a302105596f49042d0bb58921ab7d8e0290340b32428bc5434109e86c8370e8f89535c8578ce2c0094fdc1d61"}, @NL80211_ATTR_TESTDATA={0xf4, 0x45, "9b7abeb2eb199b9d164226972dc1531cd67b7630b849dba6419aed2d0704569ed7da8e7f05f6ff8f42b20cee15df9a37b7f4f8637295ead1406ca20da17a6d6f2dc1baed947033d693ed50cbcd6b58a8fb0b353b43436f410fd5c4bb101c703dee0cc541af92b0a2668abf2eee0d74d0b5af642a0d0cc50e99181f8f17d1271eae584f0622422580d6d83ecfe5ed1a4905d1fef7edcbe87c3f9beb514c39f174869b12c1cd36a5a77c8f28b78995e6308f3d4f3cd1539c27b3fa1ae1d0ca25495aa74feb5268de51ca1710a9ea5cc3a25ad2098c2e1308b619366b383f3e2b302e6bc14c47f1e7cc2420c232f2fc62be"}, @NL80211_ATTR_TESTDATA={0x56, 0x45, "025e969fcb000eb575248f1dced46c613df791db49cced1d9eca433669609070930a2334d905384098f1d8b053231cc78136ebe10f9b3c20d0b8602c86bb718034f339370ee036789a3eabb11b26104798bd"}, @NL80211_ATTR_TESTDATA={0xd8, 0x45, "28000b283742d2209cd6dba948600ba35af24f58e9a1d0b34da6734db741cb486b9bb59fb84e9d92217d8dbb5ca8f04bc5da8bbde29d2b0cb73c0493b4a6aa16f1e4e6f79e898da37c5a4e2db29cc7c76acfe684dff7df6c5756e66629528531783f50935827c901cc7c3f9b12bc08adc8aa2774caadc3770e710fa425015aa40bc41568a73064d558f8187d59a5b26539031506be5d2808cbb569d19fb538e14a5cabf4f4820cce2b5fa23a8de619bfa7eaa7ee2e096f3901c1ea49de29d1b43ad5087991949f5d3731a177069fbb89e60d7d98"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "528e54ca1068619e4b47f95851277d0a57965e9e9dcc54dceaa3b74cfeb2891d5fbda7f7d9ccae62963793db305f24b51e69a9d98c51c4c37ac9da235c6dbdb219024175225fc0316ec689a2eaab598f40607abe4521e64376431ebd449c21632f9aaa71888b837dcf8421543315def8a8a7a1552017851fa6a0e432fac1790f489ef980071f7065da1cc0233a4ead662baa213a6ff66e664c15d407ba79a33306ffc900ca7d7e7d598c9fd7ba8986a78a2f343dd381c3b91c646fca7389562ed0564c3f93cdaf3ed414feac2910840a505423ecef2a55d0f7bdb5c2b9b276a8eecbf2177cfff03728f72bff5c0c60b4bb042aaff3f7fd947d5764e3fd7daf0149b120f1fb7f2c40e086255650d4d6c0adbec793083c9990090d94414a38f4a12a19c9519a008bcfa665db849e001020bd2bbeb5ac4ef03e80650c003c6e56b590683697f62b1b08f9e42a6a94f077e1e7f20779b5bb5098e1c2e9a5696be2457050fcb7de16d9476ffcfe8f3d79905b9b3e7ae0ea22ca2e2eeaaa319ccbd3b816ba9e032949179147dee3b652969755b991fe04236212bfbec4be91d687f421b4e3ecec83db9124060464729adbf731ef63a7ba4c90580a3b3c29cbe472c58b3b3fd5de53c466a9b1baeefd6defe4a45c83f21407fd9c96c3b40bdd1881666b717aa7a91e676aa5644fe47fc3862eb6430088fbc544aa18acf2a4ef776a7e6f59e1068453febb13fd2488c9b95576c77fa357d356348341479fe44d5e1b8a3f924d73ff7553984484fd90a10f759796dcb800e21042eb32bdd46f4bbd9fc2fa699c548f6ae724f9b712faac5d749ff82d9707f120dd3998a02122f78a3c67ca6f3bbd17e217599cdfdb1a3bcde77639dbcfee9a8333f3c4ea2748fd42c797f018423553ac98856066c2c6db90c080f222c0932a54ee0c925b210140241049b158fa072164e39481854866a83c301635812ea1320e691f076724c2a90fbc3f26cb99d43045cf0d278e5d915ce1c36a6e32dc94f6f6d9e40c4a95ede9bee7fe2c435503fa33786377b384d8452bc6e8921693b5179f8dcdb6bb39579ef966b934b50d01537843c103a44bca5f78fe12099e8d1ed90617b8d7786ceffb521083461ecce2eba106735855464b0e5de326da93b5396329ca2390013abf4953861e8662cfcf7ce201791429e9d4cb581d547dff934b4786687ba1501cf6f7290d76e8aa4e8802714c1e1a1fc57772cc60fc148937cfc5537ba762a9731c6473c188a053a520899a0f039a2ac6ace7fe52e7551bd6f8e2a29dd606c673c20349e776115a58578a5670f60677868c95309cf131a35f73bddcb57b75436feed0131f7586857de58048e7b18f0466b400229f17da64467abf530ffe3b12398e2d27b47c8129d0e0be3f0e6a2bea2e4c407f563cb7be425a275d4637223c7115aecc20e79c75027f38f231b1d4bb1fabf17af098a8975dc74ee3d14dfd40cd17afd13e894e48746c719e6cc0699266695ceb37b4e0c911e0eae83e9c370c6023638fc44e98543b5f58ca937088e0e6b982d0823d6187eaca94c08c192506ced84c36d68dae5e05189f46417b79c5d8e5af4ca0d4f58b0122df37f48e65b90312d68e56a08f61fd364519ecbf2b6039142cda0b586559538831cc8541c16f99126a87c04d51f1706662c9c6968e18c01f1f78e8e0a3a8614a77688f099727997d17d29767616d617755d436515b515eaabbb789585056741769b43cac9bb64d64f6c7ba90301c9a992758d87065fed9141feea7a69e41bdfb34ad4ca0c64cec6e7050c90794b2c563be0af1c7bd6ba31952dee25568ca17348ea1113819f87dc9baadb91763426c8d0d1ef0f9dc5ad129f8723bacbb2bdd6b634a82790bff7f4f2844e964f735cd0b14624cb64fbbe4a64f297757642b0952fee5984a2bc13785b2e989b7f26e883d43d88290be71d12d504a49df2c3b7cde1eb6fe19f3e6b5d438c0d0e6f3c26eecc3e5ab4ce4ab051170b9b53034449b60600f3c7dc1661f8368b3f891ba3429d06a3245996baa43656a88db3d4ce53db8edca4567e7aa0eb7492deed18af13064bbc486a9285d9f0c4978ceabf0983d27cbd17b99face6dc21e7c402aabf676feb178b7d6d66263346249af0fac07157c3cc52fdf36d8c0dc5d0764b901f6984851a4a452184cd9829e0d42fbabf42682407386670a2c59742d715469dbe6b0987d7553a03d7fad7eeb5ac5947baabc2ce11d1d2c0b15e9ff50adeebcd68c0b9caa71b5ad64394bbfcf7e81a1223990f4695a9a6ff3c1d19372701113cd67ab41452f966c064b6c29ffa282324e5036d721142680d18b8980ff8ed39728a0a8ee7c8b7768ab5a5011bf6f74b0b004a259d50282e25944cf68a134084d846fa4f32af47fc55da71fa253eaf05a19a4ffbe90f74c6ba03982909c4015899c52fdddfe2f45bf2dc090be04e902e45d8c140f9cb052ec632c70759b9f185d0ceecf8240b890a7f934e39a9d29d5a683ff7ea8ca37ba78456f74cebb229701001c6d7745035cbdf7f7f7e05446e70762634010b0e1ae3b79b1caf0543574a3680c6c7c5676c5e1b868d7142cb6c9a5bf50fd1a4cb922ee578ae4a446a6ebf5b11643e484b98d822ae52a08edf8548dfe93883f4af6117cfa50a8bc1099851654e79d4eff5a2157da97da237255c679dee49b39e35668af65841427d6b9b9e575bbde43f5120d02daa2b581f33a3b8fc2060b0b39ff0483672baa7856a9d36ce67e10b6bc22b8d19e3eeb1f92188b6d788ec2a2d8c33faa86952cd28cdda1e3c9a1e2429613880add7267d2dae52042c518301c93fd4939a5e295c87ed4d0f5a6cc79d7f547fd3698683ee02f50d04ca2a74f2f927c35520e19b74b4d96bb8fdaaccfe9db10d0252289d4de569760e3e63ed45b428b6a436806ae400d431871f992c7fcd5368bd69919be136923e1653ca633384dd20fbfb0262bf5916ce1759b364eaf92048ff850babe46eef5b597fcc69280a9b399c45bebc1871051b2558397dbd9e4ee482ac9d3d346c95294300a7a6addc285c22c83330b0794c6bea15f8f7d19ae36f7a52f120200829b4e358f32e7bf60123e1918c4a2062fe2f7111bcda3b67ceeac69bdb3eb79f6d74bf6a6767279115691ac9270d25d8fa42c58d423d007d26e2f45f6f3be2c750e10f033ff790356bc93599666f26661ad7c49e26e07ada70b66f593f5f45537f38481f949254eda772a577b67d1df14379d54bc469b7a24114193fa2ebc0b363df0d434d96a60e1277b705fa519701e6c21fc35e31bd38a884a9804f8c5b3290f2875fe0da264ac2822ef03098f59b38181ed530b2973f0de7a09f394c0c81f6712647519de18e64d7cd568c4897a6985f6b6b36a3ed883057191bb52cb16cef75914b9c4a88cbb922ac2dc93c4277c3ef6fd3d77f6c15487677a955a4837be5e6b7ef15da9cad2d1254e2f13b748a66d91ff4cd3166c79ee9569fe42cc8fff846ff5a5a30dedad8e6ba6b96570fc137ced9fdd44c571d432ad6b436d9345b2551d0a3d705cb45d3a1e94c90a1a95e62ff486ac11436e1564bf6efc4be8e6a19c3d3e4fee7a40acac8ecd203d6e4afe0b606aff0affe2719249c995668764f8a0a515e37ee9733d63bcc828270048e9d720b976171c0173693258e2c778f3563faee7156600aed0d3c1ef7b9ac14387fa04cf4277e597abaa5fba5741e9bfa983ce2495a23bbbf025308823abe00d5edaf6ed114402b928b7739f5e3da3df12ca69dcf488c58064ed49d9976a93d85ae66952a780c07dc24669c3dc9aa72e4b5da333a470af4394644718a0c050daa49fd407b4400d3cce62c97609ee5aa63e5b048dc6df53c01f12b3f054c0cadce0b1daf38d807df1dcf6b9347a8dac3a4fa7adf81a482187f7965f319f4e74280b71f77d9aba890beb55e04da7cb0a9c31346584b894d1a481547ed8329e5117c899ae580cf2a4f72f59154b810cb765214a0106e171841138023fdc3968c4160824f87939b385bbe26ca9b2bbe6537557f9c854b9ef1b73be07c3c8bfd52ed9a1d28891551c14a8ba36c855e570eff8360c7bfe1868c6bf0ed601db222921fef647d88a6b311d60cc32b82ab6dfb6164a4faf2bc77ba5e4e0a428d24478adc24c33c69fc00f5b4f09ae864ed25c1dbde8825c675f49e46da5e5366ccd6cf45bafcc4bf73ecde39f220e6d3aad60896f41b70449209258f4894b37313b9269c32b3412b8f704b8d6c690a36f4320d699d439c693b7350d398406b995c73fb4297845a5ea6f1009760f5f11f48ce786338777efe9db43845cdc10a310615f14b109c234b157cf004a9316be7c1aff2e509b388f53fc19e052859affcfb0f108cae10fe9df4ba6e35943e56d8249cdad776c262f36ea9668e3f6000172bdd57c3aa54b807466fc5e30d77d75c013a7bccf76de11d880d05dc0544804e99253baed0496777a08184a3752589f9742a98e199f9c5dbc0854a45ac389fae151b728a0ee6b092543e37d194d13fd0b9abc6c0401fb1bdc05c1be2c23ca9e02e893a0a5b7ec529fdf45e1901804a08eaeb72b9dde7df0e19a7a88d3c5529790e68d6ee84a38a4158e234b81abfceb966ede727b8d94110640bd851cc40f6a3bdad6f8317f3d8c6d1478b2d080eeca95306e6dff861c79495a1e549dda5678b2b4dcc12ad25b7ea329e88053bfa687adffbb05520d0e50fa90ab8f1f5d4606133ce5dc0f02762b1cd47a0bbc483fce7a5c5d2c57728e0703276d2ddbf0a2170cd0bef5b9e863a4c9f074a15338d74ea93ec872ad6e0ad0380837a1e0855555a85e65be856824371eca24c78c1a6a9385f549b8dc38059d58ec8d2982399134d9ff06c0963e981596708e1086c76d3bb5c7a52c7f99b6c0c2155e563b2011dbbce1c8960ed68a8c71f91a697862ec208472d78cd7b232eb6a07a504f0661adfc3b7cfb622e5b7085c12b7da55057e7d4d709da3b937f9636c9133072c25d3cf2f0f1ca0bfaf5433d2169c0d8ecb4b5e3c98f894e0b4dca5ecb7f9e658b5b65b970124c91dccd214b8173ebe76ac479125123e4b02e2d6a59f3581dc0a9ff6d7c240687e30871fc648ff488255b000b54933137eb048c809e351e1b390c201d495ba1186a49d1779761430e33d3a0197a3f457f17d30d74c7f0d75d07e63dce7af0853797c6fa2bb2807088234f743d270a78cb65abdf7783438aa774d261a394477fe149aec21e4e8fecfe66d68a7137da6ac7d2cbd6ece002cd8720787c8dff88b43dfd1cb192b26bf748f2eb996d1ef639d980cece8620c4156dbbdc167d5b2d82dc5906e29adf48252dd574806b1216c45e955be427311b1b7129ede005fcf04983d9124401fa64f0e4c553f22de69ec7b20a1baca313993d5c83059694d47cf389d4bcd067b85319889fe5c5644094f2cc2a89bbdb4ae32a01283c943d877b28026963a87eb33c3810387068a8d46a0b3e40cc599260705846547651a3c8f202c45feeed5351d5c04b1337e8d96050427110dc11661d49568cebd93b3b34c80b581c4d9af7b76688dc98f24ea8ae66a0ea5868ac09d4bd39728df7afd570f56839bb8d1e9144cae4367bf8cf59495a1a3558629f3250b552caad61080b4e43c9c6565906137bf74ce2babded5721ec0fef14edc9c52345e605414840f3f2f542222013124072d3108e3f52754eccbfc900afd950b819981acd517e97ce0b1282ddc28edd3d8e39fc13ed90b1ab526753118d748e4033505a6496d661adebf328289f72c473b2b53"}, @NL80211_ATTR_TESTDATA={0xf1, 0x45, "bf1e5b0f4f7eb870832a3689f0183c19fbd9054ea760a319c7660df518024791481456395e8f9ef37d66cbad285bd6ba9c6341729361f86b3da412133092c456d487b40df9da93c1ec17425c67ead9249829ce45dde0d5ce781254df7a0425d8c68accb8639a7e4fb0f744976886fcadcb4fe93f2ca651089c9456edd8e030478a23d434e480dacd652e62d429c0618a4fa62748f39ea26a3a3c3969e5d8a723a83b2e19963ddde14535454c8f88c6847b713a7a60f097c45a3de0944b58577fe7bc0a7de0f8aa583fd8a8550a0f619964c9102bf61f79f4806967193dbffcfa865ea5599a96bbd405bc12c9c5"}]}, 0x13cc}, 0x1, 0x0, 0x0, 0x8}, 0x20084890)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
close(0x4)
close(0x3)

66.08291ms ago: executing program 0 (id=34745):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000000000001000000000000000000080000000000000000000000000000010000000000000000000000000000ffffffff00000000ffffffffffffffff0000000000000000faffffffffffffff0400000000000000030000000000000004000000b56b6e000001030200000000"], 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4)
close(r0)

534.94µs ago: executing program 3 (id=34746):
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
write(r1, &(0x7f0000000040)="1c00000018002551075c0165ff0ffc02802000030004000500e1000c04", 0x1d)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x5)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@fallback, 0xffffffffffffffff, 0x1, 0x8}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004018}, 0x2004c040)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x6040, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000340)="ee", &(0x7f0000000000)=""/6, 0x2}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
ioctl$OCFS2_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000300)={0x2, 0x2, 0x9, 0x400, 0xae, 0x11})
r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$NS_GET_PARENT(r7, 0xb702, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73229c52bbea23870200000079d3c7a519afc7d2dff1cc9fe1b9bd41c5d0b4f2d04979d68cc3471637e69740313dd0f31448193bd26131968d5f790e1429b24ba01f24670353dc73659f4a40f9972fa07c53e4c92d84f3394d5ead33881c01ec616a7a5d6f7ef1c656", 0x96}], 0x1}, 0x20048020)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f000000a4c0)=[{{0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000007b80)="5d884be8d0d6090822962b9cb900cff99d96220f94a95b1e15f1bf6966afb6a4afb9f88097b0785f3e5af56256ba774cf2278c1593bcd5e4eef0580864f5ccc735685a8a5e205fef2d948c2c6761a904f658ee00dbb034e650881d8df19fc0450cc1602df04717e537b9eaf41611af67973710aab11291ceadd5cdc14a35019fffac632c83f0c4ae56eba2f874eb0cf38b2bb9c4880813b258d6311407f8ff1764c91e871da255", 0xa7}, {&(0x7f0000007c40)="b5c958679567abf2d1624192ca672bceaf5a2571ace322991c3c0a2eea5b3f33fa3579d6e32d090eca4743b72bd3d54f37b10de5d522fffc8602095d2a3692eff2a089b5c2bee66a4b573f9677af8b34940f8b737f7c517fa3881e02d9bb8c5b179ad3a61285e5c28aba54755787c08a04c1e0b258df89a0d886da1bec01f822729fa7f70ed759f829ab7adf77b02cdcdf7a92770578f5b2c1b3dc57d7e8709eeb623b9d9ba03807da4f762ee5aa8846182d97a41a50275a6845036c55db554c4df3749fc5217cc5bdf441daeae2dc8ea29c73fe0ce2", 0xd6}, {&(0x7f0000007d40)="b4e5e1fa0f2db20cafef31e623d24399c99aa4b3329a66a2b070eacf74d2c34e3a9c88c6fd56bd5f4b874d0a3cff367ff6d52b44d060cab6a9f98aaec24e77f98803c4925c7fe14b788e1d47cfef3f5e7fb5665fc81bfdeca5d479c3c92b6db55cdf0476864ad1e2ed251afd3c6c076c611315770ba0efc423a75a0b20893e6b6757adf7a7ebdd8c01e2d8498b5d029703f3f2f00f8db59294b5b8ac3e5010c21406694b6db9f5982f246f6bbeea08069591420bf19805b662eb05c89f67f9fada7e17ec9b371d19b9b09745448c7ecdc3380d695055b9a788e1af45f82983efaa2580370841b4e3d1", 0xe9}, {&(0x7f0000007e40)="b8e64a6afcef5e8a6acd15b6b4a32a4374db754654a5b939283cd1f0f957ea4bff0a623e7c70bac6e80086ba70a5bcf91c8b2dcdf7e9fa94e1c62693091219efc6cdc0c32aebd06f1685734b51eb479217fd6064703eed107b8a4b", 0x5b}], 0x4}}, {{0x0, 0x0, &(0x7f0000009240)=[{&(0x7f0000008140)="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", 0x6c1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000009480)=[{0x18, 0x1, 0x1, "8f"}], 0x18}}], 0x3, 0x8800)
accept4$unix(r0, 0x0, 0x0, 0x0) (async)
r9 = accept4$unix(r0, 0x0, 0x0, 0x0)
sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) (async)
sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10)
recvmsg(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012)

315.38µs ago: executing program 0 (id=34747):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
r1 = socket(0x15, 0x80005, 0x0)
getsockopt(r1, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040))
connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r0, 0x0)
ppoll(&(0x7f0000000000)=[{r0, 0x205}], 0x1, 0x0, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) (async)
socket(0x15, 0x80005, 0x0) (async)
getsockopt(r1, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) (async)
connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) (async)
shutdown(r0, 0x0) (async)
ppoll(&(0x7f0000000000)=[{r0, 0x205}], 0x1, 0x0, 0x0, 0x0) (async)

0s ago: executing program 2 (id=34748):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x50, r2, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080)
connect$vsock_stream(r0, &(0x7f0000009080), 0x10)
connect$vsock_stream(r0, &(0x7f000000b840)={0x28, 0x0, 0x2710, @local}, 0x10)

kernel console output (not intermixed with test programs):

27]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[ 1512.713539][T19727]  mem_cgroup_swapin_charge_folio+0x262/0x390
[ 1512.713552][T19727]  __swap_cache_prepare_and_add+0xdc/0x700
[ 1512.713564][T19727]  ? page_rmappable_folio+0x9a/0x170
[ 1512.713580][T19727]  swap_cache_alloc_folio+0xf1/0x240
[ 1512.713591][T19727]  swap_cluster_readahead+0x355/0x670
[ 1512.713603][T19727]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1512.713618][T19727]  ? get_vma_policy+0x27b/0x3c0
[ 1512.713631][T19727]  swapin_readahead+0x196/0xc50
[ 1512.713642][T19727]  ? swap_table_get+0x1e/0x260
[ 1512.713653][T19727]  ? __pfx_swapin_readahead+0x10/0x10
[ 1512.713664][T19727]  ? swap_table_get+0x1e/0x260
[ 1512.713672][T19727]  ? swap_table_get+0x1e/0x260
[ 1512.713680][T19727]  ? swap_table_get+0x1e/0x260
[ 1512.713690][T19727]  ? swap_table_get+0x216/0x260
[ 1512.713699][T19727]  ? swap_cache_get_folio+0x2e4/0x2f0
[ 1512.713711][T19727]  do_swap_page+0x555/0x5120
[ 1512.713723][T19727]  ? __pte_offset_map+0x29/0x240
[ 1512.713734][T19727]  ? __pte_offset_map+0x29/0x240
[ 1512.713747][T19727]  ? do_swap_page+0x128/0x5120
[ 1512.713755][T19727]  ? __pfx_do_swap_page+0x10/0x10
[ 1512.713764][T19727]  ? __pte_offset_map+0x1ae/0x240
[ 1512.713775][T19727]  ? pte_offset_map_rw_nolock+0xea/0x160
[ 1512.713786][T19727]  handle_mm_fault+0x12d2/0x3170
[ 1512.713802][T19727]  ? handle_mm_fault+0xee/0x3170
[ 1512.713814][T19727]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1512.713823][T19727]  ? lock_vma_under_rcu+0x45a/0x500
[ 1512.713844][T19727]  do_user_addr_fault+0xa73/0x1340
[ 1512.713857][T19727]  ? rcu_is_watching+0x15/0xb0
[ 1512.713868][T19727]  ? trace_page_fault_user+0x84/0x1e0
[ 1512.713878][T19727]  exc_page_fault+0x6a/0xc0
[ 1512.713889][T19727]  asm_exc_page_fault+0x26/0x30
[ 1512.713898][T19727] RIP: 0033:0x7fe2a746a761
[ 1512.713907][T19727] Code: ff e8 f3 7d fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 69 3d 3e af ed 00 e8 03 00 00 48 8d 1d 3f b8 3a 00 <e8> 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f
[ 1512.713915][T19727] RSP: 002b:00007ffc8b4fd240 EFLAGS: 00010206
[ 1512.713924][T19727] RAX: 0000000000171459 RBX: 00007fe2a7815fa0 RCX: 0000000000171240
[ 1512.713930][T19727] RDX: 0000000000000219 RSI: 00007ffc8b4fd220 RDI: 00000000000003e8
[ 1512.713935][T19727] RBP: 00007fe2a7817da0 R08: 00000000200d748c R09: 3fffffffffffffff
[ 1512.713941][T19727] R10: 4000000000000000 R11: 0000000000000246 R12: 00000000001714d3
[ 1512.713947][T19727] R13: 00007fe2a781609c R14: 000000000017120a R15: 00007fe2a7816090
[ 1512.713960][T19727]  </TASK>
[ 1512.852860][T19727] memory: usage 307200kB, limit 307200kB, failcnt 3705
[ 1512.856098][T19727] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0
[ 1512.859489][T19727] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[ 1512.862708][T19727] Memory cgroup stats for /syz1:
[ 1512.862813][T19727] cache 0
[ 1512.866870][T19727] rss 0
[ 1512.868189][T19727] rss_huge 0
[ 1512.869695][T19727] shmem 0
[ 1512.871101][T19727] mapped_file 0
[ 1512.872828][T19727] dirty 0
[ 1512.874370][T19727] writeback 0
[ 1512.876206][T19727] workingset_refault_anon 19
[ 1512.880018][T19727] workingset_refault_file 836
[ 1512.882215][T19727] swap 204800
[ 1512.884687][T19727] swapcached 577536
[ 1512.886484][T19727] pgpgin 1299674
[ 1512.888127][T19727] pgpgout 1299672
[ 1512.889792][T19727] pgfault 2407798
[ 1512.891517][T19727] pgmajfault 36
[ 1512.893070][T19727] inactive_anon 8192
[ 1512.895778][T19727] active_anon 0
[ 1512.898400][T19727] inactive_file 0
[ 1512.900087][T19727] active_file 0
[ 1512.901656][T19727] unevictable 0
[ 1512.903386][T19727] hierarchical_memory_limit 314572800
[ 1512.906392][T19727] hierarchical_memsw_limit 9223372036854771712
[ 1512.909145][T19727] total_cache 0
[ 1512.910775][T19727] total_rss 0
[ 1512.912319][T19727] total_rss_huge 0
[ 1512.914936][T19727] total_shmem 0
[ 1512.920295][T19727] total_mapped_file 0
[ 1512.922513][T19727] total_dirty 0
[ 1512.927927][T19727] total_writeback 0
[ 1512.930074][T19727] total_workingset_refault_anon 19
[ 1512.932728][T19727] total_workingset_refault_file 836
[ 1512.935286][T19727] total_swap 204800
[ 1512.937290][T19727] total_swapcached 577536
[ 1512.939297][T19727] total_pgpgin 1299681
[ 1512.941136][T19727] total_pgpgout 1299679
[ 1512.943094][T19727] total_pgfault 2407831
[ 1512.946800][T19727] total_pgmajfault 36
[ 1512.948696][T19727] total_inactive_anon 8192
[ 1512.950930][T19727] total_active_anon 0
[ 1512.952499][T19727] total_inactive_file 0
[ 1512.955586][T19727] total_active_file 0
[ 1512.956986][T19727] total_unevictable 0
[ 1512.960127][T19727] anon_cost 0
[ 1512.961743][T19727] file_cost 0
[ 1512.963044][T19727] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.31524,pid=19727,uid=0
[ 1512.968792][T19727] Memory cgroup out of memory: Killed process 19727 (syz.1.31524) total-vm:102364kB, anon-rss:1240kB, file-rss:22548kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000
[ 1513.069356][T19749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31532'.
[ 1513.154129][T19752] tipc: Enabling of bearer <ib:geneve0> rejected, already enabled
[ 1513.220526][ T5632] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 1513.252616][ T5632] CPU: 1 UID: 0 PID: 5632 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1513.252639][ T5632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1513.252647][ T5632] Call Trace:
[ 1513.252654][ T5632]  <TASK>
[ 1513.252661][ T5632]  dump_stack_lvl+0xe8/0x150
[ 1513.252681][ T5632]  dump_header+0xd3/0x4c0
[ 1513.252703][ T5632]  oom_kill_process+0x3ab/0x970
[ 1513.252725][ T5632]  out_of_memory+0x106c/0x1410
[ 1513.252740][ T5632]  ? try_charge_memcg+0xbb9/0x1570
[ 1513.252762][ T5632]  ? __pfx___mutex_lock+0x10/0x10
[ 1513.252786][ T5632]  ? __pfx_out_of_memory+0x10/0x10
[ 1513.252800][ T5632]  ? do_raw_spin_unlock+0xf5/0x210
[ 1513.252826][ T5632]  try_charge_memcg+0xc77/0x1570
[ 1513.252857][ T5632]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1513.252891][ T5632]  ? percpu_ref_tryget+0x15/0x180
[ 1513.252923][ T5632]  ? charge_memcg+0x23/0x2b0
[ 1513.252941][ T5632]  charge_memcg+0x1a2/0x2b0
[ 1513.252963][ T5632]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[ 1513.252988][ T5632]  mem_cgroup_swapin_charge_folio+0x262/0x390
[ 1513.253011][ T5632]  __swap_cache_prepare_and_add+0xdc/0x700
[ 1513.253031][ T5632]  ? page_rmappable_folio+0x9a/0x170
[ 1513.253055][ T5632]  swap_cache_alloc_folio+0xf1/0x240
[ 1513.253073][ T5632]  swap_cluster_readahead+0x523/0x670
[ 1513.253094][ T5632]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1513.253119][ T5632]  ? get_vma_policy+0x27b/0x3c0
[ 1513.253141][ T5632]  swapin_readahead+0x196/0xc50
[ 1513.253159][ T5632]  ? swap_table_get+0x1e/0x260
[ 1513.253178][ T5632]  ? __pfx_swapin_readahead+0x10/0x10
[ 1513.253194][ T5632]  ? swap_table_get+0x1e/0x260
[ 1513.253206][ T5632]  ? swap_table_get+0x1e/0x260
[ 1513.253216][ T5632]  ? swap_table_get+0x1e/0x260
[ 1513.253228][ T5632]  ? swap_table_get+0x216/0x260
[ 1513.253237][ T5632]  ? swap_cache_get_folio+0x2e4/0x2f0
[ 1513.253249][ T5632]  do_swap_page+0x555/0x5120
[ 1513.253262][ T5632]  ? __pte_offset_map+0x29/0x240
[ 1513.253273][ T5632]  ? __pte_offset_map+0x29/0x240
[ 1513.253286][ T5632]  ? do_swap_page+0x128/0x5120
[ 1513.253295][ T5632]  ? __pfx_do_swap_page+0x10/0x10
[ 1513.253304][ T5632]  ? __pte_offset_map+0x1ae/0x240
[ 1513.253314][ T5632]  ? pte_offset_map_rw_nolock+0xea/0x160
[ 1513.253326][ T5632]  handle_mm_fault+0x12d2/0x3170
[ 1513.253342][ T5632]  ? handle_mm_fault+0xee/0x3170
[ 1513.253357][ T5632]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1513.253370][ T5632]  ? lock_vma_under_rcu+0x45a/0x500
[ 1513.253427][ T5632]  do_user_addr_fault+0xa73/0x1340
[ 1513.253448][ T5632]  ? rcu_is_watching+0x15/0xb0
[ 1513.253464][ T5632]  ? trace_page_fault_user+0x84/0x1e0
[ 1513.253480][ T5632]  exc_page_fault+0x6a/0xc0
[ 1513.253499][ T5632]  asm_exc_page_fault+0x26/0x30
[ 1513.253514][ T5632] RIP: 0033:0x7fe2a755d60e
[ 1513.253530][ T5632] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1513.253542][ T5632] RSP: 002b:00007ffc8b4fd3b8 EFLAGS: 00010246
[ 1513.253556][ T5632] RAX: 0000000000000000 RBX: 0000555557fc9500 RCX: 00007fe2a755d60e
[ 1513.253566][ T5632] RDX: 00007ffc8b4fd410 RSI: 0000000000000000 RDI: 0000000000000000
[ 1513.253574][ T5632] RBP: 00007ffc8b4fd47c R08: 0000000000000000 R09: 0000000000000000
[ 1513.253582][ T5632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[ 1513.253591][ T5632] R13: 00000000000927c0 R14: 00000000001711d9 R15: 00007ffc8b4fd4d0
[ 1513.253614][ T5632]  </TASK>
[ 1513.427248][ T5632] memory: usage 307200kB, limit 307200kB, failcnt 3902
[ 1513.456956][ T5632] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0
[ 1513.460539][ T5632] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[ 1513.465122][ T5632] Memory cgroup stats for /syz1:
[ 1513.465315][ T5632] cache 0
[ 1513.472186][ T5632] rss 0
[ 1513.474256][ T5632] rss_huge 0
[ 1513.475826][ T5632] shmem 0
[ 1513.506918][ T5632] mapped_file 0
[ 1513.508226][ T5632] dirty 0
[ 1513.509534][ T5632] writeback 0
[ 1513.510948][ T5632] workingset_refault_anon 19
[ 1513.513225][ T5632] workingset_refault_file 836
[ 1513.516746][ T5632] swap 204800
[ 1513.518329][ T5632] swapcached 577536
[ 1513.519917][ T5632] pgpgin 1299674
[ 1513.522470][ T5632] pgpgout 1299672
[ 1513.525495][ T5632] pgfault 2407801
[ 1513.526756][ T5632] pgmajfault 36
[ 1513.527911][ T5632] inactive_anon 0
[ 1513.528653][T19766] dvmrp0: entered allmulticast mode
[ 1513.531146][ T5632] active_anon 8192
[ 1513.532733][ T5632] inactive_file 0
[ 1513.535765][ T5632] active_file 0
[ 1513.538044][ T5632] unevictable 0
[ 1513.539576][ T5632] hierarchical_memory_limit 314572800
[ 1513.542030][ T5632] hierarchical_memsw_limit 9223372036854771712
[ 1513.545977][ T5632] total_cache 0
[ 1513.547546][ T5632] total_rss 0
[ 1513.548673][ T5632] total_rss_huge 0
[ 1513.550091][ T5632] total_shmem 0
[ 1513.551388][ T5632] total_mapped_file 0
[ 1513.554117][ T5632] total_dirty 0
[ 1513.562359][ T5632] total_writeback 0
[ 1513.568524][ T5632] total_workingset_refault_anon 19
[ 1513.570769][ T5632] total_workingset_refault_file 836
[ 1513.572884][ T5632] total_swap 204800
[ 1513.575881][ T5632] total_swapcached 577536
[ 1513.577778][ T5632] total_pgpgin 1299681
[ 1513.582670][ T5632] total_pgpgout 1299679
[ 1513.585387][ T5632] total_pgfault 2407834
[ 1513.587242][ T5632] total_pgmajfault 36
[ 1513.590438][ T5632] total_inactive_anon 0
[ 1513.592080][ T5632] total_active_anon 8192
[ 1513.604075][ T5632] total_inactive_file 0
[ 1513.605847][ T5632] total_active_file 0
[ 1513.607574][ T5632] total_unevictable 0
[ 1513.609161][ T5632] anon_cost 0
[ 1513.610489][ T5632] file_cost 0
[ 1513.623868][ T5632] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor,pid=5632,uid=0
[ 1513.635486][ T5632] Memory cgroup out of memory: Killed process 5632 (syz-executor) total-vm:98260kB, anon-rss:1276kB, file-rss:21728kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:0
[ 1513.827766][T19789] Cannot find add_set index 2 as target
[ 1514.117630][ T5663] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1514.311502][ T5663] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1514.418166][ T5663] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1514.502480][ T5002] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1514.511905][ T5002] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1514.516879][ T5002] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1514.527167][ T5002] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1514.532463][ T5002] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1514.568415][ T5663] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1515.260721][ T5663] pimreg9: left allmulticast mode
[ 1515.485617][ T5663] bond7 (unregistering): (slave ip6gretap0): Releasing backup interface
[ 1515.488578][ T5663] bond7 (unregistering): (slave ip6gretap0): the permanent HWaddr of slave - ea:7b:be:0a:ea:86 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1515.575214][ T5663] bond13 (unregistering): (slave ip6gretap1): Releasing active interface
[ 1515.605969][ T5663] bond19 (unregistering): (slave ip6gretap3): Releasing backup interface
[ 1515.615760][ T5663] bond52 (unregistering): (slave ip6gre6): Releasing backup interface
[ 1515.618563][ T5663] ip6gre6 (unregistering): left promiscuous mode
[ 1515.976623][ T5663] bond12 (unregistering): (slave gretap3): Releasing active interface
[ 1516.124400][ T5663] bond17 (unregistering): (slave geneve6): Releasing active interface
[ 1516.147589][ T5663] bond3 (unregistering): (slave geneve3): Releasing active interface
[ 1516.158525][ T5663] bond1 (unregistering): (slave geneve2): Releasing active interface
[ 1516.578519][ T5663] bond8 (unregistering): (slave bridge10): Releasing backup interface
[ 1516.583555][T12371] Bluetooth: hci1: command tx timeout
[ 1516.856824][ T5663] bond23 (unregistering): (slave bridge15): Releasing backup interface
[ 1517.088820][ T5663] bond35 (unregistering): (slave bridge20): Releasing backup interface
[ 1517.092442][ T5663] bridge20 (unregistering): left promiscuous mode
[ 1517.096428][ T5663] bridge20 (unregistering): left allmulticast mode
[ 1517.711405][ T5663] bond44 (unregistering): (slave bridge32): Releasing active interface
[ 1518.048466][ T5663] bond1 (unregistering): Released all slaves
[ 1518.062136][ T5663] bond2 (unregistering): Released all slaves
[ 1518.074498][ T5663] bond4 (unregistering): Released all slaves
[ 1518.092900][ T5663] bond3 (unregistering): Released all slaves
[ 1518.118496][ T5663] bond5 (unregistering): Released all slaves
[ 1518.140622][ T5663] bond6 (unregistering): Released all slaves
[ 1518.154661][ T5663] bond7 (unregistering): (slave veth11): Removing an active aggregator
[ 1518.160591][ T5663] bond7 (unregistering): (slave veth11): Releasing backup interface
[ 1518.165456][ T5663] bond7 (unregistering): Released all slaves
[ 1518.187003][ T5663] bond8 (unregistering): Released all slaves
[ 1518.199450][ T5663] bond9 (unregistering): Released all slaves
[ 1518.208000][ T5663] bond10 (unregistering): Released all slaves
[ 1518.218009][ T5663] bond11 (unregistering): Released all slaves
[ 1518.228552][ T5663] bond12 (unregistering): Released all slaves
[ 1518.241648][ T5663] bond13 (unregistering): Released all slaves
[ 1518.249869][ T5663] bond14 (unregistering): Released all slaves
[ 1518.257665][ T5663] bond15 (unregistering): Released all slaves
[ 1518.265966][ T5663] bond16 (unregistering): Released all slaves
[ 1518.285719][ T5663] bond17 (unregistering): Released all slaves
[ 1518.294071][ T5663] bond18 (unregistering): Released all slaves
[ 1518.301972][ T5663] bond19 (unregistering): Released all slaves
[ 1518.311117][ T5663] bond20 (unregistering): Released all slaves
[ 1518.319206][ T5663] bond21 (unregistering): Released all slaves
[ 1518.330550][ T5663] tipc: Disabling bearer <eth:macvlan1>
[ 1518.345896][ T5663] bond22 (unregistering): Released all slaves
[ 1518.354407][ T5663] bond23 (unregistering): Released all slaves
[ 1518.362281][ T5663] bond24 (unregistering): Released all slaves
[ 1518.370486][ T5663] bond25 (unregistering): Released all slaves
[ 1518.380659][ T5663] bond26 (unregistering): Released all slaves
[ 1518.392840][ T5663] bond27 (unregistering): Released all slaves
[ 1518.406939][ T5663] bond28 (unregistering): Released all slaves
[ 1518.416373][ T5663] bond29 (unregistering): Released all slaves
[ 1518.424578][ T5663] bond30 (unregistering): Released all slaves
[ 1518.432962][ T5663] bond31 (unregistering): Released all slaves
[ 1518.441133][ T5663] bond32 (unregistering): Released all slaves
[ 1518.449146][ T5663] bond33 (unregistering): Released all slaves
[ 1518.459523][ T5663] bond34 (unregistering): Released all slaves
[ 1518.479106][ T5663] bond35 (unregistering): Released all slaves
[ 1518.487583][ T5663] bond36 (unregistering): Released all slaves
[ 1518.497281][ T5663] bond37 (unregistering): (slave bond0): Releasing backup interface
[ 1518.500649][ T5663] bond0 (unregistering): left allmulticast mode
[ 1518.503104][ T5663] mac80211_hwsim hwsim74 wlan0: left allmulticast mode
[ 1518.524571][ T5663] bond0 (unregistering): (slave veth41): Releasing backup interface
[ 1518.530482][ T5663] bond0 (unregistering): (slave wlan0): Releasing backup interface
[ 1518.535051][ T5663] mac80211_hwsim hwsim74 wlan0: left promiscuous mode
[ 1518.552106][ T5663] bond0 (unregistering): Released all slaves
[ 1518.565183][ T5663] bond37 (unregistering): Released all slaves
[ 1518.574575][ T5663] bond38 (unregistering): Released all slaves
[ 1518.590240][ T5663] bond39 (unregistering): Released all slaves
[ 1518.602921][ T5663] bond40 (unregistering): Released all slaves
[ 1518.612785][ T5663] bond41 (unregistering): Released all slaves
[ 1518.622064][ T5663] bond42 (unregistering): Released all slaves
[ 1518.646094][ T5663] bond43 (unregistering): (slave veth51): Releasing active interface
[ 1518.651859][ T5663] bond43 (unregistering): (slave veth53): Releasing active interface
[ 1518.657235][ T5663] bond43 (unregistering): Released all slaves
[ 1518.663886][T12371] Bluetooth: hci1: command tx timeout
[ 1518.665863][ T5663] bond44 (unregistering): Released all slaves
[ 1518.674725][ T5663] bond45 (unregistering): (slave veth55): Releasing active interface
[ 1518.679829][ T5663] bond45 (unregistering): (slave veth57): Releasing active interface
[ 1518.686208][ T5663] bond45 (unregistering): Released all slaves
[ 1518.698490][ T5663] team0: Port device bond46 removed
[ 1518.710211][ T5663] bond46 (unregistering): (slave 76): Releasing backup interface
[ 1518.719699][ T5663] : left allmulticast mode
[ 1518.723402][ T5663] bond46 (unregistering): Released all slaves
[ 1518.734025][ T5663] bond47 (unregistering): Released all slaves
[ 1518.742359][ T5663] bond48 (unregistering): Released all slaves
[ 1518.750585][ T5663] bond49 (unregistering): Released all slaves
[ 1518.759199][ T5663] bond50 (unregistering): Released all slaves
[ 1518.770823][ T5663] bond51 (unregistering): Released all slaves
[ 1518.787938][ T5663] bond52 (unregistering): Released all slaves
[ 1518.797046][ T5663] bond53 (unregistering): Released all slaves
[ 1518.805475][ T5663] bond54 (unregistering): Released all slaves
[ 1518.815863][ T5663] bond55 (unregistering): Released all slaves
[ 1518.834507][ T5663] bond56 (unregistering): (slave veth71): Releasing backup interface
[ 1518.837239][ T5663] veth71: left promiscuous mode
[ 1518.840699][ T5663] bond56 (unregistering): Released all slaves
[ 1518.848873][ T5663] bond57 (unregistering): Released all slaves
[ 1518.857613][ T5663] bond58 (unregistering): Released all slaves
[ 1518.867383][ T5663] bond59 (unregistering): Released all slaves
[ 1518.884156][ T5347] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1520.202001][ T5347] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1520.205558][ T5663] m1Ie5n: left promiscuous mode
[ 1520.301794][ T5663] : left promiscuous mode
[ 1520.385719][ T5663] : left promiscuous mode
[ 1520.439632][ T5663] hm3): left promiscuous mode
[ 1520.583001][ T5663] tipc: Disabling bearer <eth:syzkaller0>
[ 1520.590517][ T5663] tipc: Disabling bearer <udp:s>
[ 1520.598372][T19930] netlink: 76 bytes leftover after parsing attributes in process `syz.0.31579'.
[ 1520.602055][ T5663] tipc: Left network mode
[ 1520.615247][T19930] netlink: 76 bytes leftover after parsing attributes in process `syz.0.31579'.
[ 1520.708573][T19810] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1520.711169][T19810] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1520.726107][T19810] bridge_slave_0: entered allmulticast mode
[ 1520.729915][T19810] bridge_slave_0: entered promiscuous mode
[ 1520.765883][T19810] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1520.768804][T12371] Bluetooth: hci1: command tx timeout
[ 1520.771712][T19810] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1520.774762][T19810] bridge_slave_1: entered allmulticast mode
[ 1520.779240][T19810] bridge_slave_1: entered promiscuous mode
[ 1520.814961][ T5347] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1520.824302][T19810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1520.860421][T19810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1520.934975][T19953] netem: change failed
[ 1520.941548][T19810] team0: Port device team_slave_0 added
[ 1520.950882][T19810] team0: Port device team_slave_1 added
[ 1520.978689][T19947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31582'.
[ 1521.096189][T19810] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1521.101994][T19810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1521.127531][T19810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1521.154898][T19810] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1521.157245][T19810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1521.186309][T19810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1521.213544][T19960] Cannot find add_set index 2 as target
[ 1521.228752][ T5663] IPVS: stopping backup sync thread 25750 ...
[ 1521.262849][T19810] hsr_slave_0: entered promiscuous mode
[ 1521.265693][T19810] hsr_slave_1: entered promiscuous mode
[ 1521.267988][T19810] debugfs: 'hsr0' already exists in 'hsr'
[ 1521.269988][T19810] Cannot create hsr debugfs directory
[ 1521.376922][T19963] syzkaller1: entered promiscuous mode
[ 1521.395818][T19963] syzkaller1: entered allmulticast mode
[ 1521.601796][ T5347] 8021q: adding VLAN 0 to HW filter on device eth4
[ 1521.807159][T19978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.31587'.
[ 1521.818005][T19978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.31587'.
[ 1521.857463][T19983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31588'.
[ 1521.870393][T19984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31588'.
[ 1522.033063][T19992] x_tables: unsorted entry at hook 2
[ 1522.096076][T19810] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1522.100881][T19810] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1522.105809][T19810] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1522.117461][T19810] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1522.127946][T19810] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1522.158724][T19810] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1522.172493][T19810] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1522.198638][T19810] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1522.411031][T19810] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1522.438569][T19810] 8021q: adding VLAN 0 to HW filter on device team0
[ 1522.460753][T29729] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1522.463848][T29729] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1522.478326][T29729] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1522.480861][T29729] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1522.489217][T20024] Cannot find add_set index 2 as target
[ 1522.610534][T19810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1522.623693][T19810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1522.813640][T12371] Bluetooth: hci1: command tx timeout
[ 1523.029791][T20060] xt_socket: unknown flags 0x8
[ 1523.098454][T20057] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap8
[ 1523.111005][T20063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.31599'.
[ 1523.159132][T19810] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1523.181791][T20066] Cannot find add_set index 2 as target
[ 1523.316042][T19810] veth0_vlan: entered promiscuous mode
[ 1523.330687][T19810] veth1_vlan: entered promiscuous mode
[ 1523.357095][T19810] veth0_macvtap: entered promiscuous mode
[ 1523.387348][T19810] veth1_macvtap: entered promiscuous mode
[ 1523.417576][T19810] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1523.452897][T19810] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1523.469261][T25371] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1523.472733][T25371] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1523.486907][T25371] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1523.498877][T25371] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1523.730302][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1523.736339][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1523.802321][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1523.806933][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1524.187501][T20088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.31551'.
[ 1524.409263][ T5663] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1524.414826][ T5663] batman_adv: batadv0: Removing interface: veth17
[ 1524.539442][T20103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.31608'.
[ 1524.542450][ T5663] smc: removing net device team0 with user defined pnetid SYZ2
[ 1525.107552][   T35] smbdirect: ib_dev[syz2] removed
[ 1525.292832][T20118] bond0: option active_slave: mode dependency failed, not supported in mode broadcast(3)
[ 1525.769840][ T5663] IPVS: stop unused estimator thread 0...
[ 1525.921089][T20158] __nla_validate_parse: 3 callbacks suppressed
[ 1525.921105][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31627'.
[ 1525.928531][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31627'.
[ 1526.113049][T20173] netlink: 'syz.0.31632': attribute type 9 has an invalid length.
[ 1527.631123][T20212] x_tables: duplicate underflow at hook 3
[ 1527.680210][T20214] bridge1: entered promiscuous mode
[ 1527.693237][T20214] netlink: 'syz.3.31643': attribute type 11 has an invalid length.
[ 1527.866569][T20217] netlink: 144 bytes leftover after parsing attributes in process `syz.3.31644'.
[ 1529.450211][T20291] syzkaller1: entered promiscuous mode
[ 1529.452218][T20291] syzkaller1: entered allmulticast mode
[ 1529.589497][T20294] openvswitch: netlink: IP tunnel dst address not specified
[ 1529.754600][T20309] netlink: 56 bytes leftover after parsing attributes in process `syz.3.31676'.
[ 1529.796847][T20309] syzkaller0: entered promiscuous mode
[ 1529.798717][T20309] syzkaller0: entered allmulticast mode
[ 1534.245428][T20357] ipvlan0: entered promiscuous mode
[ 1534.346947][T20366] Cannot find add_set index 0 as target
[ 1534.624945][T20392] digital: digital_start_poll: Unknown protocol
[ 1534.649732][T20397] ipvlan0: entered promiscuous mode
[ 1534.784610][T20400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.31700'.
[ 1534.788381][T20400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.31700'.
[ 1534.926119][T20413] netlink: 'syz.3.31704': attribute type 32 has an invalid length.
[ 1535.852917][T20449] netlink: 'syz.0.31713': attribute type 11 has an invalid length.
[ 1535.912978][T20455] Cannot find add_set index 2 as target
[ 1535.947589][T20453] netlink: 'syz.0.31714': attribute type 1 has an invalid length.
[ 1536.086426][T20465] IPVS: Unknown mcast interface: vcan0
[ 1536.191775][T20472] bond46: Unable to set up delay as MII monitoring is disabled
[ 1536.197121][T20472] bond46 (unregistering): Released all slaves
[ 1536.376573][T20485] Cannot find add_set index 2 as target
[ 1536.386643][T20487] netlink: 'syz.0.31727': attribute type 5 has an invalid length.
[ 1536.389447][T20487] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.31727'.
[ 1536.478345][T20498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.31733'.
[ 1536.526183][T20497] netlink: 'syz.3.31732': attribute type 83 has an invalid length.
[ 1536.606455][T20510] netlink: 'syz.2.31735': attribute type 4 has an invalid length.
[ 1536.661802][T20517] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1536.694114][T20519] Cannot find add_set index 2 as target
[ 1536.706600][T20517] syzkaller1: entered promiscuous mode
[ 1536.710858][T20517] syzkaller1: entered allmulticast mode
[ 1536.929168][T20532] netlink: 'syz.2.31738': attribute type 29 has an invalid length.
[ 1536.932277][T20532] netlink: 'syz.2.31738': attribute type 29 has an invalid length.
[ 1536.936462][T20532] netlink: 548 bytes leftover after parsing attributes in process `syz.2.31738'.
[ 1537.581814][T20560] netlink: 28 bytes leftover after parsing attributes in process `syz.3.31745'.
[ 1537.595675][T20560] bond1: option packets_per_slave: invalid value (1048582)
[ 1537.600335][T20560] bond1: option packets_per_slave: allowed values 0 - 65535
[ 1537.605908][T20560] bond1 (unregistering): Released all slaves
[ 1537.781098][T20571] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1537.805270][T20571] bridge2: entered promiscuous mode
[ 1537.807601][T20571] bridge2: entered allmulticast mode
[ 1537.812916][T20571] team0: Port device bridge2 added
[ 1538.112507][T20579] netlink: 'syz.2.31752': attribute type 32 has an invalid length.
[ 1538.198923][T20586] ipvlan0: entered promiscuous mode
[ 1538.357584][T20595] digital: digital_start_poll: Unknown protocol
[ 1538.465223][T20602] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1538.471782][T20606] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1538.591736][T20616] ipvlan2: entered promiscuous mode
[ 1538.673408][T20622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31765'.
[ 1539.028732][T20647] openvswitch: netlink: Multiple metadata blocks provided
[ 1539.045942][T20647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31773'.
[ 1539.132572][T20659] Cannot find add_set index 2 as target
[ 1539.364347][T20675] syzkaller0: entered promiscuous mode
[ 1539.368939][T20675] syzkaller0: entered allmulticast mode
[ 1540.076334][T20705] ipvlan0: entered promiscuous mode
[ 1540.203863][T20715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31795'.
[ 1540.258160][T20717] netlink: 104 bytes leftover after parsing attributes in process `syz.0.31797'.
[ 1540.285053][T20719] Cannot find add_set index 2 as target
[ 1540.376041][T20721] netlink: 44 bytes leftover after parsing attributes in process `syz.0.31799'.
[ 1540.469285][T20726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31801'.
[ 1541.466842][T20776] : entered promiscuous mode
[ 1541.695534][T20796] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001
[ 1541.930086][T20801] netlink: 'syz.3.31823': attribute type 1 has an invalid length.
[ 1541.939692][T20801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.31823'.
[ 1542.030892][T20803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31824'.
[ 1542.289584][T20810] Bluetooth: MGMT ver 1.23
[ 1542.291753][T20810] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[ 1542.609061][T20828] netlink: 'syz.2.31832': attribute type 59 has an invalid length.
[ 1542.869176][T20840] netlink: 44 bytes leftover after parsing attributes in process `syz.2.31836'.
[ 1543.314741][ T4065] IPVS: starting estimator thread 0...
[ 1543.319662][T20867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31847'.
[ 1543.323358][T20867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31847'.
[ 1543.403941][T20870] IPVS: using max 80 ests per chain, 192000 per kthread
[ 1543.406515][T20876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31848'.
[ 1543.905162][T20908] ipvlan0: entered promiscuous mode
[ 1545.313060][T20967] __nla_validate_parse: 5 callbacks suppressed
[ 1545.313073][T20967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31876'.
[ 1545.326203][T20967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31876'.
[ 1545.385675][T20973] netlink: 'syz.2.31879': attribute type 8 has an invalid length.
[ 1545.673314][T20996] tap0: tun_chr_ioctl cmd 1074025680
[ 1546.448136][T21038] bond58: entered promiscuous mode
[ 1546.450402][T21038] 8021q: adding VLAN 0 to HW filter on device bond58
[ 1547.319288][T21051] ipvlan2: entered promiscuous mode
[ 1547.430675][T21060] xt_limit: Overflow, try lower: 324382443/0
[ 1547.647079][T21086] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20000
[ 1547.657450][T21084] IPVS: set_ctl: invalid protocol: 30924 172.30.1.3:20001
[ 1547.665561][T21084] netlink: 'syz.2.31918': attribute type 62 has an invalid length.
[ 1548.036993][T21107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31925'.
[ 1548.052263][T21107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31925'.
[ 1548.065158][   T33] audit: type=1804 audit(1778266152.817:46): pid=21107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.31925" name="/newroot/10829/cgroup.controllers" dev="tmpfs" ino=54970 res=1 errno=0
[ 1548.084203][   T33] audit: type=1800 audit(1778266152.817:47): pid=21107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.31925" name="cgroup.controllers" dev="tmpfs" ino=54970 res=0 errno=0
[ 1548.838217][T21137] ipt_REJECT: TCP_RESET invalid for non-tcp
[ 1548.895812][T21139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.31935'.
[ 1550.330037][T21211] mac80211_hwsim hwsim45 syzkaller0: left promiscuous mode
[ 1550.336542][T21211] mac80211_hwsim hwsim45 syzkaller0: left allmulticast mode
[ 1550.340803][T21211] tipc: Resetting bearer <eth:syzkaller0>
[ 1551.365552][T21270] IPVS: sed: FWM 3 0x00000003 - no destination available
[ 1552.342557][T21293] ipvlan0: entered promiscuous mode
[ 1552.434445][T21303] Cannot find add_set index 2 as target
[ 1552.461353][T21298] syzkaller0: entered promiscuous mode
[ 1552.465682][T21298] syzkaller0: entered allmulticast mode
[ 1552.472374][T21305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31988'.
[ 1552.479060][T21305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31988'.
[ 1552.619499][T21309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31991'.
[ 1553.289821][T21360] ipvlan2: entered promiscuous mode
[ 1553.640093][T21392] ipvlan0: entered promiscuous mode
[ 1553.680525][T21397] netlink: 'syz.0.32016': attribute type 11 has an invalid length.
[ 1553.744923][T21401] netlink: 68 bytes leftover after parsing attributes in process `syz.3.32017'.
[ 1554.000479][T21430] ipvlan2: entered promiscuous mode
[ 1554.032198][T21424] "syz.0.32025" (21424) uses obsolete ecb(arc4) skcipher
[ 1554.147943][T21444] netlink: 164 bytes leftover after parsing attributes in process `syz.3.32030'.
[ 1554.153105][T21433] netlink: 44 bytes leftover after parsing attributes in process `syz.2.32027'.
[ 1554.710078][T21465] xt_cgroup: invalid path, errno=-2
[ 1554.967007][T21485] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode
[ 1554.980953][T21485] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode
[ 1554.987432][T21485] tipc: Resetting bearer <eth:syzkaller0>
[ 1554.990314][T21488] netlink: 32 bytes leftover after parsing attributes in process `syz.3.32043'.
[ 1555.000838][T21488] sit1: entered allmulticast mode
[ 1555.048657][T21490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32044'.
[ 1555.222292][T21492] netlink: 204 bytes leftover after parsing attributes in process `syz.3.32045'.
[ 1555.793678][T21514] syzkaller0: entered promiscuous mode
[ 1555.796386][T21514] syzkaller0: entered allmulticast mode
[ 1556.310807][T21532] Cannot find add_set index 2 as target
[ 1557.513401][T21571] macsec1: entered promiscuous mode
[ 1557.580153][T21576] netlink: 44 bytes leftover after parsing attributes in process `syz.2.32072'.
[ 1557.655187][T21583] netlink: 64 bytes leftover after parsing attributes in process `syz.2.32075'.
[ 1557.664174][T21582] netlink: 64 bytes leftover after parsing attributes in process `syz.2.32075'.
[ 1557.852062][T21601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32081'.
[ 1558.002568][T21608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.32083'.
[ 1558.017778][T21608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.32083'.
[ 1558.024442][T21610] syzkaller0: entered promiscuous mode
[ 1558.026344][T21610] syzkaller0: entered allmulticast mode
[ 1558.036518][T21610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.32084'.
[ 1558.153573][T21619] ipvlan0: entered promiscuous mode
[ 1558.252805][T21629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32088'.
[ 1559.084142][T21639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.32094'.
[ 1559.130773][T21645] netlink: 32 bytes leftover after parsing attributes in process `syz.0.32095'.
[ 1559.187971][T21648] ipvlan2: entered promiscuous mode
[ 1559.444322][T21670] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1560.524407][T21736] netlink: 'syz.0.32124': attribute type 2 has an invalid length.
[ 1560.532432][T21736] netlink: 'syz.0.32124': attribute type 2 has an invalid length.
[ 1560.553975][T21736] veth1_macvtap: entered promiscuous mode
[ 1560.564060][T21736] macsec0: entered promiscuous mode
[ 1560.572240][T21736] veth1_macvtap: left promiscuous mode
[ 1561.344669][T21750] netlink: 'syz.2.32129': attribute type 4 has an invalid length.
[ 1562.665512][T21815] __nla_validate_parse: 6 callbacks suppressed
[ 1562.665585][T21815] netlink: 44 bytes leftover after parsing attributes in process `syz.0.32147'.
[ 1563.329880][T21832] netlink: 44 bytes leftover after parsing attributes in process `syz.3.32154'.
[ 1563.520255][T21849] netlink: 44 bytes leftover after parsing attributes in process `syz.3.32161'.
[ 1563.549266][T21851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32162'.
[ 1563.554204][T21852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32162'.
[ 1563.586673][T21856] syzkaller1: entered promiscuous mode
[ 1563.588869][T21856] syzkaller1: entered allmulticast mode
[ 1563.605917][T21856] syzkaller1: left promiscuous mode
[ 1563.610252][T21856] syzkaller1: left allmulticast mode
[ 1563.877052][T21894] netlink: 'syz.3.32173': attribute type 4 has an invalid length.
[ 1563.904991][T21898] netlink: 44 bytes leftover after parsing attributes in process `syz.2.32175'.
[ 1563.932184][T21900] openvswitch: : Dropping previously announced user features
[ 1564.038682][T21904] ipvlan2: entered promiscuous mode
[ 1564.345466][T21919] netlink: 64 bytes leftover after parsing attributes in process `syz.2.32183'.
[ 1565.081193][T21949] netlink: 204 bytes leftover after parsing attributes in process `syz.0.32193'.
[ 1565.465869][T21972] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1565.469805][T21972] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1565.544237][T21983] netlink: 'syz.2.32204': attribute type 1 has an invalid length.
[ 1565.547657][T21983] netlink: 'syz.2.32204': attribute type 3 has an invalid length.
[ 1565.558167][T21972] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1565.567414][T21972] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1565.621023][T21972] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1565.630569][T21972] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1565.665288][T21972] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1565.669324][T21972] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1565.754156][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1565.758651][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1565.771607][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1565.779654][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1565.793324][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1565.796977][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1565.805852][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1565.809303][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1565.816595][T21999] netlink: 32 bytes leftover after parsing attributes in process `syz.2.32208'.
[ 1567.026948][T22044] bond46: entered promiscuous mode
[ 1567.034824][T22044] bond46: entered allmulticast mode
[ 1567.037929][T22044] 8021q: adding VLAN 0 to HW filter on device bond46
[ 1567.044585][T22047] netlink: 156 bytes leftover after parsing attributes in process `syz.0.32221'.
[ 1567.118306][T22050] ipvlan0: entered promiscuous mode
[ 1567.714885][T22070] __nla_validate_parse: 2 callbacks suppressed
[ 1567.714911][T22070] netlink: 128 bytes leftover after parsing attributes in process `syz.2.32230'.
[ 1568.340989][T22090] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[ 1568.888511][T22120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.32247'.
[ 1568.941648][T22124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32248'.
[ 1569.065806][T22141] IPVS: length: 130 != 8
[ 1569.096611][T22148] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.32254'.
[ 1569.228502][T22153] netlink: 'syz.0.32256': attribute type 5 has an invalid length.
[ 1569.232654][T22153] netlink: 496 bytes leftover after parsing attributes in process `syz.0.32256'.
[ 1569.782312][T22192] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.32267'.
[ 1569.971443][T22210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.32273'.
[ 1570.191389][T22223] netlink: 204 bytes leftover after parsing attributes in process `syz.2.32278'.
[ 1570.228670][T22225] syzkaller0: entered promiscuous mode
[ 1570.230586][T22225] syzkaller0: entered allmulticast mode
[ 1570.546219][T22231] Cannot find add_set index 2 as target
[ 1570.650168][T22240] ipvlan0: entered promiscuous mode
[ 1570.788542][T22251] mac80211_hwsim hwsim7 wlan1: Caught tx_queue_len zero misconfig
[ 1570.839378][T22253] netlink: 36 bytes leftover after parsing attributes in process `syz.0.32288'.
[ 1570.914054][T22257] Cannot find add_set index 2 as target
[ 1570.988063][T22259] can: request_module (can-proto-0) failed.
[ 1571.838235][T22281] netlink: 204 bytes leftover after parsing attributes in process `syz.0.32295'.
[ 1571.999811][T22289] IPv6: sit0: Disabled Multicast RS
[ 1572.149525][T22314] Cannot find add_set index 2 as target
[ 1572.262151][T22324] vxcan1: entered allmulticast mode
[ 1572.530809][T22331] ipvlan0: entered promiscuous mode
[ 1573.152109][T22354] bond59: option lacp_active: invalid value (8)
[ 1573.164606][T22354] bond59 (unregistering): Released all slaves
[ 1573.325174][T22369] __nla_validate_parse: 3 callbacks suppressed
[ 1573.325195][T22369] netlink: 104 bytes leftover after parsing attributes in process `syz.3.32323'.
[ 1573.466556][T22371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32324'.
[ 1573.529467][T22380] syz.0.32324: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1573.537707][T22380] CPU: 0 UID: 0 PID: 22380 Comm: syz.0.32324 Not tainted syzkaller #0 PREEMPT(full) 
[ 1573.537724][T22380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1573.537731][T22380] Call Trace:
[ 1573.537736][T22380]  <TASK>
[ 1573.537741][T22380]  dump_stack_lvl+0xe8/0x150
[ 1573.537764][T22380]  warn_alloc+0x249/0x340
[ 1573.537780][T22380]  ? stack_trace_save+0xa9/0x100
[ 1573.537795][T22380]  ? __pfx_warn_alloc+0x10/0x10
[ 1573.537809][T22380]  ? kasan_save_track+0x4f/0x80
[ 1573.537821][T22380]  ? kasan_save_track+0x3e/0x80
[ 1573.537832][T22380]  ? __kasan_kmalloc+0x93/0xb0
[ 1573.537842][T22380]  ? __kmalloc_cache_noprof+0x31c/0x660
[ 1573.537855][T22380]  ? xskq_create+0x56/0x170
[ 1573.537866][T22380]  ? xsk_setsockopt+0x54c/0x990
[ 1573.537874][T22380]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1573.537885][T22380]  ? __x64_sys_setsockopt+0x13d/0x1b0
[ 1573.537895][T22380]  ? do_syscall_64+0x15f/0xf80
[ 1573.537908][T22380]  __vmalloc_node_range_noprof+0x132/0x1750
[ 1573.537949][T22380]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1573.537963][T22380]  ? __kasan_kmalloc+0x93/0xb0
[ 1573.537977][T22380]  vmalloc_user_noprof+0xad/0xe0
[ 1573.537989][T22380]  ? xskq_create+0xbf/0x170
[ 1573.537999][T22380]  xskq_create+0xbf/0x170
[ 1573.538013][T22380]  xsk_init_queue+0x8a/0xe0
[ 1573.538024][T22380]  xsk_setsockopt+0x54c/0x990
[ 1573.538035][T22380]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1573.538044][T22380]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1573.538057][T22380]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1573.538069][T22380]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1573.538081][T22380]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1573.538091][T22380]  do_sock_setsockopt+0x17c/0x1b0
[ 1573.538104][T22380]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1573.538116][T22380]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1573.538125][T22380]  do_syscall_64+0x15f/0xf80
[ 1573.538136][T22380]  ? trace_irq_disable+0x3b/0x140
[ 1573.538149][T22380]  ? clear_bhb_loop+0x40/0x90
[ 1573.538159][T22380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1573.538168][T22380] RIP: 0033:0x7f1ea659cdd9
[ 1573.538178][T22380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1573.538186][T22380] RSP: 002b:00007f1ea7388028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1573.538198][T22380] RAX: ffffffffffffffda RBX: 00007f1ea6816090 RCX: 00007f1ea659cdd9
[ 1573.538204][T22380] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c
[ 1573.538210][T22380] RBP: 00007f1ea6632d69 R08: 0000000000000004 R09: 0000000000000000
[ 1573.538215][T22380] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1573.538220][T22380] R13: 00007f1ea6816128 R14: 00007f1ea6816090 R15: 00007ffc08e107f8
[ 1573.538234][T22380]  </TASK>
[ 1573.538266][T22380] Mem-Info:
[ 1573.562709][T22382] netlink: 'syz.3.32326': attribute type 12 has an invalid length.
[ 1573.564739][T22380] active_anon:6932 inactive_anon:0 isolated_anon:0
[ 1573.564739][T22380]  active_file:15368 inactive_file:38908 isolated_file:0
[ 1573.564739][T22380]  unevictable:1768 dirty:110 writeback:0
[ 1573.564739][T22380]  slab_reclaimable:14371 slab_unreclaimable:135787
[ 1573.564739][T22380]  mapped:18810 shmem:2370 pagetables:1359
[ 1573.564739][T22380]  sec_pagetables:0 bounce:0
[ 1573.564739][T22380]  kernel_misc_reclaimable:0
[ 1573.564739][T22380]  free:1046721 free_pcp:26281 free_cma:0
[ 1573.634769][T22382] netlink: 56 bytes leftover after parsing attributes in process `syz.3.32326'.
[ 1573.636097][T22380] Node 0 active_anon:8972kB inactive_anon:0kB active_file:18376kB inactive_file:4368kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:22892kB dirty:124kB writeback:0kB shmem:4616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7632kB pagetables:2416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1573.670971][T22380] Node 1 active_anon:18752kB inactive_anon:0kB active_file:43096kB inactive_file:151264kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:52356kB dirty:328kB writeback:0kB shmem:4792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7960kB pagetables:3004kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1573.681841][T22380] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1573.692569][T22380] lowmem_reserve[]: 0 1587 2117 2117 2117
[ 1573.694919][T22380] Node 0 DMA32 free:1481424kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:472kB inactive_anon:0kB active_file:3836kB inactive_file:372kB unevictable:0kB writepending:12kB zspages:0kB present:2080636kB managed:1625332kB mlocked:0kB bounce:0kB free_pcp:30012kB local_pcp:20140kB free_cma:0kB
[ 1573.705807][T22380] lowmem_reserve[]: 0 0 530 530 530
[ 1573.707676][T22380] Node 0 Normal free:17256kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8424kB inactive_anon:0kB active_file:14540kB inactive_file:4004kB unevictable:3536kB writepending:112kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:8556kB local_pcp:8236kB free_cma:0kB
[ 1573.718653][T22380] lowmem_reserve[]: 0 0 0 0 0
[ 1573.720715][T22380] Node 1 Normal free:2679924kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18740kB inactive_anon:0kB active_file:43096kB inactive_file:151264kB unevictable:3536kB writepending:328kB zspages:0kB present:3670012kB managed:3594680kB mlocked:0kB bounce:0kB free_pcp:61488kB local_pcp:28352kB free_cma:0kB
[ 1573.732585][T22380] lowmem_reserve[]: 0 0 0 0 0
[ 1573.734529][T22380] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1573.738850][T22380] Node 0 DMA32: 679*4kB (UME) 636*8kB (UME) 645*16kB (UME) 749*32kB (UME) 186*64kB (UME) 162*128kB (UME) 245*256kB (UME) 199*512kB (UME) 85*1024kB (UM) 12*2048kB (UM) 276*4096kB (UM) = 1481452kB
[ 1573.746103][T22380] Node 0 Normal: 522*4kB (UME) 459*8kB (UME) 319*16kB (UME) 42*32kB (UME) 7*64kB (ME) 8*128kB (ME) 6*256kB (ME) 2*512kB (M) 1*1024kB (E) 0*2048kB 0*4096kB = 17264kB
[ 1573.751636][T22380] Node 1 Normal: 2739*4kB (UME) 3587*8kB (UME) 3038*16kB (UME) 1887*32kB (UME) 1703*64kB (UME) 866*128kB (UME) 381*256kB (UME) 152*512kB (UM) 92*1024kB (UM) 73*2048kB (UM) 462*4096kB (UM) = 2679908kB
[ 1573.759238][T22380] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1573.763061][T22380] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1573.766993][T22380] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1573.771972][T22380] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1573.777783][T22380] 56630 total pagecache pages
[ 1573.779871][T22380] 0 pages in swap cache
[ 1573.781653][T22380] Free swap  = 124996kB
[ 1573.783840][T22380] Total swap = 124996kB
[ 1573.785746][T22380] 1834877 pages RAM
[ 1573.787425][T22380] 0 pages HighMem/MovableOnly
[ 1573.791408][T22380] 390246 pages reserved
[ 1573.794379][T22380] 0 pages cma reserved
[ 1573.989049][T22397] Cannot find add_set index 2 as target
[ 1574.527751][T22435] ipvlan2: entered promiscuous mode
[ 1574.611377][T22443] netlink: 64 bytes leftover after parsing attributes in process `syz.3.32344'.
[ 1574.789066][T22456] netlink: 44 bytes leftover after parsing attributes in process `syz.3.32349'.
[ 1574.955511][T22465] netlink: 204 bytes leftover after parsing attributes in process `syz.3.32352'.
[ 1574.992381][T22469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32353'.
[ 1574.998305][T22469] hsr_slave_0: left promiscuous mode
[ 1575.001398][T22469] hsr_slave_1: left promiscuous mode
[ 1575.348761][T22498] netlink: 44 bytes leftover after parsing attributes in process `syz.3.32359'.
[ 1575.679649][T22513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.32363'.
[ 1575.831267][T22521] netlink: 44 bytes leftover after parsing attributes in process `syz.0.32366'.
[ 1576.083095][T22546] pim6reg: entered allmulticast mode
[ 1576.416382][T22545] pim6reg: left allmulticast mode
[ 1577.040828][T22574] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[ 1577.185764][T22578] Cannot find add_set index 2 as target
[ 1577.821305][T22599] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1578.085844][T22618] syzkaller0: entered promiscuous mode
[ 1578.087593][T22618] syzkaller0: entered allmulticast mode
[ 1578.185855][T22622] netlink: 'syz.3.32401': attribute type 1 has an invalid length.
[ 1578.287192][T22630] Cannot find add_set index 2 as target
[ 1578.365866][T22636] __nla_validate_parse: 8 callbacks suppressed
[ 1578.365878][T22636] netlink: 204 bytes leftover after parsing attributes in process `syz.3.32406'.
[ 1580.752140][T22694] netlink: 44 bytes leftover after parsing attributes in process `syz.3.32428'.
[ 1581.419756][T22725] netlink: 44 bytes leftover after parsing attributes in process `syz.3.32440'.
[ 1581.786498][T22745] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.32447'.
[ 1582.594746][T22759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.32451'.
[ 1582.599218][T22759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.32451'.
[ 1583.541196][T22792] netlink: 45 bytes leftover after parsing attributes in process `syz.2.32460'.
[ 1583.553245][T22797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.32461'.
[ 1586.008611][T22786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1586.202020][T22845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.32475'.
[ 1586.478579][T22862] veth1_to_bond: entered allmulticast mode
[ 1587.237317][T22891] netlink: 148 bytes leftover after parsing attributes in process `syz.2.32489'.
[ 1587.244329][T22891] netlink: 72 bytes leftover after parsing attributes in process `syz.2.32489'.
[ 1587.314865][T22861] veth1_to_bond: left allmulticast mode
[ 1587.390724][T22894] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.32490'.
[ 1587.403991][T22897] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1587.489798][T22901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32492'.
[ 1587.548472][T22908] IPVS: sed: FWM 3 0x00000003 - no destination available
[ 1587.566481][T22910] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.32494'.
[ 1587.749352][T22922] tipc: Resetting bearer <eth:batadv0>
[ 1587.766778][T22923] netlink: 88 bytes leftover after parsing attributes in process `syz.2.32498'.
[ 1587.892668][T25371] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1587.898852][T22928] netlink: 124 bytes leftover after parsing attributes in process `syz.0.32500'.
[ 1587.903071][T25371] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1587.907334][T25371] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 53852 - 0
[ 1587.910356][T25371] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1587.916938][T25371] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1587.921315][T25371] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 53852 - 0
[ 1587.926233][T25371] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1587.929662][T25371] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1587.934458][T25371] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 53852 - 0
[ 1587.938394][T25371] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1587.941990][T25371] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1587.946183][T25371] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 53852 - 0
[ 1588.426030][T22965] can: request_module (can-proto-0) failed.
[ 1588.444461][T22965] can: request_module (can-proto-0) failed.
[ 1588.617000][T22991] IPVS: sed: FWM 3 0x00000003 - no destination available
[ 1589.190359][T23007] __nla_validate_parse: 1 callbacks suppressed
[ 1589.190373][T23007] netlink: 32 bytes leftover after parsing attributes in process `syz.0.32520'.
[ 1589.261980][T23025] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.32524'.
[ 1589.435013][T23034] netlink: 'syz.2.32527': attribute type 10 has an invalid length.
[ 1589.490095][T23036] netlink: 830 bytes leftover after parsing attributes in process `syz.3.32528'.
[ 1591.901267][T23135] netlink: 224 bytes leftover after parsing attributes in process `syz.2.32560'.
[ 1591.906509][T23135] netlink: 2 bytes leftover after parsing attributes in process `syz.2.32560'.
[ 1592.977119][T23166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32569'.
[ 1593.756859][T23198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32582'.
[ 1593.796195][T23201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32583'.
[ 1593.845784][T23202] netlink: 'syz.3.32583': attribute type 29 has an invalid length.
[ 1594.039030][T23214] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1594.061354][T23214] syzkaller0: entered promiscuous mode
[ 1594.063229][T23214] syzkaller0: entered allmulticast mode
[ 1596.934859][T23227] workqueue: Failed to create a rescuer kthread for wq "bond59": -EINTR
[ 1597.082396][T23239] bridge_slave_1: default FDB implementation only supports local addresses
[ 1597.622637][T23277] netlink: 28 bytes leftover after parsing attributes in process `syz.3.32605'.
[ 1597.901150][T23295] netlink: 40 bytes leftover after parsing attributes in process `syz.3.32611'.
[ 1598.549429][T23345] netlink: 56 bytes leftover after parsing attributes in process `syz.0.32627'.
[ 1598.725740][T23358] Cannot find add_set index 2 as target
[ 1598.762691][T23360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.32631'.
[ 1598.766106][T23361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.32631'.
[ 1599.278930][T23375] Cannot find add_set index 2 as target
[ 1599.462364][T23393] netlink: 'syz.2.32643': attribute type 22 has an invalid length.
[ 1599.465697][T23393] netlink: 'syz.2.32643': attribute type 1 has an invalid length.
[ 1599.468861][T23393] netlink: 224 bytes leftover after parsing attributes in process `syz.2.32643'.
[ 1599.818108][T23399] Cannot find add_set index 2 as target
[ 1599.884608][T23406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32647'.
[ 1600.104382][T23419] netlink: 181256 bytes leftover after parsing attributes in process `syz.0.32651'.
[ 1600.251033][T23428] sch_fq: defrate 0 ignored.
[ 1600.416543][T23443] xt_policy: output policy not valid in PREROUTING and INPUT
[ 1600.451624][T23445] Cannot find add_set index 2 as target
[ 1600.532323][T23452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32662'.
[ 1600.552467][T23447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.32662'.
[ 1600.740216][T23474] netlink: 'syz.2.32670': attribute type 1 has an invalid length.
[ 1600.784158][T23474] 8021q: adding VLAN 0 to HW filter on device bond47
[ 1600.802554][T23474] bond47: (slave veth55): Enslaving as an active interface with a down link
[ 1600.817710][T23474] 8021q: adding VLAN 0 to HW filter on device batadv3
[ 1600.820892][T23474] bond47: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[ 1600.961435][T23492] pimreg: left allmulticast mode
[ 1600.963273][T23492] dvmrp1: left allmulticast mode
[ 1600.965645][T23492] dvmrp6: left allmulticast mode
[ 1600.968991][T23492] dvmrp11: left allmulticast mode
[ 1601.842531][T23569] IPVS: sed: FWM 3 0x00000003 - no destination available
[ 1602.033370][T23580] openvswitch: netlink: Invalid VLAN frame
[ 1602.327018][T23584] netlink: 'syz.0.32707': attribute type 10 has an invalid length.
[ 1602.488397][T23603] syzkaller0: entered promiscuous mode
[ 1602.490498][T23603] syzkaller0: entered allmulticast mode
[ 1602.699358][T23616] Cannot find add_set index 2 as target
[ 1602.752775][T23619] netlink: 'syz.0.32719': attribute type 3 has an invalid length.
[ 1602.952415][T23638] __nla_validate_parse: 4 callbacks suppressed
[ 1602.952428][T23638] netlink: 17 bytes leftover after parsing attributes in process `syz.3.32722'.
[ 1603.013215][T23649] Cannot find add_set index 2 as target
[ 1603.892629][T23664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32730'.
[ 1603.904758][T23664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32730'.
[ 1603.909065][T25371] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1603.913313][T25371] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1603.918861][T25371] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1603.924295][T25371] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1603.925626][T23668] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1604.014400][T23672] Cannot find add_set index 2 as target
[ 1604.192308][T23693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32739'.
[ 1604.200862][T23693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32739'.
[ 1604.208404][T23695] xt_l2tp: v2 doesn't support IP mode
[ 1604.267908][   T33] audit: type=1800 audit(1778266209.017:48): pid=23700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.32739" name="memory.events" dev="tmpfs" ino=54625 res=0 errno=0
[ 1604.327090][T23702] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1604.452402][T23710] wg1 speed is unknown, defaulting to 1000
[ 1604.457534][T23710] wg1 speed is unknown, defaulting to 1000
[ 1604.462199][T23710] wg1 speed is unknown, defaulting to 1000
[ 1604.656115][T23710] infiniband syz0: set active
[ 1604.658499][ T4065] wg1 speed is unknown, defaulting to 1000
[ 1604.660038][T23710] infiniband syz0: added wg1
[ 1604.712106][T23710] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 1604.718210][T23710] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 1604.726771][T23710] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 1604.743647][T23710] RDS/IB: syz0: added
[ 1604.745478][T23710] smc: adding ib device syz0 with port count 1
[ 1604.756495][T23710] smc:    ib device syz0 port 1 has no pnetid
[ 1604.762680][T12972] wg1 speed is unknown, defaulting to 1000
[ 1604.766607][T23710] wg1 speed is unknown, defaulting to 1000
[ 1604.909267][T23710] wg1 speed is unknown, defaulting to 1000
[ 1605.069726][T23710] wg1 speed is unknown, defaulting to 1000
[ 1605.954785][T23819] Cannot find add_set index 2 as target
[ 1605.960986][T23812] netlink: 76 bytes leftover after parsing attributes in process `syz.3.32774'.
[ 1606.008537][T23824] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[ 1606.078368][T23830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32781'.
[ 1606.314638][T23844] IPVS: sed: FWM 3 0x00000003 - no destination available
[ 1606.649149][T23859] netlink: 'syz.2.32791': attribute type 11 has an invalid length.
[ 1607.530454][T23915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32806'.
[ 1607.536641][T23918] Cannot find add_set index 2 as target
[ 1607.777835][T23939] tipc: Resetting bearer <eth:syzkaller0>
[ 1608.456419][T23948] netlink: 'syz.3.32815': attribute type 1 has an invalid length.
[ 1610.795525][T23951] Cannot find add_set index 2 as target
[ 1610.925038][T23964] netlink: 72 bytes leftover after parsing attributes in process `syz.2.32821'.
[ 1610.968569][T23964] IPv6: Can't replace route, no match found
[ 1610.970810][T23964] IPv6: Can't replace route, no match found
[ 1610.985371][T23970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32822'.
[ 1611.499431][T24009] x_tables: duplicate entry at hook 2
[ 1611.551191][T24011] syzkaller0: entered promiscuous mode
[ 1611.553973][T24011] syzkaller0: entered allmulticast mode
[ 1611.666694][T24013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.32835'.
[ 1611.789491][T24019] netlink: 32 bytes leftover after parsing attributes in process `syz.2.32838'.
[ 1612.198345][T24043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.32844'.
[ 1612.201699][T24043] netlink: 'syz.3.32844': attribute type 7 has an invalid length.
[ 1612.205876][T24043] netlink: 'syz.3.32844': attribute type 8 has an invalid length.
[ 1612.208607][T24043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32844'.
[ 1612.215498][T24040] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.32844'.
[ 1612.218927][T24040] netlink: Unknown conntrack attr (0)
[ 1612.994080][T24061] mac80211_hwsim hwsim45 syzkaller0: Caught tx_queue_len zero misconfig
[ 1613.041046][T24065] ipvlan0: entered promiscuous mode
[ 1613.232930][T24084] netlink: 44 bytes leftover after parsing attributes in process `syz.2.32858'.
[ 1613.263660][T24086] netlink: 'syz.3.32859': attribute type 5 has an invalid length.
[ 1613.270350][T24088] netlink: 'syz.3.32859': attribute type 5 has an invalid length.
[ 1613.465177][T24102] IPVS: Scheduler module ip_vs_sip not found
[ 1613.705110][T24118] Cannot find add_set index 2 as target
[ 1613.880039][T24130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32872'.
[ 1613.883348][T24130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32872'.
[ 1614.162066][T24136] netlink: 'syz.2.32874': attribute type 1 has an invalid length.
[ 1614.230719][T24142] Cannot find add_set index 2 as target
[ 1614.375822][T24148] netlink: 'syz.3.32878': attribute type 4 has an invalid length.
[ 1614.430954][T24111] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1614.486135][T24164] Cannot find add_set index 2 as target
[ 1614.734371][T24191] Cannot find add_set index 2 as target
[ 1614.895866][T24204] : entered promiscuous mode
[ 1614.911027][T24204] netlink: 'syz.0.32896': attribute type 1 has an invalid length.
[ 1615.149797][T24213] Cannot find add_set index 2 as target
[ 1615.436163][T24227] syzkaller1: entered promiscuous mode
[ 1615.438133][T24227] syzkaller1: entered allmulticast mode
[ 1615.444496][T24227] 8021q: VLANs not supported on dvmrp0
[ 1615.670841][T24238] 4]j<I͎: renamed from lo (while UP)
[ 1615.976126][T24267] __nla_validate_parse: 19 callbacks suppressed
[ 1615.976205][T24267] netlink: 44 bytes leftover after parsing attributes in process `syz.0.32918'.
[ 1616.067681][T24269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.32919'.
[ 1616.243130][T24281] Cannot find add_set index 2 as target
[ 1616.480672][T24301] netlink: 40 bytes leftover after parsing attributes in process `syz.0.32927'.
[ 1616.781360][T24309] Cannot find add_set index 2 as target
[ 1616.814069][T24311] ipvlan0: entered promiscuous mode
[ 1617.319789][T24328] netlink: 204 bytes leftover after parsing attributes in process `syz.3.32938'.
[ 1617.439500][T24342] netlink: 44 bytes leftover after parsing attributes in process `syz.2.32941'.
[ 1618.312250][T24410] ipvlan2: entered promiscuous mode
[ 1618.410779][T24412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1618.444565][T24414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.32957'.
[ 1618.493307][T24416] netlink: 204 bytes leftover after parsing attributes in process `syz.3.32958'.
[ 1618.558336][T24424] Cannot find add_set index 2 as target
[ 1618.903184][T24465] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[ 1618.951452][T24469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.32974'.
[ 1619.014065][T24471] netlink: 558 bytes leftover after parsing attributes in process `syz.2.32974'.
[ 1619.858940][T24534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.32993'.
[ 1619.862102][T24535] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[ 1619.867689][T12371] Bluetooth: hci1: link tx timeout
[ 1619.872217][T12371] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1619.884649][T12371] Bluetooth: hci1: link tx timeout
[ 1619.890041][T12371] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1619.896371][T12371] Bluetooth: hci1: link tx timeout
[ 1619.898734][T12371] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1621.147916][T24575] __nla_validate_parse: 2 callbacks suppressed
[ 1621.147936][T24575] netlink: 44 bytes leftover after parsing attributes in process `syz.0.33004'.
[ 1621.500210][T24601] syzkaller0: entered promiscuous mode
[ 1621.505809][T24601] syzkaller0: entered allmulticast mode
[ 1621.650805][T24604] netlink: 'syz.0.33013': attribute type 30 has an invalid length.
[ 1621.656784][T24604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33013'.
[ 1621.677046][T24604] netlink: 'syz.0.33013': attribute type 30 has an invalid length.
[ 1621.681199][T24604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33013'.
[ 1621.882729][T24620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33018'.
[ 1621.910908][T24620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33018'.
[ 1621.914684][T24620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33018'.
[ 1621.938016][T12371] Bluetooth: hci1: command 0x0406 tx timeout
[ 1622.101657][T24635] netlink: 'syz.3.33023': attribute type 28 has an invalid length.
[ 1622.140528][T24649] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1622.255897][T24649] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1622.409861][T24649] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1622.486759][T24675] netlink: 44 bytes leftover after parsing attributes in process `syz.0.33035'.
[ 1622.495272][T24677] netlink: 'syz.2.33036': attribute type 39 has an invalid length.
[ 1622.523102][T24649] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1622.599274][T24649] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1622.740323][T25371] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1622.760133][T25371] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1622.776169][T25371] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1622.789877][T25371] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1623.019340][T24713] netlink: 204 bytes leftover after parsing attributes in process `syz.2.33044'.
[ 1623.312811][T24736] sctp: [Deprecated]: syz.3.33054 (pid 24736) Use of int in maxseg socket option.
[ 1623.312811][T24736] Use struct sctp_assoc_value instead
[ 1623.366382][T24739] netlink: 180 bytes leftover after parsing attributes in process `syz.2.33053'.
[ 1623.383039][T24745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1623.385517][T24745] IPv6: NLM_F_CREATE should be set when creating new route
[ 1623.388042][T24745] IPv6: NLM_F_CREATE should be set when creating new route
[ 1623.718258][T24755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33059'.
[ 1624.334616][T24797] netlink: 'syz.2.33070': attribute type 12 has an invalid length.
[ 1624.596286][T24823] x_tables: duplicate underflow at hook 3
[ 1624.750970][T24836] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0
[ 1625.199362][T24847] netlink: 'syz.2.33083': attribute type 1 has an invalid length.
[ 1625.204756][T24848] netlink: 'syz.2.33083': attribute type 1 has an invalid length.
[ 1625.407245][T24853] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[ 1625.729361][T24881] IPVS: nq: FWM 3 0x00000003 - no destination available
[ 1626.808878][T24929] __nla_validate_parse: 8 callbacks suppressed
[ 1626.808891][T24929] netlink: 204 bytes leftover after parsing attributes in process `syz.2.33106'.
[ 1627.080948][T24952] netlink: 204 bytes leftover after parsing attributes in process `syz.0.33114'.
[ 1627.247970][T24971] netlink: 'syz.0.33121': attribute type 11 has an invalid length.
[ 1627.610338][T24993] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[ 1627.748828][T25001] openvswitch: netlink: Multiple metadata blocks provided
[ 1628.329348][T25034] netlink: 'syz.2.33139': attribute type 6 has an invalid length.
[ 1631.245522][T25024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1631.599558][T25101] netlink: 204 bytes leftover after parsing attributes in process `syz.3.33153'.
[ 1631.665993][T25107] netlink: 44 bytes leftover after parsing attributes in process `syz.0.33156'.
[ 1631.674239][T25109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33157'.
[ 1631.687375][T25109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.33157'.
[ 1631.873031][T25128] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.33164'.
[ 1631.884639][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.886821][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.889367][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.891649][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.895763][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.898892][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.901584][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.904712][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.907768][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.910149][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.912409][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.915128][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.917247][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.919401][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.921462][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.923755][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.925839][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.927952][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.930005][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.932023][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.934580][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.936675][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.938791][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.940838][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.942846][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.945122][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.947796][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.950459][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.953181][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.956674][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.959240][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.961840][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1631.964821][T25128] xt_hl: Unknown Hop Limit match mode: 206
[ 1632.038035][T25133] netlink: 40 bytes leftover after parsing attributes in process `syz.0.33167'.
[ 1632.113095][T25142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33169'.
[ 1632.186628][T25149] netlink: 'syz.3.33172': attribute type 1 has an invalid length.
[ 1632.189213][T25149] netlink: 96 bytes leftover after parsing attributes in process `syz.3.33172'.
[ 1632.192118][T25149] netlink: 1 bytes leftover after parsing attributes in process `syz.3.33172'.
[ 1632.197491][T25149] netlink: 658 bytes leftover after parsing attributes in process `syz.3.33172'.
[ 1632.235477][T25152] netlink: 44 bytes leftover after parsing attributes in process `syz.3.33173'.
[ 1632.456720][T25180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.33181'.
[ 1632.520492][T25188] netlink: 44 bytes leftover after parsing attributes in process `syz.0.33182'.
[ 1633.074844][T25209] netlink: 44 bytes leftover after parsing attributes in process `syz.0.33190'.
[ 1633.694882][T25271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1633.702911][T25281] syzkaller1: entered promiscuous mode
[ 1633.705965][T25281] syzkaller1: entered allmulticast mode
[ 1633.770500][T25285] syzkaller1: entered allmulticast mode
[ 1636.859968][T25301] workqueue: Failed to create a rescuer kthread for wq "bond48": -EINTR
[ 1637.020782][T25317] __nla_validate_parse: 6 callbacks suppressed
[ 1637.020798][T25317] netlink: 204 bytes leftover after parsing attributes in process `syz.3.33219'.
[ 1637.056724][T25319] netlink: 'syz.3.33220': attribute type 7 has an invalid length.
[ 1637.059506][T25319] netlink: 148 bytes leftover after parsing attributes in process `syz.3.33220'.
[ 1638.174393][T25337] netlink: 204 bytes leftover after parsing attributes in process `syz.3.33226'.
[ 1638.271775][T25341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33228'.
[ 1638.276702][T25341] netlink: 32 bytes leftover after parsing attributes in process `syz.3.33228'.
[ 1638.878429][T25354] netlink: 204 bytes leftover after parsing attributes in process `syz.2.33233'.
[ 1639.095476][T25365] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1639.098333][T25365] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1639.123694][T25367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33237'.
[ 1639.141363][T25367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33237'.
[ 1639.156509][T25367] netlink: 52 bytes leftover after parsing attributes in process `syz.3.33237'.
[ 1639.164895][T25367] netlink: 'syz.3.33237': attribute type 2 has an invalid length.
[ 1639.170895][T25367] netlink: 144 bytes leftover after parsing attributes in process `syz.3.33237'.
[ 1639.177495][T25365] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1639.189248][T25365] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1639.319919][ T4072] wg1 speed is unknown, defaulting to 1000
[ 1639.326254][ T4072] syz0: Port: 1 Link DOWN
[ 1639.328303][ T7950] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1639.332096][ T7950] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1639.336657][ T4072] wg1 speed is unknown, defaulting to 1000
[ 1639.344880][ T7950] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1639.354102][ T7950] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1639.411993][T25374] netlink: 'syz.3.33240': attribute type 2 has an invalid length.
[ 1640.099828][T25417] netlink: 'syz.2.33257': attribute type 61 has an invalid length.
[ 1640.608265][T25426] xt_hashlimit: size too large, truncated to 1048576
[ 1640.610615][T25426] xt_hashlimit: max too large, truncated to 1048576
[ 1641.421666][T25489] Cannot find del_set index 14804 as target
[ 1641.719083][T25503] only policy match revision 0 supported
[ 1641.719105][T25503] unable to load match
[ 1641.722884][T25504] only policy match revision 0 supported
[ 1641.722893][T25504] unable to load match
[ 1642.226064][T25534] netlink: 'syz.2.33294': attribute type 13 has an invalid length.
[ 1642.228813][T25534] netlink: 'syz.2.33294': attribute type 12 has an invalid length.
[ 1645.272937][T25541] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1646.124147][T25608] ipvlan0: entered promiscuous mode
[ 1646.387862][T25616] __nla_validate_parse: 9 callbacks suppressed
[ 1646.387885][T25616] netlink: 44 bytes leftover after parsing attributes in process `syz.2.33322'.
[ 1646.586917][T25625] netlink: 'syz.2.33324': attribute type 11 has an invalid length.
[ 1646.595240][T25625] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.33324'.
[ 1646.741318][T25632] netlink: 'syz.2.33327': attribute type 6 has an invalid length.
[ 1646.881415][T25652] syzkaller1: entered promiscuous mode
[ 1646.883333][T25652] syzkaller1: entered allmulticast mode
[ 1650.076525][T25682] xt_HMARK: proto mask must be zero with L3 mode
[ 1650.170577][T25694] netlink: 64 bytes leftover after parsing attributes in process `syz.2.33344'.
[ 1650.226903][T25702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33346'.
[ 1650.300351][T25708] netlink: 104 bytes leftover after parsing attributes in process `syz.3.33348'.
[ 1650.356488][T25714] : entered promiscuous mode
[ 1650.358241][T25714] netlink: 'syz.2.33351': attribute type 1 has an invalid length.
[ 1650.361552][T25714] netlink: 1 bytes leftover after parsing attributes in process `syz.2.33351'.
[ 1650.429897][T25721] tls_set_device_offload: netdev not found
[ 1650.479119][T25732] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1
[ 1650.745835][T25757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.33364'.
[ 1653.438450][T25728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1653.580032][T25785] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1653.671078][T25793] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1653.683000][T25793] netlink: 2 bytes leftover after parsing attributes in process `syz.2.33375'.
[ 1653.688195][T25793] tc_dump_action: action bad kind
[ 1653.883222][T25806] netlink: 'syz.2.33378': attribute type 5 has an invalid length.
[ 1653.886466][T25806] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.33378'.
[ 1654.069360][T25820] netlink: 204 bytes leftover after parsing attributes in process `syz.2.33384'.
[ 1654.234207][T25828] xt_hashlimit: invalid rate
[ 1654.739195][T25895] netlink: 'syz.0.33403': attribute type 1 has an invalid length.
[ 1654.741973][T25895] netlink: 'syz.0.33403': attribute type 2 has an invalid length.
[ 1654.747140][T25895] netlink: 'syz.0.33403': attribute type 1 has an invalid length.
[ 1654.750727][T25895] netlink: 'syz.0.33403': attribute type 2 has an invalid length.
[ 1657.985106][T25987] netlink: 'syz.2.33417': attribute type 1 has an invalid length.
[ 1657.987740][T25987] netlink: 'syz.2.33417': attribute type 1 has an invalid length.
[ 1658.140988][T25999] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[ 1658.899860][T26042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1659.020662][T26053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33440'.
[ 1659.025278][T26053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33440'.
[ 1659.077271][T26062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33442'.
[ 1659.080351][T26062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33442'.
[ 1659.150731][T26065] syzkaller1: entered promiscuous mode
[ 1659.153031][T26065] syzkaller1: entered allmulticast mode
[ 1659.216263][T26072] pim6reg1: entered promiscuous mode
[ 1659.218149][T26072] pim6reg1: entered allmulticast mode
[ 1659.372484][T26082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.33447'.
[ 1659.497149][T26093] --map-set only usable from mangle table
[ 1659.544211][T26097] xt_policy: too many policy elements
[ 1659.605779][T26102] netlink: 64 bytes leftover after parsing attributes in process `syz.3.33454'.
[ 1660.050515][T26118] syzkaller0: entered promiscuous mode
[ 1660.052977][T26118] syzkaller0: entered allmulticast mode
[ 1660.173355][T26122] x_tables: ip6_tables: sctp match: only valid for protocol 132
[ 1660.177524][T26122] netlink: 'syz.2.33461': attribute type 1 has an invalid length.
[ 1660.180756][T26122] netlink: 96 bytes leftover after parsing attributes in process `syz.2.33461'.
[ 1660.186036][T26122] netlink: 658 bytes leftover after parsing attributes in process `syz.2.33461'.
[ 1660.190240][T26122] netlink: 1 bytes leftover after parsing attributes in process `syz.2.33461'.
[ 1660.360592][T26130] netlink: 'syz.2.33463': attribute type 8 has an invalid length.
[ 1661.217664][T26156] netlink: 'syz.2.33472': attribute type 1 has an invalid length.
[ 1661.234236][T26156] 8021q: adding VLAN 0 to HW filter on device bond48
[ 1661.256604][T26156] bond48: (slave veth57): Enslaving as an active interface with a down link
[ 1661.297352][T26156] bond48: (slave veth59): Enslaving as an active interface with a down link
[ 1661.307790][T26156] bond48: entered allmulticast mode
[ 1662.285477][T26189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33481'.
[ 1663.869630][T26268] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[ 1663.877627][T26268] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma?
[ 1663.883934][T26269] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma?
[ 1663.979173][T26272] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1664.537446][T26280] __nla_validate_parse: 4 callbacks suppressed
[ 1664.537463][T26280] netlink: 44 bytes leftover after parsing attributes in process `syz.2.33508'.
[ 1665.456991][T26330] ipvlan2: entered promiscuous mode
[ 1665.598583][T26344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33527'.
[ 1665.618241][T26344] xfrm3: entered promiscuous mode
[ 1665.623606][T26344] xfrm3: entered allmulticast mode
[ 1665.630259][T26344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33527'.
[ 1666.073625][T26368] ipvlan2: entered promiscuous mode
[ 1666.349321][T26384] nftables ruleset with unbound set
[ 1666.353613][T26385] syzkaller1: entered promiscuous mode
[ 1666.355582][T26385] syzkaller1: entered allmulticast mode
[ 1666.905968][T26421] netlink: 64 bytes leftover after parsing attributes in process `syz.2.33560'.
[ 1669.836493][T26421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1669.907337][T26438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33563'.
[ 1669.947841][T26438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33563'.
[ 1670.037754][T26444] netlink: 'syz.0.33566': attribute type 1 has an invalid length.
[ 1670.066635][T26444] 8021q: adding VLAN 0 to HW filter on device bond60
[ 1670.111135][T26444] bond60: (slave veth83): Enslaving as an active interface with a down link
[ 1670.117992][T26449] x_tables: duplicate underflow at hook 3
[ 1670.137700][T26444] bond60: (slave veth85): Enslaving as an active interface with a down link
[ 1670.154827][T26444] bond60: entered allmulticast mode
[ 1670.191388][T26449] netlink: 76 bytes leftover after parsing attributes in process `syz.3.33568'.
[ 1670.196403][T26449] netlink: 6 bytes leftover after parsing attributes in process `syz.3.33568'.
[ 1670.200272][T26449] netlink: 6 bytes leftover after parsing attributes in process `syz.3.33568'.
[ 1670.427671][T26471] netlink: 44 bytes leftover after parsing attributes in process `syz.3.33577'.
[ 1670.587301][T26473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.33578'.
[ 1670.691797][T26490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.33582'.
[ 1670.770527][T26499] netlink: 44 bytes leftover after parsing attributes in process `syz.3.33584'.
[ 1670.906981][T26504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33586'.
[ 1670.961899][T26509] netlink: 'syz.0.33588': attribute type 10 has an invalid length.
[ 1670.968017][T26509] syzkaller0: mtu less than device minimum
[ 1671.091680][T26523] xt_HMARK: proto mask must be zero with L3 mode
[ 1671.137307][T26527] netlink: 'syz.2.33592': attribute type 1 has an invalid length.
[ 1671.169022][T26527] 8021q: adding VLAN 0 to HW filter on device bond49
[ 1671.213270][T26527] bond49: (slave veth61): Enslaving as an active interface with a down link
[ 1671.238030][T26527] bond49: (slave veth63): Enslaving as an active interface with a down link
[ 1671.243317][T26527] bond49: entered allmulticast mode
[ 1671.273333][T26536] netlink: 'syz.2.33594': attribute type 16 has an invalid length.
[ 1671.866032][T26572] netlink: 'syz.2.33609': attribute type 13 has an invalid length.
[ 1671.869756][T26572] netlink: 'syz.2.33609': attribute type 13 has an invalid length.
[ 1673.252553][T26652] netlink: 'syz.3.33631': attribute type 18 has an invalid length.
[ 1673.529968][T26661] ipvlan2: entered promiscuous mode
[ 1674.073067][T26694] wg1 speed is unknown, defaulting to 1000
[ 1674.629360][T26711] netlink: 'syz.3.33651': attribute type 2 has an invalid length.
[ 1674.697815][T26715] netlink: 'syz.3.33653': attribute type 10 has an invalid length.
[ 1674.857663][T26723] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1674.870978][T26723] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1675.211013][T26730] __nla_validate_parse: 44 callbacks suppressed
[ 1675.211037][T26730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33658'.
[ 1675.721187][T26743] netlink: 'syz.2.33663': attribute type 10 has an invalid length.
[ 1675.723116][T26744] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.33662'.
[ 1675.727123][T26743] netlink: 228 bytes leftover after parsing attributes in process `syz.2.33663'.
[ 1675.740260][T26743] syzkaller0: entered promiscuous mode
[ 1675.742336][T26743] syzkaller0: entered allmulticast mode
[ 1675.919008][T26734] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1676.025999][T26776] netlink: 14 bytes leftover after parsing attributes in process `syz.0.33673'.
[ 1677.810699][T26808] netlink: 'syz.0.33683': attribute type 10 has an invalid length.
[ 1677.814397][T26808] netlink: 228 bytes leftover after parsing attributes in process `syz.0.33683'.
[ 1677.821241][T26808] syzkaller0: mtu less than device minimum
[ 1677.924622][T26818] netlink: 'syz.3.33684': attribute type 1 has an invalid length.
[ 1677.963198][T26823] netlink: 44 bytes leftover after parsing attributes in process `syz.2.33687'.
[ 1678.002950][T26818] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1678.047489][T26825] bond3: (slave veth3): Enslaving as an active interface with a down link
[ 1678.064631][T26818] bond3: (slave dummy0): making interface the new active one
[ 1678.068961][T26818] dummy0: entered promiscuous mode
[ 1678.071178][T26818] bond3: (slave dummy0): Enslaving as an active interface with an up link
[ 1678.078106][T26818] netlink: 14 bytes leftover after parsing attributes in process `syz.3.33684'.
[ 1678.087153][T26829] : left promiscuous mode
[ 1678.096486][T26829] 8021q: adding VLAN 0 to HW filter on device `
[ 1678.101337][T26829] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1678.119205][T26829] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1678.132929][T26818] bond3: (slave dummy0): Releasing active interface
[ 1678.136882][T26818] dummy0 (unregistering): left promiscuous mode
[ 1678.288954][T26851] netlink: 204 bytes leftover after parsing attributes in process `syz.3.33696'.
[ 1678.465662][T26866] netlink: 'syz.3.33700': attribute type 1 has an invalid length.
[ 1678.473574][T26866] netlink: 476 bytes leftover after parsing attributes in process `syz.3.33700'.
[ 1678.486620][T26866] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.33700'.
[ 1678.594443][T26896] syzkaller1: entered promiscuous mode
[ 1678.596781][T26896] syzkaller1: entered allmulticast mode
[ 1679.911139][T26972] nbd: must specify at least one socket
[ 1680.919578][T27009] __nla_validate_parse: 6 callbacks suppressed
[ 1680.919601][T27009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33743'.
[ 1680.930099][T27009] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1681.736842][T27006] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1681.799086][T27027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33749'.
[ 1681.807312][T27028] openvswitch: : Dropping previously announced user features
[ 1681.817006][T27027] openvswitch: : Dropping previously announced user features
[ 1682.031682][T27041] netlink: 316 bytes leftover after parsing attributes in process `syz.3.33753'.
[ 1682.219175][T27053] netlink: 'syz.3.33758': attribute type 1 has an invalid length.
[ 1682.254630][T27053] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1682.284812][T27053] bond4: (slave veth5): Enslaving as an active interface with a down link
[ 1682.431320][T27065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33762'.
[ 1683.448070][T27105] netlink: 'syz.0.33775': attribute type 10 has an invalid length.
[ 1683.451659][T27105] netlink: 228 bytes leftover after parsing attributes in process `syz.0.33775'.
[ 1683.458835][T27105] syzkaller0: mtu less than device minimum
[ 1683.508620][T27112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33778'.
[ 1683.543198][T27116] IPVS: length: 4096 != 8
[ 1683.558048][T27118] netlink: 60 bytes leftover after parsing attributes in process `syz.0.33780'.
[ 1683.932260][T27143] netlink: 'syz.0.33787': attribute type 8 has an invalid length.
[ 1683.939675][T27143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33787'.
[ 1684.053139][T27159] netlink: 'syz.3.33793': attribute type 1 has an invalid length.
[ 1684.079204][T27159] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1684.101775][T27159] bond5: (slave veth7): Enslaving as an active interface with a down link
[ 1684.189269][T27169] syzkaller0: entered promiscuous mode
[ 1684.192786][T27169] syzkaller0: entered allmulticast mode
[ 1684.415434][T27182] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[ 1684.663288][T27195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33802'.
[ 1684.667825][T27195] netlink: 312 bytes leftover after parsing attributes in process `syz.0.33802'.
[ 1684.932709][T27204] xt_addrtype: ipv6 does not support BROADCAST matching
[ 1685.432898][T27233] veth0: entered promiscuous mode
[ 1685.437211][T27232] veth0: left promiscuous mode
[ 1685.731498][T27248] netlink: 'syz.0.33819': attribute type 1 has an invalid length.
[ 1685.762570][T27248] 8021q: adding VLAN 0 to HW filter on device bond61
[ 1685.796973][T27248] bond61: (slave veth87): Enslaving as an active interface with a down link
[ 1686.558244][T27277] __nla_validate_parse: 3 callbacks suppressed
[ 1686.558265][T27277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.33828'.
[ 1686.565918][T27277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.33828'.
[ 1687.132867][T27298] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1687.134617][T27298] netlink: 'syz.0.33837': attribute type 21 has an invalid length.
[ 1687.208745][T27305] netlink: 'syz.3.33836': attribute type 1 has an invalid length.
[ 1687.242603][T27305] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1687.368674][T27312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33839'.
[ 1687.405577][T27316] netlink: 204 bytes leftover after parsing attributes in process `syz.0.33841'.
[ 1687.485577][T27326] netlink: 'syz.2.33843': attribute type 1 has an invalid length.
[ 1687.519464][T27326] 8021q: adding VLAN 0 to HW filter on device bond50
[ 1687.554737][T27326] bond50: (slave veth65): Enslaving as an active interface with a down link
[ 1687.559171][T27331] netlink: 'syz.0.33845': attribute type 1 has an invalid length.
[ 1687.562564][T27331] netlink: 'syz.0.33845': attribute type 2 has an invalid length.
[ 1687.571273][T27331] netlink: 'syz.0.33845': attribute type 2 has an invalid length.
[ 1687.575138][T27331] netlink: 'syz.0.33845': attribute type 2 has an invalid length.
[ 1687.663042][T27335] : left allmulticast mode
[ 1687.665125][T27335] : left promiscuous mode
[ 1687.667014][T27335] bridge34: port 2(52) entered disabled state
[ 1687.672315][T27335] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1687.731839][T27337] netlink: 44 bytes leftover after parsing attributes in process `syz.2.33848'.
[ 1687.955940][T27349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33853'.
[ 1688.986386][T27371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.33858'.
[ 1688.991480][T27371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.33858'.
[ 1689.035873][T27376] netlink: 204 bytes leftover after parsing attributes in process `syz.2.33859'.
[ 1689.048999][T27378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.33860'.
[ 1689.124772][T27383] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) !
[ 1689.182406][T27392] wg1 speed is unknown, defaulting to 1000
[ 1689.939559][T27411] wg1 speed is unknown, defaulting to 1000
[ 1690.248737][T27437] netlink: 'syz.0.33878': attribute type 1 has an invalid length.
[ 1690.262715][T27437] 8021q: adding VLAN 0 to HW filter on device bond62
[ 1690.278507][T27437] bond62: (slave veth89): Enslaving as an active interface with a down link
[ 1690.408467][T27445] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1690.451131][T27450] netlink: 'syz.0.33882': attribute type 1 has an invalid length.
[ 1691.409759][T27478] syzkaller0: entered promiscuous mode
[ 1691.412304][T27478] syzkaller0: entered allmulticast mode
[ 1691.719042][T27502] __nla_validate_parse: 4 callbacks suppressed
[ 1691.719056][T27502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.33899'.
[ 1691.779898][T27504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.33900'.
[ 1691.791125][T27506] netlink: 44 bytes leftover after parsing attributes in process `syz.3.33901'.
[ 1691.823407][T27508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.33902'.
[ 1691.828035][T27508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.33902'.
[ 1692.019940][T27522] atomic_op ffff888170c10198 conn xmit_atomic 0000000000000000
[ 1692.027320][T27524] bond30: entered allmulticast mode
[ 1692.034885][T27524] ip6gre0: entered allmulticast mode
[ 1692.155132][T27540] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[ 1692.171662][T27545] netlink: 40 bytes leftover after parsing attributes in process `syz.3.33911'.
[ 1692.181477][T27545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33911'.
[ 1692.228607][T27551] netlink: 'syz.2.33912': attribute type 1 has an invalid length.
[ 1692.233189][T27551] netlink: 224 bytes leftover after parsing attributes in process `syz.2.33912'.
[ 1692.754678][T27596] netlink: 36 bytes leftover after parsing attributes in process `syz.2.33926'.
[ 1692.816348][T27606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33928'.
[ 1693.075666][T27627] wg1 speed is unknown, defaulting to 1000
[ 1693.135466][T27630] netlink: 'syz.2.33934': attribute type 16 has an invalid length.
[ 1693.138778][T27630] netlink: 'syz.2.33934': attribute type 17 has an invalid length.
[ 1693.149207][T27630] ip6gre0: left allmulticast mode
[ 1693.171717][T27630] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1694.196808][T27669] netlink: 'syz.2.33950': attribute type 13 has an invalid length.
[ 1694.200336][T27669] netlink: 'syz.2.33950': attribute type 17 has an invalid length.
[ 1694.234081][T27669] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1696.732516][T27752] __nla_validate_parse: 6 callbacks suppressed
[ 1696.732538][T27752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.33979'.
[ 1696.852005][T27760] tipc: Started in network mode
[ 1696.857073][T27760] tipc: Node identity aabb16972c3b, cluster identity 4711
[ 1696.860838][T27760] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1696.870487][T27760] syzkaller0: entered promiscuous mode
[ 1696.879845][T27760] syzkaller0: entered allmulticast mode
[ 1696.925882][T27760] tipc: Resetting bearer <eth:syzkaller0>
[ 1696.931244][T27760] tipc: Resetting bearer <eth:syzkaller0>
[ 1696.971979][T27760] tipc: Disabling bearer <eth:syzkaller0>
[ 1697.160017][T27788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33990'.
[ 1697.529379][T27802] netlink: 104 bytes leftover after parsing attributes in process `syz.0.33994'.
[ 1697.543808][T27802] netlink: 40 bytes leftover after parsing attributes in process `syz.0.33994'.
[ 1697.854733][T27816] netlink: 64 bytes leftover after parsing attributes in process `syz.2.33999'.
[ 1698.241140][T27844] netlink: 32 bytes leftover after parsing attributes in process `syz.0.34007'.
[ 1698.344057][T27851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34009'.
[ 1698.661605][T27874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34018'.
[ 1698.761820][T27882] wg1 speed is unknown, defaulting to 1000
[ 1698.882092][T27884] netlink: 'syz.0.34021': attribute type 1 has an invalid length.
[ 1699.049083][T27894] netlink: 204 bytes leftover after parsing attributes in process `syz.0.34025'.
[ 1700.199307][T27909] syzkaller0: entered promiscuous mode
[ 1700.201360][T27909] syzkaller0: entered allmulticast mode
[ 1700.442584][T27919] can: request_module (can-proto-0) failed.
[ 1700.449849][T27919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34034'.
[ 1700.462702][T27914] Cannot find del_set index 0 as target
[ 1700.470816][T27919] vxcan1 (unregistering): left allmulticast mode
[ 1700.478543][   T33] audit: type=1800 audit(1778266305.227:49): pid=27917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.34032" name="memory.events" dev="tmpfs" ino=56944 res=0 errno=0
[ 1700.960272][T27945] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20000
[ 1701.170178][T27955] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1701.257778][T27966] xt_CT: No such helper "syz0"
[ 1701.751164][T27972] openvswitch: netlink: IP tunnel dst address not specified
[ 1701.909960][T27980] __nla_validate_parse: 2 callbacks suppressed
[ 1701.909972][T27980] netlink: 32 bytes leftover after parsing attributes in process `syz.0.34051'.
[ 1702.055899][T27993] netlink: 44 bytes leftover after parsing attributes in process `syz.2.34053'.
[ 1702.274114][T28011] IPVS: Scheduler module ip_vs_sip not found
[ 1702.414496][T28028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34064'.
[ 1702.746960][T28051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34071'.
[ 1702.802201][T28056] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[ 1702.810761][T28056] bond7 (unregistering): Released all slaves
[ 1703.113097][T28071] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1703.116645][T28071] 8021q: adding VLAN 0 to HW filter on device team0
[ 1703.121279][T28071] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1703.148546][T28071] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1703.152262][T28071] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1703.159959][T28071] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1703.167581][T24031] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1703.170119][T24031] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1703.173855][T24031] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1703.176208][T24031] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1703.187414][T14332] wg1 speed is unknown, defaulting to 1000
[ 1703.189681][T14332] syz0: Port: 1 Link ACTIVE
[ 1703.197452][T14332] wg1 speed is unknown, defaulting to 1000
[ 1703.334832][T28077] Unsupported ieee802154 address type: 0
[ 1703.515003][T28090] netlink: 60 bytes leftover after parsing attributes in process `syz.3.34083'.
[ 1703.691808][T28106] netlink: 'syz.3.34088': attribute type 1 has an invalid length.
[ 1703.907153][T28123] A link change request failed with some changes committed already. Interface 264]j<I͎ may have been left with an inconsistent configuration, please check.
[ 1704.122163][T28133] : renamed from bond0 (while UP)
[ 1704.230842][T28135] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.34099'.
[ 1704.384590][   T33] audit: type=1804 audit(1778266309.127:50): pid=28144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.34102" name="/newroot/876/cgroup.controllers" dev="tmpfs" ino=4514 res=1 errno=0
[ 1704.405122][   T33] audit: type=1800 audit(1778266309.127:51): pid=28144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.34102" name="cgroup.controllers" dev="tmpfs" ino=4514 res=0 errno=0
[ 1704.447543][T28146] netlink: 204 bytes leftover after parsing attributes in process `syz.2.34104'.
[ 1704.787636][T28171] netlink: 204 bytes leftover after parsing attributes in process `syz.0.34112'.
[ 1704.840383][T28174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34114'.
[ 1704.848708][T28174] netlink: 64 bytes leftover after parsing attributes in process `syz.0.34114'.
[ 1704.895455][T28180] netlink: 'syz.3.34116': attribute type 1 has an invalid length.
[ 1705.019371][T28187] sctp: [Deprecated]: syz.0.34117 (pid 28187) Use of int in max_burst socket option.
[ 1705.019371][T28187] Use struct sctp_assoc_value instead
[ 1705.104019][T28187] netlink: 'syz.0.34117': attribute type 10 has an invalid length.
[ 1705.200615][T28198] ipvlan2: entered promiscuous mode
[ 1705.658744][T28221] sctp: [Deprecated]: syz.2.34129 (pid 28221) Use of int in max_burst socket option deprecated.
[ 1705.658744][T28221] Use struct sctp_assoc_value instead
[ 1705.796173][T28185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1706.159802][T28236] mac80211_hwsim hwsim45 syzkaller0: left promiscuous mode
[ 1706.219930][T28238] Cannot find set identified by id 65534 to match
[ 1706.924792][T28285] __nla_validate_parse: 6 callbacks suppressed
[ 1706.924813][T28285] netlink: 260 bytes leftover after parsing attributes in process `syz.0.34149'.
[ 1706.939635][T28285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34149'.
[ 1706.971974][T28285] bond63 (unregistering): Released all slaves
[ 1707.160704][T28307] pim6reg1: entered promiscuous mode
[ 1707.162616][T28307] pim6reg1: entered allmulticast mode
[ 1707.329836][T28315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34157'.
[ 1707.333257][T28315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.34157'.
[ 1708.796349][T28381] IPVS: set_ctl: invalid protocol: 12908 0.1.1.2:20002
[ 1708.850433][T28386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.34179'.
[ 1708.862723][T28386] netlink: 36 bytes leftover after parsing attributes in process `syz.3.34179'.
[ 1708.961947][T28386] netlink: 20 bytes leftover after parsing attributes in process `syz.3.34179'.
[ 1709.000402][T28389] xt_TCPMSS: Only works on TCP SYN packets
[ 1709.026374][T28391] tipc: New replicast peer: 255.255.255.255
[ 1709.029071][T28391] tipc: Enabled bearer <udp:syz2>, priority 26
[ 1709.252197][T28409] hma(kX: entered promiscuous mode
[ 1709.322257][T28414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.34187'.
[ 1709.363154][T28416] netlink: 44 bytes leftover after parsing attributes in process `syz.0.34188'.
[ 1709.369937][T28418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34189'.
[ 1709.395606][T28420] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[ 1709.480173][T28418] sctp: [Deprecated]: syz.2.34189 (pid 28418) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1709.480173][T28418] Use struct sctp_sack_info instead
[ 1710.043970][ T4072] tipc: Node number set to 2256541335
[ 1710.217839][T28447] bond0: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[ 1710.267991][T28447] bond0 (unregistering): Released all slaves
[ 1710.408273][T28456] syzkaller1: entered allmulticast mode
[ 1711.389141][T28516] IPVS: Scheduler module ip_vs_sip not found
[ 1711.436224][T28521] openvswitch: netlink: IPv4 tun info is not correct
[ 1711.760059][T28536] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode
[ 1712.090096][T28552] smc: net device wlan0 applied user defined pnetid SYZ0
[ 1712.510073][T28580] __nla_validate_parse: 5 callbacks suppressed
[ 1712.510088][T28580] netlink: 204 bytes leftover after parsing attributes in process `syz.2.34238'.
[ 1712.624641][T28583] nbd10: detected capacity change from 0 to 127
[ 1712.677920][T15750] block nbd10: Receive control failed (result -104)
[ 1712.972615][T28603] netlink: 204 bytes leftover after parsing attributes in process `syz.2.34245'.
[ 1712.982987][T28605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.34246'.
[ 1713.181841][T28617] bridge0: port 2(wlan1) entered blocking state
[ 1713.188263][T28617] bridge0: port 2(wlan1) entered disabled state
[ 1713.190630][T28617] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[ 1713.195586][T28617] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[ 1713.201429][T28617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34250'.
[ 1713.468684][T28633] netlink: 64 bytes leftover after parsing attributes in process `syz.3.34254'.
[ 1713.560486][T28637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34257'.
[ 1713.581323][T28642] sctp: [Deprecated]: syz.3.34258 (pid 28642) Use of int in maxseg socket option.
[ 1713.581323][T28642] Use struct sctp_assoc_value instead
[ 1714.001350][T28688] netlink: 68 bytes leftover after parsing attributes in process `syz.3.34270'.
[ 1714.099615][T28700] syzkaller0: entered promiscuous mode
[ 1714.101637][T28700] syzkaller0: entered allmulticast mode
[ 1714.104994][T28702] netlink: 'syz.0.34275': attribute type 1 has an invalid length.
[ 1714.107719][T28702] netlink: 'syz.0.34275': attribute type 2 has an invalid length.
[ 1714.110383][T28702] netlink: 'syz.0.34275': attribute type 1 has an invalid length.
[ 1714.113076][T28702] netlink: 'syz.0.34275': attribute type 3 has an invalid length.
[ 1714.135365][T28700] netlink: 44 bytes leftover after parsing attributes in process `syz.3.34274'.
[ 1714.144971][T28702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.34275'.
[ 1714.148213][T28702] netlink: 16 bytes leftover after parsing attributes in process `syz.0.34275'.
[ 1714.357388][T28714] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[ 1714.431771][T28718] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[ 1714.747368][T28740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1714.750564][T28740] IPv6: NLM_F_CREATE should be set when creating new route
[ 1715.805566][T28787] netlink: 'syz.0.34301': attribute type 13 has an invalid length.
[ 1715.816025][T28787] netlink: 'syz.0.34301': attribute type 17 has an invalid length.
[ 1715.945882][   T96] block nbd10: Connection timed out, retrying (0/1 alive)
[ 1715.951670][   T96] block nbd10: Connection timed out, retrying (0/1 alive)
[ 1715.957758][   T96] block nbd10: Connection timed out, retrying (0/1 alive)
[ 1715.960874][   T96] block nbd10: Connection timed out, retrying (0/1 alive)
[ 1715.968487][   T96] block nbd10: Dead connection, failed to find a fallback
[ 1715.972350][   T96] block nbd10: shutting down sockets
[ 1715.980358][   T96] I/O error, dev nbd10, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1715.985398][   T96] Buffer I/O error on dev nbd10, logical block 3, async page read
[ 1715.989102][   T96] I/O error, dev nbd10, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1715.992806][   T96] Buffer I/O error on dev nbd10, logical block 2, async page read
[ 1715.996517][   T96] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1716.000258][   T96] Buffer I/O error on dev nbd10, logical block 1, async page read
[ 1716.003798][   T96] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1716.007696][   T96] Buffer I/O error on dev nbd10, logical block 0, async page read
[ 1716.016943][T26632] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1716.030735][T26632] Buffer I/O error on dev nbd10, logical block 0, async page read
[ 1716.036067][T26632] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1716.040236][T26632] Buffer I/O error on dev nbd10, logical block 1, async page read
[ 1716.044612][T26632] I/O error, dev nbd10, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1716.048766][T26632] Buffer I/O error on dev nbd10, logical block 2, async page read
[ 1716.052119][T26632] I/O error, dev nbd10, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1716.055923][T26632] Buffer I/O error on dev nbd10, logical block 3, async page read
[ 1716.059497][T26632] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1716.062994][T26632] Buffer I/O error on dev nbd10, logical block 0, async page read
[ 1716.067161][T26632] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1716.071160][T26632] Buffer I/O error on dev nbd10, logical block 1, async page read
[ 1716.078268][T26632] ldm_validate_partition_table(): Disk read failed.
[ 1716.085450][T26632] Dev nbd10: unable to read RDB block 0
[ 1716.088815][T26632]  nbd10: unable to read partition table
[ 1716.100945][T26632] ldm_validate_partition_table(): Disk read failed.
[ 1716.107661][T26632] Dev nbd10: unable to read RDB block 0
[ 1716.111316][T26632]  nbd10: unable to read partition table
[ 1716.292541][T28786] tipc: Resetting bearer <ib:geneve0>
[ 1716.537698][T28787] gre0: left allmulticast mode
[ 1716.557099][T28787] : left promiscuous mode
[ 1716.567341][T28787] 8021q: adding VLAN 0 to HW filter on device 
[ 1716.580120][T28787] wg2: left allmulticast mode
[ 1716.632097][T28787] tipc: Resetting bearer <ib:geneve0>
[ 1716.636770][T28787] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 1716.670758][ T5735] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1716.684664][ T5735] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1716.708766][ T5735] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1716.719950][ T5735] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1716.747276][T28802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1716.750506][T28802] IPv6: NLM_F_CREATE should be set when creating new route
[ 1717.261958][T28856] netlink: 'syz.3.34324': attribute type 6 has an invalid length.
[ 1717.265426][T28856] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1720.199109][T28865] __nla_validate_parse: 8 callbacks suppressed
[ 1720.199124][T28865] netlink: 44 bytes leftover after parsing attributes in process `syz.3.34326'.
[ 1720.329748][T28877] netlink: 204 bytes leftover after parsing attributes in process `syz.2.34332'.
[ 1720.359610][T28885] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.34331'.
[ 1720.367370][T28884] netlink: 44 bytes leftover after parsing attributes in process `syz.2.34334'.
[ 1720.412896][T28891] team0: Device 264]j<I͎ is loopback device. Loopback devices can't be added as a team port
[ 1720.418330][T28891] A link change request failed with some changes committed already. Interface 264]j<I͎ may have been left with an inconsistent configuration, please check.
[ 1721.223197][T28942] wg1 speed is unknown, defaulting to 1000
[ 1721.477629][T28965] netlink: 36 bytes leftover after parsing attributes in process `syz.3.34360'.
[ 1721.501354][T28969] mac80211_hwsim hwsim7 wlan1: Device is already in use.
[ 1722.027224][T28988] netlink: 48 bytes leftover after parsing attributes in process `syz.3.34366'.
[ 1722.087306][T28993] netlink: 'syz.3.34367': attribute type 62 has an invalid length.
[ 1722.519128][T28997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34368'.
[ 1722.732402][T29013] ipvlan2: entered promiscuous mode
[ 1722.811672][ T5735] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xc
[ 1722.847686][T29028] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.34378'.
[ 1722.852478][T29028] Unsupported ieee802154 address type: 0
[ 1722.893954][T29032] netlink: 204 bytes leftover after parsing attributes in process `syz.3.34379'.
[ 1722.927212][T29034] netlink: 10 bytes leftover after parsing attributes in process `syz.0.34375'.
[ 1725.747406][T29016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1726.909162][T29115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34403'.
[ 1727.177532][T29135] netlink: 'syz.3.34408': attribute type 1 has an invalid length.
[ 1727.185615][T29135] netlink: 28 bytes leftover after parsing attributes in process `syz.3.34408'.
[ 1727.189889][T29135] netlink: 28 bytes leftover after parsing attributes in process `syz.3.34408'.
[ 1727.301316][T29140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34410'.
[ 1727.415418][T29150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34413'.
[ 1727.438046][T29150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34413'.
[ 1727.442317][T29150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.34413'.
[ 1727.599466][T29166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.34417'.
[ 1727.616554][T29166] --map-set only usable from mangle table
[ 1727.633363][T29166] bond0: entered promiscuous mode
[ 1727.641769][T29166] vcan1: entered promiscuous mode
[ 1727.645481][T29166] vcan1: entered allmulticast mode
[ 1727.647656][T29166] bond0: (slave vcan1): The slave device specified does not support setting the MAC address
[ 1727.651921][T29166] bond0: (slave vcan1): Error -95 calling set_mac_address
[ 1727.749826][T29176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34422'.
[ 1727.757034][T29176] sctp: [Deprecated]: syz.3.34422 (pid 29176) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1727.757034][T29176] Use struct sctp_sack_info instead
[ 1728.163862][T29200] syzkaller1: entered promiscuous mode
[ 1728.165911][T29200] syzkaller1: entered allmulticast mode
[ 1728.269341][T29200] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1728.271989][T29200] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1728.444368][T29200] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1728.471190][T29200] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1728.551024][T29200] bridge1: left promiscuous mode
[ 1728.556144][T29200] bridge2: left promiscuous mode
[ 1728.558970][T29200] bridge2: left allmulticast mode
[ 1728.560957][T29200] sit1: left allmulticast mode
[ 1728.563023][T29200] macsec1: left promiscuous mode
[ 1728.612590][T29200] syzkaller1: left promiscuous mode
[ 1728.614955][T29200] syzkaller1: left allmulticast mode
[ 1728.620095][T20085] wg1 speed is unknown, defaulting to 1000
[ 1728.623327][T20085] syz0: Port: 1 Link DOWN
[ 1728.627949][T20085] wg1 speed is unknown, defaulting to 1000
[ 1729.000228][T29231] netlink: 204 bytes leftover after parsing attributes in process `syz.0.34435'.
[ 1729.240931][T29238] Cannot find add_set index 0 as target
[ 1730.264751][T29281] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1730.623677][T29323] syzkaller1: entered promiscuous mode
[ 1730.625799][T29323] syzkaller1: entered allmulticast mode
[ 1731.710774][T29374] ipvlan2: entered promiscuous mode
[ 1731.764613][T29379] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 1731.802491][T29387] netlink: 'syz.0.34486': attribute type 8 has an invalid length.
[ 1731.805842][T29387] netlink: 'syz.0.34486': attribute type 4 has an invalid length.
[ 1732.067207][T29416] __nla_validate_parse: 11 callbacks suppressed
[ 1732.067222][T29416] netlink: 32 bytes leftover after parsing attributes in process `syz.3.34491'.
[ 1732.928693][T29479] netlink: 84 bytes leftover after parsing attributes in process `syz.3.34515'.
[ 1732.940688][T29479] netlink: 84 bytes leftover after parsing attributes in process `syz.3.34515'.
[ 1732.967254][T29484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34516'.
[ 1732.976556][T29484] ipvlan2: entered promiscuous mode
[ 1733.108825][T29497] netlink: 22 bytes leftover after parsing attributes in process `syz.3.34521'.
[ 1733.262111][T29523] netlink: 44 bytes leftover after parsing attributes in process `syz.3.34529'.
[ 1733.303223][T29527] syzkaller0: entered promiscuous mode
[ 1733.308316][T29527] syzkaller0: entered allmulticast mode
[ 1733.421584][T29543] netlink: 'syz.3.34535': attribute type 1 has an invalid length.
[ 1733.556795][T29558] netlink: 44 bytes leftover after parsing attributes in process `syz.0.34538'.
[ 1733.705260][T29571] IPVS: Unknown mcast interface: lo
[ 1734.522293][T29582] syzkaller0: entered promiscuous mode
[ 1734.524892][T29582] syzkaller0: entered allmulticast mode
[ 1734.777858][T29601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34548'.
[ 1735.026562][T29625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34559'.
[ 1735.149393][T29630] netlink: 60 bytes leftover after parsing attributes in process `syz.2.34560'.
[ 1735.404582][T29655] mac80211_hwsim hwsim7 wlan1: Device is already in use.
[ 1735.578128][T29675] netlink: 'syz.0.34572': attribute type 1 has an invalid length.
[ 1735.612152][T29680] sctp: [Deprecated]: syz.3.34574 (pid 29680) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1735.612152][T29680] Use struct sctp_sack_info instead
[ 1735.906420][T29707] ipvlan2: left promiscuous mode
[ 1736.868177][T29741] netlink: 'syz.3.34592': attribute type 1 has an invalid length.
[ 1737.892422][T29807] __nla_validate_parse: 6 callbacks suppressed
[ 1737.892434][T29807] netlink: 32 bytes leftover after parsing attributes in process `syz.3.34612'.
[ 1737.899598][T29806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.34612'.
[ 1737.902616][T29806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.34612'.
[ 1737.905752][T29806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.34612'.
[ 1737.909056][T29807] netlink: 32 bytes leftover after parsing attributes in process `syz.3.34612'.
[ 1737.912308][T29806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.34612'.
[ 1737.916189][T29806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.34612'.
[ 1737.919274][T29807] netlink: 32 bytes leftover after parsing attributes in process `syz.3.34612'.
[ 1737.923774][T29806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.34612'.
[ 1737.927435][T29807] netlink: 32 bytes leftover after parsing attributes in process `syz.3.34612'.
[ 1737.966013][T29813] mac80211_hwsim hwsim7 wlan1: Device is already in use.
[ 1738.067051][T29824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1738.109570][T29830] ipvlan0: entered promiscuous mode
[ 1738.901340][T29867] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1739.949391][T29939] block nbd11: Unsupported socket: should be TCP or UNIX.
[ 1740.165345][T29944] mac80211_hwsim hwsim7 wlan1: Device is already in use.
[ 1740.551284][T29962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1741.101480][T29999] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[ 1741.248067][T30017] netlink: 'syz.3.34681': attribute type 11 has an invalid length.
[ 1742.122599][T30043] netlink: 'syz.2.34689': attribute type 6 has an invalid length.
[ 1742.182481][T30046] ipvlan3: entered promiscuous mode
[ 1742.597606][T30063] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1742.951401][T30086] __nla_validate_parse: 138 callbacks suppressed
[ 1742.951413][T30086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.34704'.
[ 1742.961847][T30086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.34704'.
[ 1745.748751][T30071] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1745.835975][T30093] netlink: 'syz.0.34705': attribute type 1 has an invalid length.
[ 1745.843541][T30093] netlink: 248 bytes leftover after parsing attributes in process `syz.0.34705'.
[ 1745.853544][T30094] netlink: 'syz.2.34706': attribute type 3 has an invalid length.
[ 1746.000503][T30106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34710'.
[ 1746.121794][T30116] netlink: 'syz.2.34713': attribute type 10 has an invalid length.
[ 1746.159348][T30118] netlink: 'syz.3.34714': attribute type 1 has an invalid length.
[ 1746.306660][T30132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34719'.
[ 1746.321565][T30132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.34719'.
[ 1746.553250][T30151] netlink: 44 bytes leftover after parsing attributes in process `syz.2.34725'.
[ 1746.632053][T30160] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1746.709155][T30165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34728'.
[ 1746.712870][T30167] netlink: 204 bytes leftover after parsing attributes in process `syz.0.34730'.
[ 1746.766748][T30170] tipc: Resetting bearer <eth:batadv0>
[ 1746.769349][T30170] tipc: Resetting bearer <eth:batadv0>
[ 1746.789985][T30170] geneve0: left promiscuous mode
[ 1746.791807][T30170] bond30: left promiscuous mode
[ 1746.794263][T30170] bond34: left promiscuous mode
[ 1746.796649][T30170] ip6gretap4: left promiscuous mode
[ 1746.798522][T30170] geneve6: left promiscuous mode
[ 1746.801122][T30170] bond42: left promiscuous mode
[ 1746.805542][T30170] veth51: left promiscuous mode
[ 1746.808325][T30170] bond45: left promiscuous mode
[ 1746.810106][T30170] bond46: left promiscuous mode
[ 1746.813218][T30170] xfrm3: left promiscuous mode
[ 1746.816869][T30170] ipvlan0: left promiscuous mode
[ 1746.935824][T30181] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[ 1746.938993][T30181] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1747.801714][T30204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34743'.
[ 1747.871272][T24031] smc: removing ib device syz0
[ 1747.910714][T24031] 
[ 1747.911595][T24031] ======================================================
[ 1747.913918][T24031] WARNING: possible circular locking dependency detected
[ 1747.916243][T24031] syzkaller #0 Not tainted
[ 1747.917906][T24031] ------------------------------------------------------
[ 1747.920152][T24031] kworker/u9:4/24031 is trying to acquire lock:
[ 1747.922241][T24031] ffff8881012acaa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80
[ 1747.925431][T24031] 
[ 1747.925431][T24031] but task is already holding lock:
[ 1747.927844][T24031] ffffffff8f38d660 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[ 1747.930711][T24031] 
[ 1747.930711][T24031] which lock already depends on the new lock.
[ 1747.930711][T24031] 
[ 1747.934385][T24031] 
[ 1747.934385][T24031] the existing dependency chain (in reverse order) is:
[ 1747.937375][T24031] 
[ 1747.937375][T24031] -> #10 (gdp_mutex){+.+.}-{4:4}:
[ 1747.939776][T24031]        __mutex_lock+0x1a3/0x1550
[ 1747.941515][T24031]        get_device_parent+0x16f/0x3a0
[ 1747.943529][T24031]        device_add+0x2e1/0xbb0
[ 1747.945178][T24031]        device_create+0x269/0x300
[ 1747.946919][T24031]        msr_device_create+0x33/0x50
[ 1747.948732][T24031]        cpuhp_invoke_callback+0x445/0x860
[ 1747.950774][T24031]        cpuhp_thread_fun+0x36b/0x780
[ 1747.952514][T24031]        smpboot_thread_fn+0x541/0xa50
[ 1747.954259][T24031]        kthread+0x388/0x470
[ 1747.955818][T24031]        ret_from_fork+0x514/0xb70
[ 1747.958037][T24031]        ret_from_fork_asm+0x1a/0x30
[ 1747.959962][T24031] 
[ 1747.959962][T24031] -> #9 (cpuhp_state-up){+.+.}-{0:0}:
[ 1747.962627][T24031]        cpuhp_thread_fun+0x127/0x780
[ 1747.964678][T24031]        smpboot_thread_fn+0x541/0xa50
[ 1747.966575][T24031]        kthread+0x388/0x470
[ 1747.968174][T24031]        ret_from_fork+0x514/0xb70
[ 1747.969951][T24031]        ret_from_fork_asm+0x1a/0x30
[ 1747.971854][T24031] 
[ 1747.971854][T24031] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[ 1747.974690][T24031]        cpus_read_lock+0x42/0x160
[ 1747.976449][T24031]        static_key_slow_inc+0x12/0x30
[ 1747.978264][T24031]        nbd_genl_reconfigure+0x132f/0x1ea0
[ 1747.980367][T24031]        genl_family_rcv_msg_doit+0x22a/0x330
[ 1747.982512][T24031]        genl_rcv_msg+0x61c/0x7a0
[ 1747.984574][T24031]        netlink_rcv_skb+0x232/0x4b0
[ 1747.986460][T24031]        genl_rcv+0x28/0x40
[ 1747.988108][T24031]        netlink_unicast+0x75c/0x8e0
[ 1747.989949][T24031]        netlink_sendmsg+0x813/0xb40
[ 1747.991762][T24031]        ____sys_sendmsg+0x972/0x9f0
[ 1747.993537][T24031]        ___sys_sendmsg+0x2a5/0x360
[ 1747.995448][T24031]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1747.997223][T24031]        do_syscall_64+0x15f/0xf80
[ 1747.998963][T24031]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1748.001126][T24031] 
[ 1748.001126][T24031] -> #7 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1748.003620][T24031]        __mutex_lock+0x1a3/0x1550
[ 1748.005362][T24031]        nbd_queue_rq+0x37b/0x1100
[ 1748.007065][T24031]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1748.009271][T24031]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 1748.011671][T24031]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1748.014041][T24031]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1748.016113][T24031]        blk_mq_dispatch_list+0xd16/0xe10
[ 1748.018124][T24031]        blk_mq_flush_plug_list+0x48d/0x570
[ 1748.020222][T24031]        __blk_flush_plug+0x3ed/0x4d0
[ 1748.022147][T24031]        __submit_bio+0x28d/0x580
[ 1748.023854][T24031]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 1748.026232][T24031]        block_read_full_folio+0x599/0x830
[ 1748.028260][T24031]        filemap_read_folio+0x137/0x3b0
[ 1748.030348][T24031]        do_read_cache_folio+0x358/0x590
[ 1748.032541][T24031]        read_part_sector+0xb6/0x2b0
[ 1748.034734][T24031]        adfspart_check_ICS+0xb1/0x960
[ 1748.036985][T24031]        bdev_disk_changed+0x817/0x1770
[ 1748.039207][T24031]        blkdev_get_whole+0x380/0x510
[ 1748.041432][T24031]        bdev_open+0x31e/0xd30
[ 1748.043265][T24031]        blkdev_open+0x470/0x610
[ 1748.045101][T24031]        do_dentry_open+0x785/0x14e0
[ 1748.046882][T24031]        vfs_open+0x3b/0x340
[ 1748.048492][T24031]        path_openat+0x2e08/0x3860
[ 1748.050242][T24031]        do_file_open+0x23e/0x4a0
[ 1748.051989][T24031]        do_sys_openat2+0x113/0x200
[ 1748.053743][T24031]        __x64_sys_openat+0x138/0x170
[ 1748.055587][T24031]        do_syscall_64+0x15f/0xf80
[ 1748.057354][T24031]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1748.059505][T24031] 
[ 1748.059505][T24031] -> #6 (&cmd->lock){+.+.}-{4:4}:
[ 1748.062345][T24031]        __mutex_lock+0x1a3/0x1550
[ 1748.064047][T24031]        nbd_queue_rq+0xc6/0x1100
[ 1748.065792][T24031]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1748.067810][T24031]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 1748.070195][T24031]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1748.072520][T24031]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1748.074446][T24031]        blk_mq_dispatch_list+0xd16/0xe10
[ 1748.076419][T24031]        blk_mq_flush_plug_list+0x48d/0x570
[ 1748.078414][T24031]        __blk_flush_plug+0x3ed/0x4d0
[ 1748.080345][T24031]        __submit_bio+0x28d/0x580
[ 1748.082008][T24031]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 1748.084163][T24031]        block_read_full_folio+0x599/0x830
[ 1748.086154][T24031]        filemap_read_folio+0x137/0x3b0
[ 1748.087990][T24031]        do_read_cache_folio+0x358/0x590
[ 1748.089935][T24031]        read_part_sector+0xb6/0x2b0
[ 1748.091739][T24031]        adfspart_check_ICS+0xb1/0x960
[ 1748.093567][T24031]        bdev_disk_changed+0x817/0x1770
[ 1748.095600][T24031]        blkdev_get_whole+0x380/0x510
[ 1748.097567][T24031]        bdev_open+0x31e/0xd30
[ 1748.099170][T24031]        blkdev_open+0x470/0x610
[ 1748.100861][T24031]        do_dentry_open+0x785/0x14e0
[ 1748.102591][T24031]        vfs_open+0x3b/0x340
[ 1748.104140][T24031]        path_openat+0x2e08/0x3860
[ 1748.105947][T24031]        do_file_open+0x23e/0x4a0
[ 1748.107658][T24031]        do_sys_openat2+0x113/0x200
[ 1748.109681][T24031]        __x64_sys_openat+0x138/0x170
[ 1748.111891][T24031]        do_syscall_64+0x15f/0xf80
[ 1748.113787][T24031]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1748.115986][T24031] 
[ 1748.115986][T24031] -> #5 (set->srcu){.+.+}-{0:0}:
[ 1748.118393][T24031]        __synchronize_srcu+0xca/0x300
[ 1748.120295][T24031]        elevator_switch+0x1e8/0x7a0
[ 1748.122069][T24031]        elevator_change+0x2cc/0x450
[ 1748.123883][T24031]        elevator_set_default+0x36c/0x430
[ 1748.125826][T24031]        blk_register_queue+0x3e9/0x4e0
[ 1748.127663][T24031]        __add_disk+0x677/0xd50
[ 1748.129295][T24031]        add_disk_fwnode+0xfb/0x480
[ 1748.131019][T24031]        nbd_dev_add+0x72c/0xb50
[ 1748.132641][T24031]        nbd_init+0x168/0x1f0
[ 1748.134214][T24031]        do_one_initcall+0x250/0x870
[ 1748.136006][T24031]        do_initcall_level+0x104/0x190
[ 1748.137800][T24031]        do_initcalls+0x59/0xa0
[ 1748.139489][T24031]        kernel_init_freeable+0x2a6/0x3e0
[ 1748.141497][T24031]        kernel_init+0x1d/0x1d0
[ 1748.143103][T24031]        ret_from_fork+0x514/0xb70
[ 1748.144849][T24031]        ret_from_fork_asm+0x1a/0x30
[ 1748.146744][T24031] 
[ 1748.146744][T24031] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[ 1748.149736][T24031]        __mutex_lock+0x1a3/0x1550
[ 1748.151576][T24031]        elevator_change+0x1b3/0x450
[ 1748.153539][T24031]        elevator_set_none+0xb5/0x140
[ 1748.155470][T24031]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[ 1748.157754][T24031]        nbd_start_device+0x17f/0xb10
[ 1748.159590][T24031]        nbd_genl_connect+0x165b/0x1cf0
[ 1748.161588][T24031]        genl_family_rcv_msg_doit+0x22a/0x330
[ 1748.163763][T24031]        genl_rcv_msg+0x61c/0x7a0
[ 1748.165590][T24031]        netlink_rcv_skb+0x232/0x4b0
[ 1748.167441][T24031]        genl_rcv+0x28/0x40
[ 1748.169107][T24031]        netlink_unicast+0x75c/0x8e0
[ 1748.170995][T24031]        netlink_sendmsg+0x813/0xb40
[ 1748.172916][T24031]        ____sys_sendmsg+0x972/0x9f0
[ 1748.174858][T24031]        ___sys_sendmsg+0x2a5/0x360
[ 1748.176553][T24031]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1748.178505][T24031]        do_syscall_64+0x15f/0xf80
[ 1748.180430][T24031]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1748.182562][T24031] 
[ 1748.182562][T24031] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[ 1748.185674][T24031]        blk_alloc_queue+0x546/0x680
[ 1748.187916][T24031]        __blk_mq_alloc_disk+0x197/0x390
[ 1748.190266][T24031]        nbd_dev_add+0x499/0xb50
[ 1748.192425][T24031]        nbd_init+0x168/0x1f0
[ 1748.194443][T24031]        do_one_initcall+0x250/0x870
[ 1748.196675][T24031]        do_initcall_level+0x104/0x190
[ 1748.198985][T24031]        do_initcalls+0x59/0xa0
[ 1748.201109][T24031]        kernel_init_freeable+0x2a6/0x3e0
[ 1748.203533][T24031]        kernel_init+0x1d/0x1d0
[ 1748.205621][T24031]        ret_from_fork+0x514/0xb70
[ 1748.207758][T24031]        ret_from_fork_asm+0x1a/0x30
[ 1748.209965][T24031] 
[ 1748.209965][T24031] -> #2 (fs_reclaim){+.+.}-{0:0}:
[ 1748.213000][T24031]        fs_reclaim_acquire+0x71/0x100
[ 1748.215355][T24031]        kmem_cache_alloc_lru_noprof+0x45/0x640
[ 1748.218010][T24031]        alloc_inode+0xb8/0x1b0
[ 1748.220162][T24031]        iget_locked+0x131/0x6a0
[ 1748.222332][T24031]        kernfs_get_inode+0x4f/0x780
[ 1748.224541][T24031]        kernfs_get_tree+0x5cd/0x980
[ 1748.226818][T24031]        sysfs_get_tree+0x46/0x110
[ 1748.228970][T24031]        vfs_get_tree+0x92/0x2a0
[ 1748.231049][T24031]        do_new_mount+0x341/0xd30
[ 1748.233366][T24031]        __se_sys_mount+0x31d/0x420
[ 1748.235682][T24031]        do_syscall_64+0x15f/0xf80
[ 1748.237840][T24031]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1748.240588][T24031] 
[ 1748.240588][T24031] -> #1 (&root->kernfs_rwsem){++++}-{4:4}:
[ 1748.244078][T24031]        down_write+0x96/0x200
[ 1748.246104][T24031]        kernfs_remove_by_name_ns+0x4e/0x140
[ 1748.248653][T24031]        device_links_driver_bound+0x54f/0x14e0
[ 1748.251540][T24031]        driver_bound+0xd8/0x2e0
[ 1748.253812][T24031]        really_probe+0x789/0xaf0
[ 1748.255930][T24031]        __driver_probe_device+0x1ef/0x380
[ 1748.258390][T24031]        driver_probe_device+0x4f/0x240
[ 1748.260724][T24031]        __device_attach_driver+0x279/0x430
[ 1748.263237][T24031]        bus_for_each_drv+0x258/0x2f0
[ 1748.265540][T24031]        __device_attach+0x2c5/0x450
[ 1748.267796][T24031]        device_initial_probe+0xa1/0xd0
[ 1748.270127][T24031]        bus_probe_device+0x12a/0x220
[ 1748.272440][T24031]        device_add+0x7e9/0xbb0
[ 1748.274533][T24031]        faux_device_create_with_groups+0x189/0x290
[ 1748.277002][T24031]        regulator_dummy_init+0x19/0x40
[ 1748.278943][T24031]        regulator_init+0xca/0x110
[ 1748.280842][T24031]        do_one_initcall+0x250/0x870
[ 1748.282808][T24031]        do_initcall_level+0x104/0x190
[ 1748.284720][T24031]        do_initcalls+0x59/0xa0
[ 1748.286483][T24031]        kernel_init_freeable+0x2a6/0x3e0
[ 1748.288519][T24031]        kernel_init+0x1d/0x1d0
[ 1748.290252][T24031]        ret_from_fork+0x514/0xb70
[ 1748.291894][T24031]        ret_from_fork_asm+0x1a/0x30
[ 1748.293631][T24031] 
[ 1748.293631][T24031] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[ 1748.296401][T24031]        __lock_acquire+0x15a5/0x2cf0
[ 1748.298203][T24031]        lock_acquire+0x106/0x350
[ 1748.300160][T24031]        down_read+0x47/0x2e0
[ 1748.302050][T24031]        kernfs_remove+0x35/0x80
[ 1748.307009][T24031]        __kobject_del+0xe1/0x330
[ 1748.312222][T24031]        kobject_del+0x45/0x60
[ 1748.314064][T24031]        cleanup_glue_dir+0x1a3/0x220
[ 1748.319113][T24031]        device_del+0x780/0x8f0
[ 1748.323975][T24031]        cdev_device_del+0x27/0xf0
[ 1748.325795][T24031]        ib_umad_kill_port+0xf9/0x320
[ 1748.330746][T24031]        ib_umad_remove_one+0x160/0x270
[ 1748.335907][T24031]        remove_client_context+0xb9/0x1e0
[ 1748.337982][T24031]        disable_device+0x137/0x330
[ 1748.342937][T24031]        __ib_unregister_device+0x2cb/0x3f0
[ 1748.346975][T24031]        ib_unregister_work+0x19/0x30
[ 1748.351011][T24031]        process_scheduled_works+0xb5d/0x1860
[ 1748.353261][T24031]        worker_thread+0xa53/0xfc0
[ 1748.356164][T24031]        kthread+0x388/0x470
[ 1748.357921][T24031]        ret_from_fork+0x514/0xb70
[ 1748.359605][T24031]        ret_from_fork_asm+0x1a/0x30
[ 1748.361346][T24031] 
[ 1748.361346][T24031] other info that might help us debug this:
[ 1748.361346][T24031] 
[ 1748.365333][T24031] Chain exists of:
[ 1748.365333][T24031]   &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex
[ 1748.365333][T24031] 
[ 1748.370773][T24031]  Possible unsafe locking scenario:
[ 1748.370773][T24031] 
[ 1748.373339][T24031]        CPU0                    CPU1
[ 1748.375138][T24031]        ----                    ----
[ 1748.377064][T24031]   lock(gdp_mutex);
[ 1748.378445][T24031]                                lock(cpuhp_state-up);
[ 1748.380795][T24031]                                lock(gdp_mutex);
[ 1748.383030][T24031]   rlock(&root->kernfs_supers_rwsem);
[ 1748.384899][T24031] 
[ 1748.384899][T24031]  *** DEADLOCK ***
[ 1748.384899][T24031] 
[ 1748.387640][T24031] 4 locks held by kworker/u9:4/24031:
[ 1748.389414][T24031]  #0: ffff888106abc140 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1748.393490][T24031]  #1: ffffc90004377c40 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1748.398704][T24031]  #2: ffff8881207346f8 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[ 1748.403493][T24031]  #3: ffffffff8f38d660 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[ 1748.407330][T24031] 
[ 1748.407330][T24031] stack backtrace:
[ 1748.409773][T24031] CPU: 0 UID: 0 PID: 24031 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[ 1748.409792][T24031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1748.409802][T24031] Workqueue: ib-unreg-wq ib_unregister_work
[ 1748.409823][T24031] Call Trace:
[ 1748.409831][T24031]  <TASK>
[ 1748.409839][T24031]  dump_stack_lvl+0xe8/0x150
[ 1748.409856][T24031]  print_circular_bug+0x2e1/0x300
[ 1748.409874][T24031]  check_noncircular+0x12e/0x150
[ 1748.409891][T24031]  __lock_acquire+0x15a5/0x2cf0
[ 1748.409911][T24031]  ? kernfs_remove+0x35/0x80
[ 1748.409927][T24031]  lock_acquire+0x106/0x350
[ 1748.409940][T24031]  ? kernfs_remove+0x35/0x80
[ 1748.409961][T24031]  down_read+0x47/0x2e0
[ 1748.409973][T24031]  ? kernfs_remove+0x35/0x80
[ 1748.409996][T24031]  kernfs_remove+0x35/0x80
[ 1748.410013][T24031]  __kobject_del+0xe1/0x330
[ 1748.410027][T24031]  kobject_del+0x45/0x60
[ 1748.410039][T24031]  cleanup_glue_dir+0x1a3/0x220
[ 1748.410055][T24031]  device_del+0x780/0x8f0
[ 1748.410072][T24031]  ? __pfx_device_del+0x10/0x10
[ 1748.410087][T24031]  ? xa_load+0x60/0x210
[ 1748.410105][T24031]  cdev_device_del+0x27/0xf0
[ 1748.410119][T24031]  ib_umad_kill_port+0xf9/0x320
[ 1748.410133][T24031]  ? remove_client_context+0x79/0x1e0
[ 1748.410150][T24031]  ib_umad_remove_one+0x160/0x270
[ 1748.410165][T24031]  ? __pfx_ib_umad_remove_one+0x10/0x10
[ 1748.410179][T24031]  remove_client_context+0xb9/0x1e0
[ 1748.410196][T24031]  disable_device+0x137/0x330
[ 1748.410213][T24031]  ? __pfx_disable_device+0x10/0x10
[ 1748.410231][T24031]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1748.410249][T24031]  ? process_scheduled_works+0xa70/0x1860
[ 1748.410286][T24031]  __ib_unregister_device+0x2cb/0x3f0
[ 1748.410308][T24031]  ib_unregister_work+0x19/0x30
[ 1748.410321][T24031]  ? process_scheduled_works+0xa70/0x1860
[ 1748.410334][T24031]  process_scheduled_works+0xb5d/0x1860
[ 1748.410356][T24031]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1748.410371][T24031]  ? assign_work+0x3d5/0x5e0
[ 1748.410384][T24031]  worker_thread+0xa53/0xfc0
[ 1748.410405][T24031]  kthread+0x388/0x470
[ 1748.410421][T24031]  ? __pfx_worker_thread+0x10/0x10
[ 1748.410434][T24031]  ? __pfx_kthread+0x10/0x10
[ 1748.410450][T24031]  ret_from_fork+0x514/0xb70
[ 1748.410465][T24031]  ? __pfx_ret_from_fork+0x10/0x10
[ 1748.410478][T24031]  ? __switch_to+0xc79/0x1410
[ 1748.410496][T24031]  ? __pfx_kthread+0x10/0x10
[ 1748.410512][T24031]  ret_from_fork_asm+0x1a/0x30
[ 1748.410532][T24031]  </TASK>
[ 1748.511536][T24031] smbdirect: ib_dev[syz0] removed
