last executing test programs:

3.098699344s ago: executing program 2 (id=881):
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea2010000900e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d533"], 0x23c}}, 0x0)

3.093803075s ago: executing program 2 (id=884):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000001000000000000a50000000060a010400000000000000000200000024000480200001800b00010064796e73657400000002800900010073797a30000000000900010073797a300000000009000200737900000000000000dbb6187ca3cbd55b000000000a00"], 0x78}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000040000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000140004800800014000000005080002401b2fd2c528000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffe5d, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x4040000)
recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340), 0x1}}], 0x8, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)

2.999717967s ago: executing program 2 (id=885):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000de0000000000000000000000630123000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94)

2.999308114s ago: executing program 2 (id=886):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e)
r2 = socket$packet(0x11, 0x3, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x0, 0x803, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="7a26aa188a0884e3b37e9a766eb08bbe", 0x10)
close(0x3)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x41, 0x0, 0x10820, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x4084)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000bc4a9e0b02900000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800b000100736f636b657400000c009d77d8a9773e360280080002400000000b0900010073797a30000000000900020073797a320000000014000000110001"], 0x74}}, 0x0)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x7, 0x2002, 0x0, 0x2, 0x8, 0x101, 0x5}, 0x1c)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001300))
readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e0000002080002000000000008000740000000003c00188008000340000000000800024000000000080001"], 0xa0}}, 0x0)

2.417498778s ago: executing program 1 (id=898):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x39, 0x9, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x44}, @empty}, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r1=>0x0}) (async)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r2) (async)
r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) (rerun: 64)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r4, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:xconsole_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:pam_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8081}, 0x2000c014)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x846000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
recvfrom$rose(r6, &(0x7f0000000400)=""/231, 0xe7, 0x60, &(0x7f0000000500)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) (async, rerun: 64)
r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv6_delroute={0x2c, 0x19, 0x400, 0x70bd2c, 0x25dfdbfb, {0xa, 0x14, 0x0, 0x7, 0x0, 0x3, 0xfe, 0x7, 0x200}, [@RTA_METRICS={0x8, 0x8, 0x0, 0x1, "f7daf049"}, @RTA_IIF={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x15}, 0x2000) (async)
r8 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000640)={<r9=>0x0, 0x70, "573ec2598a3816bd0f15512296387a09ebf0523161fba3d008935d2549e5a350de8eab906425fe06ce1dd358e2a8e21d3fb293e7ada73aba020a25facba6c26e9fadf7f770b96a415778e8483323629ceffbeee18b7430d85b295dad8a97714a00ab7fb0c0a1621b464ab529eed20df3"}, &(0x7f00000006c0)=0x78)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000700)={r9, 0x3, 0x10}, 0xc) (async)
r10 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000740)={{{@in=@dev, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000840)=0xe8) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'lo\x00'}) (async)
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000000900)={0x710, 0x1, 0x5, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [{{0x254, 0x1, {{0x3, 0x95e}, 0x9, 0x8, 0x1, 0x3, 0x19, 'syz1\x00', "9368425a01ef2f63af97ad442e5c9031cd50259c0fbd4893caf6d5524c44dd91", "a17797d9b5fd2764c71adc4460922bf4388d9f96226a2cca155de4ab33a7924b", [{0x9, 0x4, {0x1, 0x3}}, {0x7, 0x7, {0x1}}, {0x8, 0x6, {0x2, 0x3}}, {0x1, 0x9, {0x3, 0x7}}, {0x9, 0x2, {0x2, 0x8}}, {0x659, 0xd1, {0x2, 0xffffffff}}, {0x7f, 0x7, {0x3, 0x401}}, {0x3, 0x5, {0x0, 0x3ff}}, {0x3e0, 0x8, {0x0, 0x5}}, {0x6, 0xf420, {0x1, 0x8}}, {0x9, 0x7, {0x0, 0xfff}}, {0x5, 0x4, {0x1, 0x2}}, {0x5, 0x40, {0x3, 0x3}}, {0xff56, 0x200, {0x2, 0x8000}}, {0xb6, 0x7, {0x2, 0x400}}, {0x3e, 0x4, {0x2, 0x1}}, {0x4c, 0x0, {0x0, 0x6}}, {0x820, 0x9, {0x2, 0xffff}}, {0x5, 0x0, {0x0, 0x80000000}}, {0x5, 0x800, {0x3, 0x2}}, {0x2, 0x1, {0x2, 0x6}}, {0x9, 0xfff9, {0x0, 0x9}}, {0x10, 0x9, {0x1, 0x2}}, {0x8, 0x2, {0x2, 0xb}}, {0xd, 0x5, {0x1, 0xa385}}, {0x8000, 0x2b5f, {0x2, 0x7ff}}, {0x0, 0x3414, {0x2, 0xfffff527}}, {0x0, 0xfff, {0x3, 0x1}}, {0x800, 0x2, {0x2, 0xa}}, {0x40, 0x7, {0x1, 0x400}}, {0x0, 0x82f1, {0x0, 0xd3d}}, {0x10, 0x5, {0x2, 0xfff}}, {0x6, 0xd, {0x0, 0x5}}, {0x6, 0xece8, {0x0, 0x62}}, {0x0, 0x1, {0x2, 0x8001}}, {0x6, 0x2, {0x3, 0xb9c}}, {0x52b0, 0x3ff, {0x0, 0x1000}}, {0x2d8, 0xffff, {0x2, 0x408e}}, {0x7ff, 0x1000, {0x2, 0x7}}, {0x8, 0xd, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x2}, 0x9b, 0x7, 0x4, 0x5, 0xd, 'syz1\x00', "ba6e0dcef56603ad8c04cfcb06ed066e4d179799de256b9562a1dd2bafe94872", "38deee8bbea9d26a1dd4ed00afe95ce5e8cdc1b9608668831d1b49130f767979", [{0xf, 0x9, {0x0, 0x7}}, {0x8, 0x2, {0x3, 0xfffffc91}}, {0x4, 0x6, {0x0, 0x9}}, {0x2, 0x3, {0x3}}, {0x7, 0x4, {0x1, 0x8}}, {0x9, 0x4, {0x0, 0xd8}}, {0x5, 0x6, {0x2, 0x80000000}}, {0xe, 0xfff7, {0x2, 0xfff}}, {0x5, 0x6, {0x7, 0x1000000}}, {0x7, 0x85f, {0x0, 0xfffffffe}}, {0xfffc, 0x7, {0x3, 0xf2c}}, {0xd, 0x7, {0x0, 0x7}}, {0x4, 0x6, {0x1, 0x8}}, {0xd, 0xe, {0x2, 0x3}}, {0x8001, 0x1000, {0x1, 0x2}}, {0x4, 0xa8f, {0x2, 0x8}}, {0x5, 0x1, {0x0, 0xf5ed}}, {0x0, 0xeb6, {0x1, 0x9}}, {0xd, 0x0, {0x0, 0xe4}}, {0x6, 0x7, {0x3, 0xa5c20}}, {0x4, 0x8, {0x1, 0x5}}, {0x2, 0x7}, {0xbda, 0xfff8, {0x1, 0x9}}, {0x1, 0x5, {0x3, 0x52}}, {0x7, 0x3, {0x3, 0x2}}, {0x0, 0x1, {0x3, 0x3}}, {0x7, 0x7, {0xf26b43cdd079e827, 0x37f}}, {0x6, 0x8, {0x0, 0x10}}, {0x5, 0x2, {0x3, 0xfffffffa}}, {0x4, 0x7ff, {0x3, 0x46cc47f5}}, {0x1, 0x800, {0x1, 0x6b8f}}, {0x4, 0x0, {0x1, 0x2}}, {0x6, 0x8, {0x3, 0x9}}, {0x2, 0x3, {0x0, 0x9}}, {0x30, 0xff, {0x1, 0xa}}, {0x7f, 0x9, {0x3, 0xfffffffa}}, {0x7fff, 0x86c, {0x2, 0x2}}, {0x1b77, 0x101, {0x1, 0x8}}, {0x553, 0x2, {0x0, 0x5}}, {0xff, 0x7, {0x2, 0xfffffffb}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x5, 0x4, 0x1, 0xff63, 0xa6d, 'syz0\x00', "758d311d31397c11e8bebad937bf0433f8a46e5d2509c13d788d71aebd1246ae", "2b73f028d185c2003b95a4696793882c79397aecf12aac8d528c13407361678a", [{0x8, 0x8, {0x1, 0x8}}, {0x200, 0xe1, {0x2, 0xa198}}, {0x1, 0x5, {0x3, 0x85}}, {0x401, 0x6, {0x2}}, {0x1000, 0x3, {0x0, 0x2}}, {0x8, 0xff7f, {0x3, 0x80000000}}, {0x8, 0x74, {0x2, 0x2}}, {0xd27, 0x3, {0x3, 0x5915}}, {0x7, 0x4, {0x9d0f7d4fb87c72cf, 0x9f4}}, {0xa, 0xc8b, {0x2, 0x2}}, {0x1b, 0x8, {0x3, 0x2}}, {0x4, 0x10, {0x1, 0x4}}, {0x8, 0x43, {0x0, 0x120000}}, {0x1, 0x1, {0x0, 0xffff}}, {0x5, 0x8, {0x2, 0x7}}, {0xfff0, 0x5, {0x0, 0x8}}, {0x4, 0x7, {0x2, 0x8}}, {0x4, 0xf9aa, {0x3, 0xfff}}, {0x6, 0x9, {0x2, 0x201a}}, {0xfff9, 0x8, {0x0, 0x1}}, {0x9, 0x3, {0x2, 0x1}}, {0x8, 0x1, {0x1, 0x8}}, {0x101, 0x4, {0x0, 0x8f}}, {0xc1a, 0x4, {0x3}}, {0x5e2d, 0x6, {0x0, 0xae}}, {0xf94e, 0xa4e1, {0x3, 0x5}}, {0x0, 0xd3d6, {0x0, 0x4}}, {0x8, 0x7, {0x0, 0x5}}, {0x5, 0x8cb8, {0x3, 0x7f3d}}, {0xc8f2, 0x40, {0x3, 0x2}}, {0x10, 0x5, {0x1, 0xffffffff}}, {0x700, 0x6c, {0x1, 0x7fff}}, {0x8, 0x0, {0x2, 0x9a6}}, {0x3, 0x0, {0x0, 0xfffffff2}}, {0x1, 0x4, {0x3, 0x4}}, {0x4, 0x2, {0x3, 0x7}}, {0x0, 0x2, {0x1, 0x7}}, {0xd80, 0xdc8, {0x2, 0x732}}, {0xcc13, 0x8001, {0x1, 0x100}}, {0x1, 0x9, {0x3, 0x7a}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x51}, 0x90) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001100)=<r11=>0x0)
sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000001280)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0xd4, r5, 0x0, 0x70bd2c, 0x6, {}, [@NFC_ATTR_VENDOR_DATA={0x2d, 0x1f, "0159414068de14d93adc9ceadd2dda49d176b5ebeb8727aa2e9169c3b2cffc2f7007c6aaa59f2fe609"}, @NFC_ATTR_VENDOR_DATA={0x6e, 0x1f, "ac0ef0f63147bf788aba21628f5669f46abe2c065db417b4b08b6b167c3e45a64afec210efc84d6999d2c6d2a8d2ddb2765bcc157ed89ea99aa72a4dda73b3c3b9f549d6688f772c271ecdd853d272525140d093125f1e3a092cd5907a24268c79491b407de33eb3b623"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000044)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000012c0)={'wlan1\x00'})
r12 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_SERVICE(r12, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x64, r13, 0x401, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xeed6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004050}, 0x20044080) (async)
ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001480), 0x4)

2.417297343s ago: executing program 1 (id=899):
r0 = socket$netlink(0x10, 0x3, 0x8)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r2=>0x0})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdff}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10)
poll(0x0, 0x0, 0xffffffffffbffff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0xe5, 0x70bd2a, 0xffffffff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x0, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x86dd}}}]}, 0x38}}, 0xc4c4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000038"], 0x14}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x40050)

2.135629231s ago: executing program 2 (id=903):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
close(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'gre0\x00', <r2=>0x0, 0x8000, 0x1, 0x2, 0x3, {{0x13, 0x4, 0x1, 0x6, 0x4c, 0x66, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@timestamp_prespec={0x44, 0x34, 0x64, 0x3, 0xf, [{@rand_addr=0x64010102, 0x9}, {@empty, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@local, 0x80000000}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x7}]}, @noop]}}}}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fedbdf250700000005002f000000000005002d000100000008003a0001000021060028000000000008000300", @ANYRES32=r2, @ANYBLOB="05002d0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0xa50, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x980, 0xffffffff, 0xffffffff, 0x980, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2, 0x1}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0xa, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x2, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa, 0x7}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x3, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x40}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0xff}, {0x2f, 0x2}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x6}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10004, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x7, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3, 0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x7}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x7d, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xab0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000003c0)="ce9ada41c8f5", 0x6}], 0x1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000000007910480000000000a600ffff800000f195007400000000008b26680991cf7be46e92ba4de27a4391c3b6f3fc34b23fb6589be2ac17c158b20730d0e4a5e2"], &(0x7f0000000780)='GPL\x00', 0x470, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r5 = socket$alg(0x26, 0x5, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000340), &(0x7f0000000400)=0x40)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r7=>0x0})
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCGIDLE(r8, 0x8010743f, &(0x7f0000000040))
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100000000660000000000080000", @ANYRES32=r7, @ANYBLOB="000000000000000014011a80400002803c0001800800210000000000080018000000000008000300000000000800090000000000"], 0x134}}, 0x0)
bind$alg(r5, &(0x7f00000005c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @private}, &(0x7f0000000080)=0x80)
setsockopt$sock_void(r9, 0x1, 0x1b, 0x0, 0x0)

1.967880852s ago: executing program 2 (id=907):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000002c0), 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000340), &(0x7f00000002c0)=@tcp6=r6}, 0x20)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0)
write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)

1.499169093s ago: executing program 1 (id=913):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000900120800014000000000140003"], 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x3c, r4, 0x801, 0x1, 0x3, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x3c}}, 0x20000000)
syz_emit_ethernet(0x2e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x4, 0x5, 0x3, 0x2}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/149, 0x95}, 0x6}], 0x1, 0x40000022, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
sendmsg$xdp(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000340)="1c5280f861348498755c42747fa3d78074", 0x11}, {&(0x7f00000005c0)="f1b5b5336c91a8fa73c50523e75fa510d3611005aff0e4e6155033bb35b69fee60be67a541c4428724af6520752d7b1adc07a880d51c2fbc19976cb0522b15abba35ae5e638bdebe1da4be37e9406bffdca89b31754ab094225e03aa05b8e1496734349ad3b69ba5cd5603f3942527689719ebd8c8fe37b3df86a60e5452706795ffdbb81f2a74ebf7e36c615cbaf8f5ac64c9ea884dd0da29a6ce751db20c1d3a05f97f4ddb08424b1db4ed6941674eb56cbca907e6261742e7", 0xba}, {&(0x7f0000000b40)="c635690f1fcfb21fccf2e4291a021965356663eb160e0d64ddfc4ccbf5ffe26077beb24ef5bf36cf7ea70711d64c12fe83107c0375eec6fd002bcd33ea0050a8692b22611ad6787e46f0272c16d3e0f8a6c3f23182fc3b3790ed445a3bb65fd2d139fc8a3678995d7f84eefcdf5c79aba45d6bf8571a8a9e1b814646754d5acf40bd59b5d42b54b478fe45c793632a19eb16be7fecd5ff637c84368008623a6d062b4677cd16c7723e8ae39c49f961248fff66f5dd37", 0xb6}, {&(0x7f0000000900)="ca5d0e557c1e12b3461c7f23f9f53eeb2e1488b7cb97c05cd493f9dcde493ecbf01c3db6b2a5111f23f3fe80e4c81074efdf2e0aa36f50d3953294c80e25c08544d850be7e953cde40a85ee9bab8258e164f8527b2c252dc8035d3563c271ba9fe75c2187872bc6320e68fe639f41a3be15733802a0dcb4fe21f0bb94fe78ea090b83989d20558f5122c6a86169925d78af5ab5cb7f78cfdbc39a4f96338e4396adb2848aac0673c5edbd7066e0888acbb59961c6013f54e4fb0528a79a1529402d333e0972837fe03e2a194bde229c8062764d78669d94f391efd8d559f0a16ace67c6b4cacf263a5077435", 0xec}, {&(0x7f0000001100)="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", 0x176}, {&(0x7f0000000ac0)="999acfdf7a87f9ea0532d191cff04849da9b68b8358fcabe75d82aef75815a60556a906dbdc267cc5873ab8304d71d94f62a610ff6cd9f49f1e514d3e584f9874e95ffc18ab4019ea511", 0x4a}, {&(0x7f0000000380)="f99c14aa80f395ab487b0758905abae35495391264282fd304729b39d405d4e6", 0x20}, {&(0x7f0000000ec0)="fc6d5c073693977e164322711a31504c4552b556d78a717158d27e50d133b2e5fd1cd310a03520202f443c44217f9049b0d4762f76b73fe72194e25c41635ace453309e782f7507c58dda4d6dfd7236d06650ce368a02717e419055e8c647f53cd5302cd9de87f0e10fdfdffe2b2b8c1bd0bea1d41939197c3b25433ae4b058e693e82b1e8ea4f05c0e461ed7032be265dd2da7447d19ba8e1efa56039f901ae57553c0920b310ba8dc81557921614b099085930a496763728a72f9150778bd1df87072de3493df73a8de6c1f11637968aa3a8dbec6d2373f6cb020000007c4f9c1c10ccea1fb2d049efeef9e5f97c1dcfbc4fa3ecd025529a7a42c709000000ae3981e89ac6db6e57c9510bac967ef759d12bdbccc52e28b6a8f24f232bf2af7b3774192991a8edac8e67bc9ede08ca03e5a3abcb31117d241a4f08dc2ad3cc55a6d80a80576ecf7f2b25074b150f0a923b2ea0292f355129aeec22da265b2b1d9f1fb768bc6459611f6e3bef941e38fa377e4038233e0f6c218be4c273afbf6be58b714627ea1d9dfdc5ff2e275714842eb54cebd2a7edc097430a1ecafd2650c6d2d4d951455435e658fd41799b6ec747da63e99739a77050dd68efeb656f3377e6511285843089c7fd6c76880f4cf52162867f99e12d4aed992428e1f7b9db45cbd166f2bda274063fb9a6767d0853a251fab0aa90d93a5d6c43d91f247870fa2e1eab3943a6fce0cec0837cfdc7e43b4a6fa086de1406a35f5e124ce3a8731ca4e43c0000", 0x227}, {&(0x7f0000000c40)="2f0ec7dc2c0779a3ca116dd30c57f5f94fe8b1b1d69e7c854b8bbe74e58d6f297f926d4a4096c95cb52c8f3d16949c0cea0d50d66621a611b481b0912ddef979f9058ed7e6ee94c5db4b6b84622aaec273c4470f780216b881aed859d10a742110e99b0acb93eac4a8946d27e40f4df0866f8a8a534b24cf5f690b13579ec06aa7ef90fd5a128fc9ede16a02756974639fa74b9c2d9920521027e569afdc91895e1d73d1c02d37b05379ea64b7b93bbad940634a4eac2bfda70cd20257d865fe6e983e1a237732284ccf3b6e2f02ce8cd34f25d3d7ed951413", 0xd9}, {&(0x7f00000007c0)="1276c7d6591d520a57d93f2987c93f31fa8c720635bbda557deabeb85e9f01ecce9fab26361977945c968a401f11c12ae5cc9182b60781", 0x37}], 0xa, 0x0, 0x0, 0x20004050}, 0x20000090)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4)
sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0)
recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5)
syz_80211_inject_frame(&(0x7f0000000700)=@broadcast, &(0x7f0000000d40)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, @device_a, @device_a, @random="fc54f49cf1ba", {0x9, 0x9}}, 0xa, @default, 0x9420, @val={0x0, 0x1b, @random="b6d666e7535cfc871121590a4ad9ceda67011a3114991fa515d0e8"}, @void, @void, @void, @val={0x6, 0x2, 0x7da4}, @val={0x2d, 0x1a, {0x1000, 0x0, 0x0, 0x0, {0xffffffffe1f56d25, 0x9, 0x0, 0x112}, 0x1, 0xf, 0x9}}, @void, @void, [{0xdd, 0xee, "edd6ff999314439930c4fa2e9b4059d8d45c9d0020551b15bc161c8d80ae787636c4f75001b63bf2bafefff7f30618473670d7d06033ad484916c0a5a0958770333f9537ca38458c6ab0d85a22bdddd5ff9c545103ba6a11a38042a8016049c560f77dbad1dd429784510e9cff2ff0474d3d775b14f7773f9c88ff0b53ef2bee03956b4b93403e08b2cc992204a2eb49a1342604e18c9538d1bd98a72a34eb527e40ef8da2c102eb6d3b1dd9cb9952e0db8012dfc1c2d6b2a03dd491642ff8fd33bd4a0e9bd80e2413ace99b8e3a49c8ab69e52748bbe80cbbdacdcf981099a7348f634cf9bdc34b70400c31c83e"}]}, 0x151)
sendmsg$802154_raw(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000af00000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

769.672689ms ago: executing program 0 (id=915):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000bd0000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500"/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (async)
r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000640))
recvfrom$l2tp6(r2, &(0x7f00000007c0)=""/180, 0xb4, 0x12002, 0x0, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async)
close(r5) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) (async)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0xd31, @remote}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newqdisc={0x1b8, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x188, 0x2, {{0x6, [0x8, 0x6, 0x6, 0x8, 0x0, 0xc, 0x7, 0x0, 0xc8, 0x2, 0x0, 0x5, 0x2, 0x0, 0x1, 0x1], 0x0, [0x8, 0x8, 0xce, 0x9, 0x7f, 0x9000, 0xf62, 0x3, 0x2, 0x0, 0x40, 0x8001, 0x2, 0x0, 0x2, 0xff], [0x2000, 0x2, 0xd, 0x2, 0x0, 0x101, 0x8, 0x8, 0x4, 0x1042, 0x2, 0xd691, 0x3, 0x9c, 0x56aa, 0x4175]}, [@TCA_MQPRIO_MAX_RATE64={0xa0, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x7}, {0xc, 0x4, 0x5}, {0xc}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0x4}, {0x4f, 0x4, 0x2}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0x80000000}, {0xc}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0xe}, {0xc, 0x4, 0x2}]}, @TCA_MQPRIO_MIN_RATE64={0x88, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x9}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x1}, {0xc}, {0xc, 0x3, 0x7f}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0xfffffffffffffffa}, {0xc, 0x3, 0xab9d}, {0xc, 0x3, 0x40}, {0xc, 0x3, 0xfffffffffffffffe}]}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MODE]}}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x1400881c)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@restrict={0xc, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x5f, 0x0, 0x61, 0x2e, 0x0, 0x2e]}}, &(0x7f0000000280)=""/172, 0x2c, 0xac, 0x1, 0xf7, 0x10000}, 0x28) (async)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r10, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async)
sendto$inet6(r10, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000300), 0x8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="185300000c0000000000000000fc462f0000001800000018cf0000000000000207000000000000070000000000000066"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x71, &(0x7f00000001c0)=""/113, 0x40f00, 0x20, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000380)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x6, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000540)=[r0, r0, 0xffffffffffffffff, r0, r0], &(0x7f00000005c0)=[{0xfffffffa, 0x4, 0x3, 0x7}, {0x3, 0x4, 0xf}, {0x5, 0x2, 0x1, 0xc}, {0x0, 0x5, 0xb, 0x7}, {0x4, 0x2, 0x8, 0x4}, {0x2, 0x1, 0xe, 0x2}, {0x3, 0x2, 0xb, 0x9}], 0x10, 0x5}, 0x94) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x2c, 0x0, 0x9, 0x401, 0x0, 0x0, {0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x2c}}, 0x0)

596.856693ms ago: executing program 0 (id=916):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x4e, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}}, 0x20}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x4e, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}}, 0x20}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000568000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a300000000014000000110001"], 0xf0}}, 0x0)

469.973566ms ago: executing program 0 (id=917):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac14143c00000000000000000000ff0000000000000200000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc010000000000000000000000000001000000000000efffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000000000fdffffff000000000000000028bd7000000000004c001400636d61632861657329"], 0x1a0}}, 0x800)

469.038002ms ago: executing program 0 (id=918):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000de0000000000000000000000630123000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5000000}, 0x94)

410.043515ms ago: executing program 0 (id=919):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x8000, 0x7, 0x9, 0xffffffff, 0xf})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="11c533e821772bc10000000000000000070000000900020073797a31000000000900010073797a3000000000140000001000010000000000000000000084000a8e3b9cb7fadd5339a3dffd2010c3cb9edbb6e225879ada5e58129da7d4d17d19e08ecddb572bcded38859a2ac1e23e"], 0x54}}, 0x0)

409.687174ms ago: executing program 0 (id=920):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={<r1=>0x0, 0x8, 0x395, 0x7}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={r1, 0x3, 0x3, [0x2, 0xa, 0x9]}, 0xe)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000206030000000000000000000100000014000300686173683a69702c706f72742c6970000900020073797a31000000000c000780080012400f04000100003759d49c0007000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000090}, 0x0)

106.390149ms ago: executing program 1 (id=921):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r1], 0x44}}, 0x40)

106.117862ms ago: executing program 1 (id=922):
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4001)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched_retired(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004280)=@newtaction={0x14, 0x30, 0x800, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x4000000)
read$alg(r2, &(0x7f0000000a00)=""/4087, 0xff7)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1d0027bd703b56b91aa000c3aa5e5362aef83b25", @ANYRES32=r5, @ANYBLOB="1c002f800c00038008000100030000000c000200c3bc3b5816adec36"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @private=0xa010101}, 0x10)
r7 = socket$pptp(0x18, 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91109d000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x8}, 0x94)
bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000180))
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'team_slave_0\x00', {0x3}, 0x3b03})
connect$pptp(r7, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x1)
close(r8)
ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})
ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

0s ago: executing program 1 (id=923):
close(0x3)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001040), &(0x7f0000001100)=0x8)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c)
bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e20, 0xfb, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x2ca2}, 0x1c)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$sock_buf(r5, 0x1, 0x3b, &(0x7f0000000500)=""/246, &(0x7f0000000300)=0xf6)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r8)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005140)={0x60, r9, 0x1, 0x70bd2a, 0x3, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0x30, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0x48, 0x1, 0x0, 0x1, {0x7, 0x1, r7}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010003e19000000000000000000000000b32a27cfeedd3b43b707b384b9bc32cd9001c8ba4304ea47cb3221e29369256587d591ba1268afc0f3dbd5e2772236a85ddd22cb4faa9f7f1af7d4f2bf714a78f0d333eacf1c48183b6c9d420701a9f27ba177748ccb15635af7077321df58c23c11399f5e131ac20bb82e3322cb7023ed5b56d80c06", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000300580200000800040003000000"], 0x44}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000000206010800000000000000000000000009000200737fbd22490cd3a1797a320000000005000400000000001400078005001500050000000800114000000000050005000a000000050001000600000010000300686173683a69702c6d6163006efeff0ec15a4f1f52f007129d3ab07bb0a65138563fcaadd26684109e88d5cc58bdbb74e4cc9b3f1770ff4497cb101e085b11a5265e4c41118959cb1cf3798d8ef709b92db73c4539a2ae193960c4de9ba5482a4ec31453ee1e92a6c9158cda8b0e65db61365ba88f279c"], 0x5c}, 0x1, 0x0, 0x0, 0x480c3}, 0x84000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:60905' (ED25519) to the list of known hosts.
syzkaller login: [   48.441347][ T5772] cgroup: Unknown subsys name 'net'
[   48.587469][ T5772] cgroup: Unknown subsys name 'cpuset'
[   48.591584][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.218340][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.445906][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.449450][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.454576][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.457820][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.460589][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.516279][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.519446][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.522193][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.525945][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.530298][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.533837][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.537498][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.541708][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.546840][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.593058][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.789345][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   54.825498][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   54.941825][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.944901][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.947530][ T5840] bridge_slave_0: entered allmulticast mode
[   54.951236][ T5840] bridge_slave_0: entered promiscuous mode
[   54.968325][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.970604][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.972915][ T5844] bridge_slave_0: entered allmulticast mode
[   54.975983][ T5844] bridge_slave_0: entered promiscuous mode
[   54.979252][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.981441][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.983703][ T5844] bridge_slave_1: entered allmulticast mode
[   54.986887][ T5844] bridge_slave_1: entered promiscuous mode
[   54.989847][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.992113][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.994864][ T5840] bridge_slave_1: entered allmulticast mode
[   54.997675][ T5840] bridge_slave_1: entered promiscuous mode
[   55.043016][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.061570][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.067696][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.071947][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.075681][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   55.111420][ T5840] team0: Port device team_slave_0 added
[   55.123471][ T5844] team0: Port device team_slave_0 added
[   55.131392][ T5840] team0: Port device team_slave_1 added
[   55.151374][ T5844] team0: Port device team_slave_1 added
[   55.188080][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.190813][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.201255][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.208096][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.210879][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.221393][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.233029][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.236559][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.246812][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.252111][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.255327][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.265883][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.309725][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.312526][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.315338][ T5846] bridge_slave_0: entered allmulticast mode
[   55.318231][ T5846] bridge_slave_0: entered promiscuous mode
[   55.340011][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.342362][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.345159][ T5846] bridge_slave_1: entered allmulticast mode
[   55.347978][ T5846] bridge_slave_1: entered promiscuous mode
[   55.391815][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.416864][ T5844] hsr_slave_0: entered promiscuous mode
[   55.420285][ T5844] hsr_slave_1: entered promiscuous mode
[   55.427285][ T5840] hsr_slave_0: entered promiscuous mode
[   55.429546][ T5840] hsr_slave_1: entered promiscuous mode
[   55.431692][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[   55.433483][ T5840] Cannot create hsr debugfs directory
[   55.437980][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.486450][ T5846] team0: Port device team_slave_0 added
[   55.508616][ T5846] team0: Port device team_slave_1 added
[   55.590385][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.592580][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.600621][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.623511][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.626353][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.634334][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.713443][ T5846] hsr_slave_0: entered promiscuous mode
[   55.717499][ T5846] hsr_slave_1: entered promiscuous mode
[   55.720575][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   55.722785][ T5846] Cannot create hsr debugfs directory
[   55.814461][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.831586][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.849872][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.871110][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.942398][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.948953][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.976040][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.982233][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.036478][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.051387][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.057685][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.063212][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.157283][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.189360][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   56.197540][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.213186][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.215747][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.226196][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.228983][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.240373][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   56.246065][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.264799][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.267055][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.270831][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.273055][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.296720][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   56.317004][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.319275][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.326690][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.338528][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.341235][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.461437][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.495009][   T55] Bluetooth: hci0: command tx timeout
[   56.517236][ T5840] veth0_vlan: entered promiscuous mode
[   56.525904][ T5840] veth1_vlan: entered promiscuous mode
[   56.536613][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.541520][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.564237][ T5840] veth0_macvtap: entered promiscuous mode
[   56.570514][ T5840] veth1_macvtap: entered promiscuous mode
[   56.575330][   T55] Bluetooth: hci1: command tx timeout
[   56.598274][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.616965][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.619922][ T5844] veth0_vlan: entered promiscuous mode
[   56.631567][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.645256][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.656524][ T5846] veth0_vlan: entered promiscuous mode
[   56.658983][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.662460][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.665330][   T55] Bluetooth: hci2: command tx timeout
[   56.669689][ T5844] veth1_vlan: entered promiscuous mode
[   56.686448][ T5846] veth1_vlan: entered promiscuous mode
[   56.716944][ T5844] veth0_macvtap: entered promiscuous mode
[   56.732463][ T5844] veth1_macvtap: entered promiscuous mode
[   56.752025][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.755122][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.762227][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.773108][ T5846] veth0_macvtap: entered promiscuous mode
[   56.786705][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.790382][ T5846] veth1_macvtap: entered promiscuous mode
[   56.800025][  T718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.802932][  T718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.811210][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.831991][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.838003][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.849464][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.853643][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.862831][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.871930][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.886448][ T5871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.892581][ T5871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.908878][ T5871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.911862][ T5871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.971207][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.976164][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.023495][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.028860][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.067529][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.069963][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.106242][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.111421][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.252562][ T5926] Zero length message leads to an empty skb
[   57.341525][ T5936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6'.
[   57.470555][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'.
[   57.476942][ T5945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'.
[   57.496816][ T5313] IPVS: starting estimator thread 0...
[   57.519272][ T5951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12'.
[   57.542079][ T5951] bond0: entered promiscuous mode
[   57.545572][ T5951] bond_slave_0: entered promiscuous mode
[   57.547996][ T5951] bond_slave_1: entered promiscuous mode
[   57.554309][ T5951] bond0: left promiscuous mode
[   57.556265][ T5951] bond_slave_0: left promiscuous mode
[   57.557795][ T5953] openvswitch: netlink: Missing key (keys=40, expected=100)
[   57.558535][ T5951] bond_slave_1: left promiscuous mode
[   57.584261][ T5949] IPVS: using max 63 ests per chain, 151200 per kthread
[   57.687733][ T5953] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   57.769078][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'.
[   58.032908][ T5973] warning: `syz.2.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.559200][ T5984] dvmrp1: tun_chr_ioctl cmd 1074812117
[   58.570771][ T5985] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe
[   58.575180][   T55] Bluetooth: hci0: command tx timeout
[   58.654699][   T55] Bluetooth: hci1: command tx timeout
[   58.735841][   T55] Bluetooth: hci2: command tx timeout
[   58.849036][ T5988] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.873851][ T5988] 8021q: adding VLAN 0 to HW filter on device bond1
[   58.878524][ T5988] bond0: (slave bond1): Enslaving as an active interface with an up link
[   58.999648][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'.
[   59.003254][ T5997] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   59.186716][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'.
[   59.311526][ T6006] 8021q: adding VLAN 0 to HW filter on device bond2
[   59.316866][ T6006] bond0: (slave bond2): Enslaving as an active interface with an up link
[   59.330018][ T6008] team_slave_0: entered promiscuous mode
[   59.332073][ T6008] team_slave_1: entered promiscuous mode
[   59.337957][ T6008] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   59.357665][ T6008] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   59.363594][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'.
[   59.475507][ T6021] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   60.097155][   T10] cfg80211: failed to load regulatory.db
[   60.332269][ T6045] tipc: Started in network mode
[   60.335290][ T6045] tipc: Node identity defb7c590549, cluster identity 4711
[   60.337772][ T6045] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.340922][ T6045] syzkaller0: entered promiscuous mode
[   60.343086][ T6045] syzkaller0: entered allmulticast mode
[   60.356944][ T6045] tipc: Resetting bearer <eth:syzkaller0>
[   60.367604][ T6045] netlink: 'syz.0.41': attribute type 21 has an invalid length.
[   60.374106][ T6045] netlink: 132 bytes leftover after parsing attributes in process `syz.0.41'.
[   60.378619][ T6044] tipc: Resetting bearer <eth:syzkaller0>
[   60.388244][ T6044] tipc: Disabling bearer <eth:syzkaller0>
[   60.499615][ T6055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.45'.
[   60.656004][   T55] Bluetooth: hci0: command tx timeout
[   60.696904][ T6070] tipc: Started in network mode
[   60.714669][ T6070] tipc: Node identity 26df3180ad02, cluster identity 4711
[   60.717850][ T6070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.722287][ T6070] syzkaller0: entered promiscuous mode
[   60.725980][ T6070] syzkaller0: entered allmulticast mode
[   60.734679][   T55] Bluetooth: hci1: command tx timeout
[   60.744349][ T6074] bond0: entered promiscuous mode
[   60.746709][ T6074] bond_slave_0: entered promiscuous mode
[   60.749278][ T6074] bond_slave_1: entered promiscuous mode
[   60.751801][ T6074] bond1: entered promiscuous mode
[   60.754168][ T6074] bond2: entered promiscuous mode
[   60.765114][ T6074] bond0: left promiscuous mode
[   60.767195][ T6074] bond_slave_0: left promiscuous mode
[   60.769573][ T6074] bond_slave_1: left promiscuous mode
[   60.772013][ T6074] bond1: left promiscuous mode
[   60.774282][ T6074] bond2: left promiscuous mode
[   60.799661][ T6070] tipc: Resetting bearer <eth:syzkaller0>
[   60.815948][   T55] Bluetooth: hci2: command tx timeout
[   60.890521][ T6068] tipc: Resetting bearer <eth:syzkaller0>
[   60.900260][ T6068] tipc: Disabling bearer <eth:syzkaller0>
[   61.026885][ T6084] netlink: 'syz.2.53': attribute type 12 has an invalid length.
[   61.089381][ T6086] netlink: 'syz.1.52': attribute type 9 has an invalid length.
[   61.158867][ T6090] IPv6: addrconf: prefix option has invalid lifetime
[   61.207664][ T6094] 8021q: adding VLAN 0 to HW filter on device bond1
[   61.211605][ T6094] bond0: (slave bond1): Enslaving as an active interface with an up link
[   61.497526][ T6110] syz.0.61 uses obsolete (PF_INET,SOCK_PACKET)
[   61.748334][ T6127] 8021q: adding VLAN 0 to HW filter on device bond1
[   61.757386][ T6127] bond0: (slave bond1): Enslaving as an active interface with an up link
[   61.922595][ T6143] IPVS: set_ctl: invalid protocol: 33 172.30.1.2:19999
[   61.986502][ T6145] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.063480][ T6155] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   62.342279][ T6165] 8021q: adding VLAN 0 to HW filter on device bond2
[   62.347541][ T6165] bond0: (slave bond2): Enslaving as an active interface with an up link
[   62.410288][ T6169] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.423465][ T6169] __nla_validate_parse: 9 callbacks suppressed
[   62.423477][ T6169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.81'.
[   62.738192][   T55] Bluetooth: hci0: command tx timeout
[   62.787698][ T6190] netlink: 'syz.0.84': attribute type 3 has an invalid length.
[   62.790623][ T6190] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.84'.
[   62.817367][   T55] Bluetooth: hci1: command tx timeout
[   62.896565][   T55] Bluetooth: hci2: command tx timeout
[   63.029302][ T6200] 8021q: adding VLAN 0 to HW filter on device bond3
[   63.033840][ T6200] bond0: (slave bond3): Enslaving as an active interface with an up link
[   63.110190][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'.
[   63.130036][ T6203] netlink: 'syz.0.88': attribute type 4 has an invalid length.
[   63.159204][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'.
[   63.460325][ T6215] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.463343][ T6215] syzkaller0: entered promiscuous mode
[   63.468898][ T6215] syzkaller0: entered allmulticast mode
[   63.484535][ T6215] tipc: Resetting bearer <eth:syzkaller0>
[   63.491348][ T6214] tipc: Resetting bearer <eth:syzkaller0>
[   63.516924][ T6214] tipc: Disabling bearer <eth:syzkaller0>
[   63.654305][ T6219] 8021q: adding VLAN 0 to HW filter on device bond4
[   63.657733][ T6219] bond0: (slave bond4): Enslaving as an active interface with an up link
[   64.077852][ T6240] 8021q: adding VLAN 0 to HW filter on device bond5
[   64.082522][ T6240] bond0: (slave bond5): Enslaving as an active interface with an up link
[   64.177695][ T6243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.102'.
[   64.579929][ T6180] Set syz1 is full, maxelem 65536 reached
[   64.814432][ T6268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.108'.
[   64.823896][ T6268] bond0: entered promiscuous mode
[   64.827449][ T6268] bond_slave_0: entered promiscuous mode
[   64.830079][ T6268] bond_slave_1: entered promiscuous mode
[   64.832929][ T6268] bond1: entered promiscuous mode
[   64.835574][ T6268] bond2: entered promiscuous mode
[   64.839560][ T6268] bond0: left promiscuous mode
[   64.841689][ T6268] bond_slave_0: left promiscuous mode
[   64.845192][ T6268] bond_slave_1: left promiscuous mode
[   64.847871][ T6268] bond1: left promiscuous mode
[   64.850017][ T6268] bond2: left promiscuous mode
[   64.899818][ T6275] netlink: 'syz.2.111': attribute type 7 has an invalid length.
[   64.902424][ T6275] netlink: 'syz.2.111': attribute type 8 has an invalid length.
[   64.907971][ T6275] netlink: 36 bytes leftover after parsing attributes in process `syz.2.111'.
[   65.009190][ T6279] 8021q: adding VLAN 0 to HW filter on device bond3
[   65.016756][ T6279] bond0: (slave bond3): Enslaving as an active interface with an up link
[   65.072459][ T6285] netlink: 32 bytes leftover after parsing attributes in process `syz.2.115'.
[   65.209852][ T6295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.119'.
[   65.228320][ T6295] bond0: entered promiscuous mode
[   65.230192][ T6295] bond_slave_0: entered promiscuous mode
[   65.232259][ T6295] bond_slave_1: entered promiscuous mode
[   65.234823][ T6295] bond1: entered promiscuous mode
[   65.234992][ T6299] netlink: 'syz.0.121': attribute type 10 has an invalid length.
[   65.239232][ T6295] bond0: left promiscuous mode
[   65.241869][ T6295] bond_slave_0: left promiscuous mode
[   65.247920][ T6295] bond_slave_1: left promiscuous mode
[   65.249841][ T6295] bond1: left promiscuous mode
[   65.265507][ T6299] team0: Device ipvlan1 failed to register rx_handler
[   65.432020][ T6315] tun0: tun_chr_ioctl cmd 1074025675
[   65.435228][ T6315] tun0: persist enabled
[   65.437136][ T6315] tun0: tun_chr_ioctl cmd 1074025675
[   65.444279][ T6315] tun0: persist enabled
[   65.600437][ T6331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.132'.
[   65.622293][ T6331] bond0: entered promiscuous mode
[   65.623909][ T6331] bond_slave_0: entered promiscuous mode
[   65.626451][ T6331] bond_slave_1: entered promiscuous mode
[   65.628266][ T6331] bond1: entered promiscuous mode
[   65.642607][ T6331] bond2: entered promiscuous mode
[   65.651329][ T6331] bond3: entered promiscuous mode
[   65.658442][ T6331] bond0: left promiscuous mode
[   65.660775][ T6331] bond_slave_0: left promiscuous mode
[   65.663461][ T6331] bond_slave_1: left promiscuous mode
[   65.666616][ T6331] bond1: left promiscuous mode
[   65.668766][ T6331] bond2: left promiscuous mode
[   65.670919][ T6331] bond3: left promiscuous mode
[   65.841191][ T6341] 8021q: adding VLAN 0 to HW filter on device bond4
[   65.850932][ T6341] bond0: (slave bond4): Enslaving as an active interface with an up link
[   65.973351][ T6344] 8021q: adding VLAN 0 to HW filter on device bond6
[   66.069608][ T6357] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   66.074446][ T6357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.170846][ T6371] xt_l2tp: v2 tid > 0xffff: 37482740
[   66.815869][ T6414] 8021q: adding VLAN 0 to HW filter on device bond2
[   66.820904][ T6414] bond0: (slave bond2): Enslaving as an active interface with an up link
[   66.967647][ T6429] netlink: 'syz.2.158': attribute type 1 has an invalid length.
[   67.069644][ T6436] geneve2: entered promiscuous mode
[   67.071615][ T6436] geneve2: entered allmulticast mode
[   67.163183][ T6440] 8021q: adding VLAN 0 to HW filter on device bond3
[   67.171050][ T6440] bond0: (slave bond3): Enslaving as an active interface with an up link
[   67.505480][ T6471] netlink: 'syz.1.169': attribute type 4 has an invalid length.
[   67.592116][ T6478] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   67.643588][ T6482] tipc: Can't bind to reserved service type 1
[   67.647256][ T6482] __nla_validate_parse: 12 callbacks suppressed
[   67.647271][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'.
[   67.681931][  T718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.682130][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'.
[   67.688115][  T718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.821725][ T6492] netlink: 64 bytes leftover after parsing attributes in process `syz.2.177'.
[   67.825613][ T6493] netlink: 136 bytes leftover after parsing attributes in process `syz.0.176'.
[   67.830078][ T6493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.176'.
[   67.861852][ T6495] netlink: 29 bytes leftover after parsing attributes in process `syz.2.178'.
[   67.867643][ T6495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.178'.
[   68.019488][ T6498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.179'.
[   68.077003][ T6500] syzkaller1: entered promiscuous mode
[   68.079454][ T6500] syzkaller1: entered allmulticast mode
[   68.085739][ T6500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.180'.
[   68.398882][ T6517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.185'.
[   68.412208][ T6517] bond0: entered promiscuous mode
[   68.413928][ T6517] bond_slave_0: entered promiscuous mode
[   68.419701][ T6517] bond_slave_1: entered promiscuous mode
[   68.422154][ T6517] bond1: entered promiscuous mode
[   68.425392][ T6517] bond2: entered promiscuous mode
[   68.427295][ T6517] bond3: entered promiscuous mode
[   68.430192][ T6517] bond0: left promiscuous mode
[   68.432290][ T6517] bond_slave_0: left promiscuous mode
[   68.435629][ T6517] bond_slave_1: left promiscuous mode
[   68.437742][ T6517] bond1: left promiscuous mode
[   68.439630][ T6517] bond2: left promiscuous mode
[   68.441490][ T6517] bond3: left promiscuous mode
[   69.021252][ T6558] 8021q: adding VLAN 0 to HW filter on device bond4
[   69.026853][ T6558] bond0: (slave bond4): Enslaving as an active interface with an up link
[   69.708665][ T6615] veth0_to_bridge: entered promiscuous mode
[   69.712967][ T6614] veth0_to_bridge: left promiscuous mode
[   70.033511][ T6640] bridge_slave_0: left allmulticast mode
[   70.037345][ T6640] bridge_slave_0: left promiscuous mode
[   70.040768][ T6640] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.050073][ T6640] bridge_slave_1: left allmulticast mode
[   70.051986][ T6640] bridge_slave_1: left promiscuous mode
[   70.054800][ T6640] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.061810][ T6640] bond0: (slave bond_slave_0): Releasing backup interface
[   70.071467][ T6640] bond0: (slave bond_slave_1): Releasing backup interface
[   70.077593][ T6640] team_slave_0: left promiscuous mode
[   70.088612][ T6640] team0: Port device team_slave_0 removed
[   70.093066][ T6640] team_slave_1: left promiscuous mode
[   70.105089][ T6640] team0: Port device team_slave_1 removed
[   70.109267][ T6640] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.111955][ T6640] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.117303][ T6640] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.120093][ T6640] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.125896][ T6640] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   70.423199][ T6660] netlink: 'syz.2.227': attribute type 1 has an invalid length.
[   70.455587][ T6661] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.535488][ T6661] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.618557][ T6661] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.690103][ T6661] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.780285][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.807483][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.810067][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.833564][ T5905] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.061101][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.063257][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.089174][ T6694] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.092397][ T6694] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.161327][ T6694] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.172672][ T6694] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.262736][ T6698] hsr_slave_0: left promiscuous mode
[   71.270668][ T6698] hsr_slave_1: left promiscuous mode
[   71.291988][ T5905] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.297487][ T5905] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.301672][ T5905] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.307670][ T5905] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.790191][ T6726] nbd0: detected capacity change from 0 to 63
[   71.793609][ T6732] block nbd0: NBD_DISCONNECT
[   71.799608][ T6694] syz.1.235 (6694) used greatest stack depth: 19904 bytes left
[   71.812046][ T6732] block nbd0: Disconnected due to user request.
[   71.816775][ T6732] block nbd0: shutting down sockets
[   71.831509][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   71.834621][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[   71.838214][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   71.841726][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[   71.844937][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   71.848024][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[   71.850636][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   71.853414][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[   71.856911][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   71.863605][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read
[   71.867395][ T5852] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   71.870977][ T5852] Buffer I/O error on dev nbd0, logical block 1, async page read
[   71.874828][ T5852] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   71.877971][ T5852] Buffer I/O error on dev nbd0, logical block 2, async page read
[   71.880629][ T5852] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   71.883616][ T5852] Buffer I/O error on dev nbd0, logical block 3, async page read
[   71.886918][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   71.887882][ T6726] bond7: entered promiscuous mode
[   71.890525][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read
[   71.895351][ T5852] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   71.898534][ T5852] Buffer I/O error on dev nbd0, logical block 1, async page read
[   71.903445][ T6726] bond7: entered allmulticast mode
[   71.905357][ T5852] ldm_validate_partition_table(): Disk read failed.
[   71.909592][ T5852] Dev nbd0: unable to read RDB block 0
[   71.913072][ T5852]  nbd0: unable to read partition table
[   71.914426][ T6726] 8021q: adding VLAN 0 to HW filter on device bond7
[   71.921203][ T5852] ldm_validate_partition_table(): Disk read failed.
[   71.925195][ T5852] Dev nbd0: unable to read RDB block 0
[   71.927979][ T5852]  nbd0: unable to read partition table
[   72.078003][ T6745] netlink: 'syz.0.246': attribute type 1 has an invalid length.
[   72.107415][ T6745] 8021q: adding VLAN 0 to HW filter on device bond8
[   72.127724][ T6745] bond8: (slave geneve2): making interface the new active one
[   72.132674][ T6745] bond8: (slave geneve2): Enslaving as an active interface with an up link
[   72.146814][ T6745] netlink: 'syz.0.246': attribute type 11 has an invalid length.
[   72.407460][ T6763] Bluetooth: MGMT ver 1.23
[   72.706408][ T6766] __nla_validate_parse: 49 callbacks suppressed
[   72.706428][ T6766] netlink: 36 bytes leftover after parsing attributes in process `syz.2.253'.
[   72.869848][ T6772] netlink: 'syz.2.255': attribute type 11 has an invalid length.
[   73.271535][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'.
[   73.509323][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'.
[   73.513633][ T6811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.256'.
[   73.517779][ T6811] netlink: 'syz.0.256': attribute type 19 has an invalid length.
[   73.742805][ T6823] xt_socket: unknown flags 0xd0
[   73.788903][ T6825] sctp: [Deprecated]: syz.2.259 (pid 6825) Use of int in max_burst socket option.
[   73.788903][ T6825] Use struct sctp_assoc_value instead
[   73.849013][ T6827] pimreg3: entered allmulticast mode
[   74.091067][ T6838] geneve2: left promiscuous mode
[   74.119216][ T6838] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   74.158449][ T6838] netlink: 76 bytes leftover after parsing attributes in process `syz.2.263'.
[   74.286068][ T6849] 8021q: adding VLAN 0 to HW filter on device bond5
[   74.397969][ T6857] bridge_slave_0: left allmulticast mode
[   74.400470][ T6857] bridge_slave_0: left promiscuous mode
[   74.403010][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.413582][ T6857] bridge_slave_1: left allmulticast mode
[   74.417982][ T6857] bridge_slave_1: left promiscuous mode
[   74.420501][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.428648][ T6857] bond0: (slave bond_slave_0): Releasing backup interface
[   74.440232][ T6857] bond0: (slave bond_slave_1): Releasing backup interface
[   74.453791][ T6857] team0: Port device team_slave_0 removed
[   74.463203][ T6857] team0: Failed to send options change via netlink (err -105)
[   74.468599][ T6857] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   74.472662][ T6857] team0: Port device team_slave_1 removed
[   74.477063][ T6857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.480009][ T6857] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.484537][ T6857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.487512][ T6857] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.492198][ T6857] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   74.511609][ T6858] team0: Failed to send options change via netlink (err -105)
[   74.514719][ T6858] team0: Mode changed to "activebackup"
[   74.830635][ T6872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.273'.
[   74.837139][ T6872] bond0: entered promiscuous mode
[   74.838984][ T6872] bond1: entered promiscuous mode
[   74.840736][ T6872] bond2: entered promiscuous mode
[   74.842420][ T6872] bond3: entered promiscuous mode
[   74.845200][ T6872] bond4: entered promiscuous mode
[   74.849069][ T6872] bond0: left promiscuous mode
[   74.851217][ T6872] bond1: left promiscuous mode
[   74.853460][ T6872] bond2: left promiscuous mode
[   74.856153][ T6872] bond3: left promiscuous mode
[   74.858393][ T6872] bond4: left promiscuous mode
[   74.958506][ T6874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.274'.
[   74.962882][ T6874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.274'.
[   75.225122][ T6901] netlink: 16 bytes leftover after parsing attributes in process `syz.2.280'.
[   75.237230][ T6901] bond0: entered promiscuous mode
[   75.239018][ T6901] bond1: entered promiscuous mode
[   75.240783][ T6901] bond2: entered promiscuous mode
[   75.242436][ T6901] bond3: entered promiscuous mode
[   75.244615][ T6901] bond4: entered promiscuous mode
[   75.247739][ T6901] bond0: left promiscuous mode
[   75.249351][ T6901] bond1: left promiscuous mode
[   75.251124][ T6901] bond2: left promiscuous mode
[   75.252792][ T6901] bond3: left promiscuous mode
[   75.255494][ T6901] bond4: left promiscuous mode
[   75.339351][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'.
[   75.572480][ T6918] netlink: 'syz.2.286': attribute type 29 has an invalid length.
[   75.584859][ T6918] netlink: 'syz.2.286': attribute type 29 has an invalid length.
[   75.735612][ T6935] netlink: 'syz.2.293': attribute type 1 has an invalid length.
[   75.739241][ T6935] netlink: 'syz.2.293': attribute type 7 has an invalid length.
[   75.742245][ T6935] netlink: 'syz.2.293': attribute type 8 has an invalid length.
[   75.789569][ T6939] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   75.793700][ T6939] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   75.829454][ T6942] netlink: 'syz.0.296': attribute type 18 has an invalid length.
[   76.149950][ T6958] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[   76.946637][ T6988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.212856][ T7003] netlink: 'syz.2.310': attribute type 1 has an invalid length.
[   77.731432][ T7036] __nla_validate_parse: 14 callbacks suppressed
[   77.731446][ T7036] netlink: 24 bytes leftover after parsing attributes in process `syz.0.320'.
[   77.854283][   T55] Bluetooth: hci2: command tx timeout
[   78.418345][   T56] block nbd0: Receive control failed (result -32)
[   78.421518][ T6730] block nbd0: Receive control failed (result -32)
[   78.423877][ T7057] block nbd0: Receive control failed (result -32)
[   78.426024][ T7055] block nbd0: Receive control failed (result -32)
[   78.428954][ T7055] block nbd0: Receive control failed (result -32)
[   78.431181][ T7055] block nbd0: Receive control failed (result -32)
[   78.433366][ T7055] block nbd0: Receive control failed (result -32)
[   78.514532][ T7068] netlink: 232 bytes leftover after parsing attributes in process `syz.1.326'.
[   78.789222][ T7073] netlink: 120 bytes leftover after parsing attributes in process `syz.0.327'.
[   78.797860][ T7072] netlink: 40 bytes leftover after parsing attributes in process `syz.1.329'.
[   78.902298][ T7077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.331'.
[   79.065630][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.334'.
[   79.141669][ T7088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.334'.
[   79.299859][ T7103] netlink: 'syz.1.337': attribute type 2 has an invalid length.
[   79.303160][ T7103] netlink: 'syz.1.337': attribute type 1 has an invalid length.
[   79.318108][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'.
[   79.322329][ T7103] netlink: 'syz.1.337': attribute type 2 has an invalid length.
[   79.324952][ T7103] netlink: 'syz.1.337': attribute type 1 has an invalid length.
[   79.327659][ T7103] netlink: 'syz.1.337': attribute type 2 has an invalid length.
[   79.336732][ T7103] netlink: 'syz.1.337': attribute type 1 has an invalid length.
[   79.339223][ T7103] netlink: 'syz.1.337': attribute type 2 has an invalid length.
[   79.341620][ T7103] netlink: 'syz.1.337': attribute type 1 has an invalid length.
[   79.350361][ T7103] netlink: 'syz.1.337': attribute type 2 has an invalid length.
[   79.440416][ T7113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.341'.
[   79.475052][ T7116] netlink: 60 bytes leftover after parsing attributes in process `syz.0.342'.
[   80.639040][ T7173] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590)
[   80.642797][ T7173] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[   80.831825][ T7188] bond0: entered promiscuous mode
[   80.837900][ T7188] bond1: entered promiscuous mode
[   80.842395][ T7188] bond2: entered promiscuous mode
[   80.848956][ T7188] bond3: entered promiscuous mode
[   80.853540][ T7188] bond4: entered promiscuous mode
[   80.868299][ T7188] bond0: left promiscuous mode
[   80.882675][ T7188] bond1: left promiscuous mode
[   80.891476][ T7188] bond2: left promiscuous mode
[   80.893815][ T7188] bond3: left promiscuous mode
[   80.904200][ T7188] bond4: left promiscuous mode
[   81.565850][ T7217] 8021q: adding VLAN 0 to HW filter on device bond6
[   81.586601][ T7217] bond0: (slave bond6): Enslaving as an active interface with an up link
[   81.842117][ T7225] 8021q: adding VLAN 0 to HW filter on device bond7
[   81.875126][ T7225] bond7: (slave wlan0): Enslaving as an active interface with a down link
[   82.861067][ T7256] __nla_validate_parse: 11 callbacks suppressed
[   82.861077][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.374'.
[   82.874073][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.374'.
[   83.002451][ T7278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.379'.
[   83.005443][ T7278] netlink: 384 bytes leftover after parsing attributes in process `syz.1.379'.
[   83.048877][ T7286] validate_nla: 4 callbacks suppressed
[   83.048902][ T7286] netlink: 'syz.0.381': attribute type 1 has an invalid length.
[   83.059435][ T7286] netlink: 'syz.0.381': attribute type 1 has an invalid length.
[   83.140245][ T7293] 8021q: adding VLAN 0 to HW filter on device bond10
[   83.144828][ T7293] bond0: (slave bond10): Enslaving as an active interface with an up link
[   83.162952][ T7297] netlink: 52 bytes leftover after parsing attributes in process `syz.1.382'.
[   83.290673][ T7303] netlink: 'syz.1.385': attribute type 2 has an invalid length.
[   83.293679][ T7303] netlink: 'syz.1.385': attribute type 5 has an invalid length.
[   83.386899][ T7313] netlink: 36 bytes leftover after parsing attributes in process `syz.1.385'.
[   83.483601][ T7319] netlink: 'syz.2.391': attribute type 1 has an invalid length.
[   83.492591][ T7319] netlink: 56 bytes leftover after parsing attributes in process `syz.2.391'.
[   83.502988][ T7322] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.510066][ T7322] syzkaller0: entered promiscuous mode
[   83.512325][ T7322] syzkaller0: entered allmulticast mode
[   83.531963][ T7322] tipc: Resetting bearer <eth:syzkaller0>
[   83.535996][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.539448][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.555976][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.559109][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.675764][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.814393][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.817890][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.954185][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.964431][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.967694][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.118716][ T7325] netlink: 'syz.1.392': attribute type 10 has an invalid length.
[   84.125923][ T7325] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   84.211041][ T7329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.394'.
[   84.220198][ T7329] bond0: entered promiscuous mode
[   84.221886][ T7329] bond_slave_0: entered promiscuous mode
[   84.223776][ T7329] bond_slave_1: entered promiscuous mode
[   84.226132][ T7329] bond1: entered promiscuous mode
[   84.227912][ T7329] bond2: entered promiscuous mode
[   84.229756][ T7329] bond3: entered promiscuous mode
[   84.231706][ T7329] bond4: entered promiscuous mode
[   84.233775][ T7329] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   84.241788][ T7329] bond0: left promiscuous mode
[   84.243725][ T7329] bond_slave_0: left promiscuous mode
[   84.247490][ T7329] bond_slave_1: left promiscuous mode
[   84.249817][ T7329] bond1: left promiscuous mode
[   84.251845][ T7329] bond2: left promiscuous mode
[   84.253559][ T7329] bond3: left promiscuous mode
[   84.255435][ T7329] bond4: left promiscuous mode
[   84.257039][ T7329] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[   84.302573][ T7331] netlink: 36 bytes leftover after parsing attributes in process `syz.0.395'.
[   84.368306][ T7334] netlink: 108 bytes leftover after parsing attributes in process `syz.1.398'.
[   84.515941][   T47] tipc: Node number set to 3685907545
[   84.525304][ T7348] : entered promiscuous mode
[   84.657470][ T7358] netlink: 'syz.2.406': attribute type 2 has an invalid length.
[   85.358897][ T7395] bond0: entered promiscuous mode
[   85.360601][ T7395] bond_slave_0: entered promiscuous mode
[   85.362485][ T7395] bond_slave_1: entered promiscuous mode
[   85.364497][ T7395] bond1: entered promiscuous mode
[   85.366278][ T7395] bond2: entered promiscuous mode
[   85.368634][ T7395] bond3: entered promiscuous mode
[   85.370595][ T7395] bond4: entered promiscuous mode
[   85.372377][ T7395] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   85.381064][ T7395] bond0: left promiscuous mode
[   85.382921][ T7395] bond_slave_0: left promiscuous mode
[   85.385594][ T7395] bond_slave_1: left promiscuous mode
[   85.389888][ T7395] bond1: left promiscuous mode
[   85.391831][ T7395] bond2: left promiscuous mode
[   85.393559][ T7395] bond3: left promiscuous mode
[   85.395859][ T7395] bond4: left promiscuous mode
[   85.397510][ T7395] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[   85.490356][ T7391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.030781][ T7436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.037896][ T7436] syzkaller0: entered promiscuous mode
[   86.040146][ T7436] syzkaller0: entered allmulticast mode
[   86.057856][ T7436] tipc: Resetting bearer <eth:syzkaller0>
[   86.064575][ T7435] tipc: Resetting bearer <eth:syzkaller0>
[   86.076579][ T7435] tipc: Disabling bearer <eth:syzkaller0>
[   86.358712][ T7446] 8021q: adding VLAN 0 to HW filter on device bond8
[   86.362115][ T7446] bond0: (slave bond8): Enslaving as an active interface with an up link
[   86.485760][ T7454] netlink: 'syz.2.433': attribute type 4 has an invalid length.
[   87.586452][ T7528] bridge: RTM_NEWNEIGH with invalid ether address
[   87.760547][ T7552] TCP: TCP_TX_DELAY enabled
[   87.939321][ T7567] __nla_validate_parse: 16 callbacks suppressed
[   87.939369][ T7567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.465'.
[   87.953790][ T7567] bond0: entered promiscuous mode
[   87.955856][ T7567] bond1: entered promiscuous mode
[   87.958128][ T7567] bond2: entered promiscuous mode
[   87.960311][ T7567] bond3: entered promiscuous mode
[   87.962280][ T7567] bond4: entered promiscuous mode
[   87.963939][ T7567] bond6: entered promiscuous mode
[   87.966749][ T7567] bond8: entered promiscuous mode
[   87.971143][ T7567] bond0: left promiscuous mode
[   87.972653][ T7567] bond1: left promiscuous mode
[   87.974647][ T7567] bond2: left promiscuous mode
[   87.976249][ T7567] bond3: left promiscuous mode
[   87.977930][ T7567] bond4: left promiscuous mode
[   87.979671][ T7567] bond6: left promiscuous mode
[   87.981504][ T7567] bond8: left promiscuous mode
[   88.142133][ T7586] netlink: 'syz.0.470': attribute type 2 has an invalid length.
[   88.148004][ T7586] netlink: 'syz.0.470': attribute type 1 has an invalid length.
[   88.151046][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'.
[   88.169277][ T7590] netlink: 'syz.0.470': attribute type 2 has an invalid length.
[   88.179696][ T7590] netlink: 'syz.0.470': attribute type 1 has an invalid length.
[   88.183367][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'.
[   88.238806][ T7596] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   88.254266][ T7596] netlink: 5 bytes leftover after parsing attributes in process `syz.0.472'.
[   88.369063][ T7616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.477'.
[   88.409030][ T7619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.478'.
[   88.414368][ T7619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.478'.
[   88.615936][ T7627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.480'.
[   88.628788][ T7627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.480'.
[   88.722473][ T7636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.482'.
[   89.724409][ T7702] netlink: 'syz.1.502': attribute type 5 has an invalid length.
[   89.820666][ T7712] netlink: 'syz.2.506': attribute type 6 has an invalid length.
[   89.966422][ T7724] bond0: entered promiscuous mode
[   89.968619][ T7724] bond1: entered promiscuous mode
[   89.970946][ T7724] bond2: entered promiscuous mode
[   89.973250][ T7724] bond3: entered promiscuous mode
[   89.977303][ T7724] bond4: entered promiscuous mode
[   89.980443][ T7724] bond6: entered promiscuous mode
[   89.982691][ T7724] bond8: entered promiscuous mode
[   89.987407][ T7724] bond0: left promiscuous mode
[   89.989545][ T7724] bond1: left promiscuous mode
[   89.991435][ T7724] bond2: left promiscuous mode
[   89.993363][ T7724] bond3: left promiscuous mode
[   89.995467][ T7724] bond4: left promiscuous mode
[   89.997552][ T7724] bond6: left promiscuous mode
[   89.999612][ T7724] bond8: left promiscuous mode
[   90.040559][ T7726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.256430][ T7734] syzkaller1: entered promiscuous mode
[   90.258959][ T7734] syzkaller1: entered allmulticast mode
[   91.713452][ T7826] vlan2: entered allmulticast mode
[   91.715646][ T7826] bridge_slave_0: entered allmulticast mode
[   91.745754][ T7818] netlink: 'syz.1.538': attribute type 1 has an invalid length.
[   91.817274][ T7833] bond0: entered promiscuous mode
[   91.818977][ T7833] bond1: entered promiscuous mode
[   91.820762][ T7833] bond2: entered promiscuous mode
[   91.822937][ T7833] bond3: entered promiscuous mode
[   91.829017][ T7833] bond4: entered promiscuous mode
[   91.830754][ T7833] bond6: entered promiscuous mode
[   91.832824][ T7833] bond8: entered promiscuous mode
[   91.839100][ T7833] bond0: left promiscuous mode
[   91.840913][ T7833] bond1: left promiscuous mode
[   91.842657][ T7833] bond2: left promiscuous mode
[   91.846968][ T7833] bond3: left promiscuous mode
[   91.849142][ T7833] bond4: left promiscuous mode
[   91.851092][ T7833] bond6: left promiscuous mode
[   91.857288][ T7833] bond8: left promiscuous mode
[   92.338030][ T7895] block nbd1: Receive control failed (result -32)
[   92.338087][   T57] block nbd1: Receive control failed (result -32)
[   92.341292][ T7894] block nbd1: Receive control failed (result -32)
[   92.343710][ T7896] block nbd1: Receive control failed (result -32)
[   92.345484][ T7891] block nbd1: Receive control failed (result -32)
[   92.345596][ T7890] block nbd1: Receive control failed (result -32)
[   92.350320][ T7893] block nbd1: Receive control failed (result -32)
[   92.432513][ T7889] syzkaller0: entered promiscuous mode
[   92.436266][ T7889] syzkaller0: entered allmulticast mode
[   92.442368][ T7889] xt_limit: Overflow, try lower: 604147548/4200216962
[   92.974314][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[   93.005935][ T7953] __nla_validate_parse: 36 callbacks suppressed
[   93.005991][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'.
[   93.143091][ T7964] netlink: 104 bytes leftover after parsing attributes in process `syz.2.580'.
[   93.367822][ T7977] netlink: 60 bytes leftover after parsing attributes in process `syz.2.584'.
[   93.511492][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'.
[   93.515576][ T7992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.588'.
[   93.518757][ T7992] netlink: 540 bytes leftover after parsing attributes in process `syz.0.588'.
[   93.703063][ T8009] caif0: entered allmulticast mode
[   93.773144][ T8015] net_ratelimit: 10 callbacks suppressed
[   93.773173][ T8015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.782822][ T8016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.107701][ T8029] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   94.149470][ T8034] netlink: 'syz.0.598': attribute type 10 has an invalid length.
[   94.154781][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'.
[   94.157530][ T8034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.598'.
[   94.285895][ T8052] bridge1: entered allmulticast mode
[   94.367497][ T8054] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   94.428614][ T8063] netlink: 64 bytes leftover after parsing attributes in process `syz.2.605'.
[   94.428686][ T8064] netlink: 76 bytes leftover after parsing attributes in process `syz.0.604'.
[   94.711855][ T8083] erspan0: entered promiscuous mode
[   94.715629][ T8083] erspan0: left promiscuous mode
[   94.802292][ T8094] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20003
[   94.835897][ T8094] raw_sendmsg: syz.2.614 forgot to set AF_INET. Fix it!
[   95.434560][ T7957] Set syz1 is full, maxelem 65536 reached
[   95.999170][ T7890] block nbd2: Receive control failed (result -32)
[   96.002128][ T7891] block nbd2: Receive control failed (result -32)
[   96.004266][   T57] block nbd2: Receive control failed (result -32)
[   96.006272][ T7896] block nbd2: Receive control failed (result -32)
[   96.009311][ T7893] block nbd2: Receive control failed (result -32)
[   96.011440][ T7895] block nbd2: Receive control failed (result -32)
[   96.013491][ T7894] block nbd2: Receive control failed (result -32)
[   96.131361][ T8183] netlink: 'syz.0.637': attribute type 9 has an invalid length.
[   96.135253][ T8183] netlink: 'syz.0.637': attribute type 6 has an invalid length.
[   96.138672][ T8183] netlink: 'syz.0.637': attribute type 7 has an invalid length.
[   96.141143][ T8183] netlink: 'syz.0.637': attribute type 8 has an invalid length.
[   96.200116][ T8190] xt_bpf: check failed: parse error
[   96.682063][ T8211] erspan0: entered promiscuous mode
[   96.686716][ T8211] erspan0: left promiscuous mode
[   97.263866][ T8244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.311473][ T8247] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[   97.462471][ T8253] netlink: 'syz.0.660': attribute type 3 has an invalid length.
[   97.468674][ T8253] bridge_slave_0: default FDB implementation only supports local addresses
[   97.997894][ T8317] netlink: 'syz.0.682': attribute type 1 has an invalid length.
[   98.048158][ T8327] __nla_validate_parse: 25 callbacks suppressed
[   98.048173][ T8327] netlink: 60 bytes leftover after parsing attributes in process `syz.0.684'.
[   98.112411][ T8329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.685'.
[   98.223463][ T8343] bridge_slave_0: left allmulticast mode
[   98.230820][ T8343] bridge_slave_0: left promiscuous mode
[   98.233014][ T8343] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.238886][ T8343] bridge_slave_1: left allmulticast mode
[   98.240659][ T8343] bridge_slave_1: left promiscuous mode
[   98.242469][ T8343] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.247308][ T8343] bond0: (slave bond_slave_0): Releasing backup interface
[   98.251457][ T8343] bond0: (slave bond_slave_1): Releasing backup interface
[   98.259614][ T8343] team0: Port device team_slave_0 removed
[   98.262721][ T8343] team0: Port device team_slave_1 removed
[   98.265467][ T8343] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.268152][ T8343] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.271388][ T8343] bond0: (slave wlan1): Releasing backup interface
[   98.274963][ T8343] bond0: (slave bond1): Releasing backup interface
[   98.278021][ T8343] bond0: (slave bond2): Releasing backup interface
[   98.281306][ T8343] bond0: (slave bond3): Releasing backup interface
[   98.285412][ T8343] bond0: (slave bond4): Releasing backup interface
[   98.391864][ T8359] netlink: 44 bytes leftover after parsing attributes in process `syz.0.693'.
[   98.410214][ T8356] syzkaller0: entered promiscuous mode
[   98.435708][ T8356] syzkaller0: entered allmulticast mode
[   98.497175][ T8368] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   99.508366][ T8388] 8021q: adding VLAN 0 to HW filter on device bond11
[   99.514976][ T8388] bond0: (slave bond11): Enslaving as an active interface with an up link
[   99.532210][ T8393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.702'.
[   99.538855][ T8393] bond0: entered promiscuous mode
[   99.541141][ T8393] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   99.545628][ T8393] hsr0: entered promiscuous mode
[   99.651354][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  100.385818][ T8415] netlink: 'syz.0.706': attribute type 29 has an invalid length.
[  100.435583][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'.
[  100.494431][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[  100.548784][ T8428] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  100.558504][ T8430] tipc: Started in network mode
[  100.560111][ T8430] tipc: Node identity ac14140f, cluster identity 4711
[  100.563839][ T8430] tipc: New replicast peer: 255.255.255.255
[  100.568824][ T8430] tipc: Enabled bearer <udp:syz2>, priority 10
[  100.597410][ T8431] tipc: Resetting bearer <eth:syzkaller0>
[  100.600383][ T8431] tipc: Resetting bearer <eth:syzkaller0>
[  100.615707][ T8431] Illegal XDP return value 4294967289 on prog  (id 197) dev N/A, expect packet loss!
[  100.625509][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'.
[  100.721867][ T8437] netlink: 360 bytes leftover after parsing attributes in process `syz.2.714'.
[  101.529930][ T8458] netlink: 'syz.0.718': attribute type 10 has an invalid length.
[  101.576419][ T5911] tipc: Node number set to 2886997007
[  101.628806][ T8471] netlink: 200 bytes leftover after parsing attributes in process `syz.0.722'.
[  101.637724][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'.
[  101.933065][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'.
[  102.084993][ T8510] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  102.088914][ T8510] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  102.267627][ T8520] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  102.596713][ T8560] 8021q: adding VLAN 0 to HW filter on device bond12
[  102.600105][ T8560] bond0: (slave bond12): Enslaving as an active interface with an up link
[  102.661267][ T8563] vlan2: entered allmulticast mode
[  102.663488][ T8563] veth1: entered allmulticast mode
[  102.692898][ T8567] netlink: 'syz.1.753': attribute type 3 has an invalid length.
[  102.697862][ T8567] netlink: 'syz.1.753': attribute type 2 has an invalid length.
[  102.701072][ T8567] netlink: 'syz.1.753': attribute type 2 has an invalid length.
[  102.868547][ T8587] netlink: 'syz.0.757': attribute type 3 has an invalid length.
[  102.945584][ T8589] syzkaller1: entered promiscuous mode
[  102.947455][ T8589] syzkaller1: entered allmulticast mode
[  103.156635][ T8613] syz.2.764 (8613) used greatest stack depth: 19320 bytes left
[  103.183896][ T8617] __nla_validate_parse: 76 callbacks suppressed
[  103.183917][ T8617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.766'.
[  103.261553][ T8623] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  103.299167][ T8625] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  103.302541][ T8625] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  103.356844][ T8630] netlink: 'syz.0.772': attribute type 1 has an invalid length.
[  103.359525][ T8630] netlink: 224 bytes leftover after parsing attributes in process `syz.0.772'.
[  103.436810][ T8634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'.
[  103.440007][ T8634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.774'.
[  103.619061][ T8641] netlink: 'syz.2.777': attribute type 2 has an invalid length.
[  103.833779][ T8651] syzkaller1: entered promiscuous mode
[  103.837727][ T8651] syzkaller1: entered allmulticast mode
[  103.958336][ T2287] IPVS: starting estimator thread 0...
[  104.017217][ T8660] netlink: 'syz.1.783': attribute type 1 has an invalid length.
[  104.054234][ T8659] IPVS: using max 60 ests per chain, 144000 per kthread
[  104.241311][ T8664] IPv6: addrconf: prefix option has invalid lifetime
[  104.313214][ T8671] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  104.469438][ T8681] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  104.591683][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.791'.
[  104.604064][ T8689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.791'.
[  105.410277][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.794'.
[  105.592404][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.798'.
[  105.658583][ T8708] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  105.781551][ T8719] netlink: 'syz.1.798': attribute type 3 has an invalid length.
[  105.785678][ T8719] netlink: 'syz.1.798': attribute type 1 has an invalid length.
[  105.788933][ T8719] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.798'.
[  106.087308][ T8742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.803'.
[  106.131774][ T8745] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  106.136046][ T8745] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  106.181798][ T8747] netlink: 'syz.0.805': attribute type 3 has an invalid length.
[  106.510657][ T8762] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  106.514675][ T8762] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  106.607134][ T8768] netlink: 'syz.1.814': attribute type 2 has an invalid length.
[  106.609996][ T8768] netlink: 'syz.1.814': attribute type 1 has an invalid length.
[  106.612552][ T8768] netlink: 'syz.1.814': attribute type 1 has an invalid length.
[  106.733313][ T8781] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  106.736586][ T8781] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  132.498305][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  138.607418][ T8789] __nla_validate_parse: 3 callbacks suppressed
[  138.607464][ T8789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.822'.
[  138.626809][ T8789] bond0: entered promiscuous mode
[  138.628571][ T8789] bond1: entered promiscuous mode
[  138.630262][ T8789] bond2: entered promiscuous mode
[  138.632546][ T8789] bond3: entered promiscuous mode
[  138.635218][ T8789] bond4: entered promiscuous mode
[  138.637511][ T8789] bond6: entered promiscuous mode
[  138.639263][ T8789] bond8: entered promiscuous mode
[  138.646817][ T8789] bond0: left promiscuous mode
[  138.648503][ T8789] bond1: left promiscuous mode
[  138.650192][ T8789] bond2: left promiscuous mode
[  138.651884][ T8789] bond3: left promiscuous mode
[  138.659162][ T8789] bond4: left promiscuous mode
[  138.661729][ T8789] bond6: left promiscuous mode
[  138.663912][ T8789] bond8: left promiscuous mode
[  138.799536][ T8803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.827'.
[  138.815439][ T8807] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  138.818619][ T8807] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  138.853292][ T8809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.829'.
[  138.896494][ T8815] netlink: 'syz.1.831': attribute type 13 has an invalid length.
[  139.055935][ T8815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.244291][ T8830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.835'.
[  139.247909][ T8830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.835'.
[  139.290622][ T8830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.835'.
[  139.293729][ T8830] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  139.355740][ T8832] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  139.359251][ T8832] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  139.492666][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'.
[  139.500493][ T8837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.838'.
[  139.557877][ T8838] TCP: tcp_parse_options: Illegal window scaling value 94 > 14 received
[  139.599539][ T8840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.839'.
[  139.709835][ T8842] netlink: 64 bytes leftover after parsing attributes in process `syz.1.840'.
[  139.950420][ T8865] netlink: 'syz.2.847': attribute type 10 has an invalid length.
[  139.960297][ T8865] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  140.199892][ T8878] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  140.202920][ T8878] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  140.236731][ T8880] syz_tun: entered allmulticast mode
[  140.243638][ T8880] pimreg: entered allmulticast mode
[  140.281782][ T8879] syz_tun: left allmulticast mode
[  140.376067][ T8884] netlink: 'syz.2.855': attribute type 1 has an invalid length.
[  140.431937][ T8895] netlink: 'syz.0.858': attribute type 11 has an invalid length.
[  140.532797][ T8906] 8021q: adding VLAN 0 to HW filter on device bond10
[  140.537259][ T8906] bond0: (slave bond10): Enslaving as an active interface with an up link
[  140.808088][ T8918] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.891450][ T8918] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.943881][ T8918] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.002199][ T8918] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.069722][ T5871] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.080532][ T5871] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.092432][ T5871] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.103271][ T5871] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.482702][ T8935] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  141.494255][ T8935] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  141.602691][ T8942] geneve0: entered promiscuous mode
[  141.684630][ T8948] 8021q: adding VLAN 0 to HW filter on device bond11
[  141.688690][ T8948] bond0: (slave bond11): Enslaving as an active interface with an up link
[  142.101051][ T8964] netlink: 'syz.2.879': attribute type 1 has an invalid length.
[  142.126953][ T8966] netlink: zone id is out of range
[  142.430778][ T8988] bond0: (slave dummy0): Releasing backup interface
[  142.465939][ T8988] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  142.533517][ T8997] 8021q: adding VLAN 0 to HW filter on device bond5
[  142.538047][ T8997] bond5: entered promiscuous mode
[  142.540361][ T8997] bond0: (slave bond5): Enslaving as an active interface with a down link
[  143.199571][ T9045] netlink: zone id is out of range
[  143.201275][ T9045] netlink: zone id is out of range
[  143.202834][ T9045] netlink: zone id is out of range
[  143.205177][ T9045] netlink: zone id is out of range
[  143.206887][ T9045] netlink: zone id is out of range
[  143.211957][ T9045] netlink: zone id is out of range
[  143.215355][ T9045] netlink: zone id is out of range
[  143.264694][ T9049] netlink: 'syz.0.905': attribute type 1 has an invalid length.
[  143.332858][ T9053] vlan2: entered promiscuous mode
[  143.336129][ T9053] bond0: entered promiscuous mode
[  143.338471][ T9053] bond1: entered promiscuous mode
[  143.340869][ T9053] bond2: entered promiscuous mode
[  143.343234][ T9053] bond3: entered promiscuous mode
[  143.345162][ T9053] bond4: entered promiscuous mode
[  143.347024][ T9053] bond5: entered promiscuous mode
[  143.348892][ T9053] bond10: entered promiscuous mode
[  143.350793][ T9053] bond11: entered promiscuous mode
[  143.352631][ T9053] bond12: entered promiscuous mode
[  143.960345][ T9086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.015354][ T9084] caif0: left allmulticast mode
[  144.409206][ T9084] tipc: Resetting bearer <eth:syzkaller0>
[  144.412046][ T9084] syzkaller0: left promiscuous mode
[  144.413702][ T9084] syzkaller0: left allmulticast mode
[  144.417578][ T9084] bond7: left promiscuous mode
[  144.419054][ T9084] bond7: left allmulticast mode
[  144.436176][ T9084] vlan2: left promiscuous mode
[  144.437752][ T9084] bond0: left promiscuous mode
[  144.439342][ T9084] bond1: left promiscuous mode
[  144.441002][ T9084] bond2: left promiscuous mode
[  144.442562][ T9084] bond3: left promiscuous mode
[  144.446450][ T9084] bond4: left promiscuous mode
[  144.448149][ T9084] bond5: left promiscuous mode
[  144.449801][ T9084] bond10: left promiscuous mode
[  144.451480][ T9084] bond11: left promiscuous mode
[  144.453051][ T9084] bond12: left promiscuous mode
[  144.457713][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.460597][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.474634][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.477453][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.904664][ T9144] __nla_validate_parse: 25 callbacks suppressed
[  144.904677][ T9144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.920'.
[  145.157852][ T9146] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  145.161967][ T9146] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  145.272217][ T9150] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma?
[  145.304740][ T9150] netlink: 'syz.1.923': attribute type 1 has an invalid length.
[  145.307468][ T9150] netlink: 'syz.1.923': attribute type 1 has an invalid length.
[  145.310584][ T9150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.923'.
[  145.316890][ T9150] 
[  145.317900][ T9150] ======================================================
[  145.320644][ T9150] WARNING: possible circular locking dependency detected
[  145.323344][ T9150] syzkaller #0 Not tainted
[  145.325461][ T9150] ------------------------------------------------------
[  145.329041][ T9150] syz.1.923/9150 is trying to acquire lock:
[  145.331359][ T9150] ffff888039c836d8 (sk_lock-AF_TIPC){+.+.}-{0:0}, at: tipc_shutdown+0x62/0x4f0
[  145.334864][ T9150] 
[  145.334864][ T9150] but task is already holding lock:
[  145.337772][ T9150] ffff88803be7c470 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x14f/0x260
[  145.341091][ T9150] 
[  145.341091][ T9150] which lock already depends on the new lock.
[  145.341091][ T9150] 
[  145.344451][ T9150] 
[  145.344451][ T9150] the existing dependency chain (in reverse order) is:
[  145.347869][ T9150] 
[  145.347869][ T9150] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  145.350897][ T9150]        lock_acquire+0x120/0x360
[  145.352934][ T9150]        __mutex_lock+0x187/0x1350
[  145.354947][ T9150]        nbd_queue_rq+0x257/0xf10
[  145.356891][ T9150]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  145.359307][ T9150]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[  145.362055][ T9150]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  145.364639][ T9150]        blk_mq_run_hw_queue+0x348/0x4f0
[  145.366831][ T9150]        blk_mq_dispatch_list+0xd0c/0xe00
[  145.369126][ T9150]        blk_mq_flush_plug_list+0x469/0x550
[  145.371434][ T9150]        __blk_flush_plug+0x3d3/0x4b0
[  145.373528][ T9150]        __submit_bio+0x2d3/0x5a0
[  145.375528][ T9150]        submit_bio_noacct_nocheck+0x4ab/0xb50
[  145.377983][ T9150]        block_read_full_folio+0x599/0x830
[  145.380339][ T9150]        filemap_read_folio+0x117/0x380
[  145.382333][ T9150]        do_read_cache_folio+0x350/0x590
[  145.384259][ T9150]        read_part_sector+0xb6/0x2b0
[  145.386316][ T9150]        adfspart_check_ICS+0xa4/0xa50
[  145.388481][ T9150]        bdev_disk_changed+0x75f/0x14b0
[  145.390650][ T9150]        blkdev_get_whole+0x380/0x510
[  145.392308][ T9150]        bdev_open+0x31e/0xd30
[  145.393858][ T9150]        blkdev_open+0x457/0x600
[  145.395454][ T9150]        do_dentry_open+0x953/0x13f0
[  145.397123][ T9150]        vfs_open+0x3b/0x340
[  145.398576][ T9150]        path_openat+0x2ee5/0x3830
[  145.400154][ T9150]        do_filp_open+0x1fa/0x410
[  145.401712][ T9150]        do_sys_openat2+0x121/0x1c0
[  145.403338][ T9150]        __x64_sys_openat+0x138/0x170
[  145.405445][ T9150]        do_syscall_64+0xfa/0x3b0
[  145.407434][ T9150]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.409944][ T9150] 
[  145.409944][ T9150] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  145.412194][ T9150]        lock_acquire+0x120/0x360
[  145.413763][ T9150]        __mutex_lock+0x187/0x1350
[  145.415328][ T9150]        nbd_queue_rq+0xc8/0xf10
[  145.416823][ T9150]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  145.419010][ T9150]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[  145.421649][ T9150]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  145.424212][ T9150]        blk_mq_run_hw_queue+0x348/0x4f0
[  145.426488][ T9150]        blk_mq_dispatch_list+0xd0c/0xe00
[  145.428745][ T9150]        blk_mq_flush_plug_list+0x469/0x550
[  145.431103][ T9150]        __blk_flush_plug+0x3d3/0x4b0
[  145.433181][ T9150]        __submit_bio+0x2d3/0x5a0
[  145.435119][ T9150]        submit_bio_noacct_nocheck+0x4ab/0xb50
[  145.437508][ T9150]        block_read_full_folio+0x599/0x830
[  145.439808][ T9150]        filemap_read_folio+0x117/0x380
[  145.442002][ T9150]        do_read_cache_folio+0x350/0x590
[  145.444206][ T9150]        read_part_sector+0xb6/0x2b0
[  145.446319][ T9150]        adfspart_check_ICS+0xa4/0xa50
[  145.448462][ T9150]        bdev_disk_changed+0x75f/0x14b0
[  145.450643][ T9150]        blkdev_get_whole+0x380/0x510
[  145.452337][ T9150]        bdev_open+0x31e/0xd30
[  145.454263][ T9150]        blkdev_open+0x457/0x600
[  145.456207][ T9150]        do_dentry_open+0x953/0x13f0
[  145.458290][ T9150]        vfs_open+0x3b/0x340
[  145.460096][ T9150]        path_openat+0x2ee5/0x3830
[  145.462131][ T9150]        do_filp_open+0x1fa/0x410
[  145.464118][ T9150]        do_sys_openat2+0x121/0x1c0
[  145.466195][ T9150]        __x64_sys_openat+0x138/0x170
[  145.468279][ T9150]        do_syscall_64+0xfa/0x3b0
[  145.470243][ T9150]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.472692][ T9150] 
[  145.472692][ T9150] -> #4 (set->srcu){.+.+}-{0:0}:
[  145.475494][ T9150]        lock_sync+0xba/0x160
[  145.477347][ T9150]        __synchronize_srcu+0x96/0x3a0
[  145.479255][ T9150]        elevator_switch+0x12b/0x640
[  145.480942][ T9150]        elevator_change+0x2d4/0x450
[  145.482644][ T9150]        elevator_set_default+0x186/0x260
[  145.484921][ T9150]        blk_register_queue+0x34e/0x3f0
[  145.486860][ T9150]        __add_disk+0x677/0xd50
[  145.488398][ T9150]        add_disk_fwnode+0xfc/0x480
[  145.490002][ T9150]        nbd_dev_add+0x717/0xae0
[  145.491531][ T9150]        nbd_init+0x168/0x1f0
[  145.492994][ T9150]        do_one_initcall+0x236/0x820
[  145.494933][ T9150]        do_initcall_level+0x104/0x190
[  145.497091][ T9150]        do_initcalls+0x59/0xa0
[  145.498999][ T9150]        kernel_init_freeable+0x334/0x4b0
[  145.501239][ T9150]        kernel_init+0x1d/0x1d0
[  145.502919][ T9150]        ret_from_fork+0x439/0x7d0
[  145.504592][ T9150]        ret_from_fork_asm+0x1a/0x30
[  145.506246][ T9150] 
[  145.506246][ T9150] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  145.508644][ T9150]        lock_acquire+0x120/0x360
[  145.510225][ T9150]        __mutex_lock+0x187/0x1350
[  145.511818][ T9150]        elevator_change+0x19b/0x450
[  145.513500][ T9150]        elevator_set_none+0x42/0xb0
[  145.515627][ T9150]        blk_mq_update_nr_hw_queues+0x598/0x1aa0
[  145.517740][ T9150]        nbd_start_device+0x17f/0xb10
[  145.519860][ T9150]        nbd_genl_connect+0x135b/0x18f0
[  145.522051][ T9150]        genl_family_rcv_msg_doit+0x215/0x300
[  145.524440][ T9150]        genl_rcv_msg+0x60e/0x790
[  145.526438][ T9150]        netlink_rcv_skb+0x208/0x470
[  145.528315][ T9150]        genl_rcv+0x28/0x40
[  145.529689][ T9150]        netlink_unicast+0x82f/0x9e0
[  145.531297][ T9150]        netlink_sendmsg+0x805/0xb30
[  145.533185][ T9150]        __sock_sendmsg+0x21c/0x270
[  145.535144][ T9150]        ____sys_sendmsg+0x505/0x830
[  145.537226][ T9150]        ___sys_sendmsg+0x21f/0x2a0
[  145.539250][ T9150]        __x64_sys_sendmsg+0x19b/0x260
[  145.541400][ T9150]        do_syscall_64+0xfa/0x3b0
[  145.543380][ T9150]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.545923][ T9150] 
[  145.545923][ T9150] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  145.549232][ T9150]        lock_acquire+0x120/0x360
[  145.551169][ T9150]        blk_alloc_queue+0x538/0x620
[  145.553259][ T9150]        __blk_mq_alloc_disk+0x15c/0x340
[  145.555456][ T9150]        nbd_dev_add+0x46c/0xae0
[  145.557370][ T9150]        nbd_init+0x168/0x1f0
[  145.559259][ T9150]        do_one_initcall+0x236/0x820
[  145.561330][ T9150]        do_initcall_level+0x104/0x190
[  145.563446][ T9150]        do_initcalls+0x59/0xa0
[  145.565416][ T9150]        kernel_init_freeable+0x334/0x4b0
[  145.567249][ T9150]        kernel_init+0x1d/0x1d0
[  145.568970][ T9150]        ret_from_fork+0x439/0x7d0
[  145.570955][ T9150]        ret_from_fork_asm+0x1a/0x30
[  145.573029][ T9150] 
[  145.573029][ T9150] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  145.575809][ T9150]        lock_acquire+0x120/0x360
[  145.577851][ T9150]        fs_reclaim_acquire+0x72/0x100
[  145.579947][ T9150]        kmem_cache_alloc_node_noprof+0x47/0x3c0
[  145.582390][ T9150]        __alloc_skb+0x112/0x2d0
[  145.584361][ T9150]        tipc_msg_build+0x13b/0xcf0
[  145.586343][ T9150]        __tipc_sendstream+0x8ac/0x1290
[  145.588530][ T9150]        tipc_sendstream+0x55/0x70
[  145.590491][ T9150]        __sock_sendmsg+0x21c/0x270
[  145.592531][ T9150]        ____sys_sendmsg+0x52d/0x830
[  145.594630][ T9150]        ___sys_sendmsg+0x21f/0x2a0
[  145.596693][ T9150]        __sys_sendmmsg+0x227/0x430
[  145.598690][ T9150]        __x64_sys_sendmmsg+0xa0/0xc0
[  145.600816][ T9150]        do_syscall_64+0xfa/0x3b0
[  145.602830][ T9150]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.605165][ T9150] 
[  145.605165][ T9150] -> #0 (sk_lock-AF_TIPC){+.+.}-{0:0}:
[  145.607450][ T9150]        validate_chain+0xb9b/0x2140
[  145.609129][ T9150]        __lock_acquire+0xab9/0xd20
[  145.611123][ T9150]        lock_acquire+0x120/0x360
[  145.612691][ T9150]        lock_sock_nested+0x48/0x100
[  145.614470][ T9150]        tipc_shutdown+0x62/0x4f0
[  145.616064][ T9150]        nbd_mark_nsock_dead+0x2e9/0x560
[  145.618012][ T9150]        sock_shutdown+0x15e/0x260
[  145.619669][ T9150]        nbd_config_put+0x342/0x790
[  145.621367][ T9150]        nbd_genl_connect+0x167c/0x18f0
[  145.623437][ T9150]        genl_family_rcv_msg_doit+0x215/0x300
[  145.625828][ T9150]        genl_rcv_msg+0x60e/0x790
[  145.627765][ T9150]        netlink_rcv_skb+0x208/0x470
[  145.629786][ T9150]        genl_rcv+0x28/0x40
[  145.631300][ T9150]        netlink_unicast+0x82f/0x9e0
[  145.633277][ T9150]        netlink_sendmsg+0x805/0xb30
[  145.635305][ T9150]        __sock_sendmsg+0x21c/0x270
[  145.637214][ T9150]        ____sys_sendmsg+0x505/0x830
[  145.638937][ T9150]        ___sys_sendmsg+0x21f/0x2a0
[  145.640520][ T9150]        __x64_sys_sendmsg+0x19b/0x260
[  145.642179][ T9150]        do_syscall_64+0xfa/0x3b0
[  145.643770][ T9150]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.645864][ T9150] 
[  145.645864][ T9150] other info that might help us debug this:
[  145.645864][ T9150] 
[  145.649262][ T9150] Chain exists of:
[  145.649262][ T9150]   sk_lock-AF_TIPC --> &cmd->lock --> &nsock->tx_lock
[  145.649262][ T9150] 
[  145.653542][ T9150]  Possible unsafe locking scenario:
[  145.653542][ T9150] 
[  145.655867][ T9150]        CPU0                    CPU1
[  145.657534][ T9150]        ----                    ----
[  145.659589][ T9150]   lock(&nsock->tx_lock);
[  145.661362][ T9150]                                lock(&cmd->lock);
[  145.663785][ T9150]                                lock(&nsock->tx_lock);
[  145.666158][ T9150]   lock(sk_lock-AF_TIPC);
[  145.667750][ T9150] 
[  145.667750][ T9150]  *** DEADLOCK ***
[  145.667750][ T9150] 
[  145.670504][ T9150] 4 locks held by syz.1.923/9150:
[  145.672147][ T9150]  #0: ffffffff8f59fb50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  145.675110][ T9150]  #1: ffffffff8f59f968 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  145.677998][ T9150]  #2: ffff888021192230 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0
[  145.682011][ T9150]  #3: ffff88803be7c470 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x14f/0x260
[  145.685775][ T9150] 
[  145.685775][ T9150] stack backtrace:
[  145.688149][ T9150] CPU: 0 UID: 0 PID: 9150 Comm: syz.1.923 Not tainted syzkaller #0 PREEMPT(full) 
[  145.688168][ T9150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.688178][ T9150] Call Trace:
[  145.688185][ T9150]  <TASK>
[  145.688194][ T9150]  dump_stack_lvl+0x189/0x250
[  145.688224][ T9150]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.688241][ T9150]  ? __pfx__printk+0x10/0x10
[  145.688258][ T9150]  ? stack_trace_save+0x9c/0xe0
[  145.688280][ T9150]  print_circular_bug+0x2ee/0x310
[  145.688297][ T9150]  check_noncircular+0x134/0x160
[  145.688313][ T9150]  validate_chain+0xb9b/0x2140
[  145.688331][ T9150]  ? look_up_lock_class+0x74/0x170
[  145.688346][ T9150]  ? register_lock_class+0x51/0x320
[  145.688373][ T9150]  __lock_acquire+0xab9/0xd20
[  145.688396][ T9150]  ? tipc_shutdown+0x62/0x4f0
[  145.688410][ T9150]  lock_acquire+0x120/0x360
[  145.688429][ T9150]  ? tipc_shutdown+0x62/0x4f0
[  145.688444][ T9150]  ? sock_shutdown+0x14f/0x260
[  145.688460][ T9150]  lock_sock_nested+0x48/0x100
[  145.688473][ T9150]  ? tipc_shutdown+0x62/0x4f0
[  145.688486][ T9150]  tipc_shutdown+0x62/0x4f0
[  145.688500][ T9150]  ? kobject_uevent_env+0x36b/0x8c0
[  145.688520][ T9150]  nbd_mark_nsock_dead+0x2e9/0x560
[  145.688534][ T9150]  sock_shutdown+0x15e/0x260
[  145.688548][ T9150]  nbd_config_put+0x342/0x790
[  145.688562][ T9150]  nbd_genl_connect+0x167c/0x18f0
[  145.688575][ T9150]  ? __pfx_nbd_genl_connect+0x10/0x10
[  145.688590][ T9150]  ? __nla_parse+0x40/0x60
[  145.688605][ T9150]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  145.688627][ T9150]  genl_family_rcv_msg_doit+0x215/0x300
[  145.688650][ T9150]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  145.688669][ T9150]  ? stack_trace_save+0x9c/0xe0
[  145.688685][ T9150]  genl_rcv_msg+0x60e/0x790
[  145.688703][ T9150]  ? __pfx_genl_rcv_msg+0x10/0x10
[  145.688721][ T9150]  ? __pfx_nbd_genl_connect+0x10/0x10
[  145.688735][ T9150]  netlink_rcv_skb+0x208/0x470
[  145.688748][ T9150]  ? __lock_acquire+0xab9/0xd20
[  145.688765][ T9150]  ? __pfx_genl_rcv_msg+0x10/0x10
[  145.688781][ T9150]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  145.688802][ T9150]  ? down_read+0x1ad/0x2e0
[  145.688819][ T9150]  genl_rcv+0x28/0x40
[  145.688835][ T9150]  netlink_unicast+0x82f/0x9e0
[  145.688846][ T9150]  ? __pfx_netlink_unicast+0x10/0x10
[  145.688853][ T9150]  ? netlink_sendmsg+0x642/0xb30
[  145.688861][ T9150]  ? skb_put+0x11b/0x210
[  145.688871][ T9150]  netlink_sendmsg+0x805/0xb30
[  145.688912][ T9150]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.688931][ T9150]  ? aa_sock_msg_perm+0xf1/0x1d0
[  145.688947][ T9150]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  145.688963][ T9150]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.688976][ T9150]  __sock_sendmsg+0x21c/0x270
[  145.688984][ T9150]  ____sys_sendmsg+0x505/0x830
[  145.688995][ T9150]  ? __pfx_____sys_sendmsg+0x10/0x10
[  145.689007][ T9150]  ? import_iovec+0x74/0xa0
[  145.689017][ T9150]  ___sys_sendmsg+0x21f/0x2a0
[  145.689027][ T9150]  ? __pfx____sys_sendmsg+0x10/0x10
[  145.689042][ T9150]  ? __fget_files+0x2a/0x420
[  145.689049][ T9150]  ? __fget_files+0x3a0/0x420
[  145.689057][ T9150]  __x64_sys_sendmsg+0x19b/0x260
[  145.689067][ T9150]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  145.689078][ T9150]  ? rcu_is_watching+0x15/0xb0
[  145.689086][ T9150]  ? do_syscall_64+0xbe/0x3b0
[  145.689095][ T9150]  do_syscall_64+0xfa/0x3b0
[  145.689103][ T9150]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.689110][ T9150]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.689117][ T9150]  ? exc_page_fault+0x9f/0xf0
[  145.689124][ T9150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.689132][ T9150] RIP: 0033:0x7fc1f0d8ec29
[  145.689142][ T9150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.689149][ T9150] RSP: 002b:00007fc1f1cce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  145.689158][ T9150] RAX: ffffffffffffffda RBX: 00007fc1f0fd5fa0 RCX: 00007fc1f0d8ec29
[  145.689164][ T9150] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 000000000000000a
[  145.689169][ T9150] RBP: 00007fc1f0e11e41 R08: 0000000000000000 R09: 0000000000000000
[  145.689174][ T9150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.689178][ T9150] R13: 00007fc1f0fd6038 R14: 00007fc1f0fd5fa0 R15: 00007ffc51f0adc8
[  145.689188][ T9150]  </TASK>
[  145.749367][ T9059] net_ratelimit: 17 callbacks suppressed
[  145.749382][ T9059] Set syz1 is full, maxelem 65536 reached
[  145.840042][ T9150] block nbd3: shutting down sockets

VM DIAGNOSIS:
15:55:25  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002e RBX=000000000000002e RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000226a RDI=000000000000226b RBP=00000000000003f8 RSP=ffffc90004da6710
R8 =ffff888107a00237 R9 =1ffff11020f40046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99b028c7 R14=ffffffff99df7480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc1f1cce6c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd0d7ffb18 CR3=000000003be7a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2c70693a68736168 0003001400000001
XMM02=317a797300020009 0070692c74726f70 XMM03=0100040f40120008 8007000c00000000
XMM04=00000007009cd459 3700000100040f40 XMM05=1200088007000c00 000000317a797300
XMM06=0200090070692c74 726f702c70693a68 XMM07=7361680003001400 0000010000000000
XMM08=0000000000000000 00007f5e15c12f0f XMM09=0000000000000000 00007f5e15c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=3e2fd9b414994200 RBX=0000000000000a02 RCX=3e2fd9b414994200 RDX=0000000000000000
RSI=ffffffff8be33ee0 RDI=ffffffff8b7d9e95 RBP=ffffc9000667e8d0 RSP=ffffc9000667e840
R8 =ffffffff8fa38f37 R9 =1ffffffff1f471e6 R10=dffffc0000000000 R11=fffffbfff1f471e7
R12=dffffc0000000000 R13=ffff8880267b4200 R14=ffffffff99cb8850 R15=1ffff92000ccfd08
RIP=ffffffff8b7d9ea8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f34752db6c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=000000011d0a0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ff00000000000000 0000000000000000
XMM02=0000000000ff0000 000000ff00000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
