last executing test programs:

1.036586681s ago: executing program 2 (id=1507):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0xc0}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x39, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}], {0x14}}, 0xa4}}, 0x0)

445.950097ms ago: executing program 1 (id=1516):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001240)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x34, r1, 0x1, 0x70bd2c, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x34}}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f0000000240))

376.632005ms ago: executing program 1 (id=1517):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@tcp={0x2, 0x6, "ec1973", 0x4d4, 0x6, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @empty}, {[@srh={0x3c, 0x4, 0x4, 0x2, 0x8, 0x48, 0x382d, [@local, @loopback={0x200000000000000}]}, @routing={0x3c, 0xc, 0x2, 0x10, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3b}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast1]}, @dstopts={0xc, 0x4d, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @generic={0x3, 0x70, "e1325a215258f04d73437c72d107ed3c929bfbc59a807194afd60331c0dce68de506107f94c4de028aaee933104cf991eb90a82f435f511c82dfe9ea94a46aaa5962779f48ef156f667b9e14e7498829d7d980b712d1f4353cb63fafef5bfcdfa8b33b13ccd56300815e613639606a21"}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @generic={0x6, 0xfe, "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"}, @generic={0x2, 0x9b, "2a01cc2497c2fb3c82001c5960770ee3a450b9b73668a5ed955bbe3d142a48cc501bc47b0b5fc27191c41dbbcb54174971628ca9d71b5ecdcf93f02912163786dbcb39b970a784d7a48fee8ba76f1950e85a51932f7c3650cca7dc5bf27715edec9e8b59a4b9b3f490d6b13de0cadf7823f0263e74fa9b1e084315f04f4b0c906d198f57f86ea16b8ac5783280d8dec40301a9871a02aa4d142aca"}, @calipso={0x7, 0x28, {0x2, 0x8, 0x80, 0x4, [0x8, 0x7, 0xabab5c7, 0x4]}}]}, @srh={0xc, 0x4, 0x4, 0x2, 0x3, 0x20, 0x9, [@rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x87, 0xe, 0x4, 0x7, 0xc, 0x10, 0x6, [@private1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback]}, @routing={0x33, 0x4, 0x0, 0x3, 0x0, [@local, @rand_addr=' \x01\x00']}], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1a, 0xc2, 0xff, 0x0, 0x20, {[@mss={0x2, 0x4, 0x101}, @sack={0x5, 0x22, [0x400, 0x5, 0x1, 0x9, 0x5, 0x309, 0x401, 0x1]}, @exp_fastopen={0xfe, 0x5, 0xf989, "d4"}, @md5sig={0x13, 0x12, "0774e822f061b24ce796bf3f05131517"}, @mss={0x2, 0x4, 0x2}, @eol, @timestamp={0x8, 0xa, 0xff3d, 0xe87}, @exp_smc={0xfe, 0x6}]}}, {"2ec170fec4ab53549fbfe47d521a9d296d2f427da826860a8b619560014204afbd689e0cefaa6b430fdf0fb75eebb93577147486b775d7b0f10ab44ae851786c93f25544218c2bbd362329e0f6ca0ce1e14019b5bf0175d16f61435afdd45d89848b17e59bb61b0680eee0eabfaac78d17ef011e4ae231753189ee3598991ed231e2a0de5d6bc30e79915066341d357c014c403340f0e66324774003"}}}}}}, 0x50a)

171.132982ms ago: executing program 2 (id=1518):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)
socket$l2tp(0x2, 0x2, 0x73)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc)
socket(0xa, 0x2400000001, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64], 0x38}}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000000)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff7a0000000000000005000000000000000000000000000000ff7f000000000000080000000000000001000300000000000a001000010000000000000030fb917fab3cae55a5a853eabca53be27c1e2a02f08dbe9ae6fb999c67126de48fd6bccdc9a216d66a7e8506abcb33c7604713ca58cb73f5fb448263aae40fe55fc12ff1c47b9dd36bb9e2ff49131b4b973800f0f112ca2dd0daeea4898e94f56564c990046b70966c38d76d5f966a3a9f6fc5da4e06b786b4bfee199421bf95bf43645f75b792df0e3db1cfb7368bfaec913462d9cbbb6542411d3dd9353885c35f65f8f37179eac18a7f60cb952986a0aa02fd333bb6c9d9bfd876af2e2439fe04ec0472608b9fa58ac041ff7ef471691912"], 0xc4}}, 0x0)
sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c)

170.199394ms ago: executing program 0 (id=1520):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000000)={0xa, 0x4e22, 0x80000, @mcast2}, 0x1c, 0x0}, 0xc000)
sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, 0x0}}, {{&(0x7f00000007c0)={0xa, 0x4e22, 0x5, @empty, 0x5f}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x60}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4040041)

169.863483ms ago: executing program 2 (id=1521):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0xa, 0x3, {0x0, 0x9000000, 0x1}}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)="62031400d755af176510120800afbcf711e12b7f96e5521c8cf25bec439350f466d9dd1b5b2fd101a3224b022b3414faa44bbd259c6b981fd1a966356c456b618301967f706d4e48c77e038de816adecbcca09a177f059de0c4506dc2d89424b55c84f1fd2bd857bc6803f3c86957608015129a064465242bd4e356f2d37ddad5036f857f970951e73df1fa0a4b3ef81449e463343fd53d11a740e879b4359aeb3c6fbf4fb4662d43c6a5f", 0xab}, {&(0x7f00000008c0)="d898f51891d3dee6b6e6fbfaff1d08000000d65de3cbbc0ee9880bfe2ec06d4853af46355c", 0x25}, {&(0x7f0000002300)="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", 0xe9a}], 0x3}, 0x4084) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r1, 0xc7, 0x2, 0x4}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110ab00000000009500000000100000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = epoll_create1(0x0) (async)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000008c0)={0x1})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000))
pipe(&(0x7f0000000080))

126.543145ms ago: executing program 0 (id=1522):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000100000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000070000380680000800800034000000002"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)

125.474776ms ago: executing program 1 (id=1523):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x4c, 0x1a, 0x130, 0x73, 0x210, 0x258, 0x258, 0x210, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x6}}, @common=@ipv6header={{0x28}, {0x0, 0x0, 0x1}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000036bf6100a7cae42030c71fc9024cd75a292b0a31a74ce84cee2b650d1b6fe598f556d4e24242e1003991ea8d383f340600fda8f7ce0823f219ea84a1437d5a1bca75c8957603a34e1543b875956c7295f4a0f1a28c02f3c9d0fb5a96a3ae2ddac622f3f0a5c5c890f2b702beac98865a716b420ce5f15e27eeffb79777b992e882f4c2ffd5f8af7c1ac175220b98620d01223c7b9bb712b1e044a217d36ebc2f4b"], 0x0, 0x34}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009b5cb0ddc8dcb3bb51000085000000d00000009500000000000000"], &(0x7f0000000040)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000700)="e0cdc1ed484aae0736d6b9547ed3", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="183000000100000000000000030000009502000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000004c0), 0x4)
r4 = socket(0x1e, 0x4, 0x2)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg$unix(r3, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x200002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000340)={0x4, {{0xa, 0x4e24, 0x3bc, @loopback, 0x5}}}, 0x88)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
r7 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r7, &(0x7f0000000000)={0x1d, r6}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xb, 0x5}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x40044)
recvmsg(r7, &(0x7f0000000640)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=""/70, 0x46}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x3, 0xe, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x88, 0x20, 0x1, 0x3}})
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000300))

125.154999ms ago: executing program 0 (id=1524):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x60, 0x30, 0x53b, 0x200000, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x60}}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)

124.904897ms ago: executing program 2 (id=1525):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910300000000000630a64ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
shutdown(r1, 0x0) (async)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000040)=0x84) (async)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x4, 0x2}, &(0x7f00000000c0)=0xc)

65.219843ms ago: executing program 0 (id=1526):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x2c, 0x19, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x8004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009112270000eafe23bee697c4c176223819861800023b6858a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

64.731099ms ago: executing program 1 (id=1527):
unshare(0x4020400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48)
r1 = socket$kcm(0x10, 0x2, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x300000f, 0x141050, r1, 0x274ff000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x28, r3, 0x1, 0xfffffd, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'vxcan1\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x80)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r5}, 0x38)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002500)=@newtaction={0x2c8, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x4}, {0x2b0, 0x1, [@m_csum={0x4c, 0x14, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x6, 0x7, 0x6}, 0x32}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x128, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0xf9, 0x6, "f0b8bf92cf8611111a0ff27fcc8825ca405600cfd0f6876d2892df6b5723118bb7d9d86de0a2706031cc8c62f7d1baf9b04f3a9ed11665c75023f87c16ce970413ede5e5f6782d0d17be877ac54c09075ed841c7daeddf3395a210eab4335ed3bcb36fe1598dc94259da01363ad59d8d090000000000000099849bd0d19e999b2e8f62d563a2dcea91347cdc754302a566d6d8b7de1368972acbf9cfbdc3db5b71ceed91d4e9613e9cbf5e1ca71f3bf3b25cdf1ce11e5843ff89da11b01cf0b27474847e4fd8e648244e0dc6b3b99b8089d418ec3d6d27aa68b96ef236cc10ce12fb9c2fcd2426620f308c5e7fdb41bd5c78d6dfc4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x138, 0x5, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}]}, {0xe9, 0x6, "6142159063a4e72a674acce86fe8ef91cd4871fbeeb1590ec80a2080de5dca9377dbae8c5896243675b06a41e97608570ef4a0894d030f1ff735f91a042aab26819b102710db983ca9649c90a3f7793dfb4d044e1aba254e3386f8f28e8759295bb95440d5d952bc34acd48332e9c116c984faa697ed0477606aa472b03627a1d9f850c1f61d4bb263fe30b9f09908f5def39ac6706b12ace6a93c048ae5e460631c4a334df40c1857ea8fb3395af34bba31f152a97324649f9aa03c654290d32a389f22d51a622de27a825cbe383c4819910137eb0856fe25d09ebf3f6019fe3d4951ff7e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000018c0)=ANY=[@ANYBLOB="91104f000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)

64.351814ms ago: executing program 2 (id=1528):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000040)={'macvlan1\x00', @ifru_data=&(0x7f0000000000)="be28917ef456ced1ea694661b986e86567897991cb35e0181c1a27592312f15a"})
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0xe, 0x59e, 0x5e2a}, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipmr_delroute={0x54, 0x19, 0x4, 0x70bd26, 0x25dfdbfe, {0x80, 0x20, 0x20, 0x1, 0xff, 0x3, 0xfe, 0x3, 0x400}, [@RTA_FLOW={0x8, 0xb, 0xa}, @RTA_IIF={0x8, 0x3, r2}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_DPORT={0x6, 0x1d, 0x4e23}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_DST={0x8, 0x1, @multicast2}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x8000)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/mnt\x00')
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000280), &(0x7f00000002c0)=0x30)
r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14, 0x80800)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{0xfff, 0x1, 0xe8, 0x3}, {0x8, 0x4, 0x63, 0xb}, {0xdb5, 0x3, 0xe, 0x8}, {0x0, 0xd, 0xf7, 0x3}]}, 0x10)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000400)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000480)={0x5, &(0x7f0000000440)=[{0x200, 0x6, 0x6, 0x7}, {0x3, 0xe6, 0x7, 0x4}, {0x9, 0x49, 0x1}, {0x6, 0xf, 0x5, 0x3}, {0x8000, 0x6, 0x9, 0xa000000}]}, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xc0, r6, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010)
setsockopt(r1, 0x5, 0x9, &(0x7f00000006c0)="c53c5f8a0f6e1a87ea56a4c9ac794664b03ec2a940187f8fe636d41cb7bc6c0fa963f62b", 0x24)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000700)={<r8=>0x0, 0x7f, 0x30}, &(0x7f0000000740)=0xc)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000780)={r8, 0xd, 0x7fff, 0x5, 0x0, 0x1}, 0x14)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x5, 0x0, r1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000900)={r9, &(0x7f0000000840)="b122d6207ad391106228a7721a3598b7a41be58365746a229b7384d1ff7d33c341f2f036048ae0a40e66dbd494fdd5d815", &(0x7f0000000880)=""/72}, 0x20)
r10 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r10, 0x11b, 0x7, &(0x7f0000000940), &(0x7f0000000980)=0x30)
ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f00000009c0)={<r11=>r0, 0xfffffffffffff73f, 0x8, 0x7})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r11}, &(0x7f0000000a00), &(0x7f0000000a40)='%-5lx  \x00'}, 0x20)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000ac0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xff, 0x0, 0x0, 0x4, 0x1, 0x2}, &(0x7f0000000b00)=0x20)
setsockopt$RDS_RECVERR(r11, 0x114, 0x5, &(0x7f0000000b40), 0x4)
setsockopt$sock_void(r12, 0x1, 0x6c, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)

62.867779ms ago: executing program 0 (id=1529):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="87000000000000006111480000000000850000008b00000095000000000000008911a497f879aa69cd74ff97dd8314ae55f5316d4591fc84fed9cd082ece7b472d10c335c3b19359e9e45e90c1e7da578cd06f5c3b58eac3324efd57cc4d4da91249da7cf61538b51abf570b0600a98e3aedb37260e5e9dabd7619dc10431e2850fc4e5f50c66208815d2cf72014f20df3e20a9d0cf0bc9ff55fdf30b03aecd504b038"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x4018, 0x3, 0x290, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1f8, 0x240, 0x240, 0x1f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0xffffffff, 'bond0\x00', 'wg1\x00', {}, {}, 0x6c, 0x2, 0x19}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x0, 0x2}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000001080)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x98}}, @in6={0xa, 0x4e21, 0x4, @local, 0x7}, @in6={0xa, 0x4e21, 0xfffffffb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}, @in={0x2, 0x4e23, @broadcast}], 0x58)

5.983607ms ago: executing program 2 (id=1530):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@tcp={0x2, 0x6, "ec1973", 0x4d4, 0x6, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @empty}, {[@srh={0x3c, 0x4, 0x4, 0x2, 0x8, 0x48, 0x382d, [@local, @loopback={0x300000000000000}]}, @routing={0x3c, 0xc, 0x2, 0x10, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3b}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast1]}, @dstopts={0xc, 0x4d, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @generic={0x3, 0x70, "e1325a215258f04d73437c72d107ed3c929bfbc59a807194afd60331c0dce68de506107f94c4de028aaee933104cf991eb90a82f435f511c82dfe9ea94a46aaa5962779f48ef156f667b9e14e7498829d7d980b712d1f4353cb63fafef5bfcdfa8b33b13ccd56300815e613639606a21"}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @generic={0x6, 0xfe, "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"}, @generic={0x2, 0x9b, "2a01cc2497c2fb3c82001c5960770ee3a450b9b73668a5ed955bbe3d142a48cc501bc47b0b5fc27191c41dbbcb54174971628ca9d71b5ecdcf93f02912163786dbcb39b970a784d7a48fee8ba76f1950e85a51932f7c3650cca7dc5bf27715edec9e8b59a4b9b3f490d6b13de0cadf7823f0263e74fa9b1e084315f04f4b0c906d198f57f86ea16b8ac5783280d8dec40301a9871a02aa4d142aca"}, @calipso={0x7, 0x28, {0x2, 0x8, 0x80, 0x4, [0x8, 0x7, 0xabab5c7, 0x4]}}]}, @srh={0xc, 0x4, 0x4, 0x2, 0x3, 0x20, 0x9, [@rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x87, 0xe, 0x4, 0x7, 0xc, 0x10, 0x6, [@private1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback]}, @routing={0x33, 0x4, 0x0, 0x3, 0x0, [@local, @rand_addr=' \x01\x00']}], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1a, 0xc2, 0xff, 0x0, 0x20, {[@mss={0x2, 0x4, 0x101}, @sack={0x5, 0x22, [0x400, 0x5, 0x1, 0x9, 0x5, 0x309, 0x401, 0x1]}, @exp_fastopen={0xfe, 0x5, 0xf989, "d4"}, @md5sig={0x13, 0x12, "0774e822f061b24ce796bf3f05131517"}, @mss={0x2, 0x4, 0x2}, @eol, @timestamp={0x8, 0xa, 0xff3d, 0xe87}, @exp_smc={0xfe, 0x6}]}}, {"2ec170fec4ab53549fbfe47d521a9d296d2f427da826860a8b619560014204afbd689e0cefaa6b430fdf0fb75eebb93577147486b775d7b0f10ab44ae851786c93f25544218c2bbd362329e0f6ca0ce1e14019b5bf0175d16f61435afdd45d89848b17e59bb61b0680eee0eabfaac78d17ef011e4ae231753189ee3598991ed231e2a0de5d6bc30e79915066341d357c014c403340f0e66324774003"}}}}}}, 0x50a)

4.116958ms ago: executing program 1 (id=1531):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, 0x6}, 0x1c)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x68}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0), 0x1, 0x0, 0xfffffffffffffdff}, 0x0)
connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e22, 0x3, @empty}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4)
socket(0x1e, 0x5, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x1c}}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x248, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0xfff8}, {0x8, 0x15, 0xa}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6e51ce17}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x81}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x10}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x11, 0xb3}, {0x8, 0x15, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xb3}, {0x8, 0x15, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x7}}]}, 0x248}, 0x1, 0x0, 0x0, 0x24000040}, 0x20040000)

3.927501ms ago: executing program 0 (id=1532):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0xc000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010886e97000fcfe0000000000020000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)

0s ago: executing program 1 (id=1533):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6(0xa, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x1d, 0x2, 0x6)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x1a)
ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x9)
splice(r0, 0x0, r3, 0x0, 0x25, 0x5)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@allocspi={0x130, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x0, 0x0, 0x100, 0xffffffffffffffff, 0xffffffffffffffea, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0xa, 0x4, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@etimer_thresh={0x8, 0xc, 0xb9}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e20, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}, @coaddr={0x14, 0xe, @in=@empty}]}, 0x130}, 0x1, 0x0, 0x0, 0x400c0}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', <r5=>0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[], 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', r5, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2}}}})
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:37209' (ED25519) to the list of known hosts.
syzkaller login: [   40.777382][ T5766] cgroup: Unknown subsys name 'net'
[   40.927772][ T5766] cgroup: Unknown subsys name 'cpuset'
[   40.931330][ T5766] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.236018][ T5766] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.253659][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.256786][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.259581][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.262989][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.265918][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.320051][ T5218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.322979][ T5218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.326630][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.334889][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.337370][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.347580][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.350414][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.352965][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.356047][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.358733][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.512157][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   45.576552][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   45.617965][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.620608][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.622995][ T5826] bridge_slave_0: entered allmulticast mode
[   45.626217][ T5826] bridge_slave_0: entered promiscuous mode
[   45.629540][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   45.634142][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.636811][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.639343][ T5826] bridge_slave_1: entered allmulticast mode
[   45.642147][ T5826] bridge_slave_1: entered promiscuous mode
[   45.693488][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.716586][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.740430][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.742758][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.745436][ T5831] bridge_slave_0: entered allmulticast mode
[   45.748078][ T5831] bridge_slave_0: entered promiscuous mode
[   45.759886][ T5826] team0: Port device team_slave_0 added
[   45.775408][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.777764][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.780086][ T5831] bridge_slave_1: entered allmulticast mode
[   45.782741][ T5831] bridge_slave_1: entered promiscuous mode
[   45.787199][ T5826] team0: Port device team_slave_1 added
[   45.789228][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.791517][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.793864][ T5830] bridge_slave_0: entered allmulticast mode
[   45.796781][ T5830] bridge_slave_0: entered promiscuous mode
[   45.819892][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.822307][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.825350][ T5830] bridge_slave_1: entered allmulticast mode
[   45.828091][ T5830] bridge_slave_1: entered promiscuous mode
[   45.839062][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.841260][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.849477][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.867916][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.872566][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.875927][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.878207][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.886415][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.891118][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.898967][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.939561][ T5826] hsr_slave_0: entered promiscuous mode
[   45.941826][ T5826] hsr_slave_1: entered promiscuous mode
[   45.952399][ T5831] team0: Port device team_slave_0 added
[   45.957477][ T5830] team0: Port device team_slave_0 added
[   45.960424][ T5831] team0: Port device team_slave_1 added
[   45.963237][ T5830] team0: Port device team_slave_1 added
[   45.991986][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.994231][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.002847][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.007317][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.009517][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.017439][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.029995][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.032297][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.040766][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.048117][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.050382][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.059370][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.115928][ T5831] hsr_slave_0: entered promiscuous mode
[   46.118174][ T5831] hsr_slave_1: entered promiscuous mode
[   46.120246][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.122647][ T5831] Cannot create hsr debugfs directory
[   46.138961][ T5830] hsr_slave_0: entered promiscuous mode
[   46.141193][ T5830] hsr_slave_1: entered promiscuous mode
[   46.143232][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.146376][ T5830] Cannot create hsr debugfs directory
[   46.289505][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.294875][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.305100][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.317565][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.347828][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.352392][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.363639][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.366207][ T5826] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.368839][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.371230][ T5826] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.381005][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.389269][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.418570][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.432313][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.434643][ T5830] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.437126][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.439439][ T5830] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.443786][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.448314][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.468843][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.473725][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.493362][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.497113][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.503087][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.506579][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.522651][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   46.531116][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.533493][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.544982][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.547382][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.570460][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.590586][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   46.602044][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.604439][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.620847][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.623201][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.646106][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.663825][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   46.678586][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.680911][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.688986][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.691270][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.751540][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.805057][ T5826] veth0_vlan: entered promiscuous mode
[   46.810129][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.820260][ T5826] veth1_vlan: entered promiscuous mode
[   46.827393][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.851491][ T5831] veth0_vlan: entered promiscuous mode
[   46.859571][ T5826] veth0_macvtap: entered promiscuous mode
[   46.867053][ T5831] veth1_vlan: entered promiscuous mode
[   46.870335][ T5826] veth1_macvtap: entered promiscuous mode
[   46.887400][ T5830] veth0_vlan: entered promiscuous mode
[   46.891572][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.902545][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.906381][ T5831] veth0_macvtap: entered promiscuous mode
[   46.910126][ T5830] veth1_vlan: entered promiscuous mode
[   46.914078][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.917814][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.920533][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.923233][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.928427][ T5831] veth1_macvtap: entered promiscuous mode
[   46.955756][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.967813][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.979921][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.982678][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.987474][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.990188][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.000457][ T5830] veth0_macvtap: entered promiscuous mode
[   47.010057][ T5830] veth1_macvtap: entered promiscuous mode
[   47.014618][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.017997][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.045066][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.056759][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.062046][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.065471][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.081954][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.087782][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.090516][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.093160][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.111691][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.112960][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.117161][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.142510][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.158871][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.167947][ T5892] tipc: Enabling of bearer <et:g> rejected, media not registered
[   47.186347][ T5892] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2'.
[   47.197558][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.213824][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.238214][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.241586][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.269573][ T5896] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4'.
[   47.279449][ T5896] netlink: 'syz.1.4': attribute type 10 has an invalid length.
[   47.282289][ T5896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4'.
[   47.297252][ T5218] Bluetooth: hci0: command tx timeout
[   47.309529][ T5896] team0: Port device geneve0 added
[   47.376793][ T5218] Bluetooth: hci1: command tx timeout
[   47.378730][ T5218] Bluetooth: hci2: command tx timeout
[   47.383777][ T5906] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8'.
[   47.391115][ T5906] vlan2: entered allmulticast mode
[   47.392949][ T5906] gretap0: entered allmulticast mode
[   47.398067][ T5903] bond0: option fail_over_mac: unable to set because the bond device has slaves
[   47.402157][ T5906] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.528497][ T5904] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6'.
[   47.602083][ T5918] Bluetooth: MGMT ver 1.23
[   47.638919][ T5918] Zero length message leads to an empty skb
[   47.653066][ T5918] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.313640][ T5923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11'.
[   48.359841][ T5925] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   48.535506][ T5932] syz.0.14 uses obsolete (PF_INET,SOCK_PACKET)
[   48.786671][ T5918] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.790298][ T5947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24'.
[   49.374485][ T5834] Bluetooth: hci0: command tx timeout
[   49.454948][ T5834] Bluetooth: hci2: command tx timeout
[   49.455052][ T5218] Bluetooth: hci1: command tx timeout
[   49.867402][ T5951] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   49.868127][ T5953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20'.
[   49.987537][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'.
[   50.048570][ T5962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23'.
[   50.169091][ T5871] IPVS: starting estimator thread 0...
[   50.217460][ T5969] netlink: 'syz.0.27': attribute type 12 has an invalid length.
[   50.266626][ T5974] IPVS: using max 49 ests per chain, 117600 per kthread
[   50.375923][ T5918] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.389656][ T5890] IPVS: stop unused estimator thread 0...
[   50.432739][ T5992] netlink: 'syz.0.31': attribute type 3 has an invalid length.
[   50.453563][ T5918] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.485675][ T5996] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.549901][ T5918] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.559270][ T5918] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.568204][ T5918] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.583069][ T5918] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.797460][ T6021] bridge_slave_1: left allmulticast mode
[   50.799240][ T6021] bridge_slave_1: left promiscuous mode
[   50.803094][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.808485][ T6021] bridge_slave_0: left allmulticast mode
[   50.810293][ T6021] bridge_slave_0: left promiscuous mode
[   50.812458][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.976275][ T6028] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   51.065686][ T6039] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.110926][ T6039] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.169383][ T6039] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.233256][ T6039] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.285305][ T6039] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.293065][ T6039] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.303003][ T6039] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.312345][ T6039] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.370455][ T6055] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   51.379919][ T6054] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   51.468451][ T5218] Bluetooth: hci0: command tx timeout
[   51.534917][ T5218] Bluetooth: hci1: command tx timeout
[   51.536794][ T5218] Bluetooth: hci2: command tx timeout
[   51.553821][ T6068] warning: `syz.1.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   51.807665][ T6091] Cannot find set identified by id 1 to match
[   51.987470][ T6106] pim6reg: entered allmulticast mode
[   51.989601][ T6105] pim6reg: left allmulticast mode
[   52.353248][ T6124] __nla_validate_parse: 14 callbacks suppressed
[   52.353257][ T6124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.73'.
[   52.359608][ T6124] mac80211_hwsim hwsim8 wlan2: entered promiscuous mode
[   52.362489][ T6124] syz_tun: entered allmulticast mode
[   52.367704][ T6124] dvmrp8: entered allmulticast mode
[   52.371846][ T6123] syz_tun: left allmulticast mode
[   52.457343][ T6126] netlink: 'syz.0.74': attribute type 23 has an invalid length.
[   52.496721][ T6136] netlink: 124 bytes leftover after parsing attributes in process `syz.1.77'.
[   52.499772][ T6134] netlink: 124 bytes leftover after parsing attributes in process `syz.1.77'.
[   52.636209][ T2299] IPVS: starting estimator thread 0...
[   52.697573][ T6156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   52.699104][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.84'.
[   52.725598][ T6154] IPVS: using max 79 ests per chain, 189600 per kthread
[   52.764754][ T6165] netlink: 'syz.0.86': attribute type 23 has an invalid length.
[   52.807284][ T6168] netlink: 96 bytes leftover after parsing attributes in process `syz.1.87'.
[   52.837497][ T6172] netlink: 'syz.0.89': attribute type 3 has an invalid length.
[   52.840090][ T6172] netlink: 132 bytes leftover after parsing attributes in process `syz.0.89'.
[   52.973603][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'.
[   52.988407][ T6182] netlink: 'syz.1.93': attribute type 1 has an invalid length.
[   53.013334][ T6185] netlink: 'syz.1.94': attribute type 10 has an invalid length.
[   53.015987][ T6185] netlink: 40 bytes leftover after parsing attributes in process `syz.1.94'.
[   53.019631][ T6185] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   53.534994][ T5834] Bluetooth: hci0: command tx timeout
[   53.624480][ T5834] Bluetooth: hci2: command tx timeout
[   53.625241][ T5218] Bluetooth: hci1: command tx timeout
[   53.699671][ T6193] x_tables: duplicate underflow at hook 1
[   53.882174][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'.
[   54.087280][ T6223] bridge0: entered allmulticast mode
[   54.110248][ T6224] pim6reg: entered allmulticast mode
[   54.112393][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'.
[   54.144132][ T6216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   54.161174][ T6228] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[   54.165218][ T6228] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[   54.202513][ T6209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   54.221742][ T6232] netlink: 'syz.1.108': attribute type 15 has an invalid length.
[   54.261993][ T6216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   54.451538][ T6251] netlink: 'syz.1.114': attribute type 10 has an invalid length.
[   54.458903][ T6251] 8021q: adding VLAN 0 to HW filter on device team0
[   54.466366][ T6251] bond0: (slave team0): Enslaving as an active interface with an up link
[   54.476023][ T6251] netlink: 'syz.1.114': attribute type 178 has an invalid length.
[   54.748600][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.751331][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.753732][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.756107][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.758161][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.760399][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.762502][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.766109][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.768730][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.770791][ T6281] 8021q: adding VLAN 0 to HW filter on device bond1
[   54.773640][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.776823][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.779362][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.781616][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.783756][ T6281] 8021q: adding VLAN 0 to HW filter on device bond2
[   54.786774][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.789073][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.791402][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.794079][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.796226][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.798267][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.800915][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.803073][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.806265][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.808434][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.810566][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.815253][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.821827][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.824017][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.827217][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.829307][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.831390][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.839236][ T6281] 8021q: adding VLAN 0 to HW filter on device bond3
[   54.842102][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.845469][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.854604][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   54.890482][ T6281] 8021q: adding VLAN 0 to HW filter on device bond4
[   54.896211][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.918875][ T6288] bridge_slave_1 (unregistering): left allmulticast mode
[   54.921520][ T6288] bridge_slave_1 (unregistering): left promiscuous mode
[   54.924872][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.958990][ T6281] 8021q: adding VLAN 0 to HW filter on device bond5
[   54.973458][ T6281] 8021q: adding VLAN 0 to HW filter on device bond6
[   54.998176][ T6281] 8021q: adding VLAN 0 to HW filter on device bond7
[   55.019210][ T6281] 8021q: adding VLAN 0 to HW filter on device bond8
[   55.036414][ T6281] 8021q: adding VLAN 0 to HW filter on device bond9
[   55.055281][ T6281] 8021q: adding VLAN 0 to HW filter on device bond10
[   55.075926][ T6281] 8021q: adding VLAN 0 to HW filter on device bond11
[   55.088399][ T6281] 8021q: adding VLAN 0 to HW filter on device bond12
[   55.109083][ T6281] 8021q: adding VLAN 0 to HW filter on device bond13
[   55.120865][ T6281] 8021q: adding VLAN 0 to HW filter on device bond14
[   55.150204][ T6281] 8021q: adding VLAN 0 to HW filter on device bond15
[   55.180534][ T6281] 8021q: adding VLAN 0 to HW filter on device bond16
[   55.202660][ T6281] 8021q: adding VLAN 0 to HW filter on device bond17
[   55.236815][ T6281] 8021q: adding VLAN 0 to HW filter on device bond18
[   55.248657][ T6281] 8021q: adding VLAN 0 to HW filter on device bond19
[   55.265667][ T6281] 8021q: adding VLAN 0 to HW filter on device bond20
[   55.277594][ T6281] 8021q: adding VLAN 0 to HW filter on device bond21
[   55.290482][ T6281] 8021q: adding VLAN 0 to HW filter on device bond22
[   55.303618][ T6281] 8021q: adding VLAN 0 to HW filter on device bond23
[   55.321330][ T6281] 8021q: adding VLAN 0 to HW filter on device bond24
[   55.356554][ T6281] 8021q: adding VLAN 0 to HW filter on device bond25
[   55.371410][ T6281] 8021q: adding VLAN 0 to HW filter on device bond26
[   55.392832][ T6281] 8021q: adding VLAN 0 to HW filter on device bond27
[   55.408221][ T6281] 8021q: adding VLAN 0 to HW filter on device bond28
[   55.420913][ T6281] 8021q: adding VLAN 0 to HW filter on device bond29
[   55.434403][ T6281] 8021q: adding VLAN 0 to HW filter on device bond30
[   55.448770][ T6281] 8021q: adding VLAN 0 to HW filter on device bond31
[   55.462863][ T6281] 8021q: adding VLAN 0 to HW filter on device bond32
[   55.477981][ T6281] 8021q: adding VLAN 0 to HW filter on device bond33
[   55.551864][ T6346] bridge_slave_0: left allmulticast mode
[   55.556090][ T6346] bridge_slave_0: left promiscuous mode
[   55.558017][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.570107][ T6346] bridge_slave_1: left allmulticast mode
[   55.572125][ T6346] bridge_slave_1: left promiscuous mode
[   55.574144][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.581317][ T6346] bond0: (slave bond_slave_0): Releasing backup interface
[   55.588447][ T6346] bond0: (slave bond_slave_1): Releasing backup interface
[   55.600810][ T6346] team0: Port device team_slave_0 removed
[   55.608151][ T6346] team0: Port device team_slave_1 removed
[   55.610522][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.612894][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.616471][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.619433][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_1
[   55.802031][ T6368] netlink: 'syz.2.141': attribute type 5 has an invalid length.
[   56.645559][   T10] cfg80211: failed to load regulatory.db
[   56.936358][ T6484] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   56.939252][ T6484] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   56.942125][ T6484] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   56.946036][ T6484] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   56.949610][ T6484] geneve3: entered allmulticast mode
[   57.059560][ T6501] syzkaller1: entered promiscuous mode
[   57.061674][ T6501] syzkaller1: entered allmulticast mode
[   57.228366][ T6512] ip6t_srh: unknown srh match flags  4000
[   57.327896][ T6517] Can't find ip_set type bitap:ip
[   57.732635][ T6569] __nla_validate_parse: 22 callbacks suppressed
[   57.732644][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.202'.
[   57.739313][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'.
[   57.742245][ T6569] netlink: 'syz.1.202': attribute type 18 has an invalid length.
[   57.873467][ T6587] netlink: 'syz.2.209': attribute type 26 has an invalid length.
[   57.878975][ T6587] netlink: 'syz.2.209': attribute type 1 has an invalid length.
[   57.881540][ T6587] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.209'.
[   57.887573][   T33] audit: type=1107 audit(1752535174.520:2): pid=6582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I`뢑'O0ބɽOCKiB[2y;=V)T`ځ>s5|H46_
[   57.887573][   T33] ag	u4]Ge8Dqvw8cP!<?Lsf q/,"FGJ,1i΍䫆v9حiܘoS)ʂtKb'
[   58.051306][ T6591] Bluetooth: MGMT ver 1.23
[   58.061098][ T6591] xt_bpf: check failed: parse error
[   58.110067][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'.
[   58.154086][ T6603] netlink: 256 bytes leftover after parsing attributes in process `syz.1.213'.
[   58.202140][ T6609] geneve0: entered promiscuous mode
[   58.212056][ T6609] netlink: 'syz.2.216': attribute type 7 has an invalid length.
[   58.259827][ T6613] netlink: 'syz.1.218': attribute type 3 has an invalid length.
[   58.265772][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'.
[   58.270357][ T6611] gtp0: entered promiscuous mode
[   58.273419][ T6613] netlink: 'syz.1.218': attribute type 3 has an invalid length.
[   58.278188][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'.
[   58.311298][ T6619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.219'.
[   58.322953][ T6619] xt_TCPMSS: Only works on TCP SYN packets
[   58.351252][ T6622] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000
[   58.392389][ T6626] netlink: 'syz.1.223': attribute type 3 has an invalid length.
[   58.398409][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'.
[   58.401283][ T6626] netlink: 'syz.1.223': attribute type 3 has an invalid length.
[   58.403759][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'.
[   58.542742][ T6639] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   58.545416][ T6639] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.550683][ T6639] syz_tun: entered allmulticast mode
[   58.557396][ T6638] syz_tun: left allmulticast mode
[   58.640586][ T6650] Unsupported ieee802154 address type: 0
[   58.655845][ T5218] Bluetooth: hci2: command tx timeout
[   58.749374][ T6666] vlan2: entered promiscuous mode
[   58.751268][ T6666] bond0: entered promiscuous mode
[   58.753428][ T6666] bond_slave_0: entered promiscuous mode
[   58.764603][ T6666] bond_slave_1: entered promiscuous mode
[   58.766779][ T6666] team0: entered promiscuous mode
[   58.768562][ T6666] team_slave_0: entered promiscuous mode
[   58.775647][ T6666] team_slave_1: entered promiscuous mode
[   58.777976][ T6666] geneve0: entered promiscuous mode
[   58.789938][ T6664] Driver unsupported XDP return value 0 on prog  (id 49) dev N/A, expect packet loss!
[   58.859878][ T6675] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   58.863437][ T6675] macsec1: entered promiscuous mode
[   58.865469][ T6675] macsec1: entered allmulticast mode
[   58.867932][ T6675] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   58.921325][ T6682] netlink: 'syz.0.241': attribute type 1 has an invalid length.
[   58.935938][ T6682] bond1: entered promiscuous mode
[   58.937740][ T6682] 8021q: adding VLAN 0 to HW filter on device bond1
[   58.940752][ T6683] syzkaller0: entered promiscuous mode
[   58.942581][ T6683] syzkaller0: entered allmulticast mode
[   58.953177][ T6682] batadv1: entered promiscuous mode
[   58.955100][ T6682] batadv1: entered allmulticast mode
[   58.957465][ T6682] 8021q: adding VLAN 0 to HW filter on device batadv1
[   58.960612][ T6682] bond1: (slave batadv1): making interface the new active one
[   58.966078][ T6682] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   59.102151][ T6699] sctp: [Deprecated]: syz.1.246 (pid 6699) Use of int in max_burst socket option deprecated.
[   59.102151][ T6699] Use struct sctp_assoc_value instead
[   60.089154][ T6741] bridge_slave_0: left allmulticast mode
[   60.091254][ T6741] bridge_slave_0: left promiscuous mode
[   60.093678][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.109004][ T6741] bond0: (slave bond_slave_0): Releasing backup interface
[   60.116539][ T6741] bond0: (slave bond_slave_1): Releasing backup interface
[   60.129202][ T6741] team0: Port device team_slave_0 removed
[   60.137823][ T6741] team0: Port device team_slave_1 removed
[   60.140813][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.143322][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.149178][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.151562][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.168267][ T6741] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[   60.223993][ T6743] wireguard0: entered promiscuous mode
[   60.229295][ T6743] wireguard0: entered allmulticast mode
[   60.708480][ T6813] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[   60.868514][ T6830] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   60.870977][ T6830] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.036827][ T6849] xt_TPROXY: Can be used only with -p tcp or -p udp
[   61.051777][ T6849] netlink: 'syz.1.291': attribute type 10 has an invalid length.
[   61.059252][ T6849] bond0: (slave team0): Releasing backup interface
[   61.062418][ T6849] team0: left promiscuous mode
[   61.067482][ T6849] team_slave_0: left promiscuous mode
[   61.070377][ T6849] team_slave_1: left promiscuous mode
[   61.072771][ T6849] geneve0: left promiscuous mode
[   61.076630][ T6849] batman_adv: batadv0: Adding interface: team0
[   61.078913][ T6849] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.087429][ T6849] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   61.092098][ T6849] team0: entered promiscuous mode
[   61.093834][ T6849] team_slave_0: entered promiscuous mode
[   61.096704][ T6849] team_slave_1: entered promiscuous mode
[   61.098810][ T6849] geneve0: entered promiscuous mode
[   61.101493][ T6849] 8021q: adding VLAN 0 to HW filter on device team0
[   61.103856][ T6849] batman_adv: batadv0: Interface activated: team0
[   61.106456][ T6849] batman_adv: batadv0: Interface deactivated: team0
[   61.109731][ T6849] batman_adv: batadv0: Removing interface: team0
[   61.194291][    T9] hid-generic 0005:07C0:8002.0001: collection stack underflow
[   61.204481][    T9] hid-generic 0005:07C0:8002.0001: item 0 0 0 12 parsing failed
[   61.212464][    T9] hid-generic 0005:07C0:8002.0001: probe with driver hid-generic failed with error -22
[   61.291586][ T6872] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.379987][ T6866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.386953][ T6866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.432360][ T6866] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.436415][ T6866] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.446553][ T6866] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.449848][ T6866] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.503679][ T6882] 8021q: adding VLAN 0 to HW filter on device team1
[   61.510932][ T6866] syz.1.295 (6866) used greatest stack depth: 20056 bytes left
[   61.650563][ T6898] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[   62.590422][ T6958] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   62.811349][ T6962] __nla_validate_parse: 21 callbacks suppressed
[   62.811358][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.323'.
[   62.851078][ T6966] wg2: entered promiscuous mode
[   62.854142][ T6966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.325'.
[   62.975500][ T6979] validate_nla: 1 callbacks suppressed
[   62.975510][ T6979] netlink: 'syz.2.330': attribute type 5 has an invalid length.
[   62.980908][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'.
[   63.070631][ T6989] netlink: 48 bytes leftover after parsing attributes in process `syz.0.333'.
[   63.126584][ T6989] xt_CT: No such helper "snmp"
[   63.261677][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'.
[   63.268489][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'.
[   63.272220][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'.
[   63.442843][ T7027] vlan0: entered promiscuous mode
[   63.498261][ T7029] ieee802154 phy0 wpan0: encryption failed: -22
[   63.535786][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'.
[   63.588420][ T7044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   63.620280][ T7046] IPv6: sit1: Disabled Multicast RS
[   64.099337][ T7052] pimreg: entered allmulticast mode
[   64.385681][ T7069] netlink: 47 bytes leftover after parsing attributes in process `syz.1.358'.
[   64.452030][ T7079] netlink: 96 bytes leftover after parsing attributes in process `syz.1.361'.
[   64.464087][ T7079] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   64.468159][ T7079] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   65.374034][ T7153] netlink: 'syz.1.387': attribute type 21 has an invalid length.
[   65.377679][ T7153] IPv6: NLM_F_CREATE should be specified when creating new route
[   65.500369][ T7168] netlink: 'syz.0.391': attribute type 2 has an invalid length.
[   65.518827][ T7168] : entered promiscuous mode
[   66.277952][ T7249] macsec2: entered promiscuous mode
[   66.286238][ T7249] macsec2: entered allmulticast mode
[   66.562901][ T7284] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[   66.710536][ T7301] batadv_slave_0: entered promiscuous mode
[   66.721461][ T7301] batadv_slave_0: left promiscuous mode
[   66.979521][ T7314] bridge0: entered promiscuous mode
[   66.981451][ T7314] macsec1: entered promiscuous mode
[   66.983577][ T7314] bridge0: port 1(macsec1) entered blocking state
[   66.987263][ T7314] bridge0: port 1(macsec1) entered disabled state
[   66.989295][ T7314] macsec1: entered allmulticast mode
[   66.990986][ T7314] bridge0: entered allmulticast mode
[   66.993781][ T7314] macsec1: left allmulticast mode
[   66.995497][ T7314] bridge0: left allmulticast mode
[   66.997873][ T7314] bridge0: left promiscuous mode
[   67.025809][ T7315] netlink: 'syz.0.421': attribute type 1 has an invalid length.
[   67.186529][ T7327] x_tables: duplicate underflow at hook 2
[   68.002966][ T7403] __nla_validate_parse: 13 callbacks suppressed
[   68.002975][ T7403] netlink: 56 bytes leftover after parsing attributes in process `syz.2.445'.
[   68.079150][ T7409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'.
[   68.079394][ T7403] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   68.082110][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'.
[   68.082745][ T7409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.447'.
[   68.208580][ T7417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.451'.
[   68.219459][ T7417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.451'.
[   68.222622][ T7418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.451'.
[   68.252252][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'.
[   68.294661][ T7427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.455'.
[   68.299358][ T7427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.455'.
[   68.409164][ T7440] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   68.440353][ T7444] bpf setsockopt: ignoring program buffer with optlen=65458 (max_optlen=4096)
[   68.543809][ T7454] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   68.648425][ T7458] netlink: 'syz.0.463': attribute type 142 has an invalid length.
[   68.714275][ T7463] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   68.716952][ T7463] team0: Device macvtap1 is already an upper device of the team interface
[   68.956671][ T7474] netlink: 'syz.0.469': attribute type 1 has an invalid length.
[   69.210219][ T7474] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.213161][ T7474] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.223310][ T7474] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.226287][ T7474] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.266324][ T7474] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   69.269269][ T7474] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   69.272139][ T7474] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   69.275142][ T7474] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   69.293579][ T7490] tipc: Started in network mode
[   69.295476][ T7490] tipc: Node identity 6a2613f9e6a4, cluster identity 4711
[   69.298096][ T7490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.304385][ T7492] syzkaller0: entered promiscuous mode
[   69.306605][ T7492] syzkaller0: entered allmulticast mode
[   69.320768][ T7484] tipc: Resetting bearer <eth:syzkaller0>
[   69.325562][ T7483] tipc: Resetting bearer <eth:syzkaller0>
[   69.332794][ T7483] tipc: Disabling bearer <eth:syzkaller0>
[   69.339628][ T7496] wg1 speed is unknown, defaulting to 1000
[   69.342130][ T7496] wg1 speed is unknown, defaulting to 1000
[   69.346879][ T7496] wg1 speed is unknown, defaulting to 1000
[   69.353189][ T7496] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   69.361406][ T7496] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   69.381487][ T7496] wg1 speed is unknown, defaulting to 1000
[   69.387269][ T7496] wg1 speed is unknown, defaulting to 1000
[   69.389993][ T7496] wg1 speed is unknown, defaulting to 1000
[   69.505970][ T7506] syzkaller0: entered promiscuous mode
[   69.507863][ T7506] syzkaller0: entered allmulticast mode
[   70.012316][ T7527] netlink: 'syz.1.485': attribute type 13 has an invalid length.
[   70.252493][ T7542] pimreg: entered allmulticast mode
[   70.256433][ T7542] pimreg: left allmulticast mode
[   70.383118][ T7544] netlink: 'syz.0.491': attribute type 10 has an invalid length.
[   70.386625][ T7544] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.389589][ T7544] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.392553][ T7544] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.397307][ T7544] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.401947][ T7544] team0: Port device geneve0 added
[   70.412414][ T7544] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[   70.445459][ T7546] netlink: 'syz.0.492': attribute type 1 has an invalid length.
[   70.810228][ T7569] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.818661][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.820952][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   70.847026][ T7528] Bluetooth: hci1: Opcode 0x080f failed: -4
[   71.016150][ T7582] wg1 speed is unknown, defaulting to 1000
[   71.059928][ T7587] netlink: 'syz.1.508': attribute type 29 has an invalid length.
[   71.070235][ T7587] netlink: 'syz.1.508': attribute type 29 has an invalid length.
[   71.073183][ T7587] netlink: 'syz.1.508': attribute type 29 has an invalid length.
[   71.078654][ T7587] netlink: 'syz.1.508': attribute type 29 has an invalid length.
[   71.081249][ T7587] netlink: 'syz.1.508': attribute type 29 has an invalid length.
[   71.160704][ T7625] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   71.562390][ T7700] openvswitch: netlink: Tunnel attr 16370 out of range max 16
[   71.649323][ T7708] xt_l2tp: invalid flags combination: c
[   71.828250][ T7728] xt_hashlimit: size too large, truncated to 1048576
[   71.828310][ T7729] : renamed from erspan0 (while UP)
[   71.882345][ T7734] sctp: [Deprecated]: syz.1.547 (pid 7734) Use of struct sctp_assoc_value in delayed_ack socket option.
[   71.882345][ T7734] Use struct sctp_sack_info instead
[   71.933140][ T7743] openvswitch: netlink: Geneve option length err (len 256, max 255).
[   71.990456][ T7748] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   72.009695][ T7752] only policy match revision 0 supported
[   72.009706][ T7752] unable to load match
[   72.014830][ T5218] Bluetooth: hci1: command 0x080f tx timeout
[   72.326024][ T7798] openvswitch: netlink: Missing key (keys=40, expected=80)
[   73.154197][ T7803] __nla_validate_parse: 33 callbacks suppressed
[   73.154208][ T7803] netlink: 172 bytes leftover after parsing attributes in process `syz.2.568'.
[   73.201679][ T7820] sch_fq: defrate 0 ignored.
[   73.210676][ T7820] pim6reg1: entered promiscuous mode
[   73.212377][ T7820] pim6reg1: entered allmulticast mode
[   73.252731][ T7828] netlink: 596 bytes leftover after parsing attributes in process `syz.2.575'.
[   73.314237][ T7832] netlink: 76 bytes leftover after parsing attributes in process `syz.2.577'.
[   73.505560][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'.
[   73.513354][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'.
[   73.526428][ T7859] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   73.531196][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.583'.
[   73.534142][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'.
[   73.687903][ T7876] gretap1: entered promiscuous mode
[   73.931761][ T7889] delete_channel: no stack
[   74.419393][ T7896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.595'.
[   74.553275][ T7900] wg1 speed is unknown, defaulting to 1000
[   74.568063][ T7904] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.598'.
[   74.571126][ T7903] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.598'.
[   74.925163][ T7929] openvswitch: netlink: Unknown nsh attribute 0
[   74.927202][ T7929] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.041883][ T7931] wg2: left promiscuous mode
[   75.112963][ T7931] vlan0: left promiscuous mode
[   75.156478][ T7931] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.159101][ T7931] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.161629][ T7931] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.172571][ T7931] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.215046][ T7931] gtp0: left promiscuous mode
[   75.217484][ T7931] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[   75.219727][ T7931] macsec1: left promiscuous mode
[   75.221320][ T7931] macsec1: left allmulticast mode
[   75.229871][ T7931] macsec2: left promiscuous mode
[   75.231425][ T7931] macsec2: left allmulticast mode
[   75.260507][ T7941] openvswitch: netlink: Key type 236 is out of range max 32
[   75.291540][ T7944] xt_hashlimit: overflow, try lower: 72057594037927936/255
[   75.708676][ T7967] x_tables: duplicate underflow at hook 4
[   75.718634][ T7967] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.938736][   T33] audit: type=1800 audit(1752535192.570:3): pid=7972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.621" name="memory.events" dev="tmpfs" ino=1098 res=0 errno=0
[   76.078535][ T7976] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.140011][ T7978] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   76.143552][ T7978] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   76.148059][ T7978] bond0: (slave bond_slave_0): Releasing backup interface
[   76.150582][ T7978] bond_slave_0: left promiscuous mode
[   76.153130][ T7978] bond0: (slave bond_slave_1): Releasing backup interface
[   76.156854][ T7978] bond_slave_1: left promiscuous mode
[   76.158921][ T7978] team_slave_0: left promiscuous mode
[   76.162298][ T7978] team0: Port device team_slave_0 removed
[   76.164408][ T7978] team_slave_1: left promiscuous mode
[   76.167162][ T7978] team0: Port device team_slave_1 removed
[   76.169125][ T7978] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.171953][ T7978] geneve0: left promiscuous mode
[   76.175345][ T7978] team0: Port device geneve0 removed
[   76.179183][ T7978] bond1: (slave macvlan2): Releasing backup interface
[   77.574985][ T7991] validate_nla: 28 callbacks suppressed
[   77.574994][ T7991] netlink: 'syz.2.627': attribute type 1 has an invalid length.
[   77.938092][ T8010] tipc: Enabling of bearer <et:g> rejected, media not registered
[   77.973127][ T8012] bond0: entered allmulticast mode
[   77.977561][ T8012] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.021807][ T8014] wg1 speed is unknown, defaulting to 1000
[   78.202260][ T8024] __nla_validate_parse: 80 callbacks suppressed
[   78.202271][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'.
[   78.204559][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'.
[   78.309661][ T8036] bond0: entered promiscuous mode
[   78.311471][ T8036] bond0: entered allmulticast mode
[   78.313882][ T8036] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.429783][ T8049] netlink: 56 bytes leftover after parsing attributes in process `syz.1.647'.
[   78.432884][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'.
[   78.477302][ T8056] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   78.491724][ T8056] bond2: entered promiscuous mode
[   78.493534][ T8056] bond2: entered allmulticast mode
[   78.496016][ T8056] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.557296][ T8056] block nbd0: server does not support multiple connections per device.
[   78.562263][ T8056] block nbd0: shutting down sockets
[   78.597236][ T8068] netlink: 'syz.1.649': attribute type 4 has an invalid length.
[   79.262496][ T8080] openvswitch: netlink: IPv4 tunnel dst address is zero
[   79.693729][ T8091] wg1 speed is unknown, defaulting to 1000
[   79.781112][ T8103] netlink: 'syz.1.659': attribute type 3 has an invalid length.
[   79.783562][ T8103] netlink: 'syz.1.659': attribute type 4 has an invalid length.
[   79.786585][ T8103] netlink: 'syz.1.659': attribute type 5 has an invalid length.
[   79.789059][ T8103] netlink: 'syz.1.659': attribute type 6 has an invalid length.
[   79.791473][ T8103] netlink: 'syz.1.659': attribute type 7 has an invalid length.
[   79.793918][ T8103] netlink: 'syz.1.659': attribute type 7 has an invalid length.
[   79.801949][ T8103] netlink: 12902 bytes leftover after parsing attributes in process `syz.1.659'.
[   79.823398][ T8105] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   79.831071][ T8105] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   79.839259][ T8106] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   79.872893][ T8115] nftables ruleset with unbound set
[   79.878325][ T8115] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   80.109704][ T8141] vlan2: entered allmulticast mode
[   80.111533][ T8141] bridge_slave_0: entered allmulticast mode
[   80.243421][ T8148] veth0_to_bond: entered allmulticast mode
[   80.247344][ T8149] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[   80.867197][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'.
[   81.008436][ T8193] netlink: 'syz.2.691': attribute type 4 has an invalid length.
[   81.011334][ T8193] netlink: 'syz.2.691': attribute type 1 has an invalid length.
[   81.096199][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.692'.
[   81.179953][ T8201] netlink: 36 bytes leftover after parsing attributes in process `syz.0.693'.
[   81.219563][ T8203] nft_compat: unsupported protocol 0
[   81.416423][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'.
[   81.471419][ T8223] netlink: 112 bytes leftover after parsing attributes in process `syz.1.702'.
[   81.565670][ T8234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   81.599778][ T8236] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   81.603173][ T8236] bond1: (slave macvlan3): Enslaving as a backup interface with a down link
[   81.609000][ T8236] bond1: (slave macvlan3): Releasing backup interface
[   81.691399][ T8246] tipc: Started in network mode
[   81.693070][ T8246] tipc: Node identity 080211, cluster identity 4711
[   81.695554][ T8246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.707166][ T8246] mac80211_hwsim hwsim6 D: renamed from syzkaller0
[   81.712416][ T8246] tipc: Disabling bearer <eth:syzkaller0>
[   81.868634][ T8258] : entered promiscuous mode
[   81.941606][ T8266] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.983779][ T8271] mac80211_hwsim hwsim4 ": renamed from wlan0
[   82.033498][ T8274] batman_adv: batadv0: Adding interface: dummy0
[   82.035621][ T8274] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.043418][ T8274] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   82.153514][ T8290] syzkaller0: entered promiscuous mode
[   82.157643][ T8290] syzkaller0: entered allmulticast mode
[   82.277567][   T33] audit: type=1800 audit(1752535198.910:4): pid=8298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.726" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1223 res=0 errno=0
[   82.285345][   T33] audit: type=1800 audit(1752535198.920:5): pid=8298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.726" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1223 res=0 errno=0
[   82.338905][ T8307] x_tables: duplicate underflow at hook 1
[   82.440213][ T8321] batadv_slave_1: entered promiscuous mode
[   82.531012][ T8325] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR
[   82.600071][ T8345] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[   83.206085][ T8389] __nla_validate_parse: 17 callbacks suppressed
[   83.206095][ T8389] netlink: 40 bytes leftover after parsing attributes in process `syz.0.748'.
[   83.223901][ T8319] Bluetooth: hci2: Opcode 0x0401 failed: -4
[   83.674928][ T8442] netlink: 60 bytes leftover after parsing attributes in process `syz.2.764'.
[   83.677871][ T8442] netlink: 60 bytes leftover after parsing attributes in process `syz.2.764'.
[   83.682437][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'.
[   83.707442][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'.
[   83.942463][ T8457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'.
[   83.990984][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'.
[   84.112932][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'.
[   84.116298][ T8470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.773'.
[   84.119329][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'.
[   84.426354][ T5834] Bluetooth: hci2: command 0x0401 tx timeout
[   84.440321][  T969] hid-generic 0005:07C0:8002.0002: collection stack underflow
[   84.446256][  T969] hid-generic 0005:07C0:8002.0002: item 0 0 0 12 parsing failed
[   84.456339][  T969] hid-generic 0005:07C0:8002.0002: probe with driver hid-generic failed with error -22
[   84.768464][ T8538] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   84.905464][ T8554] syzkaller1: entered promiscuous mode
[   84.907834][ T8554] syzkaller1: entered allmulticast mode
[   84.912395][ T8554] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   85.239935][ T8574] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   85.606711][ T8590] Bluetooth: MGMT ver 1.23
[   85.794759][ T8615] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.893050][ T8632] validate_nla: 2 callbacks suppressed
[   85.893058][ T8632] netlink: 'syz.2.822': attribute type 6 has an invalid length.
[   85.909878][ T8633] macsec1: entered promiscuous mode
[   85.913812][ T8633] bridge0: entered promiscuous mode
[   85.924012][ T8633] bridge0: port 1(macsec1) entered blocking state
[   85.926339][ T8633] bridge0: port 1(macsec1) entered disabled state
[   85.930520][ T8633] macsec1: entered allmulticast mode
[   85.936551][ T8633] macsec1: left allmulticast mode
[   85.940949][ T8633] bridge0: left promiscuous mode
[   85.958567][ T8630] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   85.960981][  T969] IPVS: starting estimator thread 0...
[   85.962137][ T8640] netlink: 'syz.1.821': attribute type 3 has an invalid length.
[   85.967412][ T8640] netlink: 'syz.1.821': attribute type 1 has an invalid length.
[   85.968033][ T8637] bridge0: port 1(veth0_to_bridge) entered blocking state
[   85.972953][ T8637] bridge0: port 1(veth0_to_bridge) entered disabled state
[   85.976255][ T8637] veth0_to_bridge: entered allmulticast mode
[   85.978938][ T8637] veth0_to_bridge: entered promiscuous mode
[   86.039023][ T8648] wireguard0: entered promiscuous mode
[   86.040843][ T8648] wireguard0: entered allmulticast mode
[   86.054492][ T8641] IPVS: using max 78 ests per chain, 187200 per kthread
[   86.407972][ T8688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   86.419372][ T8688] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   86.494531][ T5218] Bluetooth: hci2: command 0x0401 tx timeout
[   86.639426][ T8697] sctp: [Deprecated]: syz.0.844 (pid 8697) Use of struct sctp_assoc_value in delayed_ack socket option.
[   86.639426][ T8697] Use struct sctp_sack_info instead
[   87.047794][ T8717] batadv0: entered allmulticast mode
[   87.079605][ T8719] netlink: 'syz.2.850': attribute type 1 has an invalid length.
[   87.082292][ T8719] netlink: 'syz.2.850': attribute type 11 has an invalid length.
[   87.593851][ T8731] trusted_key: syz.0.855 sent an empty control message without MSG_MORE.
[   87.663184][ T8737] netlink: 'syz.1.858': attribute type 3 has an invalid length.
[   87.699841][ T8742] netlink: 'syz.0.864': attribute type 13 has an invalid length.
[   87.741248][ T8742] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.744012][ T8742] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.747288][ T8742] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.847845][ T8753] wg1 speed is unknown, defaulting to 1000
[   88.667564][ T8805] bond0: option all_slaves_active: invalid value (7)
[   88.670371][ T8805] __nla_validate_parse: 25 callbacks suppressed
[   88.670378][ T8805] netlink: 9 bytes leftover after parsing attributes in process `syz.0.879'.
[   88.676037][ T8805] 0: renamed from hsr0
[   88.678879][ T8805] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   88.682132][ T8805] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.685704][ T8805] 0: entered allmulticast mode
[   88.687271][ T8805] hsr_slave_0: entered allmulticast mode
[   88.689072][ T8805] hsr_slave_1: entered allmulticast mode
[   88.691560][ T8805] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   88.842118][ T8816] netlink: 'syz.2.883': attribute type 5 has an invalid length.
[   89.031717][ T8835] netlink: 'syz.1.888': attribute type 1 has an invalid length.
[   89.034105][ T8835] netlink: 228 bytes leftover after parsing attributes in process `syz.1.888'.
[   89.192087][ T8852] netlink: 'syz.2.896': attribute type 11 has an invalid length.
[   89.194948][ T8852] netlink: 224 bytes leftover after parsing attributes in process `syz.2.896'.
[   89.223345][ T8854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.897'.
[   89.259331][ T8859] netlink: 136784 bytes leftover after parsing attributes in process `syz.1.898'.
[   89.269047][ T8859] netlink: zone id is out of range
[   89.270867][ T8859] netlink: zone id is out of range
[   89.272515][ T8859] netlink: zone id is out of range
[   89.274130][ T8859] netlink: zone id is out of range
[   89.281726][ T8859] netlink: zone id is out of range
[   89.283461][ T8859] netlink: zone id is out of range
[   89.435721][ T8877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.904'.
[   89.602160][ T8897] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.910'.
[   89.607839][ T8896] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.910'.
[   89.680126][ T8905] vxcan2: entered promiscuous mode
[   89.980404][ T8926] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[   90.085249][ T8932] netlink: 'syz.2.922': attribute type 3 has an invalid length.
[   90.641862][ T8964] netlink: 224 bytes leftover after parsing attributes in process `syz.1.932'.
[   90.770267][ T8979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.935'.
[   90.990162][ T9014] validate_nla: 2 callbacks suppressed
[   90.990172][ T9014] netlink: 'syz.0.945': attribute type 6 has an invalid length.
[   91.007478][ T9014] netlink: 'syz.0.945': attribute type 6 has an invalid length.
[   91.023886][ T9014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   91.040048][ T9016] 8021q: adding VLAN 0 to HW filter on device macvlan4
[   91.088863][ T9018] net_ratelimit: 4049 callbacks suppressed
[   91.088875][ T9018] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   91.139930][ T9025] x_tables: duplicate underflow at hook 2
[   91.202119][ T9030] wg1 speed is unknown, defaulting to 1000
[   91.207166][ T9028] netlink: 'syz.0.952': attribute type 1 has an invalid length.
[   91.211912][ T9028] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   91.274037][ T9034] netlink: 'syz.0.952': attribute type 1 has an invalid length.
[   91.415735][ T9043] netlink: 'syz.1.956': attribute type 1 has an invalid length.
[   91.922415][ T9078] bridge2: entered allmulticast mode
[   92.290270][ T9105] netlink: 'syz.2.978': attribute type 20 has an invalid length.
[   92.292827][ T9105] netlink: 'syz.2.978': attribute type 21 has an invalid length.
[   93.506719][ T9157] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[   93.836560][ T9173] __nla_validate_parse: 16 callbacks suppressed
[   93.836569][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.999'.
[   93.954251][ T9181] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1001'.
[   94.057207][ T9196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1005'.
[   94.100894][ T9193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1004'.
[   94.108470][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1004'.
[   94.111583][ T9203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1004'.
[   94.146778][ T9196] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[   94.310435][ T9218] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1008'.
[   94.355772][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'.
[   94.427709][ T9233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1011'.
[   94.453877][ T9242] bond_slave_1: mtu greater than device maximum
[   94.467126][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1013'.
[   94.607724][ T9261] netlink: 'syz.0.1017': attribute type 4 has an invalid length.
[   94.675281][ T9275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.905470][ T9312] netlink: 'syz.1.1035': attribute type 11 has an invalid length.
[   94.959188][ T9315] netlink: 'syz.0.1037': attribute type 17 has an invalid length.
[   94.962481][ T9315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   95.024555][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.087675][ T9335] 8021q: adding VLAN 0 to HW filter on device bond3
[   95.106794][ T9335] 8021q: adding VLAN 0 to HW filter on device bond3
[   95.109169][ T9335] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   95.113641][ T9335] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   95.154028][ T9343] wireguard0: entered promiscuous mode
[   95.156277][ T9343] wireguard0: entered allmulticast mode
[   95.203156][ T9335] gretap1: entered promiscuous mode
[   95.563889][ T9356] NCSI netlink: No device for ifindex 246
[   95.595190][ T9364] veth0_macvtap: mtu greater than device maximum
[   95.654493][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.791432][ T9377] set match dimension is over the limit!
[   96.041227][ T9410] validate_nla: 5 callbacks suppressed
[   96.041237][ T9410] netlink: 'syz.1.1065': attribute type 1 has an invalid length.
[   96.074795][ T9412] netlink: 'syz.1.1066': attribute type 5 has an invalid length.
[   96.081667][ T9412] bridge4: entered promiscuous mode
[   96.083376][ T9412] bridge4: entered allmulticast mode
[   96.118461][ T9415] netlink: 'syz.1.1067': attribute type 10 has an invalid length.
[   96.121037][ T9415] team0: left promiscuous mode
[   96.125752][ T9415] 8021q: adding VLAN 0 to HW filter on device team0
[   96.128791][ T9415] team0: entered promiscuous mode
[   96.130589][ T9415] team0: entered allmulticast mode
[   96.138748][ T9415] netlink: 'syz.1.1067': attribute type 11 has an invalid length.
[   96.259691][ T9413] netlink: 'syz.0.1064': attribute type 11 has an invalid length.
[   96.367343][ T9430] syz_tun: entered allmulticast mode
[   96.371491][ T9429] syz_tun: left allmulticast mode
[   96.873502][ T9461] netlink: 'syz.1.1081': attribute type 21 has an invalid length.
[   96.900334][ T9461] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   96.946384][ T9465] netlink: 'syz.0.1083': attribute type 3 has an invalid length.
[   96.952451][ T9467] unknown channel width for channel at 909000KHz?
[   96.955010][ T9467] unknown channel width for channel at 909000KHz?
[   97.030517][ T9477] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.341701][ T9499] netlink: 'syz.2.1096': attribute type 7 has an invalid length.
[   97.361444][ T9506] dvmrp8: left allmulticast mode
[   97.389866][ T9506] rdma_rxe: rxe_newlink: failed to add lo
[   97.480635][ T9512] netlink: 'syz.2.1099': attribute type 1 has an invalid length.
[   98.003218][ T9520] tc_dump_action: action bad kind
[   98.460076][ T9559] x_tables: duplicate underflow at hook 3
[   98.567124][ T9580] 0: renamed from hsr_slave_1
[   98.569997][ T9580] 0: entered allmulticast mode
[   98.576135][ T9580] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[   98.634256][ T9591] ieee802154 phy0 wpan0: encryption failed: -22
[   98.650963][ T9591] pim6reg9: entered allmulticast mode
[   98.684973][ T9596] can: request_module (can-proto-4) failed.
[   98.701938][ T9596] can: request_module (can-proto-4) failed.
[   98.719418][ T9596] can: request_module (can-proto-4) failed.
[   98.746675][ T9596] can: request_module (can-proto-4) failed.
[   98.751909][ T9596] can: request_module (can-proto-4) failed.
[   98.870745][ T9627] __nla_validate_parse: 35 callbacks suppressed
[   98.870754][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1132'.
[   98.983303][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1135'.
[   99.009868][ T9638] netlink: 'syz.2.1136': attribute type 1 has an invalid length.
[   99.012390][ T9638] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1136'.
[   99.084192][ T9650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1140'.
[   99.268174][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1145'.
[   99.274153][ T9679] veth0: entered promiscuous mode
[   99.276976][ T9679] veth0: left promiscuous mode
[   99.489166][ T9707] x_tables: duplicate underflow at hook 3
[   99.659050][ T9733] netlink: 'syz.1.1162': attribute type 3 has an invalid length.
[   99.663539][ T9733] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1162'.
[   99.823765][ T9751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1168'.
[   99.831942][ T9751] openvswitch: netlink: Flow actions attr not present in new flow.
[  100.084434][ T9763] nbd2: detected capacity change from 0 to 127
[  100.607844][ T9768] bond0: left allmulticast mode
[  100.611435][ T9768] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  100.640600][ T9770] vti0: entered promiscuous mode
[  100.650958][ T9770] Timeout policy `syz1' can only be used by L3 protocol number 248
[  100.778123][ T9775] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1176'.
[  100.781359][ T9773] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1176'.
[  100.786074][   T55] block nbd2: Receive control failed (result -104)
[  100.818384][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1178'.
[  100.936688][ T9789] wg1 speed is unknown, defaulting to 1000
[  100.965664][ T9795] virt_wifi0: mtu less than device minimum
[  101.425541][ T9856] IPv6: NLM_F_REPLACE set, but no existing node found!
[  101.557074][ T9875] macsec3: entered promiscuous mode
[  101.558977][ T9875] macsec3: entered allmulticast mode
[  102.222627][ T9945] pim6reg: entered allmulticast mode
[  103.040539][T10020] netlink: 'syz.2.1226': attribute type 1 has an invalid length.
[  104.213188][T10056] __nla_validate_parse: 15 callbacks suppressed
[  104.213198][T10056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1237'.
[  104.365213][T10062] netlink: 'syz.2.1240': attribute type 1 has an invalid length.
[  104.379159][T10067] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  104.379604][T10062] bond34: entered promiscuous mode
[  104.385219][T10062] bond34: entered allmulticast mode
[  104.388268][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1240'.
[  104.395312][T10062] bridge3: the hash_elasticity option has been deprecated and is always 16
[  104.401782][T10062] bond34: (slave bridge3): making interface the new active one
[  104.404672][T10062] bridge3: entered promiscuous mode
[  104.406720][T10062] bridge3: entered allmulticast mode
[  104.409374][T10062] bond34: (slave bridge3): Enslaving as an active interface with an up link
[  104.412527][T10071] netlink: 'syz.1.1242': attribute type 3 has an invalid length.
[  104.412795][T10062] xt_bpf: check failed: parse error
[  104.600242][T10096] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1251'.
[  104.644450][T10100] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1253'.
[  104.843485][T10113] ip6gre1: entered promiscuous mode
[  104.847190][T10114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1258'.
[  104.850291][T10113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1258'.
[  104.880412][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'.
[  104.884517][T10116] netlink: 'syz.1.1259': attribute type 8 has an invalid length.
[  105.339021][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'.
[  105.389616][T10136] team0: Port device veth5 added
[  105.397115][T10136] netlink: 'syz.2.1266': attribute type 7 has an invalid length.
[  105.400451][T10136] netlink: 'syz.2.1266': attribute type 3 has an invalid length.
[  105.403789][T10136] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1266'.
[  105.576780][T10155] veth1_macvtap: left promiscuous mode
[  105.689567][T10166] wg1 speed is unknown, defaulting to 1000
[  105.745052][T10170] ieee802154 phy0 wpan0: encryption failed: -22
[  105.807608][T10166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.816235][T10175] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1277'.
[  106.392065][T10199] netlink: 'syz.0.1287': attribute type 1 has an invalid length.
[  106.423077][T10199] bond3: (slave bridge1): making interface the new active one
[  106.434933][T10199] bond3: (slave bridge1): Enslaving as an active interface with an up link
[  106.478094][T10205] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  106.510401][T10211] bond0: left promiscuous mode
[  106.512693][T10211] bond0: left allmulticast mode
[  106.516350][T10211] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.520699][T10211] 8021q: adding VLAN 0 to HW filter on device team0
[  106.526917][T10211] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.784493][T10211] block nbd0: server does not support multiple connections per device.
[  106.789796][T10211] block nbd0: shutting down sockets
[  106.893368][T10224] : entered promiscuous mode
[  107.043662][T10238] wg1 speed is unknown, defaulting to 1000
[  107.451389][T10264] netlink: 'syz.2.1306': attribute type 3 has an invalid length.
[  107.619887][T10276] netlink: 'syz.1.1310': attribute type 5 has an invalid length.
[  107.623143][T10276] batadv_slave_0: entered promiscuous mode
[  107.629438][T10276] batadv_slave_0: entered allmulticast mode
[  107.645819][T10278] pimreg3: entered allmulticast mode
[  107.650415][T10274] pimreg3: left allmulticast mode
[  107.681721][T10281] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.700862][T10281] wg1 speed is unknown, defaulting to 1000
[  107.742157][T10284] D: renamed from syzkaller0
[  107.747652][T10284] tipc: Disabling bearer <eth:syzkaller0>
[  108.102090][ T5218] Bluetooth: hci2: link tx timeout
[  108.104275][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.105122][T10317] syz_tun: entered allmulticast mode
[  108.119058][T10310] syz_tun: left allmulticast mode
[  108.284851][T10330] macvtap1: entered allmulticast mode
[  108.287437][T10330] veth0_macvtap: entered allmulticast mode
[  108.346042][T10342] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  108.356963][T10339] tipc: Started in network mode
[  108.358746][T10339] tipc: Node identity c6359f82db5d, cluster identity 4711
[  108.361090][T10339] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.363964][T10341] syzkaller0: entered promiscuous mode
[  108.366429][T10341] syzkaller0: entered allmulticast mode
[  108.370965][T10341] veth1_to_bond: entered allmulticast mode
[  108.377199][T10339] bond_slave_1: entered promiscuous mode
[  108.395233][T10337] bond_slave_1: left promiscuous mode
[  108.399226][T10337] veth1_to_bond: left allmulticast mode
[  108.404159][T10337] tipc: Resetting bearer <eth:syzkaller0>
[  108.415092][T10337] tipc: Disabling bearer <eth:syzkaller0>
[  108.564213][T10359] netlink: 'syz.2.1341': attribute type 22 has an invalid length.
[  108.570390][T10361] netlink: 'syz.0.1342': attribute type 2 has an invalid length.
[  108.572900][T10361] netlink: 'syz.0.1342': attribute type 5 has an invalid length.
[  108.601077][T10365] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  108.711588][T10377] set match dimension is over the limit!
[  108.713492][T10377] set match dimension is over the limit!
[  108.717488][T10377] set match dimension is over the limit!
[  108.719424][T10377] set match dimension is over the limit!
[  108.721423][T10377] set match dimension is over the limit!
[  108.723328][T10377] set match dimension is over the limit!
[  108.726318][T10377] set match dimension is over the limit!
[  108.728237][T10377] set match dimension is over the limit!
[  108.730296][T10377] set match dimension is over the limit!
[  108.732243][T10377] set match dimension is over the limit!
[  108.926151][ T5834] Bluetooth: hci2: link tx timeout
[  108.927995][ T5834] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.938186][T10398] tipc: Enabled bearer <eth:vlan0>, priority 18
[  109.059307][T10417] netlink: 'syz.2.1359': attribute type 1 has an invalid length.
[  109.063912][T10419] netlink: 'syz.2.1359': attribute type 1 has an invalid length.
[  109.096567][T10417] 8021q: adding VLAN 0 to HW filter on device bond35
[  109.109028][T10417] bond35: (slave gretap1): making interface the new active one
[  109.112324][T10417] bond35: (slave gretap1): Enslaving as an active interface with an up link
[  109.162415][T10431] wg1 speed is unknown, defaulting to 1000
[  109.272883][T10438] __nla_validate_parse: 40 callbacks suppressed
[  109.272894][T10438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1365'.
[  109.416965][T10451] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1369'.
[  109.419909][T10451] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1369'.
[  109.468283][T10455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1371'.
[  109.534264][T10462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1374'.
[  109.537944][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'.
[  109.541281][T10462] netlink: 'syz.1.1374': attribute type 10 has an invalid length.
[  109.674479][T10471] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1377'.
[  109.677371][T10471] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1377'.
[  109.700085][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1378'.
[  109.761407][T10481] wg1 speed is unknown, defaulting to 1000
[  110.054913][   T10] tipc: Node number set to 134353152
[  110.066439][T10497] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1384'.
[  110.174619][ T5834] Bluetooth: hci2: command 0x0401 tx timeout
[  111.165360][T10571] IPVS: set_ctl: invalid protocol: 8 172.20.20.24:20002
[  111.184224][T10571] wg1 speed is unknown, defaulting to 1000
[  111.224154][T10577] netlink: 'syz.2.1409': attribute type 5 has an invalid length.
[  111.232005][T10579] netlink: 'syz.0.1410': attribute type 5 has an invalid length.
[  111.235260][T10579] netlink: 'syz.0.1410': attribute type 7 has an invalid length.
[  111.316806][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.320588][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.331983][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.339832][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.346250][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.354455][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.365361][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.376370][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.381147][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.393327][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.397292][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.400882][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.405474][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.411813][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.420302][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.427000][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.430993][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.440804][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.444699][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.451099][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.458416][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.469001][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.475420][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.480181][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.484750][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.488406][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.492781][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.502303][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.506350][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.510000][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.513679][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.535538][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.539394][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.543203][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.558201][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.565861][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.569824][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.570556][T10609] netlink: 'syz.2.1419': attribute type 22 has an invalid length.
[  111.573530][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.579554][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.585555][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.586405][   T33] audit: type=1800 audit(1752535228.220:6): pid=10609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1419" name=783030303030303030303030303030303303 dev="tmpfs" ino=2390 res=0 errno=0
[  111.595937][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.600440][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.608689][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.612464][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.615427][   T33] audit: type=1804 audit(1752535228.220:7): pid=10609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1419" name=783030303030303030303030303030303303 dev="tmpfs" ino=2390 res=1 errno=0
[  111.626131][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.630787][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.637331][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.641104][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.652059][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.658101][T10617] netem: change failed
[  111.673127][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.680496][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.688615][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.697054][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.700974][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.705713][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.709468][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.713380][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.718783][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.722535][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.727216][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.730927][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.735747][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.740197][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.744022][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.749509][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.546421][T10643] sctp: [Deprecated]: syz.2.1433 (pid 10643) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.546421][T10643] Use struct sctp_sack_info instead
[  112.588243][T10645] 8021q: adding VLAN 0 to HW filter on device bond36
[  112.598843][T10645] bond36: (slave bridge4): making interface the new active one
[  112.602005][T10645] bond36: (slave bridge4): Enslaving as an active interface with an up link
[  112.610506][T10645] gretap2: entered promiscuous mode
[  112.614182][T10645] bond36: (slave gretap2): Enslaving as an active interface with an up link
[  112.621326][T10645] macvlan3: entered promiscuous mode
[  112.623165][T10645] macvlan3: entered allmulticast mode
[  112.625344][T10645] bond36: (slave macvlan3): Error -98 calling set_mac_address
[  113.458639][T10756] netlink: 'syz.2.1467': attribute type 11 has an invalid length.
[  113.502191][T10760] macvtap1: entered promiscuous mode
[  113.504035][T10760] dummy0: entered promiscuous mode
[  113.506308][T10760] macvtap1: entered allmulticast mode
[  113.508139][T10760] dummy0: entered allmulticast mode
[  113.512937][T10760] dummy0: left allmulticast mode
[  113.514964][T10760] dummy0: left promiscuous mode
[  113.651939][T10778] xt_SECMARK: invalid mode: 0
[  113.757285][T10794] wg1 speed is unknown, defaulting to 1000
[  113.787952][T10794] geneve0: entered allmulticast mode
[  114.061685][T10828] ip6gretap0: entered promiscuous mode
[  114.065285][T10828] ip6gretap0: left promiscuous mode
[  114.191938][T10846] : left promiscuous mode
[  114.350969][T10865] __nla_validate_parse: 57 callbacks suppressed
[  114.350978][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1501'.
[  114.384938][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'.
[  114.387722][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'.
[  114.463027][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1505'.
[  114.468008][T10875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1505'.
[  115.335109][T10910] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1519'.
[  115.385821][T10918] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1522'.
[  115.388744][T10918] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1522'.
[  115.402425][T10921] --map-set only usable from mangle table
[  115.467656][T10933] tipc: Enabling of bearer <eth:vxcan1> rejected, failed to enable media
[  115.557621][ T8487] 
[  115.558464][ T8487] ======================================================
[  115.560662][ T8487] WARNING: possible circular locking dependency detected
[  115.562832][ T8487] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  115.565851][ T8487] ------------------------------------------------------
[  115.568042][ T8487] kworker/u10:7/8487 is trying to acquire lock:
[  115.570014][ T8487] ffff8880221a8358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  115.572938][ T8487] 
[  115.572938][ T8487] but task is already holding lock:
[  115.575232][ T8487] ffff88810658a188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  115.577918][T10947] netlink: zone id is out of range
[  115.578189][ T8487] 
[  115.578189][ T8487] which lock already depends on the new lock.
[  115.578189][ T8487] 
[  115.578193][ T8487] 
[  115.578193][ T8487] the existing dependency chain (in reverse order) is:
[  115.579873][T10947] netlink: zone id is out of range
[  115.583075][ T8487] 
[  115.583075][ T8487] -> #2 (&set->update_nr_hwq_lock
[  115.586398][T10947] netlink: zone id is out of range
[  115.587579][ T8487] ){++++}-{4:4}:
[  115.587587][ T8487]        lock_acquire+0x120/0x360
[  115.587595][ T8487]        down_write+0x96/0x1f0
[  115.587602][ T8487]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  115.587610][ T8487]        nbd_start_device+0x16c/0xac0
[  115.587618][ T8487]        nbd_genl_connect+0x1250/0x1930
[  115.589869][T10947] netlink: zone id is out of range
[  115.591501][ T8487]        genl_family_rcv_msg_doit+0x215/0x300
[  115.592696][T10947] netlink: zone id is out of range
[  115.594305][ T8487]        genl_rcv_msg+0x60e/0x790
[  115.594316][ T8487]        netlink_rcv_skb+0x208/0x470
[  115.594323][ T8487]        genl_rcv+0x28/0x40
[  115.594332][ T8487]        netlink_unicast+0x75c/0x8e0
[  115.594338][ T8487]        netlink_sendmsg+0x805/0xb30
[  115.594346][ T8487]        __sock_sendmsg+0x21c/0x270
[  115.594351][ T8487]        ____sys_sendmsg+0x505/0x830
[  115.594359][ T8487]        ___sys_sendmsg+0x21f/0x2a0
[  115.594367][ T8487]        __x64_sys_sendmsg+0x19b/0x260
[  115.594375][ T8487]        do_syscall_64+0xfa/0x3b0
[  115.594382][ T8487]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.594388][ T8487] 
[  115.594388][ T8487] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  115.594400][ T8487]        lock_acquire+0x120/0x360
[  115.597250][T10947] netlink: zone id is out of range
[  115.597912][ T8487]        __mutex_lock+0x182/0xe80
[  115.599632][T10947] netlink: zone id is out of range
[  115.601358][ T8487]        refcount_dec_and_mutex_lock+0x30/0xa0
[  115.602962][T10947] netlink: zone id is out of range
[  115.604924][ T8487]        nbd_config_put+0x2c/0x790
[  115.604934][ T8487]        nbd_release+0xfe/0x140
[  115.604940][ T8487]        bdev_release+0x536/0x650
[  115.604947][ T8487]        blkdev_release+0x15/0x20
[  115.604954][ T8487]        __fput+0x44c/0xa70
[  115.604964][ T8487]        fput_close_sync+0x119/0x200
[  115.604973][ T8487]        __x64_sys_close+0x7f/0x110
[  115.604979][ T8487]        do_syscall_64+0xfa/0x3b0
[  115.604985][ T8487]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.604992][ T8487] 
[  115.604992][ T8487] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  115.605003][ T8487]        validate_chain+0xb9b/0x2140
[  115.656602][ T8487]        __lock_acquire+0xab9/0xd20
[  115.658262][ T8487]        lock_acquire+0x120/0x360
[  115.659840][ T8487]        __mutex_lock+0x182/0xe80
[  115.661487][ T8487]        __del_gendisk+0x129/0x9e0
[  115.663135][ T8487]        del_gendisk+0xe8/0x160
[  115.664703][ T8487]        nbd_dev_remove_work+0x47/0xe0
[  115.666420][ T8487]        process_scheduled_works+0xae1/0x17b0
[  115.668342][ T8487]        worker_thread+0x8a0/0xda0
[  115.669977][ T8487]        kthread+0x711/0x8a0
[  115.671510][ T8487]        ret_from_fork+0x3fc/0x770
[  115.673188][ T8487]        ret_from_fork_asm+0x1a/0x30
[  115.674915][ T8487] 
[  115.674915][ T8487] other info that might help us debug this:
[  115.674915][ T8487] 
[  115.678209][ T8487] Chain exists of:
[  115.678209][ T8487]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  115.678209][ T8487] 
[  115.682775][ T8487]  Possible unsafe locking scenario:
[  115.682775][ T8487] 
[  115.685236][ T8487]        CPU0                    CPU1
[  115.687050][ T8487]        ----                    ----
[  115.688780][ T8487]   rlock(&set->update_nr_hwq_lock);
[  115.690533][ T8487]                                lock(&nbd->config_lock);
[  115.692748][ T8487]                                lock(&set->update_nr_hwq_lock);
[  115.695124][ T8487]   lock(&disk->open_mutex);
[  115.696597][ T8487] 
[  115.696597][ T8487]  *** DEADLOCK ***
[  115.696597][ T8487] 
[  115.699079][ T8487] 3 locks held by kworker/u10:7/8487:
[  115.700792][ T8487]  #0: ffff888106589948 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  115.704255][ T8487]  #1: ffffc9000f517bc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  115.708103][ T8487]  #2: ffff88810658a188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  115.711240][ T8487] 
[  115.711240][ T8487] stack backtrace:
[  115.713094][ T8487] CPU: 1 UID: 0 PID: 8487 Comm: kworker/u10:7 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  115.713103][ T8487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.713109][ T8487] Workqueue: nbd-del nbd_dev_remove_work
[  115.713118][ T8487] Call Trace:
[  115.713122][ T8487]  <TASK>
[  115.713126][ T8487]  dump_stack_lvl+0x189/0x250
[  115.713136][ T8487]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.713144][ T8487]  ? __pfx__printk+0x10/0x10
[  115.713153][ T8487]  ? print_lock_name+0xde/0x100
[  115.713162][ T8487]  print_circular_bug+0x2ee/0x310
[  115.713172][ T8487]  check_noncircular+0x134/0x160
[  115.713181][ T8487]  validate_chain+0xb9b/0x2140
[  115.713190][ T8487]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  115.713200][ T8487]  ? arch_stack_walk+0x11c/0x150
[  115.713210][ T8487]  __lock_acquire+0xab9/0xd20
[  115.713218][ T8487]  ? __del_gendisk+0x129/0x9e0
[  115.713225][ T8487]  lock_acquire+0x120/0x360
[  115.713231][ T8487]  ? __del_gendisk+0x129/0x9e0
[  115.713239][ T8487]  ? check_path+0x21/0x40
[  115.713247][ T8487]  __mutex_lock+0x182/0xe80
[  115.713254][ T8487]  ? __del_gendisk+0x129/0x9e0
[  115.713262][ T8487]  ? __del_gendisk+0x129/0x9e0
[  115.713268][ T8487]  ? __pfx___mutex_lock+0x10/0x10
[  115.713275][ T8487]  ? __pfx___might_resched+0x10/0x10
[  115.713284][ T8487]  ? __lock_acquire+0xab9/0xd20
[  115.713290][ T8487]  ? disk_del_events+0xb5/0x210
[  115.713297][ T8487]  ? __del_gendisk+0xc1/0x9e0
[  115.713304][ T8487]  __del_gendisk+0x129/0x9e0
[  115.713311][ T8487]  ? del_gendisk+0xe0/0x160
[  115.713319][ T8487]  ? __pfx___del_gendisk+0x10/0x10
[  115.713326][ T8487]  ? down_read+0x1ad/0x2e0
[  115.713333][ T8487]  del_gendisk+0xe8/0x160
[  115.713340][ T8487]  nbd_dev_remove_work+0x47/0xe0
[  115.713347][ T8487]  ? process_scheduled_works+0x9ef/0x17b0
[  115.713356][ T8487]  process_scheduled_works+0xae1/0x17b0
[  115.713367][ T8487]  ? __pfx_process_scheduled_works+0x10/0x10
[  115.713377][ T8487]  worker_thread+0x8a0/0xda0
[  115.713388][ T8487]  kthread+0x711/0x8a0
[  115.713398][ T8487]  ? __pfx_worker_thread+0x10/0x10
[  115.713405][ T8487]  ? __pfx_kthread+0x10/0x10
[  115.713415][ T8487]  ? _raw_spin_unlock_irq+0x23/0x50
[  115.713424][ T8487]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.713434][ T8487]  ? __pfx_kthread+0x10/0x10
[  115.713465][ T8487]  ret_from_fork+0x3fc/0x770
[  115.713474][ T8487]  ? __pfx_ret_from_fork+0x10/0x10
[  115.713481][ T8487]  ? __switch_to_asm+0x39/0x70
[  115.713490][ T8487]  ? __switch_to_asm+0x33/0x70
[  115.713498][ T8487]  ? __pfx_kthread+0x10/0x10
[  115.713507][ T8487]  ret_from_fork_asm+0x1a/0x30
[  115.713518][ T8487]  </TASK>
[  115.714727][T10947] netlink: zone id is out of range
[  115.802677][T10947] netlink: zone id is out of range
[  115.805172][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1533'.

VM DIAGNOSIS:
23:20:32  Registers:
info registers vcpu 0

CPU#0
RAX=573906fcce8f1300 RBX=0000000000000a02 RCX=573906fcce8f1300 RDX=0000000000000000
RSI=ffffffff8be29da0 RDI=0000000000000001 RBP=ffffc90009b97b28 RSP=ffffc90009b97a78
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=dffffc0000000000 R13=1ffff110096075be R14=ffff88803b1bc390 R15=1ffff92001372f54
RIP=ffffffff810014b0 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555e0e1500 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2d2d26 CR3=000000003b244000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000316e61637876
XMM02=6e3cc7d0d2e7779c cfd67a2b96064b35 XMM03=de931a69d03fdb70 cc705d40eba34de9
XMM04=b7e3c88dec5be602 5c2baaa2ef06b7d8 XMM05=50fff9d9680b107b c6eb220b79108985
XMM06=68cdf9cedc7f68c3 dcfc03ad3a4a5a65 XMM07=0ac8489c2af34abc b8d0f7820d356d48
XMM08=a8917c82b7e3c88d ec5be6025c2baaa2 XMM09=0000000000000000 00007f0fa1411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000023 RBX=0000000000000023 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000f516e10
R8 =ffff888021080237 R9 =1ffff11004210046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98c7 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe713985193 CR3=00000000392a8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000165 0000000000000030
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffff00 XMM09=2d78742f73657565 75712f336e616c77
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
