last executing test programs:

1.284405708s ago: executing program 1 (id=2225):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0xd0f, 0x1, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x64, 0x10000, 0x6, 0xfb7, 0x5, 0x5e64d927, 0x5, 0x3, 0x800}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0xfffffffffffffea9, &(0x7f0000000940)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x819, 0x870bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x3}, {0xa, 0x2}, {0x10, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1800}, 0x20000080)
listen(r1, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x401, 0x9, 0x8000, 0x32de, 0xc255}, [@TCA_NETEM_RATE={0x9, 0x6, {0x9, 0x7fffffff, 0x0, 0x3}}]}}}]}, 0x60}}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
accept4(r5, &(0x7f0000000280)=@xdp, &(0x7f0000000100)=0x80, 0x0)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041dfffff00000000080020409111cd000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c00000010000104feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8a450200000000001c00128009000100626f6e64000000000c00028008000200a2"], 0x3c}}, 0x40)
close(0xffffffffffffffff)

1.283044367s ago: executing program 1 (id=2226):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x10, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10013}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x40}}, 0x4000000)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3a)
sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000000e06050000000000000000000700000a0900020073797a320000000005000100070000000900020073797a300000000005000100070000000500010007000000050001000700000005000100070000020073797a3000000000050001000700"/112], 0x70}}, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00b3f0ffff5bffffffaaaaaaaaaaae86dd694fd2cd00103afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000400020400000254000000"], 0x4a)

1.141530928s ago: executing program 1 (id=2227):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="00000000000021e3490000b7080000000000007b8af8ff00e2ff00bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={<r3=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e1f, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd340}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000240)={r3, 0xe23a, 0x20, 0x10001}, &(0x7f0000000840)=0x18)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r4, 0x400448e3, &(0x7f0000000100)={0x0, 0x4000, '\x00', 0x2})
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x4040040)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="00000000000000006689e364dd7a9f777af5cc2924c09e865c6ad8954d675562c64acf9a16bd8615069c7a01731543a4829848f14d53c41a0400ae473ef5e503a29833cdd02bc7494e9af7d5626e7fb24a154f3cc9f86c62cb8914e399aa603d5d5b853b707692a1", 0x68)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)

1.084352494s ago: executing program 2 (id=2229):
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400400d}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f00000000c0)=[@ip_retopts={{0x68, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x1f, 0xc5, [@rand_addr=0x64010101, @local, @local, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast]}, @end, @generic={0x80, 0x4, "1505"}, @rr={0x7, 0xf, 0x65, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x3, 0x46}, @noop, @timestamp_addr={0x44, 0x1c, 0xe0, 0x1, 0x0, [{@multicast2, 0xfffff800}, {@loopback, 0x3}, {@empty, 0x3}]}, @noop]}}}], 0x68}, 0x804)

1.083523551s ago: executing program 2 (id=2230):
r0 = socket$inet(0x2, 0xe, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a00000020000081117000000000001800"/32], &(0x7f0000000000)='GPL\x00'}, 0x94)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x4008804)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="010000000097", @ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0)
close(r3)

1.031114782s ago: executing program 1 (id=2232):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r3, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000002180)='-', 0x1}], 0x2}}], 0x2, 0x4000000)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNDEL(r7, 0x400442c9, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000000, '\x00', r6, r4, 0x0, 0x3}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r8}, 0x4)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x6, 0x59ee}, 0x8)

924.232593ms ago: executing program 0 (id=2233):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0)
sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="6783bc330059b2b782a15c87d51216876b5358a472cb6a71759db27d3beb72", 0x1f}], 0x1, &(0x7f0000000680)=ANY=[], 0x150}, 0x40040)
recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400400d}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000300), 0x4)
r4 = socket$inet(0x2, 0x2, 0x1)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000001c0)=0x4)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe7}], 0x11, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01030003001a00001c0012000c000100626f6e64"], 0x3c}}, 0x0)
ioctl$XFS_IOC_FSINUMBERS(r5, 0xc0205867, &(0x7f0000000a40)={&(0x7f0000000040)=0x89, 0x348, &(0x7f0000000700)=[{}, {}, {}, {}], &(0x7f0000000a00)})
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24)
recvmmsg(r7, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

922.570218ms ago: executing program 2 (id=2234):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) (async, rerun: 32)
recvmmsg(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000180)=""/184, 0xb8}, {&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f00000003c0)=""/163, 0xffffffffffffff9f}, {&(0x7f0000000500)=""/4096}], 0x3}, 0xfffffffd}], 0x1, 0x40000100, 0x0) (async, rerun: 32)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async, rerun: 64)
r3 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async, rerun: 32)
write$tun(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (async, rerun: 32)
ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000100)=0x1)

494.216077ms ago: executing program 1 (id=2235):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth1_vlan\x00', 0x400}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) (async, rerun: 32)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) (async, rerun: 32)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, 0x0, 0x0) (async, rerun: 64)
getpid() (rerun: 64)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x200000c5}, 0x48851) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
close(r3)
r6 = socket(0x2b, 0x1, 0x1)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64)
listen(r6, 0x5) (async, rerun: 64)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="34008000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf250100000008002b000600000005002a0001000000050033000200000005002d0000000000"], 0x34}}, 0x20000080) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="00000005000000000000009500000000000000000000000000000000000000048848685389f13d57dca74bfb8134"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) (async)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000400000000000000000000000000832e63c99bc333d3a3a39d164b9d28720e16115f6abe545ca53e2b334a910b34bdcdafb500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 32)
syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x24004811}, 0x4044004) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000140), 0x0}, 0x20)

434.447876ms ago: executing program 0 (id=2236):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r1=>0x0})
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000280)={<r2=>r0, &(0x7f0000000000)='macsec\x00', 0x280, &(0x7f0000000140)={@_ha_fsid={[0x1000, 0x2]}, {0x1, 0x5, 0x1, 0x6}}, 0x2, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000200)})
getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001, 0x11a02}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa9908004500007800000000000190780a010102ac1414aa040090780a010102471000000000000000110000ac1e0101ac141415440c0011ac1414bb4e20fffc443c00e0000001000018000000000000000000e00000020000000104000001000000001f00000000000800e000020200000000ac14140000000004"], 0x0)

433.440824ms ago: executing program 1 (id=2237):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffcf4, &(0x7f0000000040)={&(0x7f00000003c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_ORIG={0x0, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS, @CTA_SEQADJ_CORRECTION_POS={0x0, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS, @CTA_SEQADJ_OFFSET_AFTER={0x33, 0x3, 0x1, 0x0, 0x400}, @CTA_SEQADJ_OFFSET_AFTER={0x53, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x0, 0x1, 0x1, 0x0, 0x4}]}]}, 0x80}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="060000000400000004000000d900000000000000", @ANYRES32, @ANYBLOB="e397d146000000000000000000009912a7656f524a7ee225f3f70937aa18280713f395679abc86d521189e70f4c82613564f62b229999b9a986d029d7f54d68a658378b8618d02f549f84fea0760f5730e3b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000850000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000040000000060a010400000000000000000500000008000b400000000014000480100001800800010064757000040002800900010073797a300000000005000740ae000000140000001100010000000000000000000000000a"], 0xb8}}, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r1, 0x0, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000040))
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000100)=0x3, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x10, 0xa, 0x55)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x79c9, 0x401}, @sack_perm, @window={0x3, 0x2000, 0x401}, @timestamp], 0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b00000000000800040000050000"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000200000000000000", 0x58}], 0x1)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x14)

364.245887ms ago: executing program 0 (id=2238):
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$netlink(0x10, 0x3, 0x6720f15ce8555866) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@getchain={0x5c, 0x66, 0x1, 0x70bd37, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0xd}, {0xfff1, 0x9}, {0x8, 0xffff}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0) (async)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x6, 0xa}, {0xfff3}, {0xb, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x5e, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004844)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r10 = socket$inet(0x2, 0x3, 0x1)
sendto(r10, 0x0, 0x0, 0x4c55, 0x0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, <r12=>0x0]}, &(0x7f0000000100)=0x18)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f00000001c0)={r12, 0x3}, 0x8)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x8000, @local, 0xc}}}, 0x84) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x10, 0x4}, 0x2c)
r13 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r13, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async)
syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1)

363.87883ms ago: executing program 2 (id=2239):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80000a000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10e11ce1b14d6d930df00730d7a5025ccca262f3d40fad95667e04adc9f634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0dd1b9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f0000000200)="f80ec2e2badd040000000000000043ca038e309cc841db38fc969e6ed71b25a62df0239c32cfe044b0191ee39c89211774f22d9af3c4180eb7448c5188999f306ae0bd4491f8a8e1d13f2216127781c1dd25eedb9655cf4abdec8b9f065955ffffe74bd132271d16cac58719c8a13d936ac88c1b3d965505401f0aab490000", 0x7f}], 0x2, 0x0, 0x45, 0x2663}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'pimreg0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="6466e3322d8d298750a25a9c7d7ba108ca09f5b0ef7a8acc795953e30e42891afa78e89cf1cf1b52cf0afc60891632fe41d0c412d002bbf55a74dfbf616f12952f6f2d6206006b6c2fb450c8a8905f303c911f6138b3939302beab3b055469668697686df73f2d00d208ff52f5e528ec97d7a581434fdbb1b69d6131355e472c83bf05da5a9ded51d187daee2a48101d0d", @ANYRESDEC=0x0], 0x3c}}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x230, 0x2e8, 0x2e8, 0x230, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x8, 0x80, 0x1}}, @common=@unspec=@state={{0x28}, {0x1000}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x400, 0xa66, 0x2}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x8000000, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010ea0205000300000000df250000000022ce98ac4c196df44eff4bbb5561898204cfc1fefbec1b072a169fc60fa5b4dde7edaa44a5e9db92745743ad1e64585d78886c4401490070726f5953da8dfb60dec583e6a8949d2251bccf80ca01fc779429d80516bb5986417958f2a21cfe713b720fcbb29a1cca3f4bf3628421285bbd437226d2678199ca99980ba59d850e11980d57dc65215101b36b5995b4c2f7f3647a3cd609fca484e8888a37eaba90f2cb555db5182230", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES8=r3, @ANYRES8=r4, @ANYBLOB="0bb7dc87f6dbdda03534446dbfb52dea6f6e5a2022cb87a6f1c3263467263e043399a870eb31b0ec7f77b7219a27b982cfc41e7db043d672f3874010b531f555e07d151410f7731b2c3651bfb640856917d9f0b699fb008b0bda7f2696e06b6268c6ab6af949c75ba980d4bd83d34cabf21ec8241695f1ca03b691001386f8dba48945ffb4e249ad3810791cddb62d94855e2ba8bcab7a3054754825bffe4184d698de74d47c14"], 0x68}, 0x1, 0x0, 0x0, 0x4000804}, 0x2a69fbabe698a961)

273.316382ms ago: executing program 2 (id=2240):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800e000100696d6d656469617465000000240002800800014000000000180002801400028008000180fffffffc08000340000000040900010073797a3000009200140000001100010000000000000000000000000a"], 0xd8}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff})
close(r1)
r2 = socket(0x1e, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000600)=ANY=[@ANYBLOB="44000000000801010000000100000000030000020900010063797a310000000006000240030000001400048006000740000000060800064000351a00000905000300060098fc417cbef507b31a4153405cb6f0dadde77f59ed26be114bf268ce63687cdace3e46975d313007c9656b139473bde89c864cee7aec1cb8b333d8c12950ebeb4db3aedb56780b42338bf89643bd1cba497e5925fd74f1396a635361f797ccd3ed301cf4ce4f02f726cc25d086df8b727960d1b47dc021f401af58bf4cb079fabeff2a1a95bd0a9661cbd5c2946cb18e533706e7fd8b14721367533a25da5241f7d7c4935b025572321549b9f9f6b6ccf31574cc01844aaec8dc9d12cb848d4def9a011a3f7ae6ca959b65aa1f3c53db503bfca9bc500cf894d68c4395abe99991024133dc5ca3"], 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xda23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = getpid()
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000380)=0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x6e21, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r8, &(0x7f00000004c0)=[{&(0x7f0000000a80)=""/110, 0x6e}, {0x0}], 0x2, 0xa, 0x6c8)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e00000002000000f7ffffff0700000000000000", @ANYRES32=r8, @ANYBLOB="050000005e60040017000000000058e58bfdc7817d280000002000000000006a0000", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0000000001000000000000000100"/28], 0x50)
ioctl$PPPIOCSMRRU(r8, 0x4004743b, &(0x7f0000000180)=0x40)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027050000fb646500000f0002006e94914eeb09006900090000a867ef32bac7e05fda53bb332711d2f70151edf0468004146aeaf788011f5bf62fd605651448b4506f9d7d344ac627c019e64fe06ab3c8e6a301e018e2a3302d9b5591058185f12a08040007267d645875ae787de44252edda36711b30db057d4f2d0cec15abaf12c63d2144ce9bd428436f9ceca50e9ffa39fb306bd824f46d24b12cbc091dd6070a90cdb939f21d59f4089a9613700fc034a81668eff994f6e657bb1a54ebea58a5225cd84a0f6f8bd70dd07dd7320ac89be33da6b41876c9aedb4330b1d0ef47bdc7d121ae12992e16b33616", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$sock_FIOGETOWN(r11, 0x8903, &(0x7f0000000000)=<r12=>0x0)
syz_open_procfs$namespace(r12, &(0x7f0000000200)='ns/ipc\x00')
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000001c0)=r12)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0)

264.658727ms ago: executing program 0 (id=2241):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001"], 0x40c}}, 0x0)
socketpair(0xa, 0x80000, 0x7, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000fddbdf250a00000000000000060007000300000008000500", @ANYRES32=r2, @ANYBLOB="1800088014"], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x7d, &(0x7f0000000080)="1af3050000f2bd5b", 0x8)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001"], 0x40c}}, 0x0) (async)
socketpair(0xa, 0x80000, 0x7, 0x0) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) (async)
sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000fddbdf250a00000000000000060007000300000008000500", @ANYRES32=r2, @ANYBLOB="1800088014"], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
setsockopt(r4, 0x84, 0x7d, &(0x7f0000000080)="1af3050000f2bd5b", 0x8) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async)

144.588381ms ago: executing program 2 (id=2242):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000100c27cc6d6af3c9460656d9cafd0f89afdf040c75dee38378bc26df45ff6a09cd0b992b4e79683eb0c71ed8335dc686cfcd392608e769c8bd8c26c6a37acd21352446b5e956cc7b0d7012602387b740b30fa876857e3086c353865ecd0f8fb4982e1522c6282cb20031b140c68db01e2541617dc5652a1f559eb4603a3ca364a00"/145, @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf251a00000005009200020000000500920089000000"], 0x24}}, 0x0)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
unshare(0x6a040000) (async)
socket(0x22, 0xa, 0x2) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r1, 0x891d, 0x0) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
syz_open_procfs$namespace(0x0, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20000000) (async)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) (async)
socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}, @in6={0xa, 0x4e20, 0x7fffffff, @loopback, 0x167}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, @in6={0xa, 0x4e21, 0x4e51e214, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x8, @remote, 0xfffffba4}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @empty}], 0xc4) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

144.153681ms ago: executing program 0 (id=2243):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{0x0, 0xfdce}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1, 0xf27, 0x101, 0x6, 0x2e1, 0x80]}}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, <r8=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4   \x00'}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000900)={'wlan1\x00'})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = socket$igmp6(0xa, 0x3, 0x2)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffd, 0x8, 0x1, 'syz0\x00'}}, @common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}]}}, @common=@icmp={{0x28}, {0xb, "17e4"}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000120005ff00000000000000000000004aa9349fefa4ff238eb22ec4bd3eceae328ca1e129107ec4fe192bf35f98b1d52c15b43e21cf9f6f3a95ae764716f25c7d4607232e187774fa1f15893a50a25ac9fc14fc9e9d796d0426b8ea4d251ee3276074d716a19f239f6cd113d759ef8c991ec3af5f34ef9571c1fb8db58740009855409ded3f0a905e133e86d3f07e19244fed130cfa10a1757113fbf1ca046d26c86dddb7c4ea9a8435154a0f3a6060174069b1dbdfffd822c7a38a2ff3a85e957846ac216f4f6a88178b4ae3d98a6ed973fcbce8d717286aeec1ab4c16997a8b3c69f6435221423b8d2e18146d70", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0)
read(r12, &(0x7f0000000140)=""/166, 0xa6)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="78000000100003", @ANYRES8=r13], 0x78}}, 0x8000)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x200000}, 0x1c)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0x4}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x96, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x80, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x4, "914f"}, @timestamp={0x8, 0xa, 0x4, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x1a, [0x1, 0xfffffffe, 0x3, 0x6, 0x1, 0x10001]}]}}}}}}}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r8}, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2, 0xd55}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x3}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xdd204690f20f8277}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 0 (id=2244):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f00000458c0)={0x1f, 0x2}, 0x6)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x8, 0x3}, 0x6)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x67)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x1403, 0x400, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)
sendmsg$nl_route(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a40)=@dellink={0x34, 0x11, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4e86}, [@IFLA_IFNAME={0x14, 0x3, 'lo\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x2000400c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38)
r7 = socket$kcm(0x10, 0x2, 0x4)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x1c)
sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001380)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d7d18db747c88f6e518f0a947ee2b49e33538afa8af9234751", 0x89}], 0x1}, 0x20004000)
getpeername$netlink(r2, &(0x7f0000000100), &(0x7f00000001c0)=0xc)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

kernel console output (not intermixed with test programs):

nconsistent configuration, please check.
[  126.854041][ T9120] netlink: 'syz.2.836': attribute type 1 has an invalid length.
[  126.854576][ T9121] netlink: 'syz.0.837': attribute type 7 has an invalid length.
[  126.859902][ T9121] netlink: 'syz.0.837': attribute type 8 has an invalid length.
[  126.883959][ T9120] 8021q: adding VLAN 0 to HW filter on device bond14
[  126.957273][ T9129] bond12: option min_links: invalid value (18446744073709551612)
[  126.959685][ T9129] bond12: option min_links: allowed values 0 - 2147483647
[  126.965029][ T9127] netlink: 'syz.2.836': attribute type 1 has an invalid length.
[  126.965249][ T9129] bond12 (unregistering): Released all slaves
[  127.199375][ T9138] xt_CT: No such helper "syz0"
[  127.572102][ T9159] netlink: 'syz.0.846': attribute type 1 has an invalid length.
[  127.625938][ T9159] 8021q: adding VLAN 0 to HW filter on device bond12
[  127.644510][ T9159] bond12: entered promiscuous mode
[  127.646577][ T9159] bond12: entered allmulticast mode
[  127.651962][ T9159] dummy0: left promiscuous mode
[  127.661415][ T9159] bond12: (slave dummy0): making interface the new active one
[  127.666717][ T9159] dummy0: entered promiscuous mode
[  127.668720][ T9159] dummy0: entered allmulticast mode
[  127.670979][ T9159] bond12: (slave dummy0): Enslaving as an active interface with an up link
[  127.707245][ T9164] tipc: Started in network mode
[  127.715281][ T9164] tipc: Node identity 0a950baa4d9, cluster identity 4711
[  127.727995][ T9164] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.735434][ T9164] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  127.883672][ T9181] netlink: zone id is out of range
[  127.885367][ T9181] netlink: zone id is out of range
[  127.887119][ T9181] netlink: zone id is out of range
[  127.888898][ T9181] netlink: zone id is out of range
[  127.889414][ T9161] tipc: Disabling bearer <eth:syzkaller0>
[  127.890594][ T9181] netlink: zone id is out of range
[  127.906717][ T9181] netlink: zone id is out of range
[  127.908936][ T9181] netlink: zone id is out of range
[  127.911744][ T9181] netlink: zone id is out of range
[  128.036598][ T9200] __nla_validate_parse: 10 callbacks suppressed
[  128.036607][ T9200] netlink: 7 bytes leftover after parsing attributes in process `syz.1.857'.
[  128.070716][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'.
[  128.091877][ T9204] netlink: 1 bytes leftover after parsing attributes in process `syz.2.858'.
[  128.112145][ T9207] netlink: 'syz.0.859': attribute type 7 has an invalid length.
[  128.117718][ T9207] netlink: 148 bytes leftover after parsing attributes in process `syz.0.859'.
[  128.130508][ T9213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.861'.
[  128.142441][ T9213] erspan0: entered promiscuous mode
[  128.147899][ T9213] batadv_slave_0: entered promiscuous mode
[  128.149802][ T9213] batadv_slave_0: left promiscuous mode
[  128.152638][ T9213] erspan0: left promiscuous mode
[  128.176824][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'.
[  128.197030][ T9221] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.266702][ T9231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.867'.
[  128.350405][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'.
[  128.371518][ T5611] Bluetooth: hci2: command 0x0405 tx timeout
[  128.388829][ T9236] netlink: 84 bytes leftover after parsing attributes in process `syz.0.868'.
[  128.568570][ T9242] netlink: 80 bytes leftover after parsing attributes in process `syz.1.870'.
[  128.645680][ T5611] Bluetooth: hci2: link tx timeout
[  128.648235][ T5611] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  129.052058][ T9289] netlink: 'syz.1.882': attribute type 1 has an invalid length.
[  129.057004][ T9289] netlink: 'syz.1.882': attribute type 4 has an invalid length.
[  129.064489][ T9289] netlink: 'syz.1.882': attribute type 1 has an invalid length.
[  129.067838][ T9289] netlink: 'syz.1.882': attribute type 4 has an invalid length.
[  129.072387][ T9289] netlink: 'syz.1.882': attribute type 7 has an invalid length.
[  129.076080][ T9289] netlink: 'syz.1.882': attribute type 8 has an invalid length.
[  129.284384][ T9300] net_ratelimit: 15 callbacks suppressed
[  129.284394][ T9300] openvswitch: netlink: Duplicate key (type 21).
[  129.412808][ T9308] netlink: 'syz.0.886': attribute type 1 has an invalid length.
[  129.792615][ T9331] bridge0: entered allmulticast mode
[  130.018252][ T9339] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  130.070533][ T9339] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  130.140665][ T9339] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  130.186738][ T9341] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  130.189796][ T9341] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  130.196470][ T9339] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  130.258698][ T9012] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  130.268222][ T9012] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  130.277407][ T9012] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  130.287841][ T9012] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  130.494430][ T9352] bond9 (unregistering): Released all slaves
[  130.665006][ T9357] bond9: entered promiscuous mode
[  130.666871][ T9357] 8021q: adding VLAN 0 to HW filter on device bond9
[  130.701343][ T5611] Bluetooth: hci2: command 0x0405 tx timeout
[  130.876130][ T9371] xt_hashlimit: size too large, truncated to 1048576
[  130.929162][ T9376] netlink: 'syz.0.905': attribute type 1 has an invalid length.
[  130.992502][ T9376] netlink: 'syz.0.905': attribute type 1 has an invalid length.
[  131.018576][ T9376] 8021q: adding VLAN 0 to HW filter on device bond13
[  131.033768][ T9376] veth19: entered allmulticast mode
[  131.041791][ T9376] bond13: (slave veth19): Enslaving as an active interface with an up link
[  131.690363][ T9452] bond0: entered promiscuous mode
[  131.693484][ T9452] batadv0: entered promiscuous mode
[  131.696262][ T9452] debugfs: 'hsr1' already exists in 'hsr'
[  131.698700][ T9452] Cannot create hsr debugfs directory
[  131.700998][ T9452] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  131.705063][ T9452] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  131.711337][ T9452] 8021q: adding VLAN 0 to HW filter on device hsr1
[  131.715747][ T9452] batadv0: left promiscuous mode
[  131.733020][ T9455] bond12: (slave dummy0): Releasing active interface
[  131.735431][ T9455] dummy0: left promiscuous mode
[  131.737460][ T9455] dummy0: left allmulticast mode
[  131.743575][ T9455] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  131.860786][ T9467] nbd: error processing sock list
[  132.137060][ T9490] xt_hashlimit: size too large, truncated to 1048576
[  132.189351][ T9492] bridge_slave_0 (unregistering): left allmulticast mode
[  132.196494][ T9492] bridge_slave_0 (unregistering): left promiscuous mode
[  132.203122][ T9492] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.373380][ T9506] 0{X: renamed from gretap0
[  132.377280][ T9506] 0{X: entered allmulticast mode
[  132.380788][ T9506] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  132.710769][ T9535] vlan0: entered promiscuous mode
[  132.757384][ T9535] SET target dimension over the limit!
[  132.775949][ T9535] bond14: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  132.782630][ T9535] bond14 (unregistering): Released all slaves
[  133.595862][ T9553] validate_nla: 4 callbacks suppressed
[  133.595871][ T9553] netlink: 'syz.1.937': attribute type 7 has an invalid length.
[  133.620516][ T9558] __nla_validate_parse: 18 callbacks suppressed
[  133.620530][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'.
[  133.628419][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'.
[  133.632359][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'.
[  133.635567][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'.
[  133.638838][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'.
[  133.669805][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.939'.
[  133.689652][ T9563] 8021q: adding VLAN 0 to HW filter on device bond10
[  133.697416][ T9563] macvlan2: entered promiscuous mode
[  133.699094][ T9563] macvlan2: entered allmulticast mode
[  133.701081][ T9563] bond10: entered allmulticast mode
[  133.703210][ T9563] bond10: entered promiscuous mode
[  133.705259][ T9563] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  133.708352][ T9563] team0: Port device macvlan2 added
[  133.802962][ T9566] bond11 (unregistering): Released all slaves
[  133.939617][ T9579] bridge_slave_1: left allmulticast mode
[  133.942064][ T9579] bridge_slave_1: left promiscuous mode
[  133.945150][ T9579] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.958044][ T9579] team0: Port device team_slave_0 removed
[  133.961798][ T9579] team0: Port device team_slave_1 removed
[  133.966629][ T9579] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  133.998914][ T9579] ip6gre1: entered allmulticast mode
[  134.002626][ T9579] team0: Device ip6gre1 is of different type
[  134.139667][ T9590] netlink: 40 bytes leftover after parsing attributes in process `syz.2.946'.
[  134.377246][ T9608] tipc: Enabled bearer <udp:syz2>, priority 26
[  134.489142][ T9625] netlink: 'syz.2.954': attribute type 9 has an invalid length.
[  134.492819][ T9625] netlink: 'syz.2.954': attribute type 1 has an invalid length.
[  134.525094][ T9625] tunl0: Caught tx_queue_len zero misconfig
[  134.529891][ T9625] netlink: 'syz.2.954': attribute type 10 has an invalid length.
[  134.536811][ T9625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.954'.
[  134.548380][ T9628] netlink: 36 bytes leftover after parsing attributes in process `syz.1.955'.
[  134.657526][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.958'.
[  134.662845][ T9639] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.675905][ T9643] netlink: 'syz.1.959': attribute type 9 has an invalid length.
[  134.843198][ T9657] openvswitch: netlink: nsh attr 0 has unexpected len 12 expected 0
[  134.845820][ T9657] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.854811][ T9657] ip6erspan0: entered allmulticast mode
[  134.864446][ T9653] 0{X: left allmulticast mode
[  134.868966][ T9653] team0: left promiscuous mode
[  134.871027][ T9653] team_slave_0: left promiscuous mode
[  134.878505][ T9653] team_slave_1: left promiscuous mode
[  134.882307][ T9653] veth1_to_team: left allmulticast mode
[  134.886358][ T9653] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  134.889914][ T9653] bridge3: left allmulticast mode
[  134.900067][ T9653] hsr1: left promiscuous mode
[  134.906189][ T9653] bond4: left promiscuous mode
[  134.909632][ T9653] vti0: left promiscuous mode
[  134.912857][ T9653] veth7: left allmulticast mode
[  134.916385][ T9653] bond7: left promiscuous mode
[  134.918436][ T9653] vcan0: left promiscuous mode
[  134.920678][ T9653] ip6gretap1: left promiscuous mode
[  134.923330][ T9653] ip6gretap1: left allmulticast mode
[  134.925423][ T9653] bond10: left promiscuous mode
[  134.927079][ T9653] bond11: left promiscuous mode
[  134.929114][ T9653] bond13: left allmulticast mode
[  134.932955][ T9653] erspan1: left allmulticast mode
[  134.939686][ T9012] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.943646][ T9012] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.994254][ T9012] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  135.150800][ T9665] 8021q: adding VLAN 0 to HW filter on device bond15
[  135.156987][ T9665] bond15 (unregistering): Released all slaves
[  135.433496][ T9679] openvswitch: netlink: Flow key attr not present in new flow.
[  135.502780][    T9] tipc: Node number set to 1191513002
[  135.768516][ T9706] netlink: 'syz.2.976': attribute type 11 has an invalid length.
[  136.809059][ T9756] netlink: 'syz.0.988': attribute type 1 has an invalid length.
[  136.842048][ T9756] bond15: entered promiscuous mode
[  136.845315][ T9756] 8021q: adding VLAN 0 to HW filter on device bond15
[  136.866019][ T9762] batadv_slave_0: Caught tx_queue_len zero misconfig
[  137.126956][ T9780] netlink: 'syz.0.992': attribute type 2 has an invalid length.
[  137.131313][ T9780] netlink: 'syz.0.992': attribute type 8 has an invalid length.
[  137.550452][ T9786] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  137.557295][ T9786] bond11: (slave lo): Enslaving as an active interface with an up link
[  137.560140][ T9786] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  137.701572][ T9793] bridge0: Device is already in use.
[  139.861083][ T9762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  140.007949][ T9813] __nla_validate_parse: 19 callbacks suppressed
[  140.007962][ T9813] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1002'.
[  140.023642][ T9813] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.028714][ T9815] ipip1: left promiscuous mode
[  140.031142][ T9815] bond3: left promiscuous mode
[  140.033819][ T9815] bond3: left allmulticast mode
[  140.036092][ T9815] bond4: left promiscuous mode
[  140.038327][ T9815] bond0: left promiscuous mode
[  140.040597][ T9815] bond6: left allmulticast mode
[  140.047253][ T9815] bond8: left promiscuous mode
[  140.052429][ T9815] bond9: left promiscuous mode
[  140.058254][ T9815] bond10: left allmulticast mode
[  140.060397][ T9815] bond10: left promiscuous mode
[  140.063603][ T9815] macvlan2: left promiscuous mode
[  140.065861][ T9815] macvlan2: left allmulticast mode
[  140.120235][ T9818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1006'.
[  140.144127][ T9818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1006'.
[  140.146959][ T9818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1006'.
[  140.153527][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'.
[  140.188836][ T9822] bond16: option arp_all_targets: invalid value (129)
[  140.195583][ T9822] bond16 (unregistering): Released all slaves
[  140.197920][ T9827] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  140.225777][ T9827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1009'.
[  140.238478][ T9830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1010'.
[  140.308019][ T9832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1011'.
[  140.583705][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'.
[  140.635374][ T9862] netlink: 'syz.2.1017': attribute type 25 has an invalid length.
[  140.637881][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'.
[  140.644817][ T9862] netlink: 'syz.2.1017': attribute type 25 has an invalid length.
[  140.644905][ T9012] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.649865][ T9012] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.652964][ T9012] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  141.225339][ T9896] syzkaller0: entered promiscuous mode
[  141.227914][ T9896] syzkaller0: entered allmulticast mode
[  141.235917][ T9894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.239445][ T9897] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  141.272396][ T9897] tipc: Resetting bearer <eth:syzkaller0>
[  141.287260][ T9897] tipc: Disabling bearer <eth:syzkaller0>
[  141.290104][ T9902] netlink: 'syz.1.1027': attribute type 1 has an invalid length.
[  141.306236][ T9902] bond12: entered promiscuous mode
[  141.308507][ T9902] 8021q: adding VLAN 0 to HW filter on device bond12
[  141.325291][ T9902] bond12: entered allmulticast mode
[  141.337439][ T9902] bond12: (slave bridge4): making interface the new active one
[  141.340320][ T9902] bridge4: entered promiscuous mode
[  141.343335][ T9902] bridge4: entered allmulticast mode
[  141.348355][ T9902] bond12: (slave bridge4): Enslaving as an active interface with an up link
[  141.450163][ T9909] netlink: 'syz.1.1029': attribute type 7 has an invalid length.
[  141.453205][ T9909] netlink: 'syz.1.1029': attribute type 8 has an invalid length.
[  141.462333][ T9916] netlink: 'syz.1.1029': attribute type 7 has an invalid length.
[  141.466646][ T9916] netlink: 'syz.1.1029': attribute type 8 has an invalid length.
[  141.575587][ T9925] bond13 (unregistering): Released all slaves
[  141.854959][ T9936] bridge9: entered promiscuous mode
[  141.857339][ T9936] bridge9: entered allmulticast mode
[  141.867612][ T9936] batadv_slave_1: entered promiscuous mode
[  141.871905][ T9935] batadv_slave_1: left promiscuous mode
[  141.942326][ T9942] 8021q: adding VLAN 0 to HW filter on device team0
[  141.947645][ T9942] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.968053][ T8254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.983930][ T9942] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.989154][ T9942] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.995847][ T9942] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  142.003518][ T8256] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.006491][ T8256] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.013214][ T8256] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.016192][ T8256] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.070735][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  142.155111][ T9953] netlink: 'syz.2.1042': attribute type 13 has an invalid length.
[  142.218616][ T9955] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  142.227920][ T9961] netlink: 'syz.2.1044': attribute type 21 has an invalid length.
[  142.231647][ T9961] netlink: 'syz.2.1044': attribute type 21 has an invalid length.
[  142.252383][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  142.504198][ T9987] sctp: [Deprecated]: syz.2.1051 (pid 9987) Use of int in maxseg socket option.
[  142.504198][ T9987] Use struct sctp_assoc_value instead
[  142.622466][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  143.652582][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  143.658466][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  144.241839][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  145.624132][T10013] __nla_validate_parse: 12 callbacks suppressed
[  145.624147][T10013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1058'.
[  145.633037][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'.
[  145.724834][T10023] validate_nla: 4 callbacks suppressed
[  145.724849][T10023] netlink: 'syz.1.1061': attribute type 4 has an invalid length.
[  145.730714][T10023] netlink: 'syz.1.1061': attribute type 1 has an invalid length.
[  145.795439][T10026] xfrm1: entered allmulticast mode
[  145.836712][T10032] netlink: 'syz.1.1063': attribute type 1 has an invalid length.
[  145.839849][T10031] netlink: 'syz.1.1063': attribute type 1 has an invalid length.
[  145.842787][T10032] netlink: 'syz.1.1063': attribute type 2 has an invalid length.
[  145.845508][T10031] netlink: 'syz.1.1063': attribute type 2 has an invalid length.
[  145.849163][T10032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1063'.
[  145.854510][T10031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1063'.
[  145.893537][T10040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1066'.
[  145.943051][T10042] vlan0: entered promiscuous mode
[  145.948645][T10042] bond_slave_1: entered promiscuous mode
[  146.033076][T10047] netlink: 'syz.2.1068': attribute type 2 has an invalid length.
[  146.035682][T10047] netlink: 'syz.2.1068': attribute type 2 has an invalid length.
[  146.259190][T10071] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.1073'.
[  146.286034][T10073] netlink: 352 bytes leftover after parsing attributes in process `syz.1.1074'.
[  146.289855][T10073] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1074'.
[  146.321805][T10080] netlink: 'syz.2.1073': attribute type 3 has an invalid length.
[  146.324869][T10080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1073'.
[  146.723380][T10112] hsr0: entered promiscuous mode
[  146.748377][T10114] hsr0: left promiscuous mode
[  146.972275][T10132] can: request_module (can-proto-5) failed.
[  147.018790][T10146] netlink: 'syz.1.1085': attribute type 4 has an invalid length.
[  147.021361][T10146] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1085'.
[  147.025055][T10146] NCSI netlink: No device for ifindex 0
[  147.478884][ T9012] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  147.483263][ T9012] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  147.486038][ T9012] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  147.494505][ T7799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.498868][ T9012] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  147.732235][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  148.052373][T10196] xt_ecn: cannot match TCP bits for non-tcp packets
[  149.102489][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.188944][T10228] xt_HMARK: spi-set and port-set can't be combined
[  149.315302][T10237] bond17 (unregistering): Released all slaves
[  149.360386][T10241] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y
[  149.360386][T10241] 3UH5rBn
[  149.689899][T10262] bond17: (slave bond_slave_1): Device is not bonding slave
[  149.694159][T10262] bond17: option active_slave: invalid value (bond_slave_1)
[  149.698774][T10262] bond17 (unregistering): Released all slaves
[  149.906343][T10267] bond17: entered promiscuous mode
[  149.909028][T10267] 8021q: adding VLAN 0 to HW filter on device bond17
[  149.922278][T10267] bond17: (slave bridge11): making interface the new active one
[  149.924725][T10267] bridge11: entered promiscuous mode
[  149.927738][T10267] bridge11: left promiscuous mode
[  150.238186][T10284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.342727][T10288] 8021q: adding VLAN 0 to HW filter on device bond13
[  150.458752][T10299] bond18: (slave vxcan1): The slave device specified does not support setting the MAC address
[  150.465192][T10299] bond18: (slave vxcan1): Error -95 calling set_mac_address
[  150.516985][T10303] bond18: (slave bridge11): Enslaving as an active interface with a down link
[  150.525692][T10299] macvlan1: entered promiscuous mode
[  150.527577][T10299] macvlan1: entered allmulticast mode
[  150.529669][T10299] bond18: entered promiscuous mode
[  150.532003][T10299] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  150.535371][T10299] bond18: left promiscuous mode
[  150.612795][T10313] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  150.615785][T10313] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  150.713672][T10320] __nla_validate_parse: 17 callbacks suppressed
[  150.713753][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'.
[  150.745135][T10320] bond19: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  150.752012][T10320] bond19 (unregistering): Released all slaves
[  150.996383][T10350] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1132'.
[  151.031993][T10354] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  151.136968][T10362] bond19: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  151.147964][T10362] bond19 (unregistering): Released all slaves
[  151.220728][T10372] validate_nla: 12 callbacks suppressed
[  151.220738][T10372] netlink: 'syz.1.1137': attribute type 21 has an invalid length.
[  151.225359][T10372] netlink: 'syz.1.1137': attribute type 22 has an invalid length.
[  151.227863][T10372] netlink: 'syz.1.1137': attribute type 23 has an invalid length.
[  151.230486][T10372] netlink: 'syz.1.1137': attribute type 25 has an invalid length.
[  151.233889][T10372] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1137'.
[  151.258482][T10377] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1138'.
[  151.266333][T10377] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1138'.
[  151.270501][T10378] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1138'.
[  151.281884][T10378] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1138'.
[  151.286428][T10377] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1138'.
[  151.290179][T10377] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1138'.
[  151.294251][T10378] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1138'.
[  151.364921][T10383] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  151.532715][T10394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  151.556504][T10404] bond14: option resend_igmp: invalid value (2878)
[  151.558637][T10404] bond14: option resend_igmp: allowed values 0 - 255
[  151.567124][T10404] bond14 (unregistering): Released all slaves
[  151.596595][T10410] netlink: 'syz.2.1148': attribute type 1 has an invalid length.
[  151.614820][T10410] 8021q: adding VLAN 0 to HW filter on device bond19
[  151.625461][T10410] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  151.948520][T10442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.952565][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.029644][T10445] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  152.050031][T10447] netlink: 'syz.0.1158': attribute type 10 has an invalid length.
[  152.271831][T10457] netlink: 'syz.0.1161': attribute type 1 has an invalid length.
[  152.274446][T10456] netlink: 'syz.0.1161': attribute type 1 has an invalid length.
[  152.622294][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.625567][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.629058][ T8254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.691463][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.694489][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.806809][T10479] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.838214][T10481] syzkaller0: entered promiscuous mode
[  152.840012][T10481] syzkaller0: entered allmulticast mode
[  152.844103][T10481] tipc: Resetting bearer <eth:syzkaller0>
[  152.875442][T10481] tipc: Resetting bearer <eth:syzkaller0>
[  153.892392][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.999555][T10481] tipc: Disabling bearer <eth:syzkaller0>
[  154.101019][T10527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.108015][T10527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.111780][T10527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.141788][T10530] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.167373][T10532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.182870][T10530] veth1_macvtap: left promiscuous mode
[  154.186355][T10530] veth0_macvtap: left promiscuous mode
[  154.189612][T10530] veth0_macvtap: entered promiscuous mode
[  154.200101][T10527] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.202538][T10527] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.245453][T10527] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.252715][T10527] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.311893][ T9012] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.316540][ T9012] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.319768][ T9012] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.318470][T10572] netlink: 'syz.1.1189': attribute type 1 has an invalid length.
[  155.329114][T10572] netlink: 'syz.1.1189': attribute type 10 has an invalid length.
[  155.333973][T10574] can: request_module (can-proto-0) failed.
[  155.334539][T10572] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  155.340269][T10572] team0: Port device netdevsim1 added
[  155.360888][T10572] team0: Port device netdevsim1 removed
[  155.416539][T10577] sctp: [Deprecated]: syz.1.1191 (pid 10577) Use of int in maxseg socket option.
[  155.416539][T10577] Use struct sctp_assoc_value instead
[  155.799966][T10611] __nla_validate_parse: 150 callbacks suppressed
[  155.799976][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1198'.
[  155.809751][T10612] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1197'.
[  155.909943][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'.
[  156.123316][T10654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1207'.
[  156.128871][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'.
[  156.170019][T10656] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  156.382176][T10670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1211'.
[  156.400407][T10670] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1211'.
[  156.818443][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1212'.
[  156.999714][T10680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1214'.
[  157.113117][T10684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1216'.
[  157.212972][T10699] validate_nla: 1 callbacks suppressed
[  157.212982][T10699] netlink: 'syz.2.1219': attribute type 1 has an invalid length.
[  157.925990][T10720] netlink: 'syz.0.1224': attribute type 1 has an invalid length.
[  157.946724][T10720] 8021q: adding VLAN 0 to HW filter on device bond16
[  157.951987][T10720] bond16: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  157.955329][T10720] bond16: entered allmulticast mode
[  157.963807][T10720] net_ratelimit: 13 callbacks suppressed
[  157.963821][T10720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.982652][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.986119][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.993387][T10720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.997125][T10720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.021324][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.026347][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.029168][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.038478][T10719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.088847][T10727] netlink: 'syz.2.1226': attribute type 7 has an invalid length.
[  158.092315][T10727] netlink: 'syz.2.1226': attribute type 8 has an invalid length.
[  158.098169][T10727] dummy0: entered promiscuous mode
[  158.100595][T10727] team0: entered promiscuous mode
[  158.104992][T10727] team_slave_0: entered promiscuous mode
[  158.107306][T10727] team_slave_1: entered promiscuous mode
[  158.110212][T10727] erspan0: entered promiscuous mode
[  158.113990][T10727] hsr2: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  158.117150][T10727] hsr2: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[  158.120396][T10727] hsr2: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network
[  158.163680][T10730] bond20: entered promiscuous mode
[  158.165783][T10730] 8021q: adding VLAN 0 to HW filter on device bond20
[  158.178085][T10730] bridge12: entered promiscuous mode
[  158.180431][T10730] bond20: (slave bridge12): Enslaving as an active interface with an up link
[  158.204102][T10730] bond20 (unregistering): (slave bridge12): Releasing backup interface
[  158.207604][T10730] bridge12: left promiscuous mode
[  158.210262][T10730] bond20 (unregistering): Released all slaves
[  158.277811][T10735] netlink: 'syz.1.1228': attribute type 4 has an invalid length.
[  158.282925][T10735] netlink: 'syz.1.1228': attribute type 4 has an invalid length.
[  158.289202][T10735] netlink: 'syz.1.1228': attribute type 4 has an invalid length.
[  158.317926][T10735] bond14: entered promiscuous mode
[  158.361817][T10740] bond15 (unregistering): Released all slaves
[  158.427914][T10743] IPv6: sit3: Disabled Multicast RS
[  158.574470][T10755] netlink: 'syz.1.1235': attribute type 49 has an invalid length.
[  158.758531][T10760] netlink: 'syz.2.1237': attribute type 1 has an invalid length.
[  159.165426][T10798] 8021q: adding VLAN 0 to HW filter on device team0
[  159.172014][ T8254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.393417][T10819] netlink: 'syz.2.1254': attribute type 1 has an invalid length.
[  159.435311][T10819] bond21: (slave geneve2): making interface the new active one
[  159.439011][T10819] bond21: (slave geneve2): Enslaving as an active interface with an up link
[  159.442698][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  159.445569][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  159.462409][T10817] bond17: entered promiscuous mode
[  159.464332][T10817] 8021q: adding VLAN 0 to HW filter on device bond17
[  159.466961][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  159.663871][T10832] bond18: entered promiscuous mode
[  159.665736][T10832] 8021q: adding VLAN 0 to HW filter on device bond18
[  159.672582][T10838] 8021q: adding VLAN 0 to HW filter on device bond18
[  159.674982][T10838] bond18: (slave ipip0): The slave device specified does not support setting the MAC address
[  159.678151][T10838] bond18: (slave ipip0): Setting fail_over_mac to active for active-backup mode
[  159.683541][T10838] bond18: (slave ipip0): making interface the new active one
[  159.685879][T10838] ipip0: entered promiscuous mode
[  159.688140][T10838] bond18: (slave ipip0): Enslaving as an active interface with an up link
[  159.865253][T10842] syzkaller0: entered promiscuous mode
[  159.871127][T10842] syzkaller0: entered allmulticast mode
[  161.031628][T10877] __nla_validate_parse: 17 callbacks suppressed
[  161.031643][T10877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1268'.
[  161.038828][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1268'.
[  161.042849][T10877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1268'.
[  161.824660][ T5612] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  161.837348][ T5612] CPU: 0 UID: 0 PID: 5612 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  161.837386][ T5612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.837393][ T5612] Call Trace:
[  161.837399][ T5612]  <TASK>
[  161.837405][ T5612]  dump_stack_lvl+0xe8/0x150
[  161.837425][ T5612]  dump_header+0xd3/0x4c0
[  161.837446][ T5612]  oom_kill_process+0x3ab/0x970
[  161.837465][ T5612]  out_of_memory+0x106c/0x1410
[  161.837479][ T5612]  ? try_charge_memcg+0xbb9/0x1570
[  161.837499][ T5612]  ? __pfx___mutex_lock+0x10/0x10
[  161.837521][ T5612]  ? __pfx_out_of_memory+0x10/0x10
[  161.837534][ T5612]  ? do_raw_spin_unlock+0x4d/0x210
[  161.837558][ T5612]  try_charge_memcg+0xc77/0x1570
[  161.837614][ T5612]  ? __pfx_try_charge_memcg+0x10/0x10
[  161.837632][ T5612]  ? percpu_ref_tryget+0x15/0x180
[  161.837664][ T5612]  ? charge_memcg+0x23/0x2b0
[  161.837683][ T5612]  charge_memcg+0x1a2/0x2b0
[  161.837701][ T5612]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  161.837718][ T5612]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  161.837738][ T5612]  __swap_cache_prepare_and_add+0xdc/0x700
[  161.837757][ T5612]  ? page_rmappable_folio+0x9a/0x170
[  161.837781][ T5612]  swap_cache_alloc_folio+0xf1/0x240
[  161.837798][ T5612]  swap_cluster_readahead+0x355/0x670
[  161.837818][ T5612]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  161.837842][ T5612]  ? get_vma_policy+0x27b/0x3c0
[  161.837862][ T5612]  swapin_readahead+0x196/0xc50
[  161.837880][ T5612]  ? swap_table_get+0x1e/0x260
[  161.837897][ T5612]  ? __pfx_swapin_readahead+0x10/0x10
[  161.837913][ T5612]  ? swap_table_get+0x1e/0x260
[  161.837926][ T5612]  ? swap_table_get+0x1e/0x260
[  161.837938][ T5612]  ? swap_table_get+0x1e/0x260
[  161.837952][ T5612]  ? swap_table_get+0x216/0x260
[  161.837966][ T5612]  ? swap_cache_get_folio+0x2e4/0x2f0
[  161.837985][ T5612]  do_swap_page+0x555/0x5120
[  161.838003][ T5612]  ? __pte_offset_map+0x29/0x240
[  161.838019][ T5612]  ? __pte_offset_map+0x29/0x240
[  161.838046][ T5612]  ? do_swap_page+0x128/0x5120
[  161.838060][ T5612]  ? __pfx_do_swap_page+0x10/0x10
[  161.838072][ T5612]  ? __pte_offset_map+0x1ae/0x240
[  161.838090][ T5612]  ? pte_offset_map_rw_nolock+0xea/0x160
[  161.838107][ T5612]  handle_mm_fault+0x12d2/0x3170
[  161.838133][ T5612]  ? handle_mm_fault+0xee/0x3170
[  161.838153][ T5612]  ? __pfx_handle_mm_fault+0x10/0x10
[  161.838166][ T5612]  ? lock_vma_under_rcu+0x45a/0x500
[  161.838201][ T5612]  do_user_addr_fault+0xa73/0x1340
[  161.838220][ T5612]  ? rcu_is_watching+0x15/0xb0
[  161.838236][ T5612]  ? trace_page_fault_user+0x84/0x1e0
[  161.838251][ T5612]  exc_page_fault+0x6a/0xc0
[  161.838266][ T5612]  asm_exc_page_fault+0x26/0x30
[  161.838279][ T5612] RIP: 0033:0x7f8af8d5d68e
[  161.838292][ T5612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  161.838302][ T5612] RSP: 002b:00007ffebca22fa8 EFLAGS: 00010246
[  161.838314][ T5612] RAX: 0000000000000000 RBX: 0000555563784500 RCX: 00007f8af8d5d68e
[  161.838322][ T5612] RDX: 00007ffebca23000 RSI: 0000000000000000 RDI: 0000000000000000
[  161.838330][ T5612] RBP: 00007ffebca2306c R08: 0000000000000000 R09: 0000000000000000
[  161.838337][ T5612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  161.838344][ T5612] R13: 00000000000927c0 R14: 0000000000027583 R15: 00007ffebca230c0
[  161.838366][ T5612]  </TASK>
[  161.844369][ T5612] memory: usage 307200kB, limit 307200kB, failcnt 3053
[  161.948898][ T5612] memory+swap: usage 304784kB, limit 9007199254740988kB, failcnt 0
[  161.951562][ T5612] kmem: usage 304496kB, limit 9007199254740988kB, failcnt 0
[  161.953924][ T5612] Memory cgroup stats for /syz0:
[  161.954127][ T5612] cache 0
[  161.956736][ T5612] rss 0
[  161.957599][ T5612] rss_huge 0
[  161.958593][ T5612] shmem 0
[  161.959496][ T5612] mapped_file 0
[  161.960594][ T5612] dirty 0
[  161.961836][ T5612] writeback 0
[  161.962842][ T5612] workingset_refault_anon 3
[  161.964302][ T5612] workingset_refault_file 0
[  161.965670][ T5612] swap 188416
[  161.966674][ T5612] swapcached 229376
[  161.967848][ T5612] pgpgin 97267
[  161.980456][ T5612] pgpgout 97262
[  161.981894][ T5612] pgfault 97097
[  161.982996][ T5612] pgmajfault 2
[  161.984116][ T5612] inactive_anon 0
[  161.985242][ T5612] active_anon 20480
[  161.986407][ T5612] inactive_file 0
[  161.987530][ T5612] active_file 0
[  161.988617][ T5612] unevictable 0
[  161.989699][ T5612] hierarchical_memory_limit 314572800
[  161.991904][ T5612] hierarchical_memsw_limit 9223372036854771712
[  161.993815][ T5612] total_cache 0
[  161.995079][ T5612] total_rss 0
[  161.996274][ T5612] total_rss_huge 0
[  161.997742][ T5612] total_shmem 0
[  161.998820][ T5612] total_mapped_file 0
[  162.000084][ T5612] total_dirty 0
[  162.001593][ T5612] total_writeback 0
[  162.002786][ T5612] total_workingset_refault_anon 3
[  162.004466][ T5612] total_workingset_refault_file 0
[  162.006456][ T5612] total_swap 188416
[  162.008059][ T5612] total_swapcached 229376
[  162.009818][ T5612] total_pgpgin 97269
[  162.013951][ T5612] total_pgpgout 97264
[  162.015951][ T5612] total_pgfault 97111
[  162.017269][ T5612] total_pgmajfault 2
[  162.020442][ T5612] total_inactive_anon 0
[  162.023053][ T5612] total_active_anon 20480
[  162.024469][ T5612] total_inactive_file 0
[  162.025731][ T5612] total_active_file 0
[  162.026904][ T5612] total_unevictable 0
[  162.028097][ T5612] anon_cost 0
[  162.029100][ T5612] file_cost 0
[  162.030086][ T5612] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1271,pid=10886,uid=0
[  162.035792][ T5612] Memory cgroup out of memory: Killed process 10886 (syz.0.1271) total-vm:102292kB, anon-rss:1248kB, file-rss:23372kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  162.076792][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1273'.
[  162.264804][T10905] dvmrp8: entered allmulticast mode
[  162.370622][T10924] validate_nla: 3 callbacks suppressed
[  162.370632][T10924] netlink: 'syz.0.1280': attribute type 1 has an invalid length.
[  162.426334][T10924] bond19: (slave vxcan3): The slave device specified does not support setting the MAC address
[  162.429467][T10924] bond19: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  162.436620][T10924] bond19: (slave vxcan3): making interface the new active one
[  162.439394][T10924] bond19: (slave vxcan3): Enslaving as an active interface with an up link
[  162.449072][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1280'.
[  162.456545][T10924] bond19 (unregistering): (slave vxcan3): Releasing backup interface
[  162.459914][T10924] bond19 (unregistering): Released all slaves
[  162.505127][T10932] netlink: 'syz.1.1283': attribute type 2 has an invalid length.
[  162.507660][T10932] netlink: 'syz.1.1283': attribute type 2 has an invalid length.
[  162.603778][T10945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1286'.
[  162.704241][T10951] gtp0: entered promiscuous mode
[  162.709373][T10951] gtp0: entered allmulticast mode
[  162.715864][T10951] team0: Device gtp0 is of different type
[  162.898414][T10961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1290'.
[  162.920326][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1291'.
[  162.925412][T10966] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1291'.
[  162.996001][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'.
[  163.009942][T10977] bond0: entered promiscuous mode
[  163.012898][T10977] batadv0: entered promiscuous mode
[  163.019295][T10977] debugfs: 'hsr1' already exists in 'hsr'
[  163.026727][T10977] Cannot create hsr debugfs directory
[  163.167128][T11000] netlink: 'syz.2.1301': attribute type 1 has an invalid length.
[  163.296872][T11019] netlink: 'syz.0.1307': attribute type 4 has an invalid length.
[  163.350712][T11026] x_tables: duplicate underflow at hook 2
[  163.425677][T11017] hm3): entered promiscuous mode
[  163.431101][T11017] netlink: 'syz.2.1306': attribute type 10 has an invalid length.
[  163.654089][T11053] netlink: 'syz.0.1312': attribute type 1 has an invalid length.
[  163.671014][T11053] bond19: (slave vxcan5): The slave device specified does not support setting the MAC address
[  163.676273][T11053] bond19: (slave vxcan5): Error -95 calling set_mac_address
[  163.726505][T11055] bond19: (slave gretap1): making interface the new active one
[  163.730655][T11055] bond19: (slave gretap1): Enslaving as an active interface with an up link
[  163.787346][T11055] syzkaller1: tun_chr_ioctl cmd 1074025677
[  163.789697][T11055] syzkaller1: Refused to change device type
[  163.947976][T11059] net_ratelimit: 17 callbacks suppressed
[  163.947986][T11059] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.038275][T11061] netlink: 'syz.0.1315': attribute type 10 has an invalid length.
[  164.049856][T11061] tap0: tun_chr_ioctl cmd 1074025677
[  164.053753][T11061] tap0: linktype set to 521
[  164.170055][T11063] netlink: 'syz.1.1316': attribute type 5 has an invalid length.
[  164.248496][T11077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.326858][T11081] hsr0: entered promiscuous mode
[  164.329151][T11082] netlink: 'syz.1.1321': attribute type 61 has an invalid length.
[  164.358741][T11080] hsr0: left promiscuous mode
[  164.364277][T11090] veth0: Caught tx_queue_len zero misconfig
[  164.643901][T11107] xt_hashlimit: size too large, truncated to 1048576
[  165.538272][T11170] 8021q: adding VLAN 0 to HW filter on device bond22
[  165.608117][T11179] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  165.668123][T11181] bond22: (slave batadv2): Opening slave failed
[  165.839533][T11191] ip6gre1: entered promiscuous mode
[  165.842024][T11191] ip6gre1: entered allmulticast mode
[  165.997847][T11197] syz.1.1351 (11197) used obsolete PPPIOCDETACH ioctl
[  166.036691][T11199] IPVS: Error connecting to the multicast addr
[  166.338626][T11211] Cannot find add_set index 2 as target
[  166.407299][T11216] __nla_validate_parse: 18 callbacks suppressed
[  166.407310][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'.
[  166.583595][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1361'.
[  166.778204][T11260] macvlan4: entered promiscuous mode
[  166.780258][T11260] macvlan4: entered allmulticast mode
[  166.784300][T11260] bond20: entered promiscuous mode
[  166.787521][T11260] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  166.792773][T11260] bond20: left promiscuous mode
[  166.794911][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'.
[  166.913262][T11265] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1365'.
[  166.998219][T11270] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1366'.
[  167.095226][T11276] bond0: option ad_select: invalid value (16)
[  167.102042][T11276] 8021q: VLANs not supported on ip6_vti0
[  167.150308][T11280] 8021q: adding VLAN 0 to HW filter on device bond21
[  167.263085][T11288] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  167.298980][T11293] xt_CT: You must specify a L4 protocol and not use inversions on it
[  167.587623][T11302] xt_policy: output policy not valid in PREROUTING and INPUT
[  167.665167][T11307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1376'.
[  167.703795][T11311] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0
[  167.731015][T11313] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1378'.
[  167.735292][T11313] validate_nla: 5 callbacks suppressed
[  167.735300][T11313] netlink: 'syz.1.1378': attribute type 32 has an invalid length.
[  167.740494][T11313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1378'.
[  167.750990][T11315] netlink: 'syz.2.1379': attribute type 12 has an invalid length.
[  167.956659][T11331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'.
[  167.959481][T11331] netlink: 'syz.1.1382': attribute type 30 has an invalid length.
[  167.966052][ T5718] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  167.968936][ T5718] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  167.973121][T11331] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1382'.
[  167.976570][ T5718] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  167.980346][T11331] netlink: 'syz.1.1382': attribute type 30 has an invalid length.
[  167.989379][T11331] netlink: 'syz.1.1382': attribute type 30 has an invalid length.
[  168.027564][T11336] netlink: 'syz.1.1383': attribute type 1 has an invalid length.
[  168.081117][T11336] bond15: (slave vxcan3): The slave device specified does not support setting the MAC address
[  168.085743][T11336] bond15: (slave vxcan3): Error -95 calling set_mac_address
[  168.106637][T11341] netlink: 'syz.0.1385': attribute type 1 has an invalid length.
[  168.120723][T11341] 8021q: adding VLAN 0 to HW filter on device bond22
[  168.129189][T11344] bond15: (slave bridge7): Enslaving as an active interface with a down link
[  168.140418][T11344] macvlan0: entered promiscuous mode
[  168.142271][T11344] macvlan0: entered allmulticast mode
[  168.144233][T11344] bond15: entered promiscuous mode
[  168.146223][T11344] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  168.148996][T11344] bond15: left promiscuous mode
[  168.271392][T11347] bond24: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  168.275918][T11347] bond24 (unregistering): Released all slaves
[  168.416379][T11357] netlink: 'syz.0.1389': attribute type 1 has an invalid length.
[  168.447012][T11357] macvlan4: entered promiscuous mode
[  168.448813][T11357] macvlan4: entered allmulticast mode
[  168.454009][T11357] bond24: entered promiscuous mode
[  168.456092][T11357] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  168.463332][T11357] bond24: left promiscuous mode
[  168.473876][T11362] digital: digital_start_poll: Unknown protocol
[  168.746062][T11389] netlink: 'syz.2.1399': attribute type 49 has an invalid length.
[  168.930955][T11404] netlink: 'syz.2.1403': attribute type 10 has an invalid length.
[  168.935528][T11404] team0 (unregistering): left promiscuous mode
[  168.937603][T11404] team_slave_0: left promiscuous mode
[  168.939527][T11404] team_slave_1: left promiscuous mode
[  168.944353][T11404] team0 (unregistering): Port device team_slave_0 removed
[  168.947629][T11404] team0 (unregistering): Port device team_slave_1 removed
[  168.993890][T11405] bond0: entered promiscuous mode
[  168.996095][T11405] batadv0: entered promiscuous mode
[  169.368808][T11425] bond24: entered promiscuous mode
[  169.370641][T11425] 8021q: adding VLAN 0 to HW filter on device bond24
[  169.432824][T11430] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.456926][T11429] tipc: Disabling bearer <eth:syzkaller0>
[  169.498098][T11434] 8021q: adding VLAN 0 to HW filter on device bond25
[  169.583404][T11447] bond25: (slave bond_slave_1): Device is not bonding slave
[  169.585867][T11447] bond25: option active_slave: invalid value (bond_slave_1)
[  169.589012][T11447] bond25 (unregistering): Released all slaves
[  169.608761][T11450] macvlan4: entered promiscuous mode
[  169.610489][T11450] macvlan4: entered allmulticast mode
[  169.741446][T11466] ip6tnl3: entered allmulticast mode
[  169.759625][T11463] Unsupported ieee802154 address type: 0
[  169.850168][T11482] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000
[  169.912595][T11487] geneve3: entered promiscuous mode
[  169.915615][T11487] geneve3: entered allmulticast mode
[  170.098029][T11500] ip6t_srh: unknown srh match flags  4000
[  170.178127][T11510] sctp: [Deprecated]: syz.2.1432 (pid 11510) Use of int in maxseg socket option.
[  170.178127][T11510] Use struct sctp_assoc_value instead
[  170.448233][T11545] veth1_macvtap: entered promiscuous mode
[  170.457808][T11545] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  170.467501][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.474351][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.477463][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.480072][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.562348][T11553] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.605831][T11553] batman_adv: batadv0: Interface activated: batadv_slave_0
[  170.609524][T11553] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.619126][T11553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  170.628476][T11553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  170.638351][T11553] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  170.650041][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.652297][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.659738][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.661998][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.714509][T11555] bond26: entered allmulticast mode
[  171.303917][T11605] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  171.333234][T11605] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  171.408539][T11632] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.411398][T11632] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.434738][T11632] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.446715][T11632] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.479635][T11632] bridge9: left promiscuous mode
[  171.483224][T11632] bridge9: left allmulticast mode
[  171.485395][T11632] xfrm1: left allmulticast mode
[  171.487491][T11632] bond17: left promiscuous mode
[  171.496291][T11632] bond24: left promiscuous mode
[  171.503557][ T5718] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  171.510488][ T5718] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  171.525417][ T5718] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  171.559705][T11647] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  171.561446][T11648] __nla_validate_parse: 29 callbacks suppressed
[  171.561462][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'.
[  171.687687][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1453'.
[  171.756490][T11665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'.
[  171.788075][T11665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'.
[  172.203803][T11681] bond16: option all_slaves_active: invalid value (127)
[  172.206882][T11681] bond16 (unregistering): Released all slaves
[  172.353449][T11685] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1461'.
[  172.474852][T11689] batman_adv: batadv0: Adding interface: dummy0
[  172.477117][T11689] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  172.485734][T11689] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  172.658565][T11698] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.673039][T11698] bond16: entered promiscuous mode
[  172.674970][T11698] 8021q: adding VLAN 0 to HW filter on device bond16
[  172.688901][T11698] 8021q: adding VLAN 0 to HW filter on device bond16
[  172.692376][T11698] bond16: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  172.695595][T11698] bond16: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  172.703463][T11698] bond16: (slave ip6gre2): making interface the new active one
[  172.706578][T11698] ip6gre2: entered promiscuous mode
[  172.710026][T11698] bond16: (slave ip6gre2): Enslaving as an active interface with an up link
[  172.991572][T11716] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1471'.
[  173.002147][T11716] syzkaller1: entered promiscuous mode
[  173.004521][T11716] syzkaller1: entered allmulticast mode
[  173.065594][T11716] Bluetooth: MGMT ver 1.23
[  173.210893][T11723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  173.292517][T11740] syzkaller0: entered promiscuous mode
[  173.296569][T11740] syzkaller0: entered allmulticast mode
[  173.309054][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'.
[  173.312181][T11743] bond17: option min_links: invalid value (18446744073709551612)
[  173.315930][T11743] bond17: option min_links: allowed values 0 - 2147483647
[  173.320534][T11743] bond17 (unregistering): Released all slaves
[  173.368823][T11750] syzkaller1: entered promiscuous mode
[  173.370697][T11750] syzkaller1: entered allmulticast mode
[  173.394036][T11743] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  173.542410][T11760] validate_nla: 10 callbacks suppressed
[  173.542421][T11760] netlink: 'syz.1.1482': attribute type 17 has an invalid length.
[  173.577925][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1482'.
[  173.635622][T11770] netlink: 'syz.2.1485': attribute type 11 has an invalid length.
[  173.737010][T11780] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1487'.
[  173.740210][T11786] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1488'.
[  173.780428][T11786] syzkaller0: entered promiscuous mode
[  173.783809][T11786] syzkaller0: entered allmulticast mode
[  174.905040][T11807] netlink: 'syz.2.1493': attribute type 10 has an invalid length.
[  174.949218][T11811] syzkaller1: entered promiscuous mode
[  174.951359][T11811] syzkaller1: entered allmulticast mode
[  175.063425][T11815] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.082540][T11818] x_tables: duplicate underflow at hook 2
[  175.091287][ T5620] Bluetooth: hci2: command 0x0405 tx timeout
[  175.091422][ T5611] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  175.182695][T11824] netlink: 'syz.0.1500': attribute type 1 has an invalid length.
[  175.853608][T11855] netlink: 'syz.2.1508': attribute type 1 has an invalid length.
[  175.895746][T11855] bond25: entered promiscuous mode
[  175.897858][T11855] 8021q: adding VLAN 0 to HW filter on device bond25
[  176.028385][T11887] tipc: Started in network mode
[  176.029994][T11887] tipc: Node identity 46bb804eeed6, cluster identity 4096
[  176.032374][T11887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.034916][T11887] syzkaller0: entered promiscuous mode
[  176.036672][T11887] syzkaller0: entered allmulticast mode
[  176.048430][T11887] tipc: Resetting bearer <eth:syzkaller0>
[  176.052891][T11886] tipc: Resetting bearer <eth:syzkaller0>
[  176.068308][T11886] tipc: Disabling bearer <eth:syzkaller0>
[  176.096373][T11892] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  176.122596][T11897] netlink: 'syz.2.1517': attribute type 1 has an invalid length.
[  176.160687][T11897] 8021q: adding VLAN 0 to HW filter on device bond26
[  176.164249][T11900] bond26: entered promiscuous mode
[  176.166450][T11900] bond26: entered allmulticast mode
[  176.282362][T11920] pim6reg: entered allmulticast mode
[  176.285817][   T33] audit: type=1107 audit(1779852565.189:2): pid=11918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  176.359319][T11930] syzkaller0: entered promiscuous mode
[  176.389185][T11930] syzkaller0: entered allmulticast mode
[  176.394935][T11930] 0: reclassify loop, rule prio 0, protocol 800
[  176.438368][T11939] gtp0: entered promiscuous mode
[  176.440017][T11939] gtp0: entered allmulticast mode
[  176.498852][T11941] netlink: 'syz.1.1529': attribute type 2 has an invalid length.
[  176.501852][T11941] netlink: 'syz.1.1529': attribute type 2 has an invalid length.
[  176.546935][T11950] netlink: 'syz.1.1531': attribute type 1 has an invalid length.
[  176.559095][T11950] 8021q: adding VLAN 0 to HW filter on device bond17
[  176.586428][T11943] __nla_validate_parse: 19 callbacks suppressed
[  176.586443][T11943] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1530'.
[  176.638075][T11956] netlink: 'syz.1.1531': attribute type 1 has an invalid length.
[  176.641810][T11956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1531'.
[  176.816971][T11969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1533'.
[  176.870806][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'.
[  176.899983][T11974] bond27 (unregistering): Released all slaves
[  177.074004][T11987] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.098780][T11987] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.149600][T11987] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.158966][T11992] xt_CT: No such helper "netbios-ns"
[  177.200702][T11987] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.303341][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.317017][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.327530][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.336620][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.407833][T12002] macsec2: entered promiscuous mode
[  177.409698][T12002] bridge0: entered promiscuous mode
[  177.584716][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1542'.
[  177.590847][T12013] macsec3: entered promiscuous mode
[  177.592698][T12013] dummy0: entered promiscuous mode
[  177.595474][T12013] macsec3: entered allmulticast mode
[  177.597095][T12013] dummy0: entered allmulticast mode
[  177.599870][T12013] dummy0: left allmulticast mode
[  177.602645][T12013] dummy0: left promiscuous mode
[  177.821144][T12032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1547'.
[  177.836476][T12032] x_tables: duplicate entry at hook 2
[  177.899426][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'.
[  177.908029][T12037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1549'.
[  177.928062][T12037] bridge8: port 1(gretap2) entered blocking state
[  177.935025][T12037] bridge8: port 1(gretap2) entered disabled state
[  177.941892][T12037] gretap2: entered allmulticast mode
[  177.944983][T12037] gretap2: entered promiscuous mode
[  177.966408][T12039] syzkaller1: entered promiscuous mode
[  177.972304][T12039] syzkaller1: entered allmulticast mode
[  178.004594][T12041] netlink: 'syz.1.1551': attribute type 1 has an invalid length.
[  178.020081][T12041] 8021q: adding VLAN 0 to HW filter on device bond18
[  178.028416][T12041] vlan0: entered allmulticast mode
[  178.030087][T12041] bond18: entered allmulticast mode
[  178.039704][T12041] bond18: (slave geneve2): making interface the new active one
[  178.042166][T12041] geneve2: entered allmulticast mode
[  178.045188][T12041] bond18: (slave geneve2): Enslaving as an active interface with an up link
[  178.048397][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.052251][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.055868][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.102103][T12044] bridge0: left promiscuous mode
[  178.110308][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.119289][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.127510][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.132102][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.139314][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.144294][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.224742][T12050] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1554'.
[  178.227987][T12050] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1554'.
[  178.256549][T12055] syzkaller0: entered promiscuous mode
[  178.258393][T12055] syzkaller0: entered allmulticast mode
[  178.264269][T12055] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.272804][T12054] tipc: Resetting bearer <eth:syzkaller0>
[  178.283876][T12054] tipc: Disabling bearer <eth:syzkaller0>
[  178.588123][T12082] validate_nla: 1 callbacks suppressed
[  178.588133][T12082] netlink: 'syz.1.1563': attribute type 1 has an invalid length.
[  178.657817][T12085] netlink: 'syz.1.1564': attribute type 1 has an invalid length.
[  178.660825][T12085] netlink: 'syz.1.1564': attribute type 1 has an invalid length.
[  178.723176][T12087] netlink: 'syz.1.1565': attribute type 39 has an invalid length.
[  178.964144][T12101] netlink: 'syz.1.1569': attribute type 5 has an invalid length.
[  179.160536][T12113] lo speed is unknown, defaulting to 1000
[  179.162961][T12113] lo speed is unknown, defaulting to 1000
[  179.168128][T12113] lo speed is unknown, defaulting to 1000
[  179.172348][T12113] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  179.178583][T12113] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  179.185962][T12113] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  179.194135][T12113] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  179.203436][T12113] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  179.226156][T12117] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.246676][T12113] lo speed is unknown, defaulting to 1000
[  179.250307][T12113] lo speed is unknown, defaulting to 1000
[  179.255693][T12113] lo speed is unknown, defaulting to 1000
[  179.268964][T12117] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.338803][T12117] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.378544][T12121] netlink: 'syz.2.1575': attribute type 1 has an invalid length.
[  179.408066][T12121] 8021q: adding VLAN 0 to HW filter on device bond27
[  179.419182][T12121] 8021q: adding VLAN 0 to HW filter on device bond27
[  179.426165][T12121] bond27: (slave vcan2): The slave device specified does not support setting the MAC address
[  179.429895][T12121] bond27: (slave vcan2): Error -95 calling set_mac_address
[  179.439916][T12117] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.513826][T12134] bond0: Device is already in use.
[  179.580122][T12140] 8021q: adding VLAN 0 to HW filter on device bond28
[  179.582505][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.604442][T12140] bond28: (slave veth13): Enslaving as an active interface with an up link
[  179.607234][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.626446][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.637902][ T5483] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.655747][T12116] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.711997][T12141] bond28: (slave bridge14): Enslaving as an active interface with an up link
[  179.721478][T12116] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.791645][T12116] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.839335][T12160] 8021q: adding VLAN 0 to HW filter on device bond29
[  179.854221][T12116] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.879132][T12156] bond29: (slave wireguard0): refused to change device type
[  180.045046][T12177] lo speed is unknown, defaulting to 1000
[  180.339987][T12196] netlink: 'syz.1.1590': attribute type 21 has an invalid length.
[  180.343051][T12196] netlink: 'syz.1.1590': attribute type 5 has an invalid length.
[  180.345499][T12196] netlink: 'syz.1.1590': attribute type 6 has an invalid length.
[  180.364906][T12196] bond20: (slave bond_slave_1): Device is not bonding slave
[  180.367274][T12196] bond20: option active_slave: invalid value (bond_slave_1)
[  180.377595][T12196] bond20 (unregistering): Released all slaves
[  180.399068][T12199] vlan1: entered allmulticast mode
[  180.400961][T12199] bond0: entered allmulticast mode
[  180.498535][T12207] 8021q: adding VLAN 0 to HW filter on device bond30
[  180.518220][T12208] 8021q: adding VLAN 0 to HW filter on device bond30
[  180.521574][T12208] bond30: (slave wireguard0): The slave device specified does not support setting the MAC address
[  180.526368][T12208] bond30: (slave wireguard0): Error -95 calling set_mac_address
[  180.540454][T12207] bond30: (slave wireguard0): The slave device specified does not support setting the MAC address
[  180.545935][T12207] bond30: (slave wireguard0): Error -95 calling set_mac_address
[  180.936132][ T5619] Bluetooth: hci1: command 0x0406 tx timeout
[  180.939530][ T5620] Bluetooth: hci0: command 0x0406 tx timeout
[  182.466638][ T5483] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.473769][ T5483] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.480536][ T5483] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.489046][ T5483] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.568668][T12238] netlink: 'syz.0.1599': attribute type 1 has an invalid length.
[  182.583672][T12238] 8021q: adding VLAN 0 to HW filter on device bond27
[  182.588041][T12241] bond0: Device is already in use.
[  182.654489][T12238] bond27 (unregistering): Released all slaves
[  182.814008][T12259] __nla_validate_parse: 32 callbacks suppressed
[  182.814018][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'.
[  182.818736][T12259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1604'.
[  182.826456][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'.
[  182.826453][ T5483] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  182.829187][T12259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1604'.
[  182.840370][ T5483] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  182.846456][ T5483] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  182.922820][T12269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1607'.
[  183.126955][T12278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1611'.
[  183.159037][T12279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1610'.
[  183.207639][T12285] syzkaller1: entered promiscuous mode
[  183.209790][T12285] syzkaller1: entered allmulticast mode
[  183.215299][T12285] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  183.246832][T12283] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  183.249855][T12283] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  183.398166][T12288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1614'.
[  183.403625][T12288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1614'.
[  183.523785][T12296] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1616'.
[  184.050150][T12307] xt_recent: Unsupported userspace flags (000000b1)
[  184.460963][T12325] lo speed is unknown, defaulting to 1000
[  184.484387][T12333] bond20: (slave bond_slave_1): Device is not bonding slave
[  184.486800][T12333] bond20: option active_slave: invalid value (bond_slave_1)
[  184.490137][T12333] bond20 (unregistering): Released all slaves
[  184.664455][T12348] bond20: entered promiscuous mode
[  184.666390][T12348] 8021q: adding VLAN 0 to HW filter on device bond20
[  184.677204][T12348] 8021q: adding VLAN 0 to HW filter on device bond20
[  184.679510][T12348] bond20: (slave sit2): The slave device specified does not support setting the MAC address
[  184.683302][T12348] bond20: (slave sit2): Error -95 calling set_mac_address
[  184.813928][T12355] validate_nla: 2 callbacks suppressed
[  184.813943][T12355] netlink: 'syz.1.1629': attribute type 1 has an invalid length.
[  184.832712][T12355] veth21: entered allmulticast mode
[  185.195357][T12395] openvswitch: netlink: Missing key (keys=40, expected=80)
[  185.198839][T12396] openvswitch: netlink: Missing key (keys=40, expected=80)
[  185.204940][T12400] netlink: 'syz.2.1640': attribute type 1 has an invalid length.
[  185.207449][T12401] netlink: 'syz.2.1640': attribute type 1 has an invalid length.
[  185.224527][T12401] bond32: entered promiscuous mode
[  185.226734][T12401] 8021q: adding VLAN 0 to HW filter on device bond32
[  185.237227][T12404] netlink: 'syz.1.1641': attribute type 1 has an invalid length.
[  185.259336][T12404] 8021q: adding VLAN 0 to HW filter on device bond22
[  185.312275][T12400] macvtap0: entered allmulticast mode
[  185.320133][T12400] macvtap1: entered allmulticast mode
[  185.436651][T12423] netlink: 'syz.1.1641': attribute type 1 has an invalid length.
[  185.457094][T12419] netlink: 'syz.0.1645': attribute type 1 has an invalid length.
[  185.459584][T12423] bond22: (slave batadv1): Opening slave failed
[  185.701005][T12454] bond25: left promiscuous mode
[  185.707956][T12454] bond26: left promiscuous mode
[  185.709619][T12454] bond26: left allmulticast mode
[  185.725140][T12454] vlan1: left allmulticast mode
[  185.726740][T12454] bond0: left allmulticast mode
[  185.730098][T12454] bond32: left promiscuous mode
[  185.734529][T12454] macvtap0: left allmulticast mode
[  185.736318][T12454] macvtap1: left allmulticast mode
[  185.738182][ T5483] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  185.744848][ T5483] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  185.751737][ T5483] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  185.828919][T12473] veth0_macvtap: left promiscuous mode
[  185.934598][T12482] gtp1: entered promiscuous mode
[  185.936247][T12482] gtp1: entered allmulticast mode
[  186.152364][T12501] netlink: 'syz.2.1665': attribute type 1 has an invalid length.
[  186.333758][T12522] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.515036][T12540] bond27: entered allmulticast mode
[  187.375755][T12578] xt_recent: Unsupported userspace flags (000000b1)
[  187.460588][T12586] bridge0: entered allmulticast mode
[  187.504697][T12586] bond23: option tlb_dynamic_lb: invalid value (5)
[  187.508089][T12586] bond23 (unregistering): Released all slaves
[  187.547785][T12587] 8021q: adding VLAN 0 to HW filter on device bond29
[  187.574856][T12587] bond29 (unregistering): Released all slaves
[  187.687781][T12591] block nbd0: Receive control failed (result -104)
[  187.690827][   T55] block nbd0: Receive control failed (result -32)
[  187.741981][T12597] netlink: 'syz.1.1686': attribute type 39 has an invalid length.
[  187.833507][T12602] __nla_validate_parse: 60 callbacks suppressed
[  187.833518][T12602] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1688'.
[  187.839539][T12606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1689'.
[  187.854291][T12606] bridge7: port 1(gretap2) entered blocking state
[  187.856476][T12606] bridge7: port 1(gretap2) entered disabled state
[  187.858605][T12606] gretap2: entered allmulticast mode
[  187.861117][T12606] gretap2: entered promiscuous mode
[  187.868237][T12602] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1688'.
[  187.917806][T12612] bond23: entered allmulticast mode
[  187.920125][T12613] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1691'.
[  187.929897][T12610] netlink: 'syz.0.1690': attribute type 49 has an invalid length.
[  187.976477][T12610] syzkaller0: entered promiscuous mode
[  187.978373][T12610] syzkaller0: entered allmulticast mode
[  189.068324][T12618] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR
[  189.100871][T12629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1695'.
[  189.154855][T12629] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  189.162096][T12635] vlan0: entered promiscuous mode
[  189.164367][T12635] bridge0: entered promiscuous mode
[  189.225934][T12635] netlink: 'syz.0.1697': attribute type 4 has an invalid length.
[  189.268513][T12644] team_slave_1: Caught tx_queue_len zero misconfig
[  189.280252][T12644] nftables ruleset with unbound chain
[  189.349071][T12651] bond29: (slave bond_slave_1): Device is not bonding slave
[  189.353814][T12651] bond29: option active_slave: invalid value (bond_slave_1)
[  189.357615][T12651] bond29 (unregistering): Released all slaves
[  189.398612][T12655] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1702'.
[  189.420120][T12654] netlink: 212352 bytes leftover after parsing attributes in process `syz.0.1701'.
[  189.499154][T12664] syzkaller0: entered promiscuous mode
[  189.502595][T12664] syzkaller0: entered allmulticast mode
[  189.556939][T12663] 8021q: adding VLAN 0 to HW filter on device bond29
[  189.647964][T12671] syzkaller0: entered promiscuous mode
[  189.649801][T12671] syzkaller0: entered allmulticast mode
[  189.663504][T12671] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1707'.
[  189.790899][T12675] netlink: 184900 bytes leftover after parsing attributes in process `syz.0.1708'.
[  190.739694][T12674] workqueue: Failed to create a rescuer kthread for wq "bond30": -EINTR
[  190.814572][T12689] syzkaller1: entered allmulticast mode
[  190.819617][T12692] validate_nla: 1 callbacks suppressed
[  190.819625][T12692] netlink: 'syz.0.1712': attribute type 1 has an invalid length.
[  190.833131][T12692] netlink: 'syz.0.1712': attribute type 2 has an invalid length.
[  190.835689][T12692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1712'.
[  190.866196][T12699] netlink: 'syz.0.1714': attribute type 1 has an invalid length.
[  190.884211][T12699] bond30: (slave vxcan5): The slave device specified does not support setting the MAC address
[  190.887642][T12699] bond30: (slave vxcan5): Error -95 calling set_mac_address
[  190.990325][T12699] macvlan5: entered promiscuous mode
[  190.992273][T12699] macvlan5: entered allmulticast mode
[  190.994328][T12699] bond30: entered promiscuous mode
[  190.996282][T12699] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  191.001768][T12699] bond30: left promiscuous mode
[  191.027611][T12709] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.726706][T12721] netlink: 'syz.1.1721': attribute type 21 has an invalid length.
[  191.730143][T12721] IPv6: NLM_F_CREATE should be specified when creating new route
[  191.918506][T12732] netlink: 'syz.2.1724': attribute type 1 has an invalid length.
[  192.238559][T12742] netlink: 'syz.0.1728': attribute type 1 has an invalid length.
[  192.260987][T12742] veth29: entered promiscuous mode
[  192.266539][T12742] bond31: (slave veth29): Enslaving as a backup interface with a down link
[  192.271917][T12742] 8021q: adding VLAN 0 to HW filter on device bond31
[  192.308355][T12745] netlink: 'syz.0.1729': attribute type 12 has an invalid length.
[  192.740963][T12753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  192.876879][T12762] __nla_validate_parse: 19 callbacks suppressed
[  192.876889][T12762] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1735'.
[  192.904168][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'.
[  192.988075][T12771] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.994655][T12771] syzkaller0: entered promiscuous mode
[  192.996998][T12771] syzkaller0: entered allmulticast mode
[  193.018168][T12771] tipc: Resetting bearer <eth:syzkaller0>
[  193.023659][T12771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1737'.
[  193.029967][T12769] tipc: Resetting bearer <eth:syzkaller0>
[  193.039222][T12769] tipc: Disabling bearer <eth:syzkaller0>
[  193.115179][T12778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1740'.
[  195.012965][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  196.106294][T12778] veth23: entered allmulticast mode
[  196.125145][T12781] bond24 (unregistering): Released all slaves
[  196.195950][T12793] syzkaller1: entered promiscuous mode
[  196.199977][T12793] syzkaller1: entered allmulticast mode
[  196.367581][T12816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1745'.
[  196.367587][T12815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1745'.
[  196.370870][T12816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1745'.
[  196.385034][T12821] x_tables: unsorted underflow at hook 4
[  196.385141][T12819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1745'.
[  196.395367][T12821] x_tables: unsorted underflow at hook 4
[  196.440101][T12825] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1748'.
[  196.440304][T12833] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1748'.
[  196.540513][T12847] netlink: 'syz.1.1754': attribute type 1 has an invalid length.
[  196.562452][T12847] 8021q: adding VLAN 0 to HW filter on device bond24
[  196.623747][T12856] syzkaller1: entered promiscuous mode
[  196.627118][T12856] syzkaller1: entered allmulticast mode
[  196.635487][T12856] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96
[  196.696898][T12863] lo speed is unknown, defaulting to 1000
[  196.841075][T12878] syzkaller1: entered promiscuous mode
[  196.845272][T12878] syzkaller1: entered allmulticast mode
[  196.986001][T12887] xt_CT: No such helper "snmp"
[  197.101407][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  197.193691][ T9012] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.196291][ T9012] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.198840][ T9012] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.201624][ T9012] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.306534][T12895] netlink: 'syz.1.1769': attribute type 2 has an invalid length.
[  197.350902][T12897] netlink: 'syz.1.1770': attribute type 1 has an invalid length.
[  197.376056][T12897] bond25: (slave vxcan1): The slave device specified does not support setting the MAC address
[  197.379640][T12897] bond25: (slave vxcan1): Error -95 calling set_mac_address
[  197.457913][T12897] bond25: (slave bridge9): Enslaving as an active interface with a down link
[  197.594109][T12910] netlink: 'syz.1.1773': attribute type 1 has an invalid length.
[  197.628111][T12911] bond26: (slave vxcan1): The slave device specified does not support setting the MAC address
[  197.632281][T12911] bond26: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  197.637323][T12911] bond26: (slave vxcan1): making interface the new active one
[  197.640285][T12911] bond26: (slave vxcan1): Enslaving as an active interface with an up link
[  197.699412][T12921] veth1_to_bond: entered allmulticast mode
[  197.705631][T12923] netlink: 'syz.0.1776': attribute type 9 has an invalid length.
[  197.768799][T12919] veth1_to_bond: left allmulticast mode
[  197.816980][T12930] netlink: 'syz.1.1778': attribute type 11 has an invalid length.
[  197.880342][T12930] dvmrp0: entered allmulticast mode
[  197.889426][T12930] __nla_validate_parse: 10 callbacks suppressed
[  197.889435][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'.
[  197.907699][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1780'.
[  197.909706][T12930] ip6tnl2: entered allmulticast mode
[  197.914512][T12934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1780'.
[  197.957674][T12940] netlink: 'syz.2.1781': attribute type 1 has an invalid length.
[  197.960951][T12940] netlink: 'syz.2.1781': attribute type 1 has an invalid length.
[  197.963925][T12940] netlink: 'syz.2.1781': attribute type 1 has an invalid length.
[  197.968892][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1781'.
[  197.974174][T12940] netlink: 658 bytes leftover after parsing attributes in process `syz.2.1781'.
[  197.978113][T12940] netlink: 'syz.2.1781': attribute type 1 has an invalid length.
[  198.050262][T12943] vlan0: entered allmulticast mode
[  198.053236][T12943] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1783'.
[  198.100665][T12946] 8021q: adding VLAN 0 to HW filter on device bond32
[  198.119672][T12947] bond32: (slave gretap3): making interface the new active one
[  198.123789][T12947] bond32: (slave gretap3): Enslaving as an active interface with an up link
[  198.361001][T12969] 8021q: adding VLAN 0 to HW filter on device bond33
[  198.367463][T12969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1789'.
[  198.503692][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1789'.
[  198.575938][T12973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1790'.
[  198.819380][T12988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1792'.
[  199.027564][ T5483] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  199.031035][ T5483] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  199.034697][ T5483] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  199.136941][T13000] lo speed is unknown, defaulting to 1000
[  199.646756][ T5483] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  199.650216][ T5483] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  199.655705][ T5483] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  199.822123][T13046] 8021q: adding VLAN 0 to HW filter on device bond27
[  199.832716][T13046] macvlan0: entered promiscuous mode
[  199.834954][T13046] macvlan0: entered allmulticast mode
[  199.837520][T13046] bond27: entered allmulticast mode
[  199.839744][T13046] bond27: entered promiscuous mode
[  199.842686][T13046] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  199.846876][T13046] team0: Port device macvlan0 added
[  199.965785][T13050] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  199.969625][T13050] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  200.004083][T13052] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  200.007460][T13052] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  200.208923][T13060] syzkaller0: entered promiscuous mode
[  200.210610][T13060] syzkaller0: entered allmulticast mode
[  200.378786][T13068] lo speed is unknown, defaulting to 1000
[  200.616326][T13078] 8021q: adding VLAN 0 to HW filter on device bond28
[  200.636054][T13086] GUP no longer grows the stack in syz.0.1817 (13086): 200000003000-20000000a000 (200000001000)
[  200.641141][T13086] CPU: 0 UID: 0 PID: 13086 Comm: syz.0.1817 Not tainted syzkaller #0 PREEMPT(full) 
[  200.641153][T13086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  200.641158][T13086] Call Trace:
[  200.641163][T13086]  <TASK>
[  200.641183][T13086]  dump_stack_lvl+0xe8/0x150
[  200.641198][T13086]  __get_user_pages+0x2378/0x2720
[  200.641209][T13086]  ? __gup_longterm_locked+0xc4e/0x1630
[  200.641224][T13086]  ? __gup_longterm_locked+0xc4e/0x1630
[  200.641232][T13086]  ? down_read_killable+0x1bb/0x340
[  200.641247][T13086]  __gup_longterm_locked+0xdcf/0x1630
[  200.641262][T13086]  ? lock_acquire+0x106/0x350
[  200.641277][T13086]  gup_fast_fallback+0x1d84/0x20d0
[  200.641298][T13086]  ? __pfx_gup_fast_fallback+0x10/0x10
[  200.641308][T13086]  ? is_valid_gup_args+0x11f/0x200
[  200.641319][T13086]  ? get_user_pages_fast+0x4d/0xb0
[  200.641329][T13086]  __iov_iter_get_pages_alloc+0x370/0xa10
[  200.641343][T13086]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  200.641355][T13086]  iov_iter_get_pages2+0x5e/0xa0
[  200.641366][T13086]  __se_sys_vmsplice+0x7c7/0x1620
[  200.641383][T13086]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  200.641393][T13086]  ? __pfx_futex_wake+0x10/0x10
[  200.641406][T13086]  ? lockdep_hardirqs_on+0x7a/0x110
[  200.641435][T13086]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.641443][T13086]  do_syscall_64+0x15f/0xf80
[  200.641451][T13086]  ? trace_irq_disable+0x3b/0x140
[  200.641464][T13086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.641471][T13086] RIP: 0033:0x7f8af8d9ce59
[  200.641479][T13086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  200.641485][T13086] RSP: 002b:00007f8af9c62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  200.641494][T13086] RAX: ffffffffffffffda RBX: 00007f8af9015fa0 RCX: 00007f8af8d9ce59
[  200.641500][T13086] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a
[  200.641505][T13086] RBP: 00007f8af8e32d6f R08: 0000000000000000 R09: 0000000000000000
[  200.641509][T13086] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  200.641513][T13086] R13: 00007f8af9016038 R14: 00007f8af9015fa0 R15: 00007ffebca22cc8
[  200.641525][T13086]  </TASK>
[  200.798491][T13093] 1{X: renamed from 30{X
[  200.801862][T13093] 1{X: entered allmulticast mode
[  200.804581][T13093] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  200.846000][T13096] bond34: entered promiscuous mode
[  200.848562][T13096] 8021q: adding VLAN 0 to HW filter on device bond34
[  200.865428][T13096] bond34: entered allmulticast mode
[  200.894309][T13096] bond34: (slave bridge9): making interface the new active one
[  200.898513][T13096] bridge9: entered promiscuous mode
[  200.902219][T13096] bridge9: entered allmulticast mode
[  200.904871][T13096] bond34: (slave bridge9): Enslaving as an active interface with an up link
[  200.923174][T13101] bond34: entered promiscuous mode
[  200.925247][T13101] 8021q: adding VLAN 0 to HW filter on device bond34
[  201.012203][T13101] bond34: (slave bridge15): making interface the new active one
[  201.014516][T13101] bridge15: entered promiscuous mode
[  201.017472][T13101] bridge15: left promiscuous mode
[  201.223635][T13115] x_tables: duplicate underflow at hook 3
[  201.320281][T13125] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  201.328274][T13125] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  201.381329][T13132] 8021q: adding VLAN 0 to HW filter on device bond35
[  201.557346][T13143] 8021q: adding VLAN 0 to HW filter on device bond29
[  201.570908][T13145] bond36: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  201.574770][T13145] bond36 (unregistering): Released all slaves
[  201.587235][T13143] vlan1: entered allmulticast mode
[  201.589193][T13143] veth0_to_bond: entered allmulticast mode
[  201.592108][T13143] bond29: (slave vlan1): Opening slave failed
[  201.813553][T13173] validate_nla: 8 callbacks suppressed
[  201.813595][T13173] netlink: 'syz.1.1843': attribute type 1 has an invalid length.
[  201.830138][T13173] 8021q: adding VLAN 0 to HW filter on device bond30
[  201.844900][T13173] lo speed is unknown, defaulting to 1000
[  201.955222][T13173] dvmrp0: entered allmulticast mode
[  201.960853][T13173] 8021q: adding VLAN 0 to HW filter on device batadv1
[  201.965237][T13173] bond30: (slave batadv1): making interface the new active one
[  201.968622][T13173] bond30: (slave batadv1): Enslaving as an active interface with an up link
[  202.022701][   T12] dvmrp0: left allmulticast mode
[  202.153202][T13189] bond31: (slave bond_slave_1): Device is not bonding slave
[  202.155505][T13189] bond31: option active_slave: invalid value (bond_slave_1)
[  202.158970][T13189] bond31 (unregistering): Released all slaves
[  202.561491][T13171] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  202.628128][T13206] SET target dimension over the limit!
[  202.637618][T13207] netlink: 'syz.0.1848': attribute type 1 has an invalid length.
[  202.638506][T13209] tipc: New replicast peer: 255.255.255.255
[  202.642559][T13207] netlink: 'syz.0.1848': attribute type 2 has an invalid length.
[  202.645898][T13209] tipc: Enabled bearer <udp:syz2>, priority 26
[  202.650645][T13209] netlink: 'syz.2.1850': attribute type 21 has an invalid length.
[  202.653655][T13209] netlink: 'syz.2.1850': attribute type 1 has an invalid length.
[  202.775810][T13233] syzkaller0: entered promiscuous mode
[  202.777537][T13233] syzkaller0: entered allmulticast mode
[  203.019242][T13267] __nla_validate_parse: 37 callbacks suppressed
[  203.019252][T13267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1865'.
[  203.114875][T13274] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1868'.
[  203.129334][T13276] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1868'.
[  203.287490][T13294] lo speed is unknown, defaulting to 1000
[  203.293780][T13294] lo speed is unknown, defaulting to 1000
[  203.296113][T13294] lo speed is unknown, defaulting to 1000
[  203.299610][T13298] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1876'.
[  203.304221][T13298] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1876'.
[  203.349868][T13300] 8021q: adding VLAN 0 to HW filter on device team0
[  203.355645][T13300] batman_adv: batadv0: Interface activated: dummy0
[  203.359092][T13300] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.376587][T13300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  203.379735][T13300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  203.406497][T13300] veth1_macvtap: left promiscuous mode
[  203.410484][T13300] veth0_macvtap: left promiscuous mode
[  203.413071][T13300] veth0_macvtap: entered promiscuous mode
[  203.415506][T13300] veth1_macvtap: entered promiscuous mode
[  203.421076][T13300] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  203.425315][T13300] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  203.428164][T13300] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  203.428646][T13294] infiniband sqz0: set active
[  203.430948][T13300] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  203.435240][T13294] infiniband sqz0: added lo
[  203.437750][T13300] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  203.472652][ T9012] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.472959][T13294] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  203.475960][ T6520] lo speed is unknown, defaulting to 1000
[  203.480956][T13294] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  203.485355][ T6520] sqz0: Port: 1 Link ACTIVE
[  203.489214][T13294] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  203.526534][ T9012] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.538189][T13294] RDS/IB: sqz0: added
[  203.538321][ T9012] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.542653][T13294] smc: adding ib device sqz0 with port count 1
[  203.548038][T13294] smc:    ib device sqz0 port 1 has no pnetid
[  203.560213][ T6512] lo speed is unknown, defaulting to 1000
[  203.582710][T13294] lo speed is unknown, defaulting to 1000
[  203.618113][T13318] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1881'.
[  203.680233][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1880'.
[  203.691373][T13322] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1880'.
[  203.694356][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1880'.
[  203.697291][T13322] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1880'.
[  203.763513][ T6520] tipc: Node number set to 2886997135
[  203.766971][T13294] lo speed is unknown, defaulting to 1000
[  203.771028][T13333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  203.776182][T13333] veth1_to_bond: entered allmulticast mode
[  203.779086][T13333] veth1_to_bond (unregistering): left allmulticast mode
[  203.880324][T13334] lo speed is unknown, defaulting to 1000
[  203.912392][T13334] lo speed is unknown, defaulting to 1000
[  203.997200][T13294] lo speed is unknown, defaulting to 1000
[  204.033016][T13344] bridge0: port 3(ipvlan0) entered blocking state
[  204.035186][T13344] bridge0: port 3(ipvlan0) entered disabled state
[  204.037433][T13344] ipvlan0: entered allmulticast mode
[  204.039219][T13344] bridge0: entered allmulticast mode
[  204.042523][T13344] ipvlan0: left allmulticast mode
[  204.044200][T13344] bridge0: left allmulticast mode
[  204.426897][T13372] bond11: (slave lo): Releasing backup interface
[  204.429502][T13372] bond11: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  204.442709][T13372] batman_adv: batadv0: Interface deactivated: dummy0
[  204.449491][T13372] batman_adv: batadv0: Removing interface: dummy0
[  204.458652][T13372] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  204.477764][T13373] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  204.491484][ T6520] lo speed is unknown, defaulting to 1000
[  204.495275][ T6505] lo speed is unknown, defaulting to 1000
[  204.499036][ T6520] sqz0: Port: 1 Link DOWN
[  204.511846][ T6520] lo speed is unknown, defaulting to 1000
[  204.749323][T13387] gtp0: entered promiscuous mode
[  204.759006][T13387] gtp0: entered allmulticast mode
[  204.909515][T13394] veth15: entered promiscuous mode
[  204.984095][T13406] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  205.066715][T13416] syzkaller0: entered promiscuous mode
[  205.076816][T13416] syzkaller0: entered allmulticast mode
[  205.213738][T13433] netlink: 'syz.0.1907': attribute type 1 has an invalid length.
[  205.234546][T13433] bond37: entered promiscuous mode
[  205.237629][T13433] 8021q: adding VLAN 0 to HW filter on device bond37
[  205.260356][T13433] bond37: (slave bridge10): making interface the new active one
[  205.264973][T13433] bridge10: entered promiscuous mode
[  205.268524][T13433] bond37: (slave bridge10): Enslaving as an active interface with an up link
[  205.296793][T13440] netlink: 'syz.1.1909': attribute type 83 has an invalid length.
[  205.389574][T13448] netlink: 'syz.2.1911': attribute type 1 has an invalid length.
[  205.396800][T13448] netlink: 'syz.2.1911': attribute type 1 has an invalid length.
[  205.399461][T13448] netlink: 'syz.2.1911': attribute type 8 has an invalid length.
[  205.514603][T13470] TCP: TCP_TX_DELAY enabled
[  205.566544][T13472] syzkaller1: entered promiscuous mode
[  205.568445][T13474] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  205.570719][T13472] syzkaller1: entered allmulticast mode
[  205.573071][T13474] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.640939][T13475] syzkaller1: entered promiscuous mode
[  205.645957][T13475] syzkaller1: entered allmulticast mode
[  205.680757][ T9012] tipc: Subscription rejected, illegal request
[  205.695097][   T33] audit: type=1804 audit(1779852594.609:3): pid=13484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1922" name="/newroot/637/memory.events" dev="tmpfs" ino=3274 res=1 errno=0
[  205.702914][   T33] audit: type=1800 audit(1779852594.609:4): pid=13484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1922" name="memory.events" dev="tmpfs" ino=3274 res=0 errno=0
[  205.746309][T13486] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.759368][T13486] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.763535][T13486] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.768328][T13486] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  205.775534][T11849] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.778364][T11849] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.782122][T11849] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.784420][T11849] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.190740][T13525] bond35 (unregistering): Released all slaves
[  206.431034][T13537] ip6tnl3: entered allmulticast mode
[  206.510373][T13541] netlink: 'syz.2.1939': attribute type 11 has an invalid length.
[  206.643478][T13557] bond35: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  206.647717][T13557] bond35 (unregistering): Released all slaves
[  206.726876][T13560] ip6tnl4: entered allmulticast mode
[  206.867355][T13564] x_tables: unsorted underflow at hook 4
[  206.873844][T13564] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003
[  207.005424][T13579] validate_nla: 2 callbacks suppressed
[  207.005433][T13579] netlink: 'syz.2.1951': attribute type 12 has an invalid length.
[  207.009864][T13579] netlink: 'syz.2.1951': attribute type 11 has an invalid length.
[  207.031867][T13583] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.039810][T13583] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.598222][T13612] netlink: 'syz.1.1956': attribute type 1 has an invalid length.
[  207.631134][T13612] bond31: entered promiscuous mode
[  207.635771][T13612] 8021q: adding VLAN 0 to HW filter on device bond31
[  207.670641][T13621] netlink: 'syz.0.1957': attribute type 1 has an invalid length.
[  209.004864][T13637] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:0
[  209.013541][T13638] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:0
[  209.014752][T13635] bond32: option arp_all_targets: invalid value (129)
[  209.034003][T13635] bond32 (unregistering): Released all slaves
[  209.081887][T13641] netlink: 'syz.0.1962': attribute type 11 has an invalid length.
[  209.217250][T13646] __nla_validate_parse: 86 callbacks suppressed
[  209.217260][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1963'.
[  209.294839][T13662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1967'.
[  209.303801][T13662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1967'.
[  209.628616][T13696] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1975'.
[  209.636600][T13696] syzkaller1: entered promiscuous mode
[  209.638385][T13696] syzkaller1: entered allmulticast mode
[  209.696072][T13697] netlink: 'syz.0.1975': attribute type 1 has an invalid length.
[  209.698510][T13697] netlink: 'syz.0.1975': attribute type 3 has an invalid length.
[  209.700870][T13697] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1975'.
[  212.268298][T13658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  212.362272][T13702] sctp: [Deprecated]: syz.0.1977 (pid 13702) Use of struct sctp_assoc_value in delayed_ack socket option.
[  212.362272][T13702] Use struct sctp_sack_info instead
[  212.527296][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1980'.
[  212.530084][T13714] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1980'.
[  212.534654][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1980'.
[  212.538038][T13714] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1980'.
[  212.540823][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1980'.
[  212.593785][T13719] netlink: 'syz.0.1982': attribute type 6 has an invalid length.
[  212.840138][T13742] netlink: 'syz.2.1988': attribute type 1 has an invalid length.
[  212.873920][T13742] bond35: entered promiscuous mode
[  212.879939][T13749] netlink: 'syz.1.1989': attribute type 10 has an invalid length.
[  212.881436][T13742] 8021q: adding VLAN 0 to HW filter on device bond35
[  212.894904][T13742] bond35: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  212.898671][T13742] bond35: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  212.902407][T13742] bond35: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  212.955284][T13754] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  212.960657][T13754] netlink: 'syz.0.1991': attribute type 1 has an invalid length.
[  213.145301][T13770] netlink: 'syz.2.1994': attribute type 1 has an invalid length.
[  213.172671][T13770] bond36: entered promiscuous mode
[  213.175120][T13770] 8021q: adding VLAN 0 to HW filter on device bond36
[  213.345070][T13781] netlink: 'syz.2.1997': attribute type 2 has an invalid length.
[  213.348717][T13781] netlink: 'syz.2.1997': attribute type 2 has an invalid length.
[  213.364517][T13780] vlan1: entered promiscuous mode
[  213.366561][T13780] bond_slave_1: entered promiscuous mode
[  213.460724][T13785] pim6reg1: entered promiscuous mode
[  213.464947][T13785] pim6reg1: entered allmulticast mode
[  213.500826][T13785] geneve3: entered promiscuous mode
[  213.505784][ T5718] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.509158][ T5718] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.514144][ T5718] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.518426][ T5718] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.622683][T13787] netlink: 'syz.0.2000': attribute type 4 has an invalid length.
[  213.675646][T13787] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  214.167283][T13819] 8021q: adding VLAN 0 to HW filter on device bond37
[  214.517700][T13854] __nla_validate_parse: 13 callbacks suppressed
[  214.517710][T13854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2015'.
[  214.602703][T13856] netlink: 'syz.1.2016': attribute type 12 has an invalid length.
[  214.612180][T13856] syzkaller0: entered promiscuous mode
[  214.614404][T13856] syzkaller0: entered allmulticast mode
[  214.764961][T13861] netlink: 'syz.1.2018': attribute type 1 has an invalid length.
[  214.768690][T13861] nbd: error processing sock list
[  214.807224][T13863] pim6reg: entered allmulticast mode
[  214.851764][T13865] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2020'.
[  214.875223][T13869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  215.116149][T13893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'.
[  215.256551][T13901] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  215.317703][T13913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2025'.
[  215.340139][T13913] 8021q: adding VLAN 0 to HW filter on device bond38
[  215.356477][T13913] bond38: (slave veth17): Enslaving as an active interface with an up link
[  215.369612][T13913] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2025'.
[  215.414729][T13913] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2025'.
[  215.453655][T13913] bond38: (slave bridge15): Enslaving as an active interface with an up link
[  215.555478][T13922] lo speed is unknown, defaulting to 1000
[  215.563776][T13922] lo speed is unknown, defaulting to 1000
[  215.764642][T13957] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2030'.
[  215.775411][T13927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2024'.
[  215.960714][T13968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  216.001131][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2032'.
[  216.161576][T13992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2038'.
[  216.192259][T13992] macvtap0: entered promiscuous mode
[  216.194062][T13992] erspan0: entered promiscuous mode
[  216.195839][T13992] macvtap0: entered allmulticast mode
[  216.197489][T13992] erspan0: entered allmulticast mode
[  216.347558][T14007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.356066][T14007] syzkaller0: entered promiscuous mode
[  216.358183][T14007] syzkaller0: entered allmulticast mode
[  216.394912][T14007] tipc: Resetting bearer <eth:syzkaller0>
[  216.398029][T14005] tipc: Resetting bearer <eth:syzkaller0>
[  216.409069][T14005] tipc: Disabling bearer <eth:syzkaller0>
[  216.573230][T14019] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  216.627096][T14024] syzkaller1: entered promiscuous mode
[  216.628984][T14024] syzkaller1: entered allmulticast mode
[  216.680766][T14019] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  216.757126][T14037] openvswitch: netlink: Missing key (keys=40, expected=100)
[  216.757933][T14019] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  216.936465][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  216.966614][ T5718] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  216.971036][T14060] openvswitch: netlink: Missing key (keys=40, expected=80)
[  216.981288][ T5718] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  216.996178][ T5718] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  217.616913][T14124] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.619301][T14124] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.646151][T14124] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.664756][ T5718] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  217.667608][ T5718] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  217.670572][ T5718] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  217.673268][ T5718] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  217.894068][T14127] pim6reg: entered allmulticast mode
[  217.897134][T14127] pim6reg: left allmulticast mode
[  218.437965][T14154] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  218.441812][T14153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  218.781441][ T5611] Bluetooth: hci2: command 0x0405 tx timeout
[  218.784450][   T54] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  218.863818][T14197] validate_nla: 5 callbacks suppressed
[  218.863827][T14197] netlink: 'syz.0.2088': attribute type 1 has an invalid length.
[  218.881882][T14197] 8021q: adding VLAN 0 to HW filter on device bond38
[  218.888367][T14197] netlink: 'syz.0.2088': attribute type 1 has an invalid length.
[  219.356680][T14240] xt_NFQUEUE: number of total queues is 0
[  219.362188][T14240] sctp: [Deprecated]: syz.0.2098 (pid 14240) Use of int in maxseg socket option.
[  219.362188][T14240] Use struct sctp_assoc_value instead
[  219.504239][T14250] bond39: option min_links: invalid value (18446744073709551612)
[  219.506826][T14250] bond39: option min_links: allowed values 0 - 2147483647
[  219.509989][T14250] bond39 (unregistering): Released all slaves
[  219.673500][T14257] xt_l2tp: wrong L2TP version: 0
[  219.824868][T14271] __nla_validate_parse: 35 callbacks suppressed
[  219.824878][T14271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2107'.
[  219.830684][T14271] netlink: 'syz.0.2107': attribute type 13 has an invalid length.
[  219.871783][T14271] erspan0: left allmulticast mode
[  219.873978][T14271] erspan0: left promiscuous mode
[  219.880171][ T5718] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.883147][ T5718] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.886508][ T5718] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.890665][ T5718] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.899001][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2107'.
[  220.197242][T14295] Cannot find add_set index 1 as target
[  220.275808][T14295] bond32: invalid ARP target 0.0.0.0 specified for addition
[  220.278139][T14295] bond32: option arp_ip_target: invalid value (0)
[  220.281986][T14295] bond32 (unregistering): Released all slaves
[  220.388555][T14312] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2117'.
[  220.418157][T14317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2118'.
[  220.421092][T14317] netlink: 'syz.0.2118': attribute type 7 has an invalid length.
[  220.424782][T14317] netlink: 'syz.0.2118': attribute type 8 has an invalid length.
[  220.427213][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2118'.
[  220.513958][T14329] syzkaller1: entered promiscuous mode
[  220.516111][T14329] syzkaller1: entered allmulticast mode
[  220.762029][T14343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2127'.
[  220.954108][T14354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'.
[  220.961411][T14354] netlink: 'syz.1.2130': attribute type 30 has an invalid length.
[  221.004895][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'.
[  221.007956][T14359] netlink: 'syz.1.2130': attribute type 30 has an invalid length.
[  221.111711][T14362] netlink: 'syz.2.2132': attribute type 7 has an invalid length.
[  221.344586][T14389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2138'.
[  221.400644][T14395] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2139'.
[  224.352268][T14427] 8021q: adding VLAN 0 to HW filter on device bond39
[  224.380329][T14427] bond39: (slave wireguard0): refused to change device type
[  224.608717][T14442] netlink: 'syz.2.2151': attribute type 1 has an invalid length.
[  224.615767][T14442] netlink: 'syz.2.2151': attribute type 2 has an invalid length.
[  224.743017][T14460] hm3): entered promiscuous mode
[  224.766713][T14456] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  224.766713][T14456] Please contact the netfilter-devel mailing list or update your nftables rules.
[  224.778693][T14464] netlink: 'syz.1.2158': attribute type 21 has an invalid length.
[  224.833991][T14464] syzkaller0: entered promiscuous mode
[  224.836067][T14464] syzkaller0: entered allmulticast mode
[  226.076923][T14481] __nla_validate_parse: 8 callbacks suppressed
[  226.076933][T14481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2161'.
[  226.101098][T14483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2162'.
[  226.167141][T14489] bond42: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  226.177419][T14489] bond42 (unregistering): Released all slaves
[  226.270914][T14501] bond40 (unregistering): Released all slaves
[  226.378099][T14510] netlink: 'syz.2.2170': attribute type 1 has an invalid length.
[  226.382692][T14510] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2170'.
[  226.387130][T14512] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2171'.
[  226.396792][T14510] netlink: 'syz.2.2170': attribute type 10 has an invalid length.
[  226.454081][T14516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2173'.
[  226.485138][T14516] netlink: 'syz.2.2173': attribute type 4 has an invalid length.
[  226.492791][T14516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.521485][ T5688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.568055][T14525] syzkaller0: entered promiscuous mode
[  226.570039][T14525] syzkaller0: entered allmulticast mode
[  226.579984][T14530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2176'.
[  226.865757][ T6512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  227.829528][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2179'.
[  227.833250][T14542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2179'.
[  227.838499][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2179'.
[  227.842943][T14542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2179'.
[  227.890312][T14549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.002395][T14567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  228.057210][T14570] ip6tnl4: entered promiscuous mode
[  228.070709][T14575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.100280][T14575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.105852][T14575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.109197][T14575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.113033][T14575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.259801][T14598] syzkaller0: entered promiscuous mode
[  228.265456][T14598] syzkaller0: entered allmulticast mode
[  228.296837][T14601] geneve4: entered promiscuous mode
[  228.298609][T14601] geneve4: entered allmulticast mode
[  228.390467][T14607] xt_time: invalid argument - start or stop time greater than 23:59:59
[  228.400295][T14607] netlink: 'syz.2.2199': attribute type 1 has an invalid length.
[  228.419488][T14607] bond42: entered promiscuous mode
[  228.423025][T14607] 8021q: adding VLAN 0 to HW filter on device bond42
[  228.506336][T14616] bridge0: Device is already in use.
[  228.515646][T14618] sctp: [Deprecated]: syz.2.2202 (pid 14618) Use of struct sctp_assoc_value in delayed_ack socket option.
[  228.515646][T14618] Use struct sctp_sack_info instead
[  228.543254][T14620] netlink: 'syz.0.2203': attribute type 3 has an invalid length.
[  229.064167][T14649] syzkaller0: entered promiscuous mode
[  229.065950][T14649] syzkaller0: entered allmulticast mode
[  229.077867][T14649] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  229.080784][T14649] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  229.360766][T14658] bond43: (slave vxcan1): The slave device specified does not support setting the MAC address
[  229.365004][T14658] bond43: (slave vxcan1): Error -95 calling set_mac_address
[  229.527303][T14673] netlink: 'syz.2.2217': attribute type 3 has an invalid length.
[  229.799252][T14705] 8021q: adding VLAN 0 to HW filter on device bond44
[  229.837237][T14709] netem: change failed
[  229.855586][   T55] block nbd2: Receive control failed (result -22)
[  229.870404][T14711] syzkaller1: entered promiscuous mode
[  229.872619][T14711] syzkaller1: entered allmulticast mode
[  229.908835][T14705] nbd2: detected capacity change from 0 to 32
[  229.914278][T12868] block nbd2: Dead connection, failed to find a fallback
[  229.917764][T12868] block nbd2: shutting down sockets
[  229.920528][T12868] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.926908][T12868] Buffer I/O error on dev nbd2, logical block 0, async page read
[  229.931900][T12868] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.934715][T12868] Buffer I/O error on dev nbd2, logical block 0, async page read
[  229.937130][T12868] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.940144][T12868] Buffer I/O error on dev nbd2, logical block 0, async page read
[  229.943705][T12868] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.946423][T12868] Buffer I/O error on dev nbd2, logical block 0, async page read
[  229.949053][T12868] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.952257][T12868] Buffer I/O error on dev nbd2, logical block 0, async page read
[  229.959007][T12868] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.963241][T12868] Buffer I/O error on dev nbd2, logical block 0, async page read
[  229.965894][T12868] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.969202][T12868] Buffer I/O error on dev nbd2, logical block 0, async page read
[  229.973367][T12868] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.976031][T12868] Buffer I/O error on dev nbd2, logical block 0, async page read
[  229.981404][T12868] ldm_validate_partition_table(): Disk read failed.
[  229.987221][T12868] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.000954][T12868] Buffer I/O error on dev nbd2, logical block 0, async page read
[  230.012007][T12868] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.017661][T12868] Buffer I/O error on dev nbd2, logical block 0, async page read
[  230.023855][T12868] Dev nbd2: unable to read RDB block 0
[  230.028353][T12868]  nbd2: unable to read partition table
[  230.047338][T12868] ldm_validate_partition_table(): Disk read failed.
[  230.058299][T12868] Dev nbd2: unable to read RDB block 0
[  230.064587][T12868]  nbd2: unable to read partition table
[  230.210015][ T9012] tipc: Subscription rejected, illegal request
[  230.289893][T14735] bridge0: left allmulticast mode
[  230.497982][T14735] bond12: left promiscuous mode
[  230.502298][T14735] bridge4: left promiscuous mode
[  230.504031][T14735] bond12: left allmulticast mode
[  230.505693][T14735] bridge4: left allmulticast mode
[  230.507496][T14735] bond14: left promiscuous mode
[  230.509178][T14735] ip6gre1: left promiscuous mode
[  230.510802][T14735] ip6gre1: left allmulticast mode
[  230.513309][T14735] bond16: left promiscuous mode
[  230.515170][T14735] ip6gre2: left promiscuous mode
[  230.517061][T14735] macsec2: left promiscuous mode
[  230.518808][T14735] vlan0: left allmulticast mode
[  230.520423][T14735] bond18: left allmulticast mode
[  230.523494][T14735] geneve2: left allmulticast mode
[  230.525545][T14735] bond23: left allmulticast mode
[  230.536330][T14735] bond27: left allmulticast mode
[  230.539732][T14735] bond27: left promiscuous mode
[  230.543470][T14735] macvlan0: left promiscuous mode
[  230.545247][T14735] macvlan0: left allmulticast mode
[  230.573349][T14735] bond31: left promiscuous mode
[  230.593071][T14737] syzkaller1: entered promiscuous mode
[  230.595931][T14737] syzkaller1: entered allmulticast mode
[  230.620477][T14739] bond40: entered allmulticast mode
[  230.624408][ T5718] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.628008][ T5718] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  230.630905][ T5718] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.635855][ T5718] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  230.647803][ T5718] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.651830][ T5718] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  230.749307][ T8252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.754374][ T8252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.998444][T14789] lo speed is unknown, defaulting to 1000
[  231.005177][T14791] xt_hashlimit: size too large, truncated to 1048576
[  231.007933][T14789] lo speed is unknown, defaulting to 1000
[  231.171523][T14800] 
[  231.172381][T14800] ======================================================
[  231.174553][T14800] WARNING: possible circular locking dependency detected
[  231.176700][T14800] syzkaller #0 Not tainted
[  231.178150][T14800] ------------------------------------------------------
[  231.180451][T14800] syz.0.2244/14800 is trying to acquire lock:
[  231.182458][T14800] ffffffff8f0ac708 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x211/0x5f0
[  231.185368][T14800] 
[  231.185368][T14800] but task is already holding lock:
[  231.187793][T14800] ffff88810a4c6e60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0
[  231.191312][T14800] 
[  231.191312][T14800] which lock already depends on the new lock.
[  231.191312][T14800] 
[  231.194858][T14800] 
[  231.194858][T14800] the existing dependency chain (in reverse order) is:
[  231.197822][T14800] 
[  231.197822][T14800] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  231.200277][T14800]        lock_sock_nested+0x41/0x100
[  231.202061][T14800]        inet_shutdown+0x6a/0x390
[  231.203606][T14800]        nbd_mark_nsock_dead+0x2e9/0x560
[  231.205401][T14800]        sock_shutdown+0x15e/0x260
[  231.207076][T14800]        nbd_clear_sock+0x24/0x170
[  231.208709][T14800]        nbd_config_put+0x2dd/0x580
[  231.210342][T14800]        nbd_genl_connect+0x19d5/0x1cf0
[  231.212133][T14800]        genl_family_rcv_msg_doit+0x22a/0x330
[  231.214039][T14800]        genl_rcv_msg+0x61c/0x7a0
[  231.215616][T14800]        netlink_rcv_skb+0x232/0x4b0
[  231.217435][T14800]        genl_rcv+0x28/0x40
[  231.218941][T14800]        netlink_unicast+0x75c/0x8e0
[  231.220976][T14800]        netlink_sendmsg+0x813/0xb40
[  231.223052][T14800]        ____sys_sendmsg+0x972/0x9f0
[  231.225142][T14800]        ___sys_sendmsg+0x2a5/0x360
[  231.227160][T14800]        __x64_sys_sendmsg+0x1bd/0x2a0
[  231.228934][T14800]        do_syscall_64+0x15f/0xf80
[  231.230593][T14800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.232617][T14800] 
[  231.232617][T14800] -> #7 (&nsock->tx_lock){+.+.}-{4:4}:
[  231.234972][T14800]        __mutex_lock+0x1a3/0x1550
[  231.236625][T14800]        nbd_queue_rq+0x37b/0x1100
[  231.238282][T14800]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  231.240163][T14800]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  231.242331][T14800]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  231.244417][T14800]        blk_mq_run_hw_queue+0x348/0x4f0
[  231.246303][T14800]        blk_mq_dispatch_list+0xd16/0xe10
[  231.248114][T14800]        blk_mq_flush_plug_list+0x48d/0x570
[  231.250078][T14800]        __blk_flush_plug+0x3ed/0x4d0
[  231.251838][T14800]        __submit_bio+0x28d/0x580
[  231.253492][T14800]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  231.255542][T14800]        block_read_full_folio+0x7b7/0x830
[  231.257416][T14800]        filemap_read_folio+0x137/0x3b0
[  231.259212][T14800]        do_read_cache_folio+0x358/0x590
[  231.261102][T14800]        read_part_sector+0xb6/0x2b0
[  231.262887][T14800]        adfspart_check_ICS+0xb1/0x960
[  231.265006][T14800]        bdev_disk_changed+0x817/0x1770
[  231.267162][T14800]        blkdev_get_whole+0x380/0x510
[  231.268882][T14800]        bdev_open+0x31e/0xd30
[  231.270560][T14800]        blkdev_open+0x470/0x610
[  231.272216][T14800]        do_dentry_open+0x785/0x14e0
[  231.273946][T14800]        vfs_open+0x3b/0x340
[  231.275806][T14800]        path_openat+0x2e08/0x3860
[  231.277841][T14800]        do_file_open+0x23e/0x4a0
[  231.279849][T14800]        do_sys_openat2+0x113/0x200
[  231.281937][T14800]        __x64_sys_openat+0x138/0x170
[  231.284014][T14800]        do_syscall_64+0x15f/0xf80
[  231.286074][T14800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.288594][T14800] 
[  231.288594][T14800] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  231.291262][T14800]        __mutex_lock+0x1a3/0x1550
[  231.293221][T14800]        nbd_queue_rq+0xc6/0x1100
[  231.295252][T14800]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  231.297295][T14800]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  231.299366][T14800]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  231.301329][T14800]        blk_mq_run_hw_queue+0x348/0x4f0
[  231.302982][T14800]        blk_mq_dispatch_list+0xd16/0xe10
[  231.304727][T14800]        blk_mq_flush_plug_list+0x48d/0x570
[  231.306526][T14800]        __blk_flush_plug+0x3ed/0x4d0
[  231.308165][T14800]        __submit_bio+0x28d/0x580
[  231.309699][T14800]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  231.311567][T14800]        block_read_full_folio+0x7b7/0x830
[  231.313343][T14800]        filemap_read_folio+0x137/0x3b0
[  231.315001][T14800]        do_read_cache_folio+0x358/0x590
[  231.316703][T14800]        read_part_sector+0xb6/0x2b0
[  231.318320][T14800]        adfspart_check_ICS+0xb1/0x960
[  231.319980][T14800]        bdev_disk_changed+0x817/0x1770
[  231.321661][T14800]        blkdev_get_whole+0x380/0x510
[  231.323317][T14800]        bdev_open+0x31e/0xd30
[  231.324733][T14800]        blkdev_open+0x470/0x610
[  231.326236][T14800]        do_dentry_open+0x785/0x14e0
[  231.327843][T14800]        vfs_open+0x3b/0x340
[  231.329276][T14800]        path_openat+0x2e08/0x3860
[  231.330830][T14800]        do_file_open+0x23e/0x4a0
[  231.332388][T14800]        do_sys_openat2+0x113/0x200
[  231.333965][T14800]        __x64_sys_openat+0x138/0x170
[  231.335606][T14800]        do_syscall_64+0x15f/0xf80
[  231.337181][T14800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.339117][T14800] 
[  231.339117][T14800] -> #5 (set->srcu){.+.+}-{0:0}:
[  231.341254][T14800]        __synchronize_srcu+0xca/0x300
[  231.342897][T14800]        elevator_switch+0x1e8/0x7a0
[  231.344510][T14800]        elevator_change+0x2cc/0x450
[  231.346131][T14800]        elevator_set_default+0x36c/0x430
[  231.347847][T14800]        blk_register_queue+0x3e9/0x4e0
[  231.349537][T14800]        __add_disk+0x677/0xd50
[  231.351026][T14800]        add_disk_fwnode+0xfb/0x480
[  231.352625][T14800]        nbd_dev_add+0x72c/0xb50
[  231.354120][T14800]        nbd_init+0x168/0x1f0
[  231.355548][T14800]        do_one_initcall+0x250/0x870
[  231.357150][T14800]        do_initcall_level+0x104/0x190
[  231.358784][T14800]        do_initcalls+0x59/0xa0
[  231.360314][T14800]        kernel_init_freeable+0x2a6/0x3e0
[  231.362039][T14800]        kernel_init+0x1d/0x1d0
[  231.363552][T14800]        ret_from_fork+0x514/0xb70
[  231.365106][T14800]        ret_from_fork_asm+0x1a/0x30
[  231.366701][T14800] 
[  231.366701][T14800] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  231.369047][T14800]        __mutex_lock+0x1a3/0x1550
[  231.370634][T14800]        elevator_change+0x1b3/0x450
[  231.372257][T14800]        elevator_set_none+0xb5/0x140
[  231.373881][T14800]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  231.375787][T14800]        nbd_start_device+0x17f/0xb10
[  231.377420][T14800]        nbd_genl_connect+0x165b/0x1cf0
[  231.379096][T14800]        genl_family_rcv_msg_doit+0x22a/0x330
[  231.380918][T14800]        genl_rcv_msg+0x61c/0x7a0
[  231.382461][T14800]        netlink_rcv_skb+0x232/0x4b0
[  231.384057][T14800]        genl_rcv+0x28/0x40
[  231.385454][T14800]        netlink_unicast+0x75c/0x8e0
[  231.387025][T14800]        netlink_sendmsg+0x813/0xb40
[  231.388656][T14800]        ____sys_sendmsg+0x972/0x9f0
[  231.390277][T14800]        ___sys_sendmsg+0x2a5/0x360
[  231.391871][T14800]        __x64_sys_sendmsg+0x1bd/0x2a0
[  231.393531][T14800]        do_syscall_64+0x15f/0xf80
[  231.395058][T14800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.396980][T14800] 
[  231.396980][T14800] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  231.399934][T14800]        blk_alloc_queue+0x546/0x680
[  231.401903][T14800]        __blk_mq_alloc_disk+0x197/0x390
[  231.403648][T14800]        nbd_dev_add+0x499/0xb50
[  231.405153][T14800]        nbd_init+0x168/0x1f0
[  231.406581][T14800]        do_one_initcall+0x250/0x870
[  231.408268][T14800]        do_initcall_level+0x104/0x190
[  231.409826][T14800]        do_initcalls+0x59/0xa0
[  231.411356][T14800]        kernel_init_freeable+0x2a6/0x3e0
[  231.413104][T14800]        kernel_init+0x1d/0x1d0
[  231.414690][T14800]        ret_from_fork+0x514/0xb70
[  231.416580][T14800]        ret_from_fork_asm+0x1a/0x30
[  231.418291][T14800] 
[  231.418291][T14800] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  231.420550][T14800]        fs_reclaim_acquire+0x71/0x100
[  231.422475][T14800]        __kmalloc_cache_noprof+0x40/0x660
[  231.424393][T14800]        cryptomgr_notify+0x85/0x930
[  231.426227][T14800]        notifier_call_chain+0x1ad/0x3d0
[  231.428229][T14800]        blocking_notifier_call_chain+0x6a/0x90
[  231.430421][T14800]        crypto_alg_mod_lookup+0x3b1/0x5f0
[  231.432262][T14800]        crypto_alloc_tfm_node+0x13e/0x3f0
[  231.434057][T14800]        crypto_alloc_sync_skcipher+0x39/0xd0
[  231.435926][T14800]        rxkad_init+0x20/0xe0
[  231.437385][T14800]        rxrpc_init_security+0x72/0x120
[  231.439114][T14800]        af_rxrpc_init+0x13d/0x2e0
[  231.440692][T14800]        do_one_initcall+0x250/0x870
[  231.442299][T14800]        do_initcall_level+0x104/0x190
[  231.443997][T14800]        do_initcalls+0x59/0xa0
[  231.445767][T14800]        kernel_init_freeable+0x2a6/0x3e0
[  231.447966][T14800]        kernel_init+0x1d/0x1d0
[  231.449872][T14800]        ret_from_fork+0x514/0xb70
[  231.451835][T14800]        ret_from_fork_asm+0x1a/0x30
[  231.453701][T14800] 
[  231.453701][T14800] -> #1 ((crypto_chain).rwsem){++++}-{4:4}:
[  231.456634][T14800]        down_read+0x47/0x2e0
[  231.458464][T14800]        blocking_notifier_call_chain+0x54/0x90
[  231.460514][T14800]        __crypto_register_alg+0x32b/0x3c0
[  231.462724][T14800]        crypto_register_alg+0x447/0x810
[  231.464524][T14800]        do_one_initcall+0x250/0x870
[  231.466163][T14800]        do_initcall_level+0x104/0x190
[  231.467826][T14800]        do_initcalls+0x59/0xa0
[  231.469324][T14800]        kernel_init_freeable+0x2a6/0x3e0
[  231.471058][T14800]        kernel_init+0x1d/0x1d0
[  231.472682][T14800]        ret_from_fork+0x514/0xb70
[  231.474562][T14800]        ret_from_fork_asm+0x1a/0x30
[  231.476208][T14800] 
[  231.476208][T14800] -> #0 (crypto_alg_sem){++++}-{4:4}:
[  231.478543][T14800]        __lock_acquire+0x15a5/0x2cf0
[  231.480212][T14800]        lock_acquire+0x106/0x350
[  231.481772][T14800]        down_write+0x96/0x200
[  231.483323][T14800]        crypto_alg_mod_lookup+0x211/0x5f0
[  231.485580][T14800]        crypto_alloc_tfm_node+0x13e/0x3f0
[  231.487846][T14800]        tls_set_sw_offload+0xa33/0x1780
[  231.490031][T14800]        tls_setsockopt+0xef2/0x15c0
[  231.492132][T14800]        do_sock_setsockopt+0x17c/0x1b0
[  231.494271][T14800]        __x64_sys_setsockopt+0x13d/0x1b0
[  231.496498][T14800]        do_syscall_64+0x15f/0xf80
[  231.498483][T14800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.500963][T14800] 
[  231.500963][T14800] other info that might help us debug this:
[  231.500963][T14800] 
[  231.504859][T14800] Chain exists of:
[  231.504859][T14800]   crypto_alg_sem --> &nsock->tx_lock --> sk_lock-AF_INET6
[  231.504859][T14800] 
[  231.508984][T14800]  Possible unsafe locking scenario:
[  231.508984][T14800] 
[  231.511311][T14800]        CPU0                    CPU1
[  231.512910][T14800]        ----                    ----
[  231.514529][T14800]   lock(sk_lock-AF_INET6);
[  231.515918][T14800]                                lock(&nsock->tx_lock);
[  231.518012][T14800]                                lock(sk_lock-AF_INET6);
[  231.520160][T14800]   lock(crypto_alg_sem);
[  231.521456][T14800] 
[  231.521456][T14800]  *** DEADLOCK ***
[  231.521456][T14800] 
[  231.523899][T14800] 1 lock held by syz.0.2244/14800:
[  231.525465][T14800]  #0: ffff88810a4c6e60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0
[  231.528397][T14800] 
[  231.528397][T14800] stack backtrace:
[  231.530210][T14800] CPU: 0 UID: 0 PID: 14800 Comm: syz.0.2244 Not tainted syzkaller #0 PREEMPT(full) 
[  231.530221][T14800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  231.530226][T14800] Call Trace:
[  231.530231][T14800]  <TASK>
[  231.530237][T14800]  dump_stack_lvl+0xe8/0x150
[  231.530246][T14800]  print_circular_bug+0x2e1/0x300
[  231.530258][T14800]  check_noncircular+0x12e/0x150
[  231.530268][T14800]  __lock_acquire+0x15a5/0x2cf0
[  231.530281][T14800]  ? crypto_alg_mod_lookup+0x211/0x5f0
[  231.530289][T14800]  lock_acquire+0x106/0x350
[  231.530298][T14800]  ? crypto_alg_mod_lookup+0x211/0x5f0
[  231.530308][T14800]  down_write+0x96/0x200
[  231.530318][T14800]  ? crypto_alg_mod_lookup+0x211/0x5f0
[  231.530325][T14800]  ? __pfx_down_write+0x10/0x10
[  231.530334][T14800]  ? crypto_larval_alloc+0x1bf/0x290
[  231.530342][T14800]  crypto_alg_mod_lookup+0x211/0x5f0
[  231.530350][T14800]  crypto_alloc_tfm_node+0x13e/0x3f0
[  231.530359][T14800]  ? timer_init_key+0x161/0x2c0
[  231.530371][T14800]  tls_set_sw_offload+0xa33/0x1780
[  231.530383][T14800]  tls_setsockopt+0xef2/0x15c0
[  231.530393][T14800]  ? __pfx_tls_setsockopt+0x10/0x10
[  231.530402][T14800]  ? __fget_files+0x2a/0x420
[  231.530411][T14800]  ? aa_sock_opt_perm+0xff/0x1a0
[  231.530420][T14800]  ? sock_common_setsockopt+0x36/0xc0
[  231.530427][T14800]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  231.530434][T14800]  do_sock_setsockopt+0x17c/0x1b0
[  231.530443][T14800]  __x64_sys_setsockopt+0x13d/0x1b0
[  231.530452][T14800]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.530459][T14800]  do_syscall_64+0x15f/0xf80
[  231.530469][T14800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.530476][T14800] RIP: 0033:0x7f8af8d9ce59
[  231.530484][T14800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  231.530490][T14800] RSP: 002b:00007f8af9c62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  231.530498][T14800] RAX: ffffffffffffffda RBX: 00007f8af9015fa0 RCX: 00007f8af8d9ce59
[  231.530504][T14800] RDX: 0000000000000001 RSI: 000000000000011a RDI: 000000000000000a
[  231.530508][T14800] RBP: 00007f8af8e32d6f R08: 0000000000000038 R09: 0000000000000000
[  231.530513][T14800] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000
[  231.530517][T14800] R13: 00007f8af9016038 R14: 00007f8af9015fa0 R15: 00007ffebca22cc8
[  231.530525][T14800]  </TASK>
[  231.622583][T14805] vlan3: entered promiscuous mode
