last executing test programs:

1.900690847s ago: executing program 0 (id=1428):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff4)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, 0x0) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18460000fdffedff00000000000000008500000079000000f06e411e2d62f414ae13f00b8a1b17d85323ef"], &(0x7f0000000340)='GPL\x00', 0x2, 0x4f, &(0x7f0000000380)=""/79, 0x40f00, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x9, 0xfffffffd, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r0, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f00000002c0)='./file0\x00', r3}, 0x18) (async)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="800100001000010000000000000000c8b2db5fd1e0b663000000000000000000fe800000000000bb00000000000000000098138370db24820000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004800040065636228617263342900"/312], 0x180}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC=0x0], 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='ext4_discard_blocks\x00', r5, 0x0, 0x40000000000001}, 0x18)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r7, &(0x7f0000000940), 0x10) (async)
listen(r7, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44010)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) (async)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

636.951345ms ago: executing program 0 (id=1432):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xe0b, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff3, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000001}]}}]}, 0x40}}, 0x0)

551.089735ms ago: executing program 0 (id=1437):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073597a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c00014000000000000000002c0001800a0001006c696d69740000001c0002800c00024000000000100000000c0001"], 0x110}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x10000000000, 0xc000}, 0xc010)

550.075395ms ago: executing program 2 (id=1438):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010102, {[@rr={0x7, 0x1f, 0x18, [@loopback, @local, @loopback, @multicast1, @rand_addr=0x64010100, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x3, 0x80}, @noop]}}, {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006000000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

473.625986ms ago: executing program 2 (id=1439):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='.'], 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x1f}}, 0x18}}, 0x0)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000340)="07000000010000", 0x7)

472.622781ms ago: executing program 0 (id=1440):
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={r0}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={<r1=>r0})
sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="780000000000000017010000c60000187a22ec104b065cf506de8cdc08a6d0fddc0d72778aece33162e224760128908354ebe677afaf0fba4d209101c48a04692828bd124430ce0542ec901330cfd17ecda3ea1ff3d715545d42da58b55978fbbd3cf28bf72800000000000000170100000200000014000008d240a5aaf782aa7e74e12faa551a3e8899099e1542f8ed4490000000000000000000"], 0xa0, 0x200040d4}], 0x1, 0x20008852)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="02000000040000000846faa44b00000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="02000000040000000846faa44b00000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a0"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={<r3=>0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r3, 0x6, 0x7}, &(0x7f00000002c0)=0xc)
r4 = socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) (async)
recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRESDEC=r4], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010201020000000000000000212ff487f4dab0000000040800094000000009"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000001300)={0x0, 0x12, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001000000bfc7426a9e0c1324351b1a18a256160008294f82c1969e2738eb7c1e166dee7beb7e62610480c61841bfe86f509556af52930551c2d739ebab7437e5b5e6c45d4ae1803f0e6c0d2d184de0dd01c7b4c3148e76ec"], 0x1c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000002000006050001000700000009e9a2ef656cb63900020073797a310000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000) (async)
sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000002000006050001000700000009e9a2ef656cb63900020073797a310000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000)
close(r7) (async)
close(r7)

398.547459ms ago: executing program 2 (id=1441):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000340)="07000000010000", 0x7)

397.701673ms ago: executing program 1 (id=1442):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x52, 0xffffffffffffffff, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}}, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=<r2=>0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=@delpolicy={0x16c, 0x14, 0x1, 0x70bd29, 0x25dfdbfd, {{@in=@private=0xa010102, @in=@remote, 0x4e23, 0x0, 0x4e20, 0x7, 0x2, 0x180, 0x20, 0x32, 0x0, r2}, 0x6e6bb7, 0x1}, [@algo_crypt={0xc2, 0x2, {{'essiv-cbc-aes-sha256-neon\x00'}, 0x3d0, "bfac39fd68d8683c37fae8670207081128ae8f3b8aa26adf6ecfcf022a44a6bba6fab5668b5e837eef0f31844f06efa45aa7eca28477b9be414d92cda8ae0f0c263e4721291189a8248f7a1b9699d114e586ea62ccbb33ee09bd8ebd16e92ddc6c3587551f5d1ef283604c9666ad1573fc9750686648f89160da"}}, @algo_comp={0x57, 0x3, {{'lzs\x00'}, 0x78, "9b9a5a35b0ada0f3017812dfca6c69"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24000842}, 0x20000005)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000140)={'sit0\x00', @random="7f91068436ac"})
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES64=r4, @ANYRES64=r4, @ANYRES64=r4, @ANYRESOCT], 0x48}}, 0x2)

390.05311ms ago: executing program 2 (id=1443):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000f80), 0xffffffffffffffff)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0xfe, 0x0, 0x18}}}}}, 0x36)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x10}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}]}, 0x24}}, 0x44844)
getsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000040), &(0x7f0000000140)=0x10)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000030000000000000062617461647600000400028008000a00", @ANYRES32=r7, @ANYBLOB="0a000100bbbbbbbbbbbb0000"], 0x48}}, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000080)={0x44, r10, 0x21, 0x8d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8004)

343.636073ms ago: executing program 0 (id=1444):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xf, 0x1, {0x5}}}}]}, 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0)

333.79318ms ago: executing program 1 (id=1445):
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={<r0=>0x0, 0x1, 0x30, 0x6, 0x6bb}, &(0x7f0000000100)=0x18)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x18, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9d}]}], @echo_reply}}}}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x200c8000)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r0, 0x200, 0x1ff}, 0xc)
syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2, 0xd2, &(0x7f0000000180)=""/210, 0x0, 0x0, '\x00', 0x0, @fallback=0x7f03b17e995443e2}, 0x94)

218.50289ms ago: executing program 1 (id=1446):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073597a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c00014000000000000000002c0001800a0001006c696d69740000001c0002800c00024000000000100000000c0001"], 0x110}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0xe0ffff00000000, 0xc000}, 0xc010)

217.485646ms ago: executing program 1 (id=1447):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10)
socket$l2tp6(0xa, 0x2, 0x73)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000005e80)={&(0x7f0000005c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005e40)={&(0x7f0000005c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x300, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x74, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3a}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_EXPRESSIONS={0x10, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}}, @NFT_MSG_DELRULE={0x98, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x6e, 0x7, 0x1, 0x0, "899f78f9752dbb61ad9f6ce096997b4fdd449814466166fd26425e4e8f44c858b3992c8a79324f9193cda9fdaacd0251703545ab476505bb4fa61e4ce7b231ab836c9b747d346660b02ff800019eb0f252f026c5f5872ff5c6cb059418958fc91554fc82ed3b9d250c68"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x7}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x200}, 0x1, 0x0, 0x0, 0x40}, 0x20004000)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x5, 0x14e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x1c6)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x66, "9ac2c5cbc535569455115e157221685a298dcdb260f479679129dfbb1df43e40d8c0db6446c08dddbe57a38de06912594ab4f96e843f54b60abb12f7afdbcd69a9e3508f02eef0a77c0be17ad94c4aea76d6a3638de29d4acdbc55d8b67668fd50aee591f170"}, &(0x7f0000000040)=0x6e)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
sendmsg$802154_raw(r4, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)}, 0x1, 0x0, 0x0, 0x40}, 0x20000010)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
recvmmsg(r6, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/143, 0x8f}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000000480)=""/227, 0xe3}], 0x3, &(0x7f0000000580)=""/149, 0x95}, 0x5}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/112, 0x70}, {&(0x7f0000000640)=""/179, 0xb3}], 0x2}, 0x9}, {{&(0x7f0000000740)=@tipc=@id, 0x80, &(0x7f0000001b40)=[{&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/99, 0x63}, {&(0x7f00000018c0)=""/96, 0x60}, {&(0x7f0000001940)=""/240, 0xf0}, {&(0x7f0000001a40)=""/250, 0xfa}], 0x6, &(0x7f0000001bc0)=""/128, 0x80}, 0x4}, {{&(0x7f0000001c40)=@sco, 0x80, &(0x7f0000002180)=[{&(0x7f0000001cc0)=""/9, 0x9}, {&(0x7f0000001d00)=""/88, 0x58}, {&(0x7f0000001d80)=""/247, 0xf7}, {&(0x7f0000001e80)=""/245, 0xf5}, {&(0x7f0000001f80)=""/72, 0x48}, {&(0x7f0000002000)=""/66, 0x42}, {&(0x7f0000002080)=""/111, 0x6f}, {&(0x7f0000002100)=""/98, 0x62}], 0x8, &(0x7f0000002200)=""/6, 0x6}, 0x6}, {{&(0x7f0000002240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000022c0)=""/255, 0xff}], 0x1}, 0x10}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000002400)=""/48, 0x30}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/157, 0x9d}, {&(0x7f0000004500)=""/57, 0x39}, {&(0x7f0000004540)=""/4096, 0x1000}], 0x6, &(0x7f00000055c0)=""/104, 0x68}, 0x164}, {{&(0x7f0000005640)=@tipc, 0x80, &(0x7f0000005880)=[{&(0x7f00000056c0)}, {&(0x7f0000005700)=""/104, 0x68}, {&(0x7f0000005780)=""/217, 0xd9}], 0x3, &(0x7f00000058c0)=""/29, 0x1d}, 0x2}], 0x7, 0x21, &(0x7f0000005ac0))
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000001c0)={0x1, 0xfff, 0x0, 0x8, 0x9, 0xd, 0x4, 0x5, r7}, 0x20)
write(r5, &(0x7f0000000340)="07000000010000", 0x7)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000005bc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005b80)={&(0x7f0000005b00)={0x54, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x408d0}, 0x20040080)

216.359564ms ago: executing program 0 (id=1448):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/92, 0x5c}, {&(0x7f0000000080)=""/102, 0x66}, {&(0x7f0000000100)=""/121, 0x79}, {&(0x7f0000000180)=""/244, 0xf4}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000340)=""/238, 0xee}, {&(0x7f0000000440)=""/57, 0x39}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/4096, 0x1000}], 0xa}, 0x4}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000015c0)=""/22, 0x16}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/218, 0xda}], 0x3, &(0x7f0000002740)=""/197, 0xc5}, 0x3}], 0x2, 0x10001, &(0x7f00000028c0))
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002900)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002980), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, r3, 0x201, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x8002)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002a80)={<r4=>0xffffffffffffffff}) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000002ac0)={<r6=>0x0, 0x5}, &(0x7f0000002b00)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000002b40)={r6, @in6={{0xa, 0x4e21, 0x95, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8001}}, 0x1, 0x7}, 0x90)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002c00)=<r7=>0x0, &(0x7f0000002c40)=0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002d00)={'ip6_vti0\x00', &(0x7f0000002c80)={'syztnl1\x00', <r8=>r7, 0x4, 0x5, 0xf9, 0x5, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x8000, 0x8, 0x2}})
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000002d40)) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000002d80)={<r9=>0x0, 0x1, 0x1, [0xa, 0xd1b2, 0xff, 0x3, 0x5], [0x4, 0x7ff, 0x9, 0x9, 0x1, 0x61f7, 0xffffffff, 0x6, 0x7, 0xc82, 0x1b, 0x2, 0x7, 0x3, 0x2ab, 0x6, 0xfff, 0xfffffffffffffff9, 0x0, 0x0, 0xff, 0x9, 0x3e, 0x10001, 0x451, 0x4, 0x9, 0x7, 0x5, 0xb8, 0x5, 0x6, 0x5, 0x4, 0x100, 0x4, 0x0, 0xb3, 0xfffffffffffffffb, 0x800, 0x0, 0x3e9, 0x7, 0x6, 0x9, 0x3, 0x6, 0x4f24, 0xd0, 0xfffffffff0000000, 0x9, 0x1, 0x4, 0x400, 0x8000, 0x74f, 0x2, 0x0, 0x7, 0x3ff, 0x5ad, 0x3, 0x200, 0x7, 0x8, 0x4, 0x3, 0x8, 0x2, 0x1, 0x3, 0x9, 0x4, 0x6, 0xfc4, 0xccd7, 0x5, 0x1, 0x1, 0x6, 0xfff, 0x3, 0x9, 0x800, 0x6, 0x9, 0x6, 0x80, 0x2, 0x10001, 0x5, 0x6, 0x80000001, 0x8, 0x8, 0x1, 0x81, 0x8, 0x7, 0x9, 0x2, 0x56, 0x6, 0x1ff, 0x80000001, 0x7fff, 0x8001, 0x4, 0x713, 0x2f51, 0xcba, 0x9, 0x446c, 0x80000000, 0xffffffffffff0000, 0x5, 0x0, 0x7, 0x7, 0x6, 0x7]})
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f00000031c0)={r9, "d14e0b91135238d50dd1f58cf0c958d1"}) (async)
r10 = bpf$ITER_CREATE(0x21, &(0x7f00000041c0), 0x8)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004240), r2)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000004300)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000042c0)={&(0x7f0000004280)={0x30, r11, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xa}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000004400)={&(0x7f0000004340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000043c0)={&(0x7f0000004380)={0x30, r11, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x7e}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040814}, 0x4000040) (async)
sendmsg$kcm(r10, &(0x7f0000004980)={&(0x7f0000004440)=@nl=@unspec, 0x80, &(0x7f0000004780)=[{&(0x7f00000044c0)="85029b", 0x3}, {&(0x7f0000004500)="de49109869d928435983e95d909637c8dedb4525e3a9627d6b5dd34ef8ffa8ddee660266d0e1c992c6b6e171e98e1fd16efbc0b3e316891ddb9516df2ca78de373065e602a6485899fd2be9aef87fa2f14e8ace793cce1c0beb52d83c82cad877857e244daaa732dfa71a0b8c72c310a0fe00cff7467e5bd437d1a67182681260de3a9f18ee6856dd0be85cfe8459badd2835d11381c53609b02e8b6", 0x9c}, {&(0x7f00000045c0)="b7441ec66b5d6b0e4bfdc33a12c7b9d45f7a0ab6c4252cf8ad0e7bb74e8de2046ea3b4e24dd4d7ba3009674c0e4611a215488c681bceb3c4f5f5884e5999baf478e919c3ffd143c872d651ecc9b762f813db70724f36df73fd0aa7f8b59a481f417877d2dfc43d296c2aba4dff425031c3b3fb6d3a652b177c14a88e7a71e3cf0cd5afd1d216ac0133e7492d8772c01c92de087f4522e5925892541c9bd15bf3adc8f5920d3c", 0xa6}, {&(0x7f0000004680)="cc2c15a44a0a34a29abe355e70bd499d7a4ec7176350d03b70da5826f18fb87697e4eb583cabe22adc405c35d23ab53e8fb0291410fbb59b91f1938f7f4a69ab1da62694c26f3513c5527585948f2bccb523abdd3e13b8fd020197a60d5a1d31d4ca847616146657a8d7d942528f9380a0866effc5d26ca9503a264ce5ee1a685b3bb5b41c4944d69baed27ea378d32c7c87bb593a567784612ad5e866e12bdcf903b22672b9f25ef7e085", 0xab}, {&(0x7f0000004740)="d396f0a90b63ace09e25a85c34435d7ae7dcc19b964c785f60f698dc2c9e619d0445dec203009a1f8268ef3006ee30dcc8cc1e", 0x33}], 0x5, &(0x7f0000004800)=[{0x100, 0x108, 0x1, "8b523a5b09b180117f34299b219717726ea8a06d071f53f32f568aa589dcbb92333dae512eb1b54ba613ebab579f389900a32063ab58ae9a18ae16b6003bd0530d24d36b33e357e489d091dea72c179ccd7bf5712113a330cd239751a476a6086845403385533b4f52a91a23b2a0ea1919ca9e73bd9a643843cde5afe82a72ef1bdce6014d4da3c39bdeaf8b1bb3ecc5bd8ef2413e362bf7dd7b895d399bb4cbab5de675a2ceda9d7051b9449f606528e5a3eb0157a49ed5034907bf3c0e05ba41c6dfe1b983551871367cbd4ce304b57fd05a2bbbd31d8040192f5e215a705528f65779ea242f7dce03ab7b2a"}, {0x60, 0x2bf01e75fe36b34c, 0x1, "123d34cbf5574bd4a2f5d1be546d0f39fcc5e0f883fb311391e16062a42625c11379245ba59ceb58778a6f784f9823a1677334a8cd5c844d19e5ff5df7fc517101e70e5a0e59e5bcca"}], 0x160}, 0x800) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000004ac0)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a00)={0x60, r3, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000004c00)={'syztnl1\x00', &(0x7f0000004b00)={'syztnl2\x00', r8, 0x1, 0x80, 0x7fffffff, 0x9, {{0x32, 0x4, 0x2, 0x5, 0xc8, 0x64, 0x0, 0x9, 0x4, 0x0, @multicast2, @local, {[@generic={0x89, 0xc, "c76acc85fafae5ea1e2a"}, @cipso={0x86, 0x17, 0x3, [{0x1, 0xd, "98931c33cbecf0af864ae7"}, {0x5, 0x4, "25c2"}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x71, 0x3, 0xf, [{@loopback, 0x529b}]}, @timestamp_addr={0x44, 0xc, 0xb5, 0x1, 0x7, [{@multicast1, 0xa}]}, @lsrr={0x83, 0x23, 0xc5, [@remote, @broadcast, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010102, @loopback]}, @timestamp_addr={0x44, 0x4c, 0xe4, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@loopback, 0x7}, {@loopback, 0x2}, {@private=0xa010101, 0x3}, {@rand_addr=0x64010101, 0x7}, {@loopback, 0x2}, {@remote, 0x2}, {@multicast2, 0xf7}, {@remote, 0x8}]}, @end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DEST(r12, &(0x7f0000004d00)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004c80)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd8187865}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async)
ioctl$sock_inet6_udp_SIOCINQ(r10, 0x541b, &(0x7f0000004d40)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004d80)) (async)
r13 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r13, 0x107, 0x3, &(0x7f0000004dc0)=0x4024e3d0, 0x4)
bind$inet6(r0, &(0x7f0000004e00)={0xa, 0x4e20, 0x9, @local, 0x1}, 0x1c)
sendmsg$NL80211_CMD_SET_PMKSA(r12, &(0x7f0000004f00)={&(0x7f0000004e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004ec0)={&(0x7f0000004e80)={0x28, r11, 0x401, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x8}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x53}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000)

154.252793ms ago: executing program 2 (id=1449):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000340)="07000000010000", 0x7)

153.427483ms ago: executing program 1 (id=1450):
close(0x3)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x5, 0x0) (async)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x0, @broadcast}, @in6={0xa, 0x4e22, 0xc, @private0, 0x366}], 0x3c) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x0, @broadcast}, @in6={0xa, 0x4e22, 0xc, @private0, 0x366}], 0x3c)
sendmmsg$inet6(r1, &(0x7f0000002580)=[{{&(0x7f0000000080)={0xa, 0x8000, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000380)="d0", 0x1}], 0x1}}], 0x1, 0x4000040)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0}) (async)
ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0})
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x9e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x9e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000000)={r11, 0x4}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={r11, 0x7f}, &(0x7f0000000040)=0x8)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000014)

150.138031ms ago: executing program 2 (id=1451):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c000000475ba7086521ed7191582d556e34817dd4bf078938967e805bc6578f55154b07beb979a8804eb590c44f44c0e30e360023e025c5707bcd17c2c9e0505583861563dd09796685766c1af68422fac4fbd54fdec278fc81bb346ddaec9a740c27c5f0049852a828eeb141fa71d44ae12938648fd11fcc3cddcdfcc7", @ANYRES16=r1, @ANYBLOB="72f265f961451600cc62c883a6e5a2a8010000000000ffdbdf2508000000180004801300010062726f6164636173742d6c696e6b00009409ded06f85c40854995a881c0b46027703f7d3e3e8e06675b2890ea5ce792e1cec0841b35a9828192091b7d299cfda7c44f6b716c9c10769e86b856672618822bd54ca47e77da0d72cef47d6436d21b1cde625912094ded28c7ce4971982b0df5faf7ad315c93876ad5e512f4c8d0498e2f960bcf26569062ce046997e6b49be14b5a82a2125465b05abba8a8ea2e94f646da08b8ec9a175392d7e13b05410f0c49345ea21de0b3a4c16cd93b438b5c9cf1bfa1c7125739651190a773e317609db"], 0x2c}, 0x1, 0x0, 0x0, 0x240088d1}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000540)={0x54, r4, 0x3, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1916}]}, 0x54}}, 0x20000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x54}}, 0x40001)
r7 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @local, 0x6}, 0x1c)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000004010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095c3ce26d4646cee88b211e723d1beb86b0ababdf4928f7bf4b7a8aa3883fc8659a98c66f16c02c527b5d07779eda69d90da87004d4332768ce2aa6ed0c0202a289be3c4cc4c7526c3d355b65fcd2540"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000800}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r8)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf36}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r9)

0s ago: executing program 1 (id=1452):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="850000008b000000950000000000000058598335af6cbaffdd58"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x700, 0x40, 0x5, 0x8, {{0x6, 0x4, 0x0, 0x1f, 0x18, 0x66, 0x0, 0x10, 0x29, 0x0, @multicast1, @loopback, {[@timestamp={0x44, 0x4, 0xe6, 0x0, 0x3}]}}}}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000020000000200000000000000000000010500000010000000010000000000001101000000000000000061"], 0x0, 0x53}, 0x20)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000000)="d9e6b9010008c7fd0000806f88c564cc5f17527c77096bde0fbedd35a710c145ad3004b3b6fada257f646413f0768d84c0c97dca471d8204837600249c8431704eac749ece9484c58dbf1305db48f454cdac39b92b00000000000000073d67b9c7f611190b629ea3a0258b2387f3af81dfe3040b1c4d1b6a527c3f1040007a988f6d4cb475423ad9ff14bd583b1e4c7d9f587c9436e7cb3e9b357efc0f5100407c5cdee85a3fc1acb7e125d1ab1cc268e07412a8cfff37bd7e6a2958b308f7ef", 0xc0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:57795' (ED25519) to the list of known hosts.
syzkaller login: [   49.115701][ T5755] cgroup: Unknown subsys name 'net'
[   49.208542][ T5755] cgroup: Unknown subsys name 'cpuset'
[   49.217495][ T5755] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.259606][ T5755] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.960182][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.964162][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.968099][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.972179][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.975556][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.978580][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.983370][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.987540][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.991614][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.996524][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   57.005975][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   57.009632][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   57.012987][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   57.019333][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   57.022369][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.247165][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   57.383103][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.386481][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.389093][ T5826] bridge_slave_0: entered allmulticast mode
[   57.392384][ T5826] bridge_slave_0: entered promiscuous mode
[   57.423433][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   57.433795][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.437064][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.439978][ T5826] bridge_slave_1: entered allmulticast mode
[   57.443925][ T5826] bridge_slave_1: entered promiscuous mode
[   57.516936][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.534847][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.592235][ T5826] team0: Port device team_slave_0 added
[   57.609245][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   57.620824][ T5826] team0: Port device team_slave_1 added
[   57.623585][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.627054][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.629877][ T5835] bridge_slave_0: entered allmulticast mode
[   57.633884][ T5835] bridge_slave_0: entered promiscuous mode
[   57.673296][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.676613][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.679504][ T5835] bridge_slave_1: entered allmulticast mode
[   57.683335][ T5835] bridge_slave_1: entered promiscuous mode
[   57.708011][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.710719][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.720598][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.757536][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.761700][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.764416][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.775548][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.790298][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.874792][ T5835] team0: Port device team_slave_0 added
[   57.881809][ T5835] team0: Port device team_slave_1 added
[   57.939491][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.942231][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.951915][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.962588][ T5826] hsr_slave_0: entered promiscuous mode
[   57.966225][ T5826] hsr_slave_1: entered promiscuous mode
[   57.969797][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.972363][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.975006][ T5825] bridge_slave_0: entered allmulticast mode
[   57.979868][ T5825] bridge_slave_0: entered promiscuous mode
[   57.983704][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.987055][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.989554][ T5825] bridge_slave_1: entered allmulticast mode
[   57.992439][ T5825] bridge_slave_1: entered promiscuous mode
[   57.996854][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.999631][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.011733][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.128294][ T5835] hsr_slave_0: entered promiscuous mode
[   58.131472][ T5835] hsr_slave_1: entered promiscuous mode
[   58.134252][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.139673][ T5835] Cannot create hsr debugfs directory
[   58.144325][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.175118][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.263237][ T5825] team0: Port device team_slave_0 added
[   58.302924][ T5825] team0: Port device team_slave_1 added
[   58.371770][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.377616][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.387912][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.401720][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.404535][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.417837][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.557948][ T5825] hsr_slave_0: entered promiscuous mode
[   58.561076][ T5825] hsr_slave_1: entered promiscuous mode
[   58.564169][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.567893][ T5825] Cannot create hsr debugfs directory
[   58.571480][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.584517][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.612701][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.622382][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.735117][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.770577][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.792435][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.813873][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.944365][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.952758][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.969025][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.976901][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.006625][ T5219] Bluetooth: hci0: command tx timeout
[   59.063653][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.080942][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.086331][ T5219] Bluetooth: hci2: command tx timeout
[   59.088660][ T5831] Bluetooth: hci1: command tx timeout
[   59.131295][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   59.137540][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   59.145827][  T108] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.148202][  T108] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.160801][  T108] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.163117][  T108] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.192321][  T108] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.194979][  T108] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.203568][  T108] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.206214][  T108] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.221834][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.289410][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   59.318459][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.321349][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.360970][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.363811][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.479445][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.557601][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.604634][ T5825] veth0_vlan: entered promiscuous mode
[   59.631242][ T5825] veth1_vlan: entered promiscuous mode
[   59.658489][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.672138][ T5826] veth0_vlan: entered promiscuous mode
[   59.695061][ T5826] veth1_vlan: entered promiscuous mode
[   59.724379][ T5825] veth0_macvtap: entered promiscuous mode
[   59.736038][ T5825] veth1_macvtap: entered promiscuous mode
[   59.773969][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.782422][ T5835] veth0_vlan: entered promiscuous mode
[   59.789876][ T5826] veth0_macvtap: entered promiscuous mode
[   59.798764][ T5826] veth1_macvtap: entered promiscuous mode
[   59.808228][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.812879][ T5835] veth1_vlan: entered promiscuous mode
[   59.820818][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.840577][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.848365][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.852041][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.856705][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.860176][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.874002][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.878232][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.881002][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.884342][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.948884][ T5835] veth0_macvtap: entered promiscuous mode
[   59.997917][ T5835] veth1_macvtap: entered promiscuous mode
[   60.014757][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.020520][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.058842][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.081589][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.103104][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.107384][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.110297][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.113142][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.116491][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.121662][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.166870][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.171829][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.177781][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.181873][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.263984][  T108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.268937][  T108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.273277][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.322728][  T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.326342][  T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.432145][ T5894] tipc: Started in network mode
[   60.435960][ T5894] tipc: Node identity 3e94646604a5, cluster identity 4711
[   60.458610][ T5894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.483999][ T5894] syzkaller0: entered promiscuous mode
[   60.491557][ T5894] syzkaller0: entered allmulticast mode
[   60.509212][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   60.592603][ T5899] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2'.
[   60.606174][ T5894] tipc: Resetting bearer <eth:syzkaller0>
[   60.637899][ T5893] tipc: Resetting bearer <eth:syzkaller0>
[   60.681651][ T5893] tipc: Disabling bearer <eth:syzkaller0>
[   60.730231][ T5898] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4'.
[   60.740740][ T5900] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4'.
[   61.027549][ T5902] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   61.087466][ T5219] Bluetooth: hci0: command tx timeout
[   61.175615][ T5219] Bluetooth: hci2: command tx timeout
[   61.177910][ T5219] Bluetooth: hci1: command tx timeout
[   61.256691][ T5904] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6'.
[   61.314184][ T5908] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.320580][ T5899] syz.1.2 (5899) used greatest stack depth: 20712 bytes left
[   61.356511][ T5906] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6'.
[   61.560435][ T5915] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.568474][ T5915] openvswitch: netlink: IP tunnel dst address not specified
[   61.588579][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9'.
[   61.745814][ T5930] bridge0: port 3(erspan0) entered blocking state
[   61.748585][ T5930] bridge0: port 3(erspan0) entered disabled state
[   61.751701][ T5930] erspan0: entered allmulticast mode
[   61.756823][ T5930] erspan0: entered promiscuous mode
[   61.759636][ T5930] bridge0: port 3(erspan0) entered blocking state
[   61.762538][ T5930] bridge0: port 3(erspan0) entered forwarding state
[   61.779701][ T5930] erspan0: left allmulticast mode
[   61.781315][ T5930] erspan0: left promiscuous mode
[   61.784519][ T5930] bridge0: port 3(erspan0) entered disabled state
[   61.803160][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[   61.818394][ T5923] warning: `syz.2.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.961631][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'.
[   62.043349][ T5941] syz.2.13 uses obsolete (PF_INET,SOCK_PACKET)
[   62.063913][ T5941] xt_CT: No such helper "syz0"
[   62.179925][ T5951] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   62.319306][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17'.
[   62.338601][   T12] bond0: (slave bond_slave_0): interface is now down
[   62.342684][   T12] bond0: (slave bond_slave_1): interface is now down
[   62.356274][   T12] bond0: now running without any active interface!
[   62.727281][ T5973] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.810422][ T5978] netlink: 'syz.1.24': attribute type 1 has an invalid length.
[   62.827713][ T5973] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.920524][ T5973] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.023337][ T5973] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.141698][ T5973] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.166819][ T5831] Bluetooth: hci0: command tx timeout
[   63.172459][ T5973] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.178202][   T12] bond0: (slave bond_slave_0): interface is now down
[   63.181291][   T12] bond0: (slave bond_slave_1): interface is now down
[   63.188394][   T12] bond0: now running without any active interface!
[   63.201171][ T5973] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.220841][ T5973] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.247974][ T5219] Bluetooth: hci2: command tx timeout
[   63.251172][ T5831] Bluetooth: hci1: command tx timeout
[   63.337706][ T5991] delete_channel: no stack
[   63.454180][ T5998] netlink: 'syz.0.31': attribute type 39 has an invalid length.
[   63.528447][ T5996] Zero length message leads to an empty skb
[   63.897050][ T6022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.399588][ T6045] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   64.511988][ T6050] Bluetooth: MGMT ver 1.23
[   64.793834][ T6064] bridge1: entered promiscuous mode
[   64.918556][ T6072] lo: entered allmulticast mode
[   64.926708][ T6072] lo: left allmulticast mode
[   65.033520][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.036657][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.097876][ T6079] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.104945][ T6079] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.155832][ T6079] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.158501][ T6079] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.161144][ T6079] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.163918][ T6079] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.240920][ T6090] x_tables: duplicate underflow at hook 1
[   65.249777][ T5831] Bluetooth: hci0: command tx timeout
[   65.325685][ T5831] Bluetooth: hci1: command tx timeout
[   65.327919][ T5831] Bluetooth: hci2: command tx timeout
[   65.611380][ T6106] __nla_validate_parse: 15 callbacks suppressed
[   65.611395][ T6106] netlink: 720 bytes leftover after parsing attributes in process `syz.2.65'.
[   65.611399][ T6105] netlink: 104 bytes leftover after parsing attributes in process `syz.1.66'.
[   65.637258][ T6106] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (5001287)
[   65.641564][ T6106] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   65.754427][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'.
[   65.894876][ T6130] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.69'.
[   65.920655][ T6122] netlink: 'syz.1.69': attribute type 4 has an invalid length.
[   65.961666][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'.
[   66.022142][ T6137] veth0_to_batadv: entered promiscuous mode
[   66.186921][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'.
[   66.201276][ T6151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.74'.
[   66.280631][ T6157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.76'.
[   66.428541][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'.
[   66.461264][ T6169] netlink: 'syz.1.80': attribute type 30 has an invalid length.
[   66.489405][ T6171] veth0: entered promiscuous mode
[   66.491964][ T6170] veth0: left promiscuous mode
[   66.863127][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'.
[   67.200416][ T6208] bridge0: port 3(gretap0) entered blocking state
[   67.203146][ T6208] bridge0: port 3(gretap0) entered disabled state
[   67.209543][ T6208] gretap0: entered allmulticast mode
[   67.213078][ T6208] gretap0: entered promiscuous mode
[   67.218507][ T6208] bridge0: port 3(gretap0) entered blocking state
[   67.221508][ T6208] bridge0: port 3(gretap0) entered forwarding state
[   67.430861][ T6223] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[   67.790354][ T6242] netlink: 'syz.2.106': attribute type 2 has an invalid length.
[   68.208280][ T6280] ip6t_srh: unknown srh invflags 4000
[   68.242136][ T6280] veth1_to_hsr: entered promiscuous mode
[   68.244100][ T6280] veth1_to_hsr: entered allmulticast mode
[   68.436510][ T6305] netlink: 'syz.0.127': attribute type 1 has an invalid length.
[   68.439471][ T6305] netlink: 'syz.0.127': attribute type 1 has an invalid length.
[   68.448305][ T6304] netlink: 'syz.0.127': attribute type 1 has an invalid length.
[   68.450837][ T6304] netlink: 'syz.0.127': attribute type 1 has an invalid length.
[   68.685168][ T6317] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component
[   70.133573][ T6379] pim6reg: entered allmulticast mode
[   70.214438][ T6381] netlink: 'syz.2.153': attribute type 9 has an invalid length.
[   70.634514][ T6408] netlink: 'syz.0.164': attribute type 2 has an invalid length.
[   70.829550][ T6423] __nla_validate_parse: 24 callbacks suppressed
[   70.829567][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'.
[   70.984504][ T6428] xt_policy: output policy not valid in PREROUTING and INPUT
[   71.118235][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'.
[   71.190516][ T6445] dvmrp1: entered allmulticast mode
[   71.318794][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'.
[   71.341016][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.343887][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.347999][ T6457] netlink: 44 bytes leftover after parsing attributes in process `syz.0.173'.
[   71.851801][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'.
[   71.922411][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'.
[   71.927953][ T6489] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   71.929767][ T6488] netlink: 'syz.1.181': attribute type 11 has an invalid length.
[   71.931296][ T6489] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.996729][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'.
[   72.222362][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.187'.
[   72.279602][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'.
[   72.283402][ T6517] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   72.287830][ T6517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.399277][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'.
[   72.593647][ T6544] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   72.604414][ T6544] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.654618][ T6553] bond0: option arp_interval: invalid value (18446744073072017407)
[   72.658036][ T6553] bond0: option arp_interval: allowed values 0 - 2147483647
[   72.824858][ T6566] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   72.827396][ T6566] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.863190][ T6571] bond0: option arp_interval: invalid value (18446744073357230079)
[   72.867360][ T6571] bond0: option arp_interval: allowed values 0 - 2147483647
[   73.043394][ T6584] xt_ecn: cannot match TCP bits for non-tcp packets
[   73.770049][ T6591] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[   73.819985][ T6597] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   73.933759][ T6599] x_tables: duplicate underflow at hook 2
[   74.848835][ T6648] netlink: 'syz.2.234': attribute type 83 has an invalid length.
[   75.689877][ T6736] netlink: 'syz.1.262': attribute type 1 has an invalid length.
[   75.692906][ T6736] netlink: 'syz.1.262': attribute type 2 has an invalid length.
[   75.711253][ T6742] bond0: option arp_interval: invalid value (18446744073709543424)
[   75.714563][ T6742] bond0: option arp_interval: allowed values 0 - 2147483647
[   75.839903][ T6754] __nla_validate_parse: 20 callbacks suppressed
[   75.839919][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'.
[   75.856656][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'.
[   75.890670][ T6755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.267'.
[   76.063251][ T6769] netlink: 'syz.0.272': attribute type 4 has an invalid length.
[   76.288119][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'.
[   76.319909][ T6791] tun0: tun_chr_ioctl cmd 1074025675
[   76.325963][ T6791] tun0: persist enabled
[   76.327489][ T6791] tun0: tun_chr_ioctl cmd 1074025675
[   76.329197][ T6791] tun0: persist disabled
[   76.348289][ T6793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.282'.
[   76.528543][ T6802] netlink: 'syz.0.284': attribute type 2 has an invalid length.
[   76.538705][ T6802] : entered promiscuous mode
[   76.588683][ T6806] xt_cgroup: invalid path, errno=-2
[   76.898370][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'.
[   76.966527][ T6820] netlink: 'syz.1.291': attribute type 2 has an invalid length.
[   76.973348][ T6822] xt_TPROXY: Can be used only with -p tcp or -p udp
[   77.043407][ T6829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.294'.
[   77.324911][ T6845] blkio.reset_stats is deprecated
[   77.458209][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'.
[   77.461778][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.300'.
[   77.497735][ T6859] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   77.529219][ T6862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.301'.
[   77.584356][ T6869] net_ratelimit: 2 callbacks suppressed
[   77.584394][ T6869] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   77.827643][ T5219] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   77.831079][ T5219] Bluetooth: hci0: command 0x0c1a tx timeout
[   78.037711][ T6899] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   78.040395][ T6899] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.128660][ T6906] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   78.309116][ T6925] netlink: 'syz.2.321': attribute type 1 has an invalid length.
[   78.552960][ T6937] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   78.560086][ T6937] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.401405][ T6987] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   79.404964][ T6987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.819325][ T7000] veth0_macvtap: left promiscuous mode
[   79.966130][ T7008] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   81.409248][ T7087] __nla_validate_parse: 24 callbacks suppressed
[   81.409265][ T7087] netlink: 48 bytes leftover after parsing attributes in process `syz.0.376'.
[   81.552297][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'.
[   81.556862][ T7095] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   81.560083][ T7095] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.620595][ T7102] raw_sendmsg: syz.1.382 forgot to set AF_INET. Fix it!
[   81.832564][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'.
[   81.926613][ T7119] netlink: 68 bytes leftover after parsing attributes in process `syz.1.388'.
[   81.931517][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'.
[   81.945758][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'.
[   81.984223][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'.
[   81.993557][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.390'.
[   82.006092][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.390'.
[   82.024158][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.390'.
[   82.111266][ T7135] syzkaller1: entered promiscuous mode
[   82.113528][ T7135] syzkaller1: entered allmulticast mode
[   82.158918][ T7137] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   82.163829][ T7137] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[   82.246998][ T7143] bridge0: port 3(gretap0) entered disabled state
[   82.251162][ T7145] xt_nfacct: accounting object `syz1' does not exists
[   82.266903][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.272889][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.441493][ T7164] Driver unsupported XDP return value 0 on prog  (id 139) dev N/A, expect packet loss!
[   82.630284][ T7177] net_ratelimit: 2 callbacks suppressed
[   82.630297][ T7177] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   82.634693][ T7177] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.666573][   T33] audit: type=1800 audit(1752678901.716:2): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.403" name="memory.events" dev="tmpfs" ino=861 res=0 errno=0
[   83.089298][ T7195] netlink: 'syz.0.412': attribute type 21 has an invalid length.
[   83.257709][ T7210] netlink: 'syz.0.416': attribute type 1 has an invalid length.
[   83.549188][ T7227] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   83.551723][ T7227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.891520][ T7248] bridge_slave_0: left allmulticast mode
[   83.894228][ T7248] bridge_slave_0: left promiscuous mode
[   83.898955][ T7248] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.907106][ T7248] bridge_slave_1: left allmulticast mode
[   83.909847][ T7248] bridge_slave_1: left promiscuous mode
[   83.912590][ T7248] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.922775][ T7248] bond0: (slave bond_slave_0): Releasing backup interface
[   83.931200][ T7248] bond0: (slave bond_slave_1): Releasing backup interface
[   83.941967][ T7248] team0: Port device team_slave_0 removed
[   83.947772][ T7248] team0: Port device team_slave_1 removed
[   83.954048][ T7248] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.961195][ T7248] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.973178][ T7248] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[   84.041914][ T7252] netlink: 'syz.1.431': attribute type 10 has an invalid length.
[   84.045221][ T7252] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   84.151522][ T7261] ip6tnl1: entered promiscuous mode
[   84.153652][ T7261] ip6tnl1: entered allmulticast mode
[   84.291468][ T7270] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   84.294684][ T7270] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.402800][ T7280] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[   84.427229][ T7280] netlink: 'syz.2.440': attribute type 10 has an invalid length.
[   84.429642][ T7280] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[   84.658871][ T7299] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   84.673084][ T7299] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.712780][ T7302] netlink: 'syz.1.447': attribute type 1 has an invalid length.
[   84.753403][ T7302] bond2: (slave gretap1): making interface the new active one
[   84.757873][ T7302] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   84.812465][ T7302] syz.1.447 (7302) used greatest stack depth: 20136 bytes left
[   84.920595][ T7315] netlink: 'syz.1.451': attribute type 3 has an invalid length.
[   85.401395][ T7363] netlink: 'syz.2.465': attribute type 12 has an invalid length.
[   85.433760][ T7367] batman_adv: batadv0: Adding interface: ipvlan2
[   85.441265][ T7367] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.451661][ T7367] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[   85.866934][ T7394] netlink: 'syz.2.474': attribute type 2 has an invalid length.
[   86.458790][ T7417] syz.0.480 uses old SIOCAX25GETINFO
[   86.689770][ T1270] cfg80211: failed to load regulatory.db
[   86.768038][ T7429] IPv6: syztnl1: Disabled Multicast RS
[   86.965152][ T7453] vti0: entered promiscuous mode
[   87.033436][ T7457] __nla_validate_parse: 23 callbacks suppressed
[   87.033449][ T7457] netlink: 36 bytes leftover after parsing attributes in process `syz.0.491'.
[   87.082150][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.493'.
[   87.119282][ T7466] netlink: 20 bytes leftover after parsing attributes in process `syz.0.495'.
[   87.148563][ T7466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'.
[   87.554714][ T7497] netlink: 44 bytes leftover after parsing attributes in process `syz.0.507'.
[   87.559441][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'.
[   87.598288][ T7497] netlink: 'syz.0.507': attribute type 39 has an invalid length.
[   87.667137][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.508'.
[   88.193291][ T7539] ipvlan3: entered promiscuous mode
[   88.196180][ T7539] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[   88.274568][ T7550] netlink: 248 bytes leftover after parsing attributes in process `syz.0.520'.
[   88.479716][ T7571] netlink: 10 bytes leftover after parsing attributes in process `syz.0.525'.
[   88.510876][ T7571] netlink: 10 bytes leftover after parsing attributes in process `syz.0.525'.
[   88.537711][ T7568] netlink: 'syz.0.525': attribute type 1 has an invalid length.
[   88.546326][ T7568] netlink: 'syz.0.525': attribute type 11 has an invalid length.
[   88.609269][ T7580] policy can only be matched on NF_INET_PRE_ROUTING
[   88.609292][ T7580] unable to load match
[   88.749625][ T7589] net_ratelimit: 3 callbacks suppressed
[   88.749645][ T7589] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   88.756139][ T7589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.307478][ T7626] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   89.310288][ T7626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.674696][ T7647] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.678507][ T7647] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.681307][ T7647] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.684342][ T7647] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.873153][ T7662] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   90.008036][ T7668] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   90.010658][ T7668] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.157821][ T7678] ip6tnl2: entered promiscuous mode
[   90.159554][ T7678] ip6tnl2: entered allmulticast mode
[   90.163223][ T7678] team0: Device ip6tnl2 is up. Set it down before adding it as a team port
[   90.372065][ T7687] team0: Port device gtp0 added
[   90.848269][ T7702] tc_dump_action: action bad kind
[   91.690921][ T7715] netlink: 'syz.0.570': attribute type 2 has an invalid length.
[   91.751771][ T7721] netlink: 'syz.0.572': attribute type 15 has an invalid length.
[   92.165081][ T7735] __nla_validate_parse: 20 callbacks suppressed
[   92.165100][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'.
[   92.214383][ T7738] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443)
[   92.222922][ T7738] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[   92.240032][ T7738] netlink: 64 bytes leftover after parsing attributes in process `syz.2.577'.
[   92.267197][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.577'.
[   92.273081][ T7738] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443)
[   92.281172][ T7738] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[   92.330215][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'.
[   92.333737][ T7746] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   92.338530][ T7746] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.404625][ T7753] x_tables: duplicate underflow at hook 1
[   92.427394][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'.
[   92.430111][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'.
[   92.433846][ T7755] netlink: 'syz.0.583': attribute type 14 has an invalid length.
[   92.436643][ T7755] netlink: 'syz.0.583': attribute type 13 has an invalid length.
[   92.523363][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'.
[   92.538958][ T7719] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   92.634883][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'.
[   92.639295][ T7766] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   92.643228][ T7766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.670430][ T7768] netlink: 'syz.1.589': attribute type 10 has an invalid length.
[   92.673038][ T7768] netlink: 40 bytes leftover after parsing attributes in process `syz.1.589'.
[   92.681053][ T7768] veth0_vlan: entered allmulticast mode
[   92.694194][ T7768] bridge0: port 4(veth0_vlan) entered blocking state
[   92.707648][ T7768] bridge0: port 4(veth0_vlan) entered disabled state
[   92.713378][ T7768] netlink: 'syz.1.589': attribute type 2 has an invalid length.
[   92.792655][ T7773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.591'.
[   92.872962][ T7784] netlink: 'syz.1.596': attribute type 12 has an invalid length.
[   92.884454][ T7782] netlink: 'syz.0.595': attribute type 1 has an invalid length.
[   93.182183][ T7802] gretap0: Device is already in use.
[   93.184956][ T7802] gretap0: Device is already in use.
[   93.190351][ T7802] gretap0: Device is already in use.
[   93.193020][ T7802] gretap0: Device is already in use.
[   93.196136][ T7802] gretap0: Device is already in use.
[   93.199590][ T7802] gretap0: Device is already in use.
[   93.202102][ T7802] gretap0: Device is already in use.
[   93.204771][ T7802] gretap0: Device is already in use.
[   93.210284][ T7802] gretap0: Device is already in use.
[   93.212978][ T7802] gretap0: Device is already in use.
[   93.215968][ T7802] gretap0: Device is already in use.
[   93.218558][ T7802] gretap0: Device is already in use.
[   93.221193][ T7802] gretap0: Device is already in use.
[   93.223837][ T7802] gretap0: Device is already in use.
[   93.228611][ T7802] gretap0: Device is already in use.
[   93.231213][ T7802] gretap0: Device is already in use.
[   93.233767][ T7802] gretap0: Device is already in use.
[   93.236267][ T7802] gretap0: Device is already in use.
[   93.239151][ T7802] gretap0: Device is already in use.
[   93.241747][ T7802] gretap0: Device is already in use.
[   93.244261][ T7802] gretap0: Device is already in use.
[   93.250643][ T7802] gretap0: Device is already in use.
[   93.253324][ T7802] gretap0: Device is already in use.
[   93.256126][ T7802] gretap0: Device is already in use.
[   93.258721][ T7802] gretap0: Device is already in use.
[   93.261381][ T7802] gretap0: Device is already in use.
[   93.264414][ T7802] gretap0: Device is already in use.
[   93.267977][ T7802] gretap0: Device is already in use.
[   93.271387][ T7802] gretap0: Device is already in use.
[   93.273599][ T7802] gretap0: Device is already in use.
[   93.275874][ T7802] gretap0: Device is already in use.
[   93.277997][ T7802] gretap0: Device is already in use.
[   93.280286][ T7802] gretap0: Device is already in use.
[   93.491674][ T5856] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   93.494838][ T5856] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   93.515600][ T5889] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   93.595786][ T1270] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   93.642741][ T7819] netlink: 'syz.1.608': attribute type 9 has an invalid length.
[   93.725790][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout
[   94.218769][ T5889] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   94.690451][ T7902] netlink: 'syz.0.638': attribute type 1 has an invalid length.
[   94.694008][ T7902] netlink: 'syz.0.638': attribute type 1 has an invalid length.
[   94.723698][ T7902] netlink: 'syz.0.638': attribute type 10 has an invalid length.
[   94.730408][ T7902] batman_adv: batadv0: Adding interface: virt_wifi0
[   94.733552][ T7902] batman_adv: batadv0: Interface activated: virt_wifi0
[   94.976178][ T7914] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   95.141541][ T7921] gretap0: left allmulticast mode
[   95.143749][ T7921] gretap0: left promiscuous mode
[   95.146468][ T7921] bridge0: port 3(gretap0) entered disabled state
[   95.161419][ T7921] bridge_slave_0: left allmulticast mode
[   95.163813][ T7921] bridge_slave_0: left promiscuous mode
[   95.167770][ T7921] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.179070][ T7921] bridge_slave_1: left allmulticast mode
[   95.181796][ T7921] bridge_slave_1: left promiscuous mode
[   95.183956][ T7921] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.193816][ T7921] bond0: (slave bond_slave_0): Releasing backup interface
[   95.203950][ T7921] bond0: (slave bond_slave_1): Releasing backup interface
[   95.228302][ T7921] team0: Port device team_slave_0 removed
[   95.238730][ T7921] team0: Port device team_slave_1 removed
[   95.241812][ T7921] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.245042][ T7921] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.246581][ T7923] netlink: 'syz.1.644': attribute type 10 has an invalid length.
[   95.253732][ T7921] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.259070][ T7921] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.278770][ T7921] bond2: (slave gretap1): Releasing active interface
[   95.285200][ T7921] batman_adv: batadv0: Removing interface: ipvlan2
[   95.315995][ T2285] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   95.321140][ T7923] bond0: (slave wlan1): Enslaving as an active interface with a down link
[   95.331537][ T7921] syz.1.644 (7921) used greatest stack depth: 19928 bytes left
[   95.387387][ T5700] bond0: (slave wlan1): link status definitely up
[   95.395805][ T5700] bond0: active interface up!
[   95.430136][ T7927] net_ratelimit: 2 callbacks suppressed
[   95.430156][ T7927] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[   95.436258][ T7927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.495218][ T7930] netlink: 'syz.1.647': attribute type 18 has an invalid length.
[   95.716494][ T2285] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   95.897072][ T5700] bond0: (slave wlan1): interface is now down
[   95.904601][ T5700] bond0: now running without any active interface!
[   96.140091][ T7970] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.144018][ T7968] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.147802][ T7968] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.150632][ T7968] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.153275][ T7968] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   96.224096][ T7980] netlink: 'syz.0.658': attribute type 29 has an invalid length.
[   96.230575][ T7980] netlink: 'syz.0.658': attribute type 29 has an invalid length.
[   96.420961][ T7997] netlink: 'syz.0.666': attribute type 2 has an invalid length.
[   96.673667][ T7974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   96.990448][ T8027] netlink: 'syz.0.671': attribute type 5 has an invalid length.
[   97.011691][ T8027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.544331][ T8049] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[   97.718960][ T8055] __nla_validate_parse: 35 callbacks suppressed
[   97.718983][ T8055] netlink: 52 bytes leftover after parsing attributes in process `syz.0.680'.
[   97.885936][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   98.121561][ T8063] IPv6: NLM_F_CREATE should be specified when creating new route
[   98.134462][ T8063] team0: Device bond0 is of different type
[   98.243774][ T8071] netlink: 32 bytes leftover after parsing attributes in process `syz.1.684'.
[   98.259311][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'.
[   98.277829][ T8072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.686'.
[   98.281869][ T8073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.686'.
[   98.352507][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'.
[   98.418979][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'.
[   98.491842][ T8083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.691'.
[   98.611947][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'.
[   98.901338][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'.
[   99.042411][ T8133] ieee802154 phy0 wpan0: encryption failed: -90
[   99.101144][ T8138] bridge0: entered promiscuous mode
[   99.138859][ T8140] batadv_slave_0: entered promiscuous mode
[   99.154864][ T8139] batadv_slave_0: left promiscuous mode
[   99.361891][ T8161] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[   99.669813][ T8175] tap0: tun_chr_ioctl cmd 1074025677
[   99.672559][ T8175] tap0: linktype set to 270
[   99.801124][ T8177] validate_nla: 8 callbacks suppressed
[   99.801173][ T8177] netlink: 'syz.1.721': attribute type 1 has an invalid length.
[  100.102866][ T8196] xt_TPROXY: Can be used only with -p tcp or -p udp
[  100.104450][ T8195] xt_TPROXY: Can be used only with -p tcp or -p udp
[  100.164046][ T8198] netlink: 'syz.2.728': attribute type 21 has an invalid length.
[  100.963238][ T8218] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  101.086740][ T5889] IPVS: starting estimator thread 0...
[  101.195587][ T8227] IPVS: using max 62 ests per chain, 148800 per kthread
[  101.328294][ T8234] !: renamed from dummy0
[  101.481067][ T8251] netlink: 'syz.1.737': attribute type 10 has an invalid length.
[  102.802931][ T8346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.119151][ T8372] netlink: 'syz.0.760': attribute type 10 has an invalid length.
[  103.141119][ T8372] batman_adv: batadv0: Adding interface: team0
[  103.143652][ T8372] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  103.148692][ T8372] netlink: 'syz.0.760': attribute type 10 has an invalid length.
[  103.152194][ T8372] __nla_validate_parse: 13 callbacks suppressed
[  103.152207][ T8372] netlink: 2 bytes leftover after parsing attributes in process `syz.0.760'.
[  103.175591][ T8372] team0: entered promiscuous mode
[  103.177749][ T8372] team_slave_0: entered promiscuous mode
[  103.177794][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.762'.
[  103.180218][ T8372] team_slave_1: entered promiscuous mode
[  103.191277][ T8372] 8021q: adding VLAN 0 to HW filter on device team0
[  103.194646][ T8372] batman_adv: batadv0: Interface activated: team0
[  103.201094][ T8372] batman_adv: batadv0: Interface deactivated: team0
[  103.211278][ T8372] batman_adv: batadv0: Removing interface: team0
[  103.222584][ T8372] bridge0: port 3(team0) entered blocking state
[  103.225906][ T8372] bridge0: port 3(team0) entered disabled state
[  103.228841][ T8372] team0: entered allmulticast mode
[  103.230978][ T8372] team_slave_0: entered allmulticast mode
[  103.233560][ T8372] team_slave_1: entered allmulticast mode
[  103.241131][ T8372] bridge0: port 3(team0) entered blocking state
[  103.244075][ T8372] bridge0: port 3(team0) entered forwarding state
[  103.269194][ T8373] netlink: 'syz.0.760': attribute type 5 has an invalid length.
[  103.275519][ T8373] netlink: 32 bytes leftover after parsing attributes in process `syz.0.760'.
[  103.509353][ T8403] netlink: 52 bytes leftover after parsing attributes in process `syz.0.770'.
[  103.512874][ T8403] netlink: 'syz.0.770': attribute type 1 has an invalid length.
[  103.652652][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'.
[  103.792672][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.772'.
[  104.597929][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'.
[  104.601565][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'.
[  104.605241][ T8448] netlink: 'syz.1.783': attribute type 14 has an invalid length.
[  104.608916][ T8448] netlink: 'syz.1.783': attribute type 11 has an invalid length.
[  104.901741][ T8462] C: renamed from team_slave_0 (while UP)
[  104.910071][ T8462] netlink: 'syz.0.787': attribute type 1 has an invalid length.
[  104.913772][ T8462] netlink: 152 bytes leftover after parsing attributes in process `syz.0.787'.
[  104.922988][ T8462] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  104.932728][ T8463] netlink: 'syz.0.787': attribute type 1 has an invalid length.
[  104.950144][ T8463] netlink: 152 bytes leftover after parsing attributes in process `syz.0.787'.
[  104.966182][ T8463] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  105.026428][ T8467] netlink: 'syz.1.788': attribute type 2 has an invalid length.
[  105.033092][ T8467] netlink: 'syz.1.788': attribute type 1 has an invalid length.
[  105.362003][ T8493] trusted_key: syz.2.795 sent an empty control message without MSG_MORE.
[  105.569306][ T8511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.601717][ T8518] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  105.610235][ T8519] bridge0: port 1(gretap0) entered blocking state
[  105.612675][ T8519] bridge0: port 1(gretap0) entered disabled state
[  105.615081][ T8519] gretap0: entered allmulticast mode
[  105.618994][ T8519] gretap0: entered promiscuous mode
[  105.730495][ T8535] Can't find ip_set type hash:ip$mec
[  105.828095][ T8541] C (unregistering): left promiscuous mode
[  105.830320][ T8541] C (unregistering): left allmulticast mode
[  105.836655][ T8541] team0: Port device C removed
[  105.852178][  T161] bridge0: port 3(team0) entered disabled state
[  106.234488][ T8561] --map-set only usable from mangle table
[  106.310490][ T8564] netlink: 'syz.0.818': attribute type 9 has an invalid length.
[  106.313784][ T8564] netlink: 'syz.0.818': attribute type 6 has an invalid length.
[  106.497263][ T1270] hid-generic 0005:0B57:0001.0001: collection stack underflow
[  106.503479][ T1270] hid-generic 0005:0B57:0001.0001: item 0 0 0 12 parsing failed
[  106.511365][ T1270] hid-generic 0005:0B57:0001.0001: probe with driver hid-generic failed with error -22
[  106.586906][ T8574] block nbd0: Unsupported socket: shutdown callout must be supported.
[  107.165949][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  107.685486][ T8593] GUP no longer grows the stack in syz.1.830 (8593): 200000004000-200000008000 (200000002000)
[  107.690928][ T8593] CPU: 1 UID: 0 PID: 8593 Comm: syz.1.830 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  107.690956][ T8593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  107.690967][ T8593] Call Trace:
[  107.690975][ T8593]  <TASK>
[  107.690983][ T8593]  dump_stack_lvl+0x189/0x250
[  107.691016][ T8593]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.691036][ T8593]  ? __pfx__printk+0x10/0x10
[  107.691054][ T8593]  ? find_vma+0xe7/0x160
[  107.691084][ T8593]  __get_user_pages+0x2a60/0x30b0
[  107.691133][ T8593]  ? __pfx___get_user_pages+0x10/0x10
[  107.691148][ T8593]  ? __gup_longterm_locked+0x309/0x15b0
[  107.691165][ T8593]  ? down_read_killable+0x1d1/0x350
[  107.691181][ T8593]  ? try_get_folio+0x633/0x660
[  107.691202][ T8593]  __gup_longterm_locked+0x3e3/0x15b0
[  107.691279][ T8593]  gup_fast_fallback+0x1cd4/0x2260
[  107.691328][ T8593]  ? __pfx_gup_fast_fallback+0x10/0x10
[  107.691348][ T8593]  ? rcu_is_watching+0x15/0xb0
[  107.691372][ T8593]  ? is_valid_gup_args+0x11f/0x200
[  107.691389][ T8593]  ? pin_user_pages_fast+0x4d/0xb0
[  107.691404][ T8593]  rds_cmsg_rdma_args+0x8f4/0x1240
[  107.691452][ T8593]  rds_cmsg_send+0x33d/0x5c0
[  107.691483][ T8593]  rds_sendmsg+0x1129/0x1f00
[  107.691516][ T8593]  ? __pfx_rds_sendmsg+0x10/0x10
[  107.691533][ T8593]  ? aa_sk_perm+0x81e/0x950
[  107.691558][ T8593]  ? __pfx_aa_sk_perm+0x10/0x10
[  107.691575][ T8593]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  107.691597][ T8593]  ? aa_sock_msg_perm+0x94/0x160
[  107.691619][ T8593]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  107.691642][ T8593]  ? __pfx_rds_sendmsg+0x10/0x10
[  107.691659][ T8593]  __sock_sendmsg+0x21c/0x270
[  107.691679][ T8593]  ____sys_sendmsg+0x505/0x830
[  107.691715][ T8593]  ? __pfx_____sys_sendmsg+0x10/0x10
[  107.691745][ T8593]  ? import_iovec+0x74/0xa0
[  107.691769][ T8593]  ___sys_sendmsg+0x21f/0x2a0
[  107.691792][ T8593]  ? __pfx____sys_sendmsg+0x10/0x10
[  107.691820][ T8593]  ? futex_wake+0x458/0x500
[  107.691845][ T8593]  ? __pfx_rds_bind+0x10/0x10
[  107.691864][ T8593]  ? __might_fault+0xb0/0x130
[  107.691904][ T8593]  __x64_sys_sendmsg+0x19b/0x260
[  107.691927][ T8593]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  107.691955][ T8593]  ? rcu_is_watching+0x15/0xb0
[  107.691976][ T8593]  ? do_syscall_64+0xbe/0x3b0
[  107.691995][ T8593]  do_syscall_64+0xfa/0x3b0
[  107.692009][ T8593]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.692032][ T8593]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.692047][ T8593]  ? exc_page_fault+0x9f/0xf0
[  107.692070][ T8593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.692085][ T8593] RIP: 0033:0x7f3c3798e929
[  107.692103][ T8593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.692117][ T8593] RSP: 002b:00007f3c3873c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  107.692136][ T8593] RAX: ffffffffffffffda RBX: 00007f3c37bb6080 RCX: 00007f3c3798e929
[  107.692147][ T8593] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 000000000000000c
[  107.692158][ T8593] RBP: 00007f3c37a10b39 R08: 0000000000000000 R09: 0000000000000000
[  107.692167][ T8593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  107.692176][ T8593] R13: 0000000000000000 R14: 00007f3c37bb6080 R15: 00007ffd48e792b8
[  107.692201][ T8593]  </TASK>
[  108.514925][ T8610] veth4: entered allmulticast mode
[  108.577026][ T8615] netlink: 'syz.1.836': attribute type 1 has an invalid length.
[  108.764783][ T8628] netlink: 'syz.0.840': attribute type 72 has an invalid length.
[  108.772518][ T8628] __nla_validate_parse: 16 callbacks suppressed
[  108.772538][ T8628] netlink: 1016 bytes leftover after parsing attributes in process `syz.0.840'.
[  108.857064][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.842'.
[  108.892050][ T8632] bond2: entered promiscuous mode
[  108.896619][ T8632] 8021q: adding VLAN 0 to HW filter on device bond2
[  108.918717][ T8632] 8021q: adding VLAN 0 to HW filter on device bond2
[  108.922306][ T8632] bond2: (slave vcan0): The slave device specified does not support setting the MAC address
[  108.931747][ T8632] bond2: (slave vcan0): Error -95 calling set_mac_address
[  109.071324][ T8639] netlink: 56 bytes leftover after parsing attributes in process `syz.0.843'.
[  109.075168][ T8639] netlink: 56 bytes leftover after parsing attributes in process `syz.0.843'.
[  109.461716][ T8650] netlink: 36 bytes leftover after parsing attributes in process `syz.0.847'.
[  109.691136][ T8662] tipc: Started in network mode
[  109.693325][ T8662] tipc: Node identity 560face617b, cluster identity 4711
[  109.707084][ T8662] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.711195][ T8663] syzkaller0: entered allmulticast mode
[  109.713447][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.851'.
[  109.742388][ T8662] tipc: Disabling bearer <eth:syzkaller0>
[  109.906420][ T8675] ipt_rpfilter: unknown options
[  110.001878][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'.
[  110.110851][ T8693] sctp: [Deprecated]: syz.0.861 (pid 8693) Use of struct sctp_assoc_value in delayed_ack socket option.
[  110.110851][ T8693] Use struct sctp_sack_info instead
[  110.162093][ T8695] netlink: 248 bytes leftover after parsing attributes in process `syz.2.862'.
[  110.539831][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.869'.
[  110.704196][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'.
[  110.707480][ T8730] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  110.709937][ T8730] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.807004][ T5831] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  111.810024][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout
[  111.820120][ T8781] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  111.824043][ T8781] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  111.842565][ T8781] Cannot find add_set index 2 as target
[  111.932687][ T8793] Cannot find add_set index 4 as target
[  112.108888][ T8809] tipc: Started in network mode
[  112.110861][ T8809] tipc: Node identity 126b9fc21a2, cluster identity 4711
[  112.113530][ T8809] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.117443][ T8809] syzkaller0: entered promiscuous mode
[  112.119917][ T8809] syzkaller0: entered allmulticast mode
[  112.181411][ T8803] tipc: Resetting bearer <eth:syzkaller0>
[  112.193720][ T8802] tipc: Resetting bearer <eth:syzkaller0>
[  112.226583][ T8802] tipc: Disabling bearer <eth:syzkaller0>
[  112.231688][ T8811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.335083][ T8817] openvswitch: netlink: Missing valid actions attribute.
[  112.337697][ T8817] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.521577][ T8830] vlan0: entered promiscuous mode
[  112.527450][ T8830] vlan0: entered allmulticast mode
[  112.529579][ T8830] hsr_slave_1: entered allmulticast mode
[  113.057012][ T8851] af_packet: tpacket_rcv: packet too big, clamped from 84 to 4294967272. macoff=96
[  113.248667][ T8861] 8021q: adding VLAN 0 to HW filter on device bond3
[  113.333382][ T8864] netlink: 'syz.0.921': attribute type 1 has an invalid length.
[  113.398958][ T8866] netlink: 'syz.2.922': attribute type 20 has an invalid length.
[  113.401997][ T8866] netlink: 'syz.2.922': attribute type 21 has an invalid length.
[  113.808022][ T8904] 8021q: adding VLAN 0 to HW filter on device bond3
[  113.905114][ T8908] bond0: (slave wlan1): Releasing backup interface
[  113.948626][ T6085] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  114.014610][ T8914] __nla_validate_parse: 15 callbacks suppressed
[  114.014632][ T8914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.938'.
[  114.027771][ T8914] netlink: 'syz.0.938': attribute type 7 has an invalid length.
[  114.030196][ T8914] netlink: 'syz.0.938': attribute type 8 has an invalid length.
[  114.032730][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'.
[  114.037823][ T8912] xt_CT: You must specify a L4 protocol and not use inversions on it
[  114.190907][ T8921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.939'.
[  114.710973][ T8951] netlink: 248 bytes leftover after parsing attributes in process `syz.1.951'.
[  115.005745][ T6085] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  115.170042][ T8973] netlink: 'syz.0.958': attribute type 3 has an invalid length.
[  115.173478][ T8973] netlink: 3 bytes leftover after parsing attributes in process `syz.0.958'.
[  115.502354][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'.
[  115.549199][ T8986] netlink: 'syz.2.962': attribute type 4 has an invalid length.
[  115.728672][ T8990] geneve2: entered promiscuous mode
[  115.831963][ T8998] netlink: 'syz.0.966': attribute type 62 has an invalid length.
[  115.946699][ T9005] netlink: 'syz.0.968': attribute type 8 has an invalid length.
[  115.969983][ T9005] netlink: 44 bytes leftover after parsing attributes in process `syz.0.968'.
[  115.973782][ T9005] netlink: 15 bytes leftover after parsing attributes in process `syz.0.968'.
[  115.984018][ T9005] netlink: 'syz.0.968': attribute type 4 has an invalid length.
[  116.090395][ T9015] ip6_vti0: entered promiscuous mode
[  116.103772][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'.
[  116.183695][ T9021] netlink: 44 bytes leftover after parsing attributes in process `syz.1.969'.
[  116.312928][ T9029] vlan0: entered promiscuous mode
[  116.314907][ T9029] !: entered promiscuous mode
[  116.339016][ T9031] tipc: Enabled bearer <udp:syz2>, priority 10
[  117.457989][ T6085] tipc: Node number set to 1103080678
[  118.182075][ T9128] 8021q: adding VLAN 0 to HW filter on device bond4
[  118.187323][ T9128] bridge0: port 1(bond4) entered blocking state
[  118.189762][ T9128] bridge0: port 1(bond4) entered disabled state
[  118.193114][ T9128] bond4: entered allmulticast mode
[  118.202483][ T9128] bond4: entered promiscuous mode
[  118.206566][ T9128] bridge0: port 1(bond4) entered blocking state
[  118.209502][ T9128] bridge0: port 1(bond4) entered forwarding state
[  118.227483][ T8328] bridge0: port 1(bond4) entered disabled state
[  118.239620][ T9128] dummy0: entered promiscuous mode
[  118.246062][ T9128] team0: entered promiscuous mode
[  118.249517][ T9128] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  118.252824][ T9128] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[  118.259891][ T9128] bridge0: port 2(hsr1) entered blocking state
[  118.262371][ T9128] bridge0: port 2(hsr1) entered disabled state
[  118.265125][ T9128] hsr1: entered allmulticast mode
[  118.269332][ T9128] dummy0: entered allmulticast mode
[  118.271946][ T9128] team0: entered allmulticast mode
[  118.275105][ T9128] hsr1: entered promiscuous mode
[  118.281153][ T9134] openvswitch: netlink: Message has 5 unknown bytes.
[  118.717830][ T9161] veth0: entered promiscuous mode
[  118.833423][ T9169] validate_nla: 1 callbacks suppressed
[  118.833435][ T9169] netlink: 'syz.1.1022': attribute type 6 has an invalid length.
[  118.855675][ T9166] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  119.417955][ T9191] __nla_validate_parse: 14 callbacks suppressed
[  119.417968][ T9191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1028'.
[  119.566353][ T9199] netlink: 'syz.1.1032': attribute type 13 has an invalid length.
[  119.570100][ T9199] netlink: 'syz.1.1032': attribute type 17 has an invalid length.
[  119.660642][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1033'.
[  119.671003][ T9199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  119.677500][ T9203] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.681185][ T9203] batadv_slave_0: entered promiscuous mode
[  119.713048][ T9203] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1033'.
[  119.717190][ T9199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.731451][ T9203] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1033'.
[  119.775533][ T9199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.850215][ T9199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.892916][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1039'.
[  120.149282][ T9241] netlink: 'syz.0.1045': attribute type 3 has an invalid length.
[  120.151811][ T9241] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1045'.
[  120.218723][ T9246] tipc: Failed to remove unknown binding: 66,3,4/1103080678:3195694209/3195694210
[  120.257982][ T9250] netlink: 'syz.0.1049': attribute type 1 has an invalid length.
[  120.302372][ T9250] bond1: (slave gretap2): making interface the new active one
[  120.307164][ T9250] bond1: (slave gretap2): Enslaving as an active interface with an up link
[  120.364843][ T9256] netlink: 'syz.0.1049': attribute type 1 has an invalid length.
[  120.377337][ T9199] syz.1.1032 (9199) used greatest stack depth: 19880 bytes left
[  120.393671][ T9256] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1049'.
[  120.782642][ T9283] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1057'.
[  120.786840][ T9283] unsupported nla_type 65024
[  120.791249][ T9283] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1057'.
[  121.212755][ T9307] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.228361][ T9307] syzkaller0: entered promiscuous mode
[  121.230672][ T9307] syzkaller0: entered allmulticast mode
[  121.410137][ T9309] tipc: Resetting bearer <eth:syzkaller0>
[  121.449394][ T9306] tipc: Resetting bearer <eth:syzkaller0>
[  121.463376][ T9306] tipc: Disabling bearer <eth:syzkaller0>
[  121.563394][ T9322] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1067'.
[  121.725156][ T9334] wireguard1: entered promiscuous mode
[  121.728053][ T9334] wireguard1: entered allmulticast mode
[  121.953939][ T9343] ip6erspan0: entered allmulticast mode
[  122.646389][ T9396] netlink: 'syz.0.1094': attribute type 21 has an invalid length.
[  122.649716][ T9396] IPv6: NLM_F_CREATE should be specified when creating new route
[  122.783200][ T9402] syzkaller1: entered promiscuous mode
[  122.785092][ T9402] syzkaller1: entered allmulticast mode
[  123.079060][ T9418] netlink: 'syz.0.1101': attribute type 1 has an invalid length.
[  123.255951][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout
[  123.258747][ T5219] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  123.309647][ T9428] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  123.313136][ T9428] IPv6: NLM_F_CREATE should be set when creating new route
[  123.468106][ T9446] netlink: 'syz.0.1113': attribute type 21 has an invalid length.
[  123.478644][ T9442] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  123.483077][ T9443] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  123.495616][ T9446] netlink: 'syz.0.1113': attribute type 21 has an invalid length.
[  123.640560][ T9457] bridge20: port 1(veth5) entered blocking state
[  123.649743][ T9457] bridge20: port 1(veth5) entered disabled state
[  123.652660][ T9457] veth5: entered allmulticast mode
[  123.658083][ T9457] veth5: entered promiscuous mode
[  123.682055][ T9457] bridge20: port 2(veth0_to_bond) entered blocking state
[  123.687031][ T9457] bridge20: port 2(veth0_to_bond) entered disabled state
[  123.690297][ T9457] veth0_to_bond: entered allmulticast mode
[  123.695027][ T9457] veth0_to_bond: entered promiscuous mode
[  123.715979][ T9457] vlan3: entered allmulticast mode
[  123.718618][ T9457] veth1: entered allmulticast mode
[  123.721315][ T9457] bridge20: port 3(vlan3) entered blocking state
[  123.724694][ T9457] bridge20: port 3(vlan3) entered disabled state
[  123.731373][ T9457] vlan3: entered promiscuous mode
[  123.733690][ T9457] veth1: entered promiscuous mode
[  123.849201][ T9466] validate_nla: 1 callbacks suppressed
[  123.849213][ T9466] netlink: 'syz.1.1120': attribute type 2 has an invalid length.
[  124.492924][ T9512] team0: Device gtp2 is of different type
[  124.912197][ T9515] __nla_validate_parse: 28 callbacks suppressed
[  124.912217][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1132'.
[  124.995896][ T9519] xt_TPROXY: Can be used only with -p tcp or -p udp
[  125.017842][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1134'.
[  125.085614][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  125.413974][ T9532] xt_CT: No such helper "pptp"
[  125.432715][ T9538] xt_CT: No such helper "pptp"
[  125.616754][ T5219] Bluetooth: hci0: Opcode 0x0c1a failed: -112
[  125.724699][ T9553] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1143'.
[  125.731293][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1143'.
[  125.734966][ T9553] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1143'.
[  125.741807][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1143'.
[  125.746458][ T9553] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1143'.
[  125.924498][ T9560] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1145'.
[  126.203812][ T9572] C: renamed from team_slave_0
[  126.207712][ T9572] netlink: 'syz.1.1150': attribute type 1 has an invalid length.
[  126.211033][ T9572] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1150'.
[  126.214883][ T9572] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  126.492387][ T9581] lo: entered allmulticast mode
[  126.504527][ T9581] lo: left allmulticast mode
[  126.532019][ T9586] netlink: 'syz.1.1155': attribute type 4 has an invalid length.
[  126.793328][ T9597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1159'.
[  127.575527][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout
[  127.579946][ T5219] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  127.598256][ T9547] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  127.672163][ T9626] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  128.852927][ T9667] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.858230][ T9668] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  128.872235][ T9666] tipc: Disabling bearer <eth:syzkaller0>
[  129.244774][ T9687] netlink: 'syz.2.1189': attribute type 1 has an invalid length.
[  129.278881][ T9687] 8021q: adding VLAN 0 to HW filter on device bond4
[  129.470067][ T9698] bond_slave_0: entered allmulticast mode
[  129.770176][ T9715] xt_bpf: check failed: parse error
[  129.941784][ T9725] __nla_validate_parse: 6 callbacks suppressed
[  129.941796][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'.
[  130.029884][ T9734] x9: renamed from bridge_slave_0 (while UP)
[  130.083444][ T9736] netlink: 'syz.1.1207': attribute type 10 has an invalid length.
[  130.234034][ T9738] syzkaller0: entered promiscuous mode
[  130.236351][ T9738] syzkaller0: entered allmulticast mode
[  130.478149][ T9750] nft_compat: unsupported protocol 0
[  130.599558][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1212'.
[  130.603487][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1212'.
[  130.958673][ T9764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1216'.
[  130.962312][ T9764] netlink: 'syz.1.1216': attribute type 7 has an invalid length.
[  130.965928][ T9764] netlink: 'syz.1.1216': attribute type 8 has an invalid length.
[  130.969146][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1216'.
[  132.781777][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.328684][ T9768] IPVS: Error connecting to the multicast addr
[  133.467724][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1221'.
[  133.783091][ T9802] netlink: 'syz.0.1228': attribute type 39 has an invalid length.
[  133.792181][ T6085] IPVS: starting estimator thread 0...
[  133.802678][ T9804] netlink: 'syz.2.1229': attribute type 10 has an invalid length.
[  133.806645][ T9804] team0: Device veth0_vlan is of different type
[  133.895408][ T9805] IPVS: using max 54 ests per chain, 129600 per kthread
[  133.923861][ T9810] netlink: 'syz.2.1230': attribute type 1 has an invalid length.
[  133.932368][ T9810] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1230'.
[  134.007036][ T9811] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  134.012055][ T9811] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  134.031197][ T9810] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1230'.
[  134.215196][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1233'.
[  134.281005][ T9822] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1234'.
[  134.427295][ T9833] netlink: 'syz.1.1239': attribute type 1 has an invalid length.
[  134.431338][ T9833] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  134.434218][ T9833] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  134.438262][ T9833] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  134.910342][ T9848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  135.051174][ T9863] netlink: 'syz.1.1245': attribute type 1 has an invalid length.
[  135.060512][ T9864] netlink: 'syz.1.1245': attribute type 1 has an invalid length.
[  135.379915][ T9897] __nla_validate_parse: 1 callbacks suppressed
[  135.379936][ T9897] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1254'.
[  135.396806][ T9897] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1254'.
[  135.400898][ T9897] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1254'.
[  135.411493][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1254'.
[  136.411440][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1261'.
[  136.616518][ T9937] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.1267'.
[  136.695552][ T5831] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  136.758700][ T9955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1270'.
[  136.800075][ T9957] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1272'.
[  136.848255][ T9963] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1275'.
[  136.898269][ T9963] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.903582][ T9963] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.907872][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1277'.
[  136.973744][ T9963] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.981832][ T9963] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.095049][ T9963] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.105780][ T9963] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.230792][ T9963] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.234858][ T9963] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.350009][ T9963] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  137.352844][ T9963] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.376094][ T9963] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  137.383948][ T9963] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.402974][ T9993] netlink: 'syz.1.1286': attribute type 1 has an invalid length.
[  137.411206][ T9963] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  137.414794][ T9963] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.428975][ T9963] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  137.432723][ T9963] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.679190][ T9998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.687276][ T9998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.694145][ T9998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.931864][T10016] netlink: 'syz.1.1292': attribute type 1 has an invalid length.
[  138.687613][T10024] netlink: 'syz.2.1294': attribute type 8 has an invalid length.
[  138.687613][T10023] netlink: 'syz.2.1294': attribute type 8 has an invalid length.
[  138.869191][T10035] netlink: 'syz.2.1298': attribute type 3 has an invalid length.
[  139.465071][T10063] netlink: 'syz.0.1306': attribute type 1 has an invalid length.
[  139.653304][ T5831] Bluetooth: hci2: command tx timeout
[  139.682819][T10075] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  139.748957][T10082] netlink: 'syz.2.1313': attribute type 1 has an invalid length.
[  139.788269][T10083] set match dimension is over the limit!
[  140.019843][T10102] netlink: 'syz.2.1320': attribute type 5 has an invalid length.
[  140.062035][T10106] netlink: 'syz.2.1321': attribute type 1 has an invalid length.
[  140.229573][T10117] netlink: 'syz.1.1325': attribute type 1 has an invalid length.
[  140.380765][T10124] bond0: entered promiscuous mode
[  140.383946][T10124] bond0: left promiscuous mode
[  140.468454][T10130] netlink: 'syz.2.1330': attribute type 1 has an invalid length.
[  140.471940][T10130] __nla_validate_parse: 25 callbacks suppressed
[  140.471954][T10130] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1330'.
[  140.491120][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'.
[  140.559431][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'.
[  140.580286][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1333'.
[  140.586668][T10136] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1333'.
[  140.837968][T10157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.849397][T10157] D: renamed from syzkaller0
[  140.855974][T10157] tipc: Disabling bearer <eth:syzkaller0>
[  140.892619][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1340'.
[  140.953431][T10169] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1342'.
[  140.958634][T10169] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1342'.
[  140.963734][T10169] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1342'.
[  140.972050][T10169] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1342'.
[  141.228090][T10180] syzkaller1: entered promiscuous mode
[  141.231193][T10180] syzkaller1: entered allmulticast mode
[  141.858687][T10210] xt_TPROXY: Can be used only with -p tcp or -p udp
[  142.106770][T10234] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  142.112883][T10234] ip6gre1: entered promiscuous mode
[  142.304000][T10236] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  142.350281][T10236] netlink: 'syz.0.1361': attribute type 13 has an invalid length.
[  142.447321][T10236] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.450243][T10236] bridge0: port 1(1x9) entered disabled state
[  142.624903][T10236] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.696815][T10236] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  142.799970][T10236] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.803659][T10236] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.808494][T10236] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.812185][T10236] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.132541][T10255] netlink: 'syz.1.1366': attribute type 1 has an invalid length.
[  143.136723][T10255] netlink: 'syz.1.1366': attribute type 2 has an invalid length.
[  143.182610][T10261] netlink: 'syz.1.1369': attribute type 1 has an invalid length.
[  143.234805][T10264] tipc: Enabling of bearer <et:g> rejected, media not registered
[  143.238770][T10264] xt_HMARK: spi-set and port-set can't be combined
[  143.407908][ T9268] nci: nci_rsp_packet: unknown rsp opcode 0x204
[  144.998729][T10325] netlink: 'syz.1.1388': attribute type 1 has an invalid length.
[  145.156557][T10331] netlink: 'syz.2.1391': attribute type 12 has an invalid length.
[  145.626092][T10365] netlink: 'syz.1.1399': attribute type 5 has an invalid length.
[  146.047912][T10382] __nla_validate_parse: 72 callbacks suppressed
[  146.047925][T10382] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1404'.
[  146.054580][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'.
[  146.057905][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'.
[  146.235742][T10386] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.279279][T10386] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  146.289958][T10386] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  146.457398][ T5831] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  146.469684][T10405] netlink: 'syz.1.1409': attribute type 1 has an invalid length.
[  146.474612][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1410'.
[  146.475495][T10405] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1409'.
[  147.013105][T10416] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1414'.
[  147.083019][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1415'.
[  147.293979][T10424] xt_l2tp: invalid flags combination: 4
[  147.425100][T10426] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  147.433192][T10428] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.1419'.
[  147.659558][T10442] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1424'.
[  147.708038][T10445] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1423'.
[  147.774609][T10453] team0: Device batadv1 is of different type
[  147.902950][T10449] syzkaller0: entered promiscuous mode
[  147.904780][T10449] syzkaller0: entered allmulticast mode
[  149.213022][T10461] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  149.218765][T10461] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  149.513715][T10493] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.519005][T10493] tipc: Resetting bearer <eth:syzkaller0>
[  149.647056][ T5831] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  149.751747][T10525] 8021q: adding VLAN 0 to HW filter on device bond5
[  150.071337][T10543] 
[  150.072437][T10543] ======================================================
[  150.075158][T10543] WARNING: possible circular locking dependency detected
[  150.077865][T10543] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  150.081764][T10543] ------------------------------------------------------
[  150.084974][T10543] syz.2.1451/10543 is trying to acquire lock:
[  150.087048][T10543] ffffffff8e2258a8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0
[  150.090508][T10543] 
[  150.090508][T10543] but task is already holding lock:
[  150.093093][T10543] ffff8880222fd8b0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x16c/0xac0
[  150.096843][T10543] 
[  150.096843][T10543] which lock already depends on the new lock.
[  150.096843][T10543] 
[  150.100037][T10543] 
[  150.100037][T10543] the existing dependency chain (in reverse order) is:
[  150.102906][T10543] 
[  150.102906][T10543] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  150.105576][T10543]        lock_acquire+0x120/0x360
[  150.107183][T10543]        blk_alloc_queue+0x538/0x620
[  150.108971][T10543]        __blk_mq_alloc_disk+0x162/0x340
[  150.111008][T10543]        nbd_dev_add+0x476/0xb00
[  150.112799][T10543]        nbd_init+0x21a/0x2d0
[  150.114494][T10543]        do_one_initcall+0x236/0x820
[  150.116507][T10543]        do_initcall_level+0x137/0x1f0
[  150.118336][T10543]        do_initcalls+0x69/0xd0
[  150.120218][T10543]        kernel_init_freeable+0x3d9/0x570
[  150.122178][T10543]        kernel_init+0x1d/0x1d0
[  150.123769][T10543]        ret_from_fork+0x3fc/0x770
[  150.125526][T10543]        ret_from_fork_asm+0x1a/0x30
[  150.127353][T10543] 
[  150.127353][T10543] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  150.129955][T10543]        lock_acquire+0x120/0x360
[  150.131708][T10543]        fs_reclaim_acquire+0x72/0x100
[  150.133925][T10543]        prepare_alloc_pages+0x153/0x610
[  150.136445][T10543]        __alloc_frozen_pages_noprof+0x123/0x370
[  150.139238][T10543]        __alloc_pages_noprof+0xa/0x30
[  150.141784][T10543]        pcpu_populate_chunk+0x182/0xb30
[  150.144326][T10543]        pcpu_alloc_noprof+0xcbf/0x16b0
[  150.146714][T10543]        xt_percpu_counter_alloc+0x161/0x220
[  150.149202][T10543]        translate_table+0x1323/0x2040
[  150.151509][T10543]        ip6t_register_table+0x106/0x7d0
[  150.153891][T10543]        ip6table_nat_table_init+0x43/0x2e0
[  150.156422][T10543]        xt_find_table_lock+0x30c/0x3e0
[  150.158988][T10543]        xt_request_find_table_lock+0x26/0x100
[  150.161515][T10543]        do_ip6t_get_ctl+0x730/0x1180
[  150.163690][T10543]        nf_getsockopt+0x26e/0x290
[  150.165834][T10543]        ipv6_getsockopt+0x1ed/0x290
[  150.168104][T10543]        do_sock_getsockopt+0x360/0x650
[  150.170633][T10543]        __x64_sys_getsockopt+0x1a5/0x250
[  150.173179][T10543]        do_syscall_64+0xfa/0x3b0
[  150.175333][T10543]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.177876][T10543] 
[  150.177876][T10543] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}:
[  150.181021][T10543]        validate_chain+0xb9b/0x2140
[  150.183205][T10543]        __lock_acquire+0xab9/0xd20
[  150.185404][T10543]        lock_acquire+0x120/0x360
[  150.187711][T10543]        __mutex_lock+0x182/0xe80
[  150.189747][T10543]        pcpu_alloc_noprof+0x286/0x16b0
[  150.191749][T10543]        sbitmap_init_node+0x1e1/0x630
[  150.193681][T10543]        sbitmap_queue_init_node+0x41/0x660
[  150.195593][T10543]        blk_mq_init_tags+0x110/0x280
[  150.197370][T10543]        blk_mq_alloc_map_and_rqs+0xbd/0x9f0
[  150.199563][T10543]        blk_mq_update_nr_hw_queues+0x76a/0x14c0
[  150.202316][T10543]        nbd_start_device+0x16c/0xac0
[  150.204518][T10543]        nbd_genl_connect+0x1250/0x1930
[  150.206846][T10543]        genl_family_rcv_msg_doit+0x215/0x300
[  150.209204][T10543]        genl_rcv_msg+0x60e/0x790
[  150.211244][T10543]        netlink_rcv_skb+0x208/0x470
[  150.213349][T10543]        genl_rcv+0x28/0x40
[  150.215228][T10543]        netlink_unicast+0x75c/0x8e0
[  150.217485][T10543]        netlink_sendmsg+0x805/0xb30
[  150.219941][T10543]        __sock_sendmsg+0x21c/0x270
[  150.222176][T10543]        ____sys_sendmsg+0x505/0x830
[  150.224428][T10543]        ___sys_sendmsg+0x21f/0x2a0
[  150.226689][T10543]        __x64_sys_sendmsg+0x19b/0x260
[  150.228873][T10543]        do_syscall_64+0xfa/0x3b0
[  150.231008][T10543]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.233689][T10543] 
[  150.233689][T10543] other info that might help us debug this:
[  150.233689][T10543] 
[  150.238090][T10543] Chain exists of:
[  150.238090][T10543]   pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49
[  150.238090][T10543] 
[  150.243829][T10543]  Possible unsafe locking scenario:
[  150.243829][T10543] 
[  150.246924][T10543]        CPU0                    CPU1
[  150.249114][T10543]        ----                    ----
[  150.251418][T10543]   lock(&q->q_usage_counter(io)#49);
[  150.253823][T10543]                                lock(fs_reclaim);
[  150.256637][T10543]                                lock(&q->q_usage_counter(io)#49);
[  150.260024][T10543]   lock(pcpu_alloc_mutex);
[  150.261955][T10543] 
[  150.261955][T10543]  *** DEADLOCK ***
[  150.261955][T10543] 
[  150.265148][T10543] 7 locks held by syz.2.1451/10543:
[  150.267230][T10543]  #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  150.270768][T10543]  #1: ffffffff8f583988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  150.274720][T10543]  #2: ffff888022416230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  150.278841][T10543]  #3: ffff888022416188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  150.283349][T10543]  #4: ffff8880224160d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x49/0x14c0
[  150.287660][T10543]  #5: ffff8880222fd8b0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x16c/0xac0
[  150.292149][T10543]  #6: ffff8880222fd8e8 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: nbd_start_device+0x16c/0xac0
[  150.296354][T10543] 
[  150.296354][T10543] stack backtrace:
[  150.298734][T10543] CPU: 0 UID: 0 PID: 10543 Comm: syz.2.1451 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  150.298759][T10543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.298771][T10543] Call Trace:
[  150.298782][T10543]  <TASK>
[  150.298794][T10543]  dump_stack_lvl+0x189/0x250
[  150.298826][T10543]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.298845][T10543]  ? __pfx__printk+0x10/0x10
[  150.298869][T10543]  ? print_lock_name+0xde/0x100
[  150.298891][T10543]  print_circular_bug+0x2ee/0x310
[  150.298914][T10543]  check_noncircular+0x134/0x160
[  150.298934][T10543]  validate_chain+0xb9b/0x2140
[  150.298961][T10543]  __lock_acquire+0xab9/0xd20
[  150.298980][T10543]  ? pcpu_alloc_noprof+0x286/0x16b0
[  150.299000][T10543]  lock_acquire+0x120/0x360
[  150.299016][T10543]  ? pcpu_alloc_noprof+0x286/0x16b0
[  150.299040][T10543]  __mutex_lock+0x182/0xe80
[  150.299057][T10543]  ? pcpu_alloc_noprof+0x286/0x16b0
[  150.299075][T10543]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  150.299100][T10543]  ? kasan_save_track+0x4f/0x80
[  150.299118][T10543]  ? kasan_save_track+0x3e/0x80
[  150.299135][T10543]  ? __kmalloc_cache_node_noprof+0x234/0x3d0
[  150.299179][T10543]  ? pcpu_alloc_noprof+0x286/0x16b0
[  150.299198][T10543]  ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0
[  150.299214][T10543]  ? blk_mq_update_nr_hw_queues+0x76a/0x14c0
[  150.299235][T10543]  ? __pfx___mutex_lock+0x10/0x10
[  150.299247][T10543]  ? genl_rcv+0x28/0x40
[  150.299266][T10543]  ? __sock_sendmsg+0x21c/0x270
[  150.299280][T10543]  ? ____sys_sendmsg+0x505/0x830
[  150.299301][T10543]  pcpu_alloc_noprof+0x286/0x16b0
[  150.299325][T10543]  sbitmap_init_node+0x1e1/0x630
[  150.299341][T10543]  ? __kasan_kmalloc+0x93/0xb0
[  150.299360][T10543]  sbitmap_queue_init_node+0x41/0x660
[  150.299378][T10543]  ? __raw_spin_lock_init+0x45/0x100
[  150.299398][T10543]  blk_mq_init_tags+0x110/0x280
[  150.299419][T10543]  blk_mq_alloc_map_and_rqs+0xbd/0x9f0
[  150.299436][T10543]  ? blk_mq_update_nr_hw_queues+0x678/0x14c0
[  150.299489][T10543]  ? kfree+0x18e/0x440
[  150.299508][T10543]  blk_mq_update_nr_hw_queues+0x76a/0x14c0
[  150.299532][T10543]  nbd_start_device+0x16c/0xac0
[  150.299550][T10543]  ? __nla_parse+0x40/0x60
[  150.299566][T10543]  nbd_genl_connect+0x1250/0x1930
[  150.299581][T10543]  ? __pfx_nbd_genl_connect+0x10/0x10
[  150.299598][T10543]  ? __nla_parse+0x40/0x60
[  150.299614][T10543]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  150.299640][T10543]  genl_family_rcv_msg_doit+0x215/0x300
[  150.299667][T10543]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  150.299692][T10543]  genl_rcv_msg+0x60e/0x790
[  150.299715][T10543]  ? __pfx_genl_rcv_msg+0x10/0x10
[  150.299734][T10543]  ? __pfx_nbd_genl_connect+0x10/0x10
[  150.299753][T10543]  netlink_rcv_skb+0x208/0x470
[  150.299769][T10543]  ? __pfx_genl_rcv_msg+0x10/0x10
[  150.299787][T10543]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  150.299807][T10543]  ? down_read+0x1ad/0x2e0
[  150.299825][T10543]  genl_rcv+0x28/0x40
[  150.299843][T10543]  netlink_unicast+0x75c/0x8e0
[  150.299861][T10543]  netlink_sendmsg+0x805/0xb30
[  150.299881][T10543]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.299902][T10543]  ? aa_sock_msg_perm+0x94/0x160
[  150.299924][T10543]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  150.299948][T10543]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.299964][T10543]  __sock_sendmsg+0x21c/0x270
[  150.299978][T10543]  ____sys_sendmsg+0x505/0x830
[  150.299998][T10543]  ? __pfx_____sys_sendmsg+0x10/0x10
[  150.300020][T10543]  ? import_iovec+0x74/0xa0
[  150.300039][T10543]  ___sys_sendmsg+0x21f/0x2a0
[  150.300057][T10543]  ? __pfx____sys_sendmsg+0x10/0x10
[  150.300089][T10543]  ? __fget_files+0x2a/0x420
[  150.300106][T10543]  ? __fget_files+0x3a0/0x420
[  150.300127][T10543]  __x64_sys_sendmsg+0x19b/0x260
[  150.300145][T10543]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  150.300173][T10543]  ? rcu_is_watching+0x15/0xb0
[  150.300192][T10543]  ? do_syscall_64+0xbe/0x3b0
[  150.300209][T10543]  do_syscall_64+0xfa/0x3b0
[  150.300223][T10543]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.300248][T10543]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.300264][T10543]  ? exc_page_fault+0x9f/0xf0
[  150.300288][T10543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.300304][T10543] RIP: 0033:0x7f2955f8e929
[  150.300323][T10543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.300337][T10543] RSP: 002b:00007f2956e6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  150.300356][T10543] RAX: ffffffffffffffda RBX: 00007f29561b5fa0 RCX: 00007f2955f8e929
[  150.300368][T10543] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 000000000000000b
[  150.300377][T10543] RBP: 00007f2956010b39 R08: 0000000000000000 R09: 0000000000000000
[  150.300386][T10543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.300393][T10543] R13: 0000000000000000 R14: 00007f29561b5fa0 R15: 00007ffe4ed4af08
[  150.300409][T10543]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  150.575821][T10543] nbd0: detected capacity change from 0 to 127
[  150.635379][ T6085] tipc: Node number set to 976315494
[  150.797046][T10550] block nbd0: Receive control failed (result -104)
[  150.797245][T10551] block nbd0: Receive control failed (result -32)
[  150.799652][   T55] block nbd0: Receive control failed (result -32)
[  151.735565][ T5831] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  159.015433][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!

VM DIAGNOSIS:
15:16:09  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006e RBX=000000000000006e RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000329e RDI=000000000000329f RBP=00000000000003f8 RSP=ffffc90002e3e390
R8 =ffff888020fb0237 R9 =1ffff110041f6046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98d1 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2956e6a6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2956e28d58 CR3=0000000028c54000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2956185478 00007f2956185450 XMM03=00007f2956185488 00007f2956185480
XMM04=00007f2956ced100 00007f2956185440 XMM05=00007f2956185458 00007f29561854a0
XMM06=00007f2956185498 00007f2956185490 XMM07=00007f2956185488 00007f2956185480
XMM08=644fe9a28e8abaab 055b4625212aa8b5 XMM09=0000000000000000 00007f2956011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff818d4a74 RBX=ffffc9000303f900 RCX=63d4a1fda78b6600 RDX=ffffc9000303f801
RSI=ffffffff818d4a74 RDI=ffffc9000303f900 RBP=ffffc9000303f8d0 RSP=ffffc9000303f840
R8 =ffffc9000303fc50 R9 =0000000000000000 R10=ffffc9000303f898 R11=ffffffff81ad03a0
R12=ffff888105cd8000 R13=1ffff92000607f34 R14=ffffffff81ad03a0 R15=ffffc9000303f848
RIP=ffffffff81ad03a0 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555741fc500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb5163ffffc CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=526a1b4d1c0b04e3 df81aff387238b25
XMM02=ffd93a4275b44c6d 8f987a0040103f7c XMM03=9b3ecbe736947c58 9f7d4c1e3b58bd14
XMM04=b7acc13f5ae8de5c 7c4000510ffc7e35 XMM05=010380100000040a 0800048e08000100
XMM06=000008060a016ee8 eff708b358296a7e XMM07=bd37ffcfa81274e0 68c21cabd125e1b7
XMM08=acc13f5ae8de5c7c 4000510ffc7e359b XMM09=6769726f5f74696e 695f636e5f766461
XMM10=666666666666660a 342e79656b5f5f2e XMM11=6174616220622030 6534633130613966
XMM12=6666666666660a31 342e79656b5f5f2e XMM13=73766f2062203061 6663313061396666
XMM14=2e79656b5f5f2e74 656e5f74696e695f XMM15=6331306139666666 66666666660a3334
