last executing test programs:

29.251798025s ago: executing program 2 (id=1156):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xdb}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000001c0))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x2, 0x2, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r4=>0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r4})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r7})
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'dummy0\x00', <r11=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@mcast1, 0x17, r11})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc048)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r12)
close(0x3)

29.249046925s ago: executing program 1 (id=1157):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010000506fcfff25a3e1dff33baa4000050b5ab258d45ff96c758aeccd068e758d1e95abbb1cf203e092133c7f5833d088b6233f7afa04f9a6d414577b816a42e60a89893b0b24d9158afb248540288fef1ff53cebf38f102bae19cc49af3ff392024f50feb6df44056b6fdb237d38bdfccc93cd09d3dc970e1f06a7374e612ce7319f85feb6027ade2924cddf3443c56750f5707dcefaa149a4ba44165bba71386483d82216cf4ab9bdd7d1a2c0d7a5318c06ea9f21b5d48fe9fad5a9ca0534dea2f986ce310", @ANYRES32=0x0, @ANYBLOB="01100000021a0100240012800b0001006d616373656300001400028005000a00010000000500030008000000"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050000000000000000000000ffff0a010101000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfffc, 0x1, @empty, 0x200}, 0x1c)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
socket$igmp(0x2, 0x3, 0x2)
bind$rxrpc(r4, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
listen(r4, 0x4)
listen(r4, 0x6)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b22bf4f0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe2d, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20, 0x18}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180))
unshare(0x8000400)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x7)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40010)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000048500000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000440)="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", 0x12f, 0x20044804, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="12", 0x1}], 0x1}, 0x1)

28.780521356s ago: executing program 0 (id=1159):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001, 0x11a02}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001, 0x11a02}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000000000000000000000001ac14142500000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffff48d55d7e000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008150000000000000001000000000000000a0010000100000000000000"], 0xc4}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050000000000000000000000ffff0a010101000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050000000000000000000000ffff0a010101000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfffc, 0x1, @empty, 0x200}, 0x1c)
socket$rxrpc(0x21, 0x2, 0x2) (async)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
socket$igmp(0x2, 0x3, 0x2)
bind$rxrpc(r4, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
listen(r4, 0x4) (async)
listen(r4, 0x4)
listen(r4, 0x6) (async)
listen(r4, 0x6)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180))
unshare(0x8000400)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x7)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40010)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000440)="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", 0x12f, 0x20044804, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="12", 0x1}], 0x1}, 0x1)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

28.220641897s ago: executing program 1 (id=1160):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) (async)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
pipe(&(0x7f0000000700))
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) (async)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@ethernet={0x6, @multicast}, 0x80, 0x0}, 0x44) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@ethernet={0x6, @multicast}, 0x80, 0x0}, 0x44)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x10448) (async)
write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x1c, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="08010000100039042bbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="13000000801b0600e80012800800010076746900dc00028008000400ac14142708000100", @ANYRES32=0x0, @ANYBLOB='\x00z\b\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800060000000100080006000900000008000400ac14143908000100", @ANYRES32=0x0, @ANYBLOB="0800060003000000080003000d00000008000100", @ANYRES32=0x0, @ANYBLOB="080006000100008008000100", @ANYRES32=0x0, @ANYBLOB="08000200050000000800030062000000080002000000000008000300010000000800060000000000080002000700000008000300ff0700000800060002000000080006000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800050064010101080005000a01010108000400ac1414aa08000400ac14141f"], 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x2a, 0x6, 0x1, &(0x7f00000005c0)) (async)
socketpair(0x2a, 0x6, 0x1, &(0x7f00000005c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000006c0)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="f771c0d506735f3ef7b85b844197f524543ee2e3e4da88b1850142613d754336f85c411ec76bc2d1e16db4", 0x2b}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x3}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18}], 0x48, 0x8000}], 0x1, 0x4044004)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_proto_private(r5, 0x89ec, &(0x7f0000000380)="292042543793ea3e08ad1e00bb95efacd92558b48cde5ca666fb4a585104217bce7d5593b8497449146df64c9cbd3b5949b986ee64b2bf89143a34cbe5506ef75049b80a2a7452aeed750df24a644405dfeb3e7c445fba12758610844a5179300e2ddf13b4edb791494adfab72501dd7d074d181ce30444611c27c28c053c187a27d3fde7ededc880346ca6da7a8aec0716fbd652cace38ab3455caa2b045260bad062dfe7865f5202f400b9c1227d9ed1b1e0e5b3d3b56719c4aad08b9fc344b6e42cf75b6127c92be17921f20c04e0887e9502059c7b035116797f12")
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140))
syz_genetlink_get_family_id$l2tp(0x0, r4) (async)
r6 = syz_genetlink_get_family_id$l2tp(0x0, r4)
bind$inet(0xffffffffffffffff, &(0x7f0000000800)={0x2, 0x4e23, @private=0xa010101}, 0x10)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="28df40003ac17859a837738be2531a00000000", @ANYRES16=r6, @ANYBLOB="02002bbd7000fcdbdf2502000000080009000200000008001800ac1414aa0c000f000500000000000000080019000a01010208000c000100000006001c00020e000006001c00400000000500220001000000050012009c00000006001d0003000000"], 0x68}, 0x1, 0x0, 0x0, 0x340008d7}, 0x81)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
listen(0xffffffffffffffff, 0x8001)
socket$packet(0x11, 0x3, 0x300) (async)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)

27.463041873s ago: executing program 0 (id=1161):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x800, 0x0, 0x0, 0xa7507679741cbe29, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000c000480080002401d16ab55270000001100010000000000000000000000000a"], 0xc0}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket(0x2, 0x80000, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'wlc\x00', 0x1, 0x80005, 0x6f}, 0x2c) (async)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x1, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) (async)
sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000023000100fdff0700fd05df2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4008090)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
r7 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r4, 0x0, 0xe, &(0x7f0000000280)=0x1002, 0x4) (async)
sendto$inet(r7, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x6, 0x10, 0x8, 0xe4}, {0xb, 0x80, 0x7f, 0x2}]}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdf9, 0x4) (async)
writev(r0, &(0x7f0000000280), 0x0)
sendto$inet(r6, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0)

25.559370627s ago: executing program 0 (id=1162):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r1], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000540)=[0x0], &(0x7f0000000300)=[0x0], 0x0, 0xad, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000600), &(0x7f00000003c0), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000780)}}, 0x10)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff})
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e002800", 0x24}, {&(0x7f00000000c0)="fda2127ae7", 0x5}], 0x2}, 0x64)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xfffffffc}, 0x8)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYRESHEX=r4, @ANYRES32=r4, @ANYBLOB="8100"/20, @ANYRES8=r3, @ANYRES32, @ANYBLOB="00000000020000000300"/28], 0x50)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x3377}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0)
write$rfkill(r7, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f00000000c0)=r8, 0x4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x24, &(0x7f0000000000)=r8, 0x4)

23.86280475s ago: executing program 1 (id=1163):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000e80)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000000e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f00)={0x110, 0x40, 0x1, 0xfffffffe, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @generic="872b8e39ada061e6dc948aea0c3661a9d86cbb1a455aeb35e8380ca658cb774ae7fea455e8bdeffd667aee8597224fea47e9142a7838bd178332eb47a26488fc6b655feb8391e1675480da2f61bac6471e3c2895ffaa1ee8248ad1de22fc627f85d16555d15d90ff35d4d268b77338a6af8354d9318a81816e4f36e279643bd64952c8b731a9f85cded62d42eca3b9cf166792d760b1c29fc13f8efe4dc488c9d45285e57371cb18c447ed02276a3e4359c3aecce80eab8fcd3f88252231f0eee5f2f08ac4bf12c68450a88a6f78424bd98ae7a421861b82a7fa91044ab70c60ad902700acf1b071f4"]}, 0x110}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850)
sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0xfffffedb, &(0x7f0000000000)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x40007fc, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000140)="0c03573afa64193f5c0c67f7ed0f08ef102566dce7ec5f66a648201426236ae476434d7c6d4dbb49b6af27b75412ff599713d2", 0x33}, {&(0x7f0000000180)="47b6b1bcf13967b3c4bf3cc68f653effb380625761263b1720c5cb1c081f2af91cfebdad5d8f59f17b8a1d71b9c27079e4fe363d15d9fd80591447d7dce56e707f13b3168cd1dbb94cbf2a21264246d1b563d39bab7e3e105e9956260704ea72f04250aa97c76a1683207d3de919bc0b5196b965553881bb5e792e93c42885cd11f181ac41811b073e5dcf5bc549aaa4181bdd03fe1d7da63aa4b13b67e45f868047a7dd0fae16b9536264269ed9fe79b1824b17e0d5d95fe641338a1eee0e4612e6cc974a1f8d80a731d91569", 0xcd}, {&(0x7f0000000500)="eb11946c3eeac60839553f9e6003a7c6fa8120c1cc9efcc39e37b1bce4396dd05c5d8b881233767b08e8d4faf922b5f13e172ba3252675cd4c3c79d7e7a894d0eb054e2b86e58662a4e723650cf1599026f93144176c144695c1e409dcf247c0e5443a835606df56c8c4c2e6d48b", 0x6e}, {&(0x7f0000000680)="396b0b2d92a081c10b34f3708c065b93255ae169ced3036d77380fdfb4a44fcdf0ae", 0x22}, {&(0x7f0000000740)="8fd7e1a2dae37ddf36b42888adb33b24cd5e70270cb2d35209544b64813df407ff978c073d5ba9a9e32da3814e10996ef7943420ecfecc2de257612ab795736ed45429621b51fc18dc63218e25f3e78d6308e06b7e9be8620ae26f73aed8774085f407be", 0x64}, {&(0x7f0000000840)="581f06a617594d1244e24b1ad08297c3a93ec8741db357cf2f47105e5a0830d4aa12743c45893332326216118c82631b2dd8ee154e7e9c12ab9ef8ea571f29a31fb97fc052ed5e49683e157e8ff4708c88924e4ff8a5076d28e610007b056699eeb30f42451b99257e4e19157baff11811710a05bbd87e7911c77ff0172fcd4e83bd2644d6c92acde5cdcfa70eefccc0d73b31c7458c7b26bf7372cc551e7b2aa542261c", 0xa4}], 0x6}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000d40)="f82a370b33b81ccf7e1c527ebda28c7f", 0x10}, {&(0x7f0000000dc0)="0c2cdfe2a19afa542fb437c368d3cc5c1272b1ef9522fde9d1deda8057e00c25dc33b439c607b5aa933953679f10257690a52101b5cd65f64f9273fda9abb0e5d068d3d9c9b455f2d4aa658bd3ccebc05acc37003123e84d8193659f07bf920ffe806708395c22b7e1e68b960403392b9327e47364bc93a0864788672be9402c83574a5d68b3", 0x86}], 0x2}}], 0x2, 0x40080)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x804}, 0x20000010)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r5, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
close(r5)
socket$inet6_sctp(0xa, 0x1, 0x84)

22.70287157s ago: executing program 0 (id=1164):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f00)={0x110, 0x40, 0x1, 0xfffffffe, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @generic="872b8e39ada061e6dc948aea0c3661a9d86cbb1a455aeb35e8380ca658cb774ae7fea455e8bdeffd667aee8597224fea47e9142a7838bd178332eb47a26488fc6b655feb8391e1675480da2f61bac6471e3c2895ffaa1ee8248ad1de22fc627f85d16555d15d90ff35d4d268b77338a6af8354d9318a81816e4f36e279643bd64952c8b731a9f85cded62d42eca3b9cf166792d760b1c29fc13f8efe4dc488c9d45285e57371cb18c447ed02276a3e4359c3aecce80eab8fcd3f88252231f0eee5f2f08ac4bf12c68450a88a6f78424bd98ae7a421861b82a7fa91044ab70c60ad902700acf1b071f4"]}, 0x110}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES16=r2], 0x7c}}, 0x4004850)
sendmsg$NFT_BATCH(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x800)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0xfffffedb, &(0x7f0000000000)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001600010324bd7000fcffffff2e000000b58d444a88ef80cbfee404034200f3e005682473d5577ec3986070659815a917b31a5d65d9dbecd3eee563d4374cf05fd5c93e2722b77f9cc90d545d61fcab41c8b87e808013958df09e5d0bf806768ab5c464236a0267a803874441710b34e07b4c0251444d2ca09b241acabef7145c35141d14de5f31a082bcfb6d2e6f"], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r6, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000140)="0c03573afa64193f5c0c67f7ed0f08ef102566dce7ec5f66a648201426236ae476434d7c6d4dbb49b6af27b75412ff599713d2", 0x33}, {&(0x7f0000000180)="47b6b1bcf13967b3c4bf3cc68f653effb380625761263b1720c5cb1c081f2af91cfebdad5d8f59f17b8a1d71b9c27079e4fe363d15d9fd80591447d7dce56e707f13b3168cd1dbb94cbf2a21264246d1b563d39bab7e3e105e9956260704ea72f04250aa97c76a1683207d3de919bc0b5196b965553881bb5e792e93c42885cd11f181ac41811b073e5dcf5bc549aaa4181bdd03fe1d7da63aa4b13b67e45f868047a7dd0fae16b9536264269ed9fe79b1824b17e0d5d95fe641338a1eee0e4612e6cc974a1f8d80a731d91569", 0xcd}, {&(0x7f0000000500)="eb11946c3eeac60839553f9e6003a7c6fa8120c1cc9efcc39e37b1bce4396dd05c5d8b881233767b08e8d4faf922b5f13e172ba3252675cd4c3c79d7e7a894d0eb054e2b86e58662a4e723650cf1599026f93144176c144695c1e409dcf247c0e5443a835606df56c8c4c2e6d48b", 0x6e}, {&(0x7f0000000680)="396b0b2d92a081c10b34f3708c065b93255ae169ced3036d77380fdfb4a44fcdf0ae", 0x22}, {&(0x7f0000000740)="8fd7e1a2dae37ddf36b42888adb33b24cd5e70270cb2d35209544b64813df407ff978c073d5ba9a9e32da3814e10996ef7943420ecfecc2de257612ab795736ed45429621b51fc18dc63218e25f3e78d6308e06b7e9be8620ae26f73aed8774085f407be", 0x64}, {&(0x7f0000000840)="581f06a617594d1244e24b1ad08297c3a93ec8741db357cf2f47105e5a0830d4aa12743c45893332326216118c82631b2dd8ee154e7e9c12ab9ef8ea571f29a31fb97fc052ed5e49683e157e8ff4708c88924e4ff8a5076d28e610007b056699eeb30f42451b99257e4e19157baff11811710a05bbd87e7911c77ff0172fcd4e83bd2644d6c92acde5cdcfa70eefccc0d73b31c7458c7b26bf7372cc551e7b2aa542261c", 0xa4}], 0x6}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000d40)="f82a370b33b81ccf7e1c527ebda28c7f", 0x10}, {&(0x7f0000000dc0)="0c2cdfe2a19afa542fb437c368d3cc5c1272b1ef9522fde9d1deda8057e00c25dc33b439c607b5aa933953679f10257690a52101b5cd65f64f9273fda9abb0e5d068d3d9c9b455f2d4aa658bd3ccebc05acc37003123e84d8193659f07bf920ffe806708395c22b7e1e68b960403392b9327e47364bc93a0864788672be9402c83574a5d68b3", 0x86}], 0x2}}], 0x2, 0x40080)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r6, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x804}, 0x20000010)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r7, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
close(r7)
socket$inet6_sctp(0xa, 0x1, 0x84)

21.828111527s ago: executing program 2 (id=1165):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea", 0x2e}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db569d850ed34e76992c9df9fe6888c6c9a4825c62b8dae26c4536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d5", 0x93}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d299", 0x6e}], 0x1}}], 0x2, 0x2090) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffb, @mcast2, 0x7}, 0x1c) (async)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @remote}}}, 0x32) (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) (async)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000380)=<r5=>0x0) (async)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4044005}, 0x0) (async)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a00)={0x14, 0x30, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) (async)
write$nci(r2, &(0x7f0000000480)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x2, @a={0x0, 0x1, 0x6, 0x0, 0x0, 0x1, 0x1, {0x5, 0x0, "", 0x0, 0x4}, 0xaa, 0xd, 0x2, 0x7}}, 0x13)
close(r2) (async)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) (async)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00'})
sendto$inet(r0, &(0x7f0000000040)="4057c5b1724cd96b87ee667c0044de", 0xf, 0x20044812, 0x0, 0x0)

21.329989576s ago: executing program 1 (id=1166):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x38, r4, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x482d, 0x4, 0x486f, 0x8, 0x5, 0x30, 0xc]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x38, r4, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x482d, 0x4, 0x486f, 0x8, 0x5, 0x30, 0xc]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x4, 0x3, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa0100fd, @multicast1, {[@ra={0x94, 0x4}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce)

20.655790241s ago: executing program 2 (id=1167):
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000)
getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80)
close(0xffffffffffffffff)
socket(0x1e, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0xffffff82}]}, @IFLA_GROUP={0x8}]}, 0x5c}}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03a0005)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r4, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
connect$inet(r4, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000200)="a90000000100000001efafbdd6c406e9", 0xfffffffffffffe4c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000102c0), r5)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}]}, 0x38}}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, @in6={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x35d}, @in6={0xa, 0x4e20, 0x413, @dev={0xfe, 0x80, '\x00', 0x33}, 0x9}, @in6={0xa, 0x4e22, 0x1, @mcast2, 0xffff}, @in={0x2, 0x4e24, @remote}], 0x74)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r6, 0x3)

20.432975699s ago: executing program 0 (id=1168):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1d16ab55}]}]}], {0x14}}, 0xc0}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'wlc\x00', 0x1, 0x80005, 0x6f}, 0x2c)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400})
close(0x3)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r7, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)="0c03573afa64193f5c0c67f7ed0f08ef102566dce7ec5f66a648201426236ae476434d7c6d4dbb49b6af27b75412ff599713", 0x32}, {&(0x7f0000000180)="47b6b1bcf13967b3c4bf3cc68f653effb380625761263b1720c5cb1c081f2af91cfebdad5d8f59f17b8a1d71b9c27079e4fe363d15d9fd80591447d7dce56e707f13b3168cd1dbb94cbf2a21264246d1b563d39bab7e3e105e9956260704ea72f04250aa97c76a1683207d3de919bc0b5196b965553881bb5e792e93c42885cd11f181ac41811b073e5dcf5bc549aaa4181bdd03fe1d7da63aa4b13b67e45f868047a7dd0fae16b9536264269ed9fe79b1824b17e0d5d95fe641338a1eee0e4612e6cc974a1f8d80a731d91569", 0xcd}, {&(0x7f0000000500)="eb11946c3eeac60839553f9e6003a7c6fa8120c1cc9efcc39e37b1bce4396dd05c5d8b881233767b08e8d4faf922b5f13e172ba3252675cd4c3c79d7e7a894d0eb054e2b86e58662a4e723650cf1599026f93144176c144695c1", 0x5a}, {&(0x7f0000000840)="396b0b2d92a081c10b00000001000000015ae169ced3036d77380fdfb4a449f37d3b3b69f6306c0a52aac4d6243e7bbe7faa4a1b07ee8d91d06cdc44210faf7d05755236638f2feb", 0x48}, {&(0x7f0000000740)="8fd7e1a2dae37ddf36b42888adb33b24cd5e70270cb2d35209544b64813df407ff978c073d5ba9a9e32da3814e10996ef7943420ecfecc2de257612ab795736ed45429621b51fc18dc63218e25f3e78d6308e06b7e9be8620ae26f73aed8774085f407be383588ab40b4a484b7e58eb3f4fa4986201c553184dc50df0da7dd227dc629e5c4eca6a85653091218ed2ee524c822a0e24ea255037fca7ce779468e0695b0ea7ba0075572cf8306993b047c1c36a5e64ae6c3dea6278c8d5a987d2a493a3f070f6241", 0xc7}, {&(0x7f00000002c0)="581f06a617594d1244e24b1ad08297c3a93ec8741db357cf2f47105e5a0830d4aa12743c45893332326216118c82631b2dd8ee154e7e9c12ab9ef8ea571f29a31fb97fc052ed5e49683e157e8ff5708c88924e4ff8a5076d28e610007b056699eeb30f42451b99257e4e19157baff11811710a05bbd87e7911c77ff0172fcd4e83bd2644d6c92acde5cdcfa70eefccc0d73b31c7458c7b26bf7372cc551e7b2aa542261c950e2c885c8166fc4706575f7024f91acee2072768c0e2803c08d0f9b403b2faecba3d1fa1", 0xc9}], 0x6}}], 0x1, 0x94)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
writev(r7, &(0x7f0000000980)=[{&(0x7f0000000440)="3187c89dda4db192b80f726757b05cfeb3a9dcb6e310ac212f9c6ebab422eb8a1b07e8fa734c4b34d05a3dd733b1d3f5954d9fb462444051", 0x38}, {&(0x7f00000008c0)="058c9ce3e71ec8530af92a4ab48c8adbc1f054b4a5a0cb88fdbc3f070309bb65328378276a7bb43b954124a4186d7ebafccd320b809fd255b45ca04c5a24e8d8d40b766c7cd772a8b0edbe17ad81278a0520122684046ac78292cd015040a59d4d0ea8cf43c116e440836d0fbdf175c32a7ba7e1177dd6100670cae382609772df7201a12b45ce650fe9", 0x8a}], 0x2)

19.083135971s ago: executing program 2 (id=1169):
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca)
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e)
getpeername$unix(r4, &(0x7f00000003c0), &(0x7f0000000440)=0x6e)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000300000008000700", @ANYRES32, @ANYBLOB="0800050000000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB="08c1d65f00623934be995b97fd3ddcc36f22b500000000d657cfa89771ac1e0001"], 0x3c}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000004100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000)

18.813026079s ago: executing program 1 (id=1170):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0xa, 0xfffe, 0x0, @private0, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000006c0)="b3", 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e24, 0x18001, @rand_addr=' \x01\x00', 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000700)="98", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e22, 0x84, @dev={0xfe, 0x80, '\x00', 0x35}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000340)="2f63954f55", 0x5}], 0x1}}], 0x3, 0x44)
listen(r0, 0x100101)
accept(r0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000)
r2 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x4004)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000080))
r3 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x17cb3, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x8008}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8058}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
close(r6)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20004434)
connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)

18.812445162s ago: executing program 2 (id=1171):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r4, 0xba87317d461c07c9, 0x70bd2a, 0x25dfdbdb}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40490c4)
syz_emit_ethernet(0xcc, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x2d, 0xba, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0xc, [@multicast2, @loopback, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}, {"28c9624ac4c776def5799525026ef73263831c67303671b02526506d68f7957aa244e929321d1642b2236994419199859b2b80e7240fe84b92ea295cffc010e65b9419b0f892a3a019761a2f67901bd50070f4a5be55f260761f0f35f401e46e0ab3ff09e0b30cee48c8b49d03205044d626151b57b834e7f22d4b6d3e45af82f2d6"}}}}}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810)
pipe(&(0x7f0000000440)={<r9=>0xffffffffffffffff})
r10 = socket$inet_udp(0x2, 0x2, 0x0)
close(r10)
splice(r9, 0x0, r10, 0x0, 0x3000, 0x100000000000000d)
r11 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000001480)=@int=0x7, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r12=>0xffffffffffffffff})
r13 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r14=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r15=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x11c, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8840}, 0x4000040)
write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98)
vmsplice(r3, &(0x7f00000004c0), 0x0, 0xf)
write(r0, 0x0, 0x0)

18.052931203s ago: executing program 1 (id=1172):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x7b, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
getsockopt(0xffffffffffffffff, 0x400000000000003a, 0x1, 0x0, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200002000128008000100687372001400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000140)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b97dded7e7c500000007c41c7e219", 0x49}, {&(0x7f0000002300)="27cb1547d73d51c2b9eb909bbb859214eabfa995b909a5faccc33d38140dc15d080af6eaf18b2031f0c88867e93763c3466f13a7e1c71f9b7ed9652a901d80e85e1ba265a9837970a9a20940b0208fa916a034be9eb50defe37271f579ecbb2f7e6157f8bac11e6657ddcd368291be85f6fbe3696d907770e9214e33190c4f9d0a048b2442a7dde887cf7c3f2e7fca619e0f1717850a65d661e72c55a293a7e4332309066fc4e40951535235d7a51b3c1bdfc5996f817e817caf5d035e24b79089ab10bf1a15448774f85810bb5276a5f49c64823fa5472ce8f93627cf3e8e24e23437c78443fdbf5127970b5b11290ccf407f1ebc06f0fe54a6770bfd5c806f22b890b7", 0x104}], 0x2}}], 0x2, 0x2090)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0xa0, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0x40000, 0xc574450d1af7b5bc}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bond\x00'}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_GROUP={0x8, 0x1b, 0xffffffff}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0cfd296dd1030e5474daa9f7f6c1c92f"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'nl80211\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9a995d58a1c39622a98d04ac4e50ab41"}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20044010}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r9, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000404}, 0x20000000) (async)
sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r9, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000404}, 0x20000000)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000820a64df49a62b00009500000000000000c07c61bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r12, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), 0xffffffffffffffff)
sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000480)={0x24, r13, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0x8) (async)
sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000480)={0x24, r13, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0x8)

17.461861726s ago: executing program 2 (id=1173):
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000)
getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000000601778c000000dd83000047f50002deb27f98f9a4fbd528616dccbae7bcbf00000805000100072d7111d0fc5c0bac98e4394b62c8343630578da34f065f080bd51004359b4923d089ff8f78cc3598834f6be6cb51ce556b9693f8c8a5c92c7bcd408b614d8b3ad51b4f6bcdc456d1a26c704c9df1e8fdcde5b255e8e5f36d74ac2c4d5175f73d5fcc5466a0303f9c5cb049508c3a2362ea16c20d852134665a5fcee65a9592893d50c45b77dbe3e48f4379fc5b58db07f175ca803c7a5f61"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) (async, rerun: 32)
close(0xffffffffffffffff) (async, rerun: 32)
socket(0x1e, 0x1, 0x0) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0xffffff82}]}, @IFLA_GROUP={0x8}]}, 0x5c}}, 0x0) (async, rerun: 64)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03a0005)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async)
connect$inet(r3, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (async)
connect$inet(r3, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) (async)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000200)="a90000000100000001efafbdd6c406e9", 0xfffffffffffffe4c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f00000102c0), r4) (async, rerun: 32)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x50, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x11}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}]}, 0x50}}, 0x0) (async, rerun: 32)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, @in6={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x35d}, @in6={0xa, 0x4e20, 0x413, @dev={0xfe, 0x80, '\x00', 0x33}, 0x9}, @in6={0xa, 0x4e22, 0x1, @mcast2, 0xffff}, @in={0x2, 0x4e24, @remote}], 0x74) (rerun: 32)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@newsa={0x140, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @tfcpad={0x8, 0x16, 0x5}]}, 0x140}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r6, 0x3)
syz_emit_ethernet(0x42, &(0x7f0000002a80)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0x2}]}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045f40034000040000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c440d40907800ffff0ab4810084df7507000000"], 0x0)

17.329381045s ago: executing program 0 (id=1174):
r0 = socket$inet(0x2, 0x4, 0x7fffffff)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200), 0x0)
shutdown(r1, 0x1)
unshare(0xa060200)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x80, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x54, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x6}, {0x4, 0x0, 0x3, 0xa159, 0xffe, 0x7}, 0x3, 0x6, 0x41e}}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x2, 0x7, 0x61c, 0x3, 0x5}, {0x3, 0x2, 0x1ff, 0x400, 0xd6, 0x40}, 0x5, 0x3a, 0x429}}]}}]}, 0x80}}, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f00000000c0)={0x1, 'syz_tun\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xff12}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b95bec00c600000000001b0000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4001)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0xa}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100))
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, 0x0, &(0x7f00000001c0)=r9}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xb, "09cabb20fd22eff403dd5b"}})
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)

2.071991512s ago: executing program 32 (id=1172):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x7b, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
getsockopt(0xffffffffffffffff, 0x400000000000003a, 0x1, 0x0, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200002000128008000100687372001400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000140)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b97dded7e7c500000007c41c7e219", 0x49}, {&(0x7f0000002300)="27cb1547d73d51c2b9eb909bbb859214eabfa995b909a5faccc33d38140dc15d080af6eaf18b2031f0c88867e93763c3466f13a7e1c71f9b7ed9652a901d80e85e1ba265a9837970a9a20940b0208fa916a034be9eb50defe37271f579ecbb2f7e6157f8bac11e6657ddcd368291be85f6fbe3696d907770e9214e33190c4f9d0a048b2442a7dde887cf7c3f2e7fca619e0f1717850a65d661e72c55a293a7e4332309066fc4e40951535235d7a51b3c1bdfc5996f817e817caf5d035e24b79089ab10bf1a15448774f85810bb5276a5f49c64823fa5472ce8f93627cf3e8e24e23437c78443fdbf5127970b5b11290ccf407f1ebc06f0fe54a6770bfd5c806f22b890b7", 0x104}], 0x2}}], 0x2, 0x2090)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0xa0, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0x40000, 0xc574450d1af7b5bc}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bond\x00'}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_GROUP={0x8, 0x1b, 0xffffffff}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0cfd296dd1030e5474daa9f7f6c1c92f"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'nl80211\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9a995d58a1c39622a98d04ac4e50ab41"}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20044010}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r9, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000404}, 0x20000000) (async)
sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r9, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000404}, 0x20000000)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000820a64df49a62b00009500000000000000c07c61bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r12, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), 0xffffffffffffffff)
sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000480)={0x24, r13, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0x8) (async)
sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000480)={0x24, r13, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0x8)

914.355646ms ago: executing program 33 (id=1174):
r0 = socket$inet(0x2, 0x4, 0x7fffffff)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200), 0x0)
shutdown(r1, 0x1)
unshare(0xa060200)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x80, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x54, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x6}, {0x4, 0x0, 0x3, 0xa159, 0xffe, 0x7}, 0x3, 0x6, 0x41e}}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x2, 0x7, 0x61c, 0x3, 0x5}, {0x3, 0x2, 0x1ff, 0x400, 0xd6, 0x40}, 0x5, 0x3a, 0x429}}]}}]}, 0x80}}, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f00000000c0)={0x1, 'syz_tun\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257035bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf528666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebdb638d91dbef661935839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dc7718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xff12}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b95bec00c600000000001b0000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4001)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0xa}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100))
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, 0x0, &(0x7f00000001c0)=r9}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xb, "09cabb20fd22eff403dd5b"}})
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)

0s ago: executing program 34 (id=1173):
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000)
getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000000601778c000000dd83000047f50002deb27f98f9a4fbd528616dccbae7bcbf00000805000100072d7111d0fc5c0bac98e4394b62c8343630578da34f065f080bd51004359b4923d089ff8f78cc3598834f6be6cb51ce556b9693f8c8a5c92c7bcd408b614d8b3ad51b4f6bcdc456d1a26c704c9df1e8fdcde5b255e8e5f36d74ac2c4d5175f73d5fcc5466a0303f9c5cb049508c3a2362ea16c20d852134665a5fcee65a9592893d50c45b77dbe3e48f4379fc5b58db07f175ca803c7a5f61"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) (async, rerun: 32)
close(0xffffffffffffffff) (async, rerun: 32)
socket(0x1e, 0x1, 0x0) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0xffffff82}]}, @IFLA_GROUP={0x8}]}, 0x5c}}, 0x0) (async, rerun: 64)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03a0005)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async)
connect$inet(r3, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (async)
connect$inet(r3, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) (async)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000200)="a90000000100000001efafbdd6c406e9", 0xfffffffffffffe4c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f00000102c0), r4) (async, rerun: 32)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x50, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x11}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}]}, 0x50}}, 0x0) (async, rerun: 32)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, @in6={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x35d}, @in6={0xa, 0x4e20, 0x413, @dev={0xfe, 0x80, '\x00', 0x33}, 0x9}, @in6={0xa, 0x4e22, 0x1, @mcast2, 0xffff}, @in={0x2, 0x4e24, @remote}], 0x74) (rerun: 32)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@newsa={0x140, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @tfcpad={0x8, 0x16, 0x5}]}, 0x140}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r6, 0x3)
syz_emit_ethernet(0x42, &(0x7f0000002a80)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0x2}]}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045f40034000040000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c440d40907800ffff0ab4810084df7507000000"], 0x0)

kernel console output (not intermixed with test programs):

port of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.518324][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.539210][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.541795][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.550155][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.560440][ T5611] hsr_slave_0: entered promiscuous mode
[   55.563563][ T5611] hsr_slave_1: entered promiscuous mode
[   55.566503][ T5611] debugfs: 'hsr0' already exists in 'hsr'
[   55.568833][ T5611] Cannot create hsr debugfs directory
[   55.676427][ T5616] hsr_slave_0: entered promiscuous mode
[   55.679270][ T5616] hsr_slave_1: entered promiscuous mode
[   55.682827][ T5616] debugfs: 'hsr0' already exists in 'hsr'
[   55.685125][ T5616] Cannot create hsr debugfs directory
[   55.831768][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.838514][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   55.841978][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.846303][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   55.852658][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.857401][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   55.865933][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.870273][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   55.912561][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.915628][ T5608] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.918736][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.921328][ T5608] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.926871][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.933424][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   55.936111][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.941656][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   55.946449][   T82] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.951215][   T82] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.961795][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.967497][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   55.970745][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.974795][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.040409][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.044450][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.047728][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.052274][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.061070][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.065986][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.073045][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.077329][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.117536][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.147871][ T5608] 8021q: adding VLAN 0 to HW filter on device team0
[   56.166564][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.168816][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.180162][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.182507][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.187066][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.216667][ T5611] 8021q: adding VLAN 0 to HW filter on device team0
[   56.236960][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.239206][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.244060][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.246316][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.286913][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.333070][ T5616] 8021q: adding VLAN 0 to HW filter on device team0
[   56.363115][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.366051][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.378257][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.380576][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.556373][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.565239][ T5618] Bluetooth: hci2: command tx timeout
[   56.567399][   T54] Bluetooth: hci1: command tx timeout
[   56.567446][ T4999] Bluetooth: hci0: command tx timeout
[   56.596634][ T5611] veth0_vlan: entered promiscuous mode
[   56.612659][ T5611] veth1_vlan: entered promiscuous mode
[   56.624039][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.641440][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.662497][ T5611] veth0_macvtap: entered promiscuous mode
[   56.673210][ T5611] veth1_macvtap: entered promiscuous mode
[   56.694640][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.698598][ T5616] veth0_vlan: entered promiscuous mode
[   56.707591][ T5608] veth0_vlan: entered promiscuous mode
[   56.712544][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.718259][ T5616] veth1_vlan: entered promiscuous mode
[   56.722085][ T5608] veth1_vlan: entered promiscuous mode
[   56.732977][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.740891][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.744196][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.757774][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.786994][ T5616] veth0_macvtap: entered promiscuous mode
[   56.803579][ T5616] veth1_macvtap: entered promiscuous mode
[   56.811209][ T5608] veth0_macvtap: entered promiscuous mode
[   56.826391][ T5608] veth1_macvtap: entered promiscuous mode
[   56.840445][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.845325][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.850119][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.858688][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.866877][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.874758][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.887747][ T5647] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.890948][ T5647] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.895999][ T5647] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.903992][ T5647] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.910869][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.911520][ T5647] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.915655][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.916349][ T5647] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.928621][ T5647] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.931756][ T5647] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.005382][ T5611] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.014212][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.018162][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.033110][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.036498][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.059181][ T3331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.065038][ T3331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.100278][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.104020][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.262893][ T5724] tipc: Started in network mode
[   57.267734][ T5724] tipc: Node identity ac14140f, cluster identity 4711
[   57.270997][ T5724] tipc: New replicast peer: 255.255.255.255
[   57.275537][ T5724] tipc: Enabled bearer <udp:syz2>, priority 10
[   57.289722][ T5726] Zero length message leads to an empty skb
[   57.354343][ T5732] syz.1.5 uses obsolete (PF_INET,SOCK_PACKET)
[   57.357421][ T5729] xt_hashlimit: size too large, truncated to 1048576
[   57.564641][ T5743] netlink: 19 bytes leftover after parsing attributes in process `syz.1.8'.
[   57.593231][ T5743] netlink: 19 bytes leftover after parsing attributes in process `syz.1.8'.
[   57.604650][ T5742] geneve0: entered promiscuous mode
[   57.607785][ T5742] macvlan2: entered promiscuous mode
[   57.693285][    T9] IPVS: starting estimator thread 0...
[   57.751073][ T5754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11'.
[   57.790229][ T5752] IPVS: using max 82 ests per chain, 196800 per kthread
[   57.907599][ T5764] openvswitch: netlink: Flow actions attr not present in new flow.
[   58.209677][ T5773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'.
[   58.213349][ T5773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18'.
[   58.349128][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.352107][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.409679][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.414315][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.487098][ T5668] tipc: Node number set to 2886997007
[   58.491476][ T5666] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.496359][ T5666] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.502554][ T5666] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.510254][ T5666] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.533828][ T5790] netlink: 'syz.2.23': attribute type 1 has an invalid length.
[   58.571337][ T5790] veth3: entered promiscuous mode
[   58.613753][ T5790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.23'.
[   58.639583][ T4999] Bluetooth: hci1: command tx timeout
[   58.639624][   T54] Bluetooth: hci2: command tx timeout
[   58.641808][ T4999] Bluetooth: hci0: command tx timeout
[   58.961561][ T5792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'.
[   58.964851][ T5792] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.967228][ T5792] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.970503][ T5792] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.972796][ T5792] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.363827][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.367849][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.412663][ T3165] IPVS: starting estimator thread 0...
[   59.494972][ T5813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'.
[   59.498506][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'.
[   59.509667][ T5806] IPVS: using max 82 ests per chain, 196800 per kthread
[   59.542765][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.549068][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   59.556814][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.605890][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.613297][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.623001][ T5817] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   59.629167][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.631464][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.634900][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.637421][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.669149][ T5825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'.
[   59.784485][ T5668] IPVS: starting estimator thread 0...
[   59.843468][ T5847] bond0: entered promiscuous mode
[   59.845384][ T5847] bond_slave_0: entered promiscuous mode
[   59.847698][ T5847] bond_slave_1: entered promiscuous mode
[   59.852011][ T5847] batadv0: entered promiscuous mode
[   59.854433][ T5847] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   59.857497][ T5847] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   59.861991][ T5847] 8021q: adding VLAN 0 to HW filter on device hsr1
[   59.865275][ T5847] bond0: left promiscuous mode
[   59.866826][ T5847] bond_slave_0: left promiscuous mode
[   59.868620][ T5847] bond_slave_1: left promiscuous mode
[   59.870562][ T5846] IPVS: using max 83 ests per chain, 199200 per kthread
[   59.872846][ T5847] batadv0: left promiscuous mode
[   59.894024][ T5848] netlink: 'syz.1.36': attribute type 2 has an invalid length.
[   59.899491][ T5848] bond0: entered promiscuous mode
[   59.901270][ T5848] bond_slave_0: entered promiscuous mode
[   59.903178][ T5848] bond_slave_1: entered promiscuous mode
[   59.906346][ T5848] batadv0: entered promiscuous mode
[   59.908488][ T5848] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   59.912413][ T5848] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   59.917018][ T5848] 8021q: adding VLAN 0 to HW filter on device hsr1
[   59.921483][ T5848] bond0: left promiscuous mode
[   59.923280][ T5848] bond_slave_0: left promiscuous mode
[   59.925204][ T5848] bond_slave_1: left promiscuous mode
[   59.927524][ T5848] batadv0: left promiscuous mode
[   60.364882][ T5876] netlink: 'syz.0.43': attribute type 1 has an invalid length.
[   60.367890][ T5876] netlink: 'syz.0.43': attribute type 1 has an invalid length.
[   60.372155][ T5876] netlink: 'syz.0.43': attribute type 1 has an invalid length.
[   60.413409][ T5881] netlink: 'syz.1.44': attribute type 11 has an invalid length.
[   60.554441][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.558812][ T5888] sctp: [Deprecated]: syz.2.47 (pid 5888) Use of int in max_burst socket option deprecated.
[   60.558812][ T5888] Use struct sctp_assoc_value instead
[   60.560698][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.641310][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.645593][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.648764][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.653870][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.720964][   T54] Bluetooth: hci0: command tx timeout
[   60.721136][ T5618] Bluetooth: hci1: command tx timeout
[   60.725268][ T4999] Bluetooth: hci2: command tx timeout
[   61.477398][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.481116][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.525338][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.531809][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.811761][ T5915] netlink: 'syz.1.55': attribute type 41 has an invalid length.
[   61.918617][ T5925] openvswitch: netlink: Flow actions attr not present in new flow.
[   62.620764][ T5938] __nla_validate_parse: 9 callbacks suppressed
[   62.620779][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.60'.
[   62.626123][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.629639][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.799531][ T4999] Bluetooth: hci0: command tx timeout
[   62.809641][ T5618] Bluetooth: hci1: command tx timeout
[   62.812021][ T4999] Bluetooth: hci2: command tx timeout
[   63.683019][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'.
[   63.697064][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'.
[   63.700864][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'.
[   63.798905][ T5994] netlink: 220 bytes leftover after parsing attributes in process `syz.0.68'.
[   64.578809][   T32] cfg80211: failed to load regulatory.db
[   64.812709][ T6009] Bluetooth: MGMT ver 1.23
[   65.727623][ T6028] netlink: 36 bytes leftover after parsing attributes in process `syz.0.78'.
[   66.329527][ T6053] netlink: 36 bytes leftover after parsing attributes in process `syz.0.83'.
[   66.364191][ T6052] macvlan2: left promiscuous mode
[   66.550257][ T6055] xt_connbytes: Forcing CT accounting to be enabled
[   67.039209][ T6062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.86'.
[   67.079515][ T6064] netlink: 'syz.0.87': attribute type 1 has an invalid length.
[   67.085239][ T6064] netlink: 236 bytes leftover after parsing attributes in process `syz.0.87'.
[   67.171571][ T6074] netlink: 'syz.0.89': attribute type 3 has an invalid length.
[   67.173893][ T6074] netlink: 'syz.0.89': attribute type 3 has an invalid length.
[   67.176102][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.89'.
[   67.273741][ T6078] netlink: 'syz.0.90': attribute type 1 has an invalid length.
[   67.443523][ T6091] xt_policy: output policy not valid in PREROUTING and INPUT
[   67.547331][ T6096] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   67.552427][ T6096] ipt_ECN: cannot use operation on non-tcp rule
[   67.598764][ T6098] netlink: 'syz.2.97': attribute type 1 has an invalid length.
[   67.662816][ T6106] IPVS: set_ctl: invalid protocol: 22 10.1.1.0:20004
[   67.774095][ T6113] __nla_validate_parse: 6 callbacks suppressed
[   67.774104][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'.
[   67.836608][ T6118] sctp: [Deprecated]: syz.0.103 (pid 6118) Use of int in max_burst socket option.
[   67.836608][ T6118] Use struct sctp_assoc_value instead
[   68.122863][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.125371][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.140462][ T6145] netlink: 'syz.0.108': attribute type 13 has an invalid length.
[   68.149155][ T6145] netlink: 'syz.0.108': attribute type 17 has an invalid length.
[   68.322641][ T6144] geneve0: left promiscuous mode
[   68.397331][ T6145] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.401033][ T6145] 8021q: adding VLAN 0 to HW filter on device team0
[   68.430113][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.432740][ T6145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.441250][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.443493][ T6145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.484615][ T6145] veth1_vlan: left promiscuous mode
[   68.487106][ T6145] veth0_vlan: left promiscuous mode
[   68.490210][ T6145] veth0_vlan: entered promiscuous mode
[   68.493791][ T6145] veth1_vlan: entered promiscuous mode
[   68.498936][ T6145] veth1_macvtap: left promiscuous mode
[   68.502004][ T6145] veth0_macvtap: left promiscuous mode
[   68.505314][ T6145] veth0_macvtap: entered promiscuous mode
[   68.514759][ T6145] veth1_macvtap: entered promiscuous mode
[   68.522995][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   68.530458][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   68.536685][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   68.542878][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   68.551186][ T6145] geneve0: entered promiscuous mode
[   68.556617][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.642008][ T6181] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   68.660373][ T6181] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   68.765726][ T6199] bond1 (unregistering): Released all slaves
[   70.115878][ T6297] tipc: Started in network mode
[   70.117636][ T6297] tipc: Node identity ac14140f, cluster identity 4711
[   70.120966][ T6297] tipc: New replicast peer: 255.255.255.255
[   70.123378][ T6297] tipc: Enabled bearer <udp:syz2>, priority 10
[   70.269205][ T6309] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   70.350690][ T6317] xt_policy: output policy not valid in PREROUTING and INPUT
[   71.104618][ T6315] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   71.107678][ T6315] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   71.127224][ T6315] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   71.130303][ T6315] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   71.143944][ T6315] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   71.148832][ T6315] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   71.240025][ T6173] tipc: Node number set to 2886997007
[   71.728062][ T6326] syz.0.137 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   71.747521][ T6326] CPU: 0 UID: 0 PID: 6326 Comm: syz.0.137 Not tainted syzkaller #0 PREEMPT(full) 
[   71.747543][ T6326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.747549][ T6326] Call Trace:
[   71.747554][ T6326]  <TASK>
[   71.747560][ T6326]  dump_stack_lvl+0xe8/0x150
[   71.747579][ T6326]  dump_header+0xd3/0x4b0
[   71.747601][ T6326]  oom_kill_process+0x3ab/0x970
[   71.747620][ T6326]  out_of_memory+0x1064/0x1480
[   71.747633][ T6326]  ? try_charge_memcg+0xbca/0x1590
[   71.747654][ T6326]  ? __pfx_out_of_memory+0x10/0x10
[   71.747667][ T6326]  ? do_raw_spin_unlock+0x4d/0x210
[   71.747689][ T6326]  try_charge_memcg+0xc74/0x1590
[   71.747711][ T6326]  ? __pfx_try_charge_memcg+0x10/0x10
[   71.747721][ T6326]  ? percpu_ref_tryget+0x15/0x180
[   71.747747][ T6326]  ? charge_memcg+0x20/0x2b0
[   71.747760][ T6326]  charge_memcg+0x19c/0x2b0
[   71.747771][ T6326]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[   71.747782][ T6326]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[   71.747823][ T6326]  swap_cache_alloc_folio+0x4de/0x990
[   71.747849][ T6326]  swap_cache_read_folio+0x44/0x120
[   71.747867][ T6326]  swap_cluster_readahead+0x3a0/0x640
[   71.747887][ T6326]  ? __pfx_swap_cluster_readahead+0x10/0x10
[   71.747912][ T6326]  ? get_vma_policy+0x27b/0x3c0
[   71.747928][ T6326]  swapin_readahead+0x19a/0xc10
[   71.747946][ T6326]  ? swap_table_get+0x1e/0x260
[   71.747961][ T6326]  ? swap_table_get+0x1e/0x260
[   71.747995][ T6326]  ? __pfx_swapin_readahead+0x10/0x10
[   71.748014][ T6326]  ? swap_table_get+0x1e/0x260
[   71.748028][ T6326]  ? swap_table_get+0x1e/0x260
[   71.748041][ T6326]  ? swap_table_get+0x1e/0x260
[   71.748054][ T6326]  ? swap_table_get+0x216/0x260
[   71.748069][ T6326]  ? swap_cache_get_folio+0x2e7/0x2f0
[   71.748087][ T6326]  do_swap_page+0x455/0x5060
[   71.748110][ T6326]  ? __pte_offset_map+0x29/0x240
[   71.748136][ T6326]  ? __lock_acquire+0x683/0x2cf0
[   71.748147][ T6326]  ? do_swap_page+0x124/0x5060
[   71.748162][ T6326]  ? __pfx_do_swap_page+0x10/0x10
[   71.748175][ T6326]  ? __pte_offset_map+0x1ae/0x240
[   71.748192][ T6326]  ? pte_offset_map_rw_nolock+0xea/0x160
[   71.748209][ T6326]  handle_mm_fault+0x124c/0x3080
[   71.748231][ T6326]  ? handle_mm_fault+0xec/0x3080
[   71.748250][ T6326]  ? __pfx_handle_mm_fault+0x10/0x10
[   71.748263][ T6326]  ? lock_vma_under_rcu+0x45a/0x500
[   71.748293][ T6326]  do_user_addr_fault+0xa4d/0x1340
[   71.748313][ T6326]  ? trace_page_fault_user+0x84/0x1e0
[   71.748328][ T6326]  exc_page_fault+0x6a/0xc0
[   71.748344][ T6326]  asm_exc_page_fault+0x26/0x30
[   71.748356][ T6326] RIP: 0033:0x7f58b6e655b4
[   71.748370][ T6326] Code: ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 80 3d 5b ca 3a 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00 <80> 3d 2a 01 ee 00 00 49 89 f1 41 89 d2 89 cb c6 05 36 ca 3a 00 01
[   71.748379][ T6326] RSP: 002b:00007fffd3fc86a0 EFLAGS: 00010246
[   71.748390][ T6326] RAX: 00007f58b7215fa0 RBX: 00007f58b7215fa0 RCX: 0000000000000026
[   71.748398][ T6326] RDX: 0000000000000001 RSI: 00007f58b7216038 RDI: 0000000000000006
[   71.748404][ T6326] RBP: 00007f58b7217da0 R08: 0000000000000000 R09: 0000000000000001
[   71.748411][ T6326] R10: 0000000000000026 R11: 0000000000000246 R12: 000000000001174b
[   71.748418][ T6326] R13: 00007f58b721618c R14: 00000000000114b2 R15: 00007f58b7216180
[   71.748437][ T6326]  </TASK>
[   71.756382][ T6326] memory: usage 307200kB, limit 307200kB, failcnt 2295
[   71.872889][ T6326] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0
[   71.875961][ T6326] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0
[   71.878162][ T6326] Memory cgroup stats for /syz0:
[   71.878339][ T6326] cache 0
[   71.881280][ T6326] rss 0
[   71.882388][ T6326] rss_huge 0
[   71.883707][ T6326] shmem 0
[   71.884869][ T6326] mapped_file 0
[   71.886191][ T6326] dirty 0
[   71.887335][ T6326] writeback 0
[   71.888620][ T6326] workingset_refault_anon 5
[   71.890503][ T6326] workingset_refault_file 28
[   71.892610][ T6326] swap 176128
[   71.893949][ T6326] swapcached 266240
[   71.895378][ T6326] pgpgin 16349
[   71.896682][ T6326] pgpgout 16340
[   71.897985][ T6326] pgfault 22643
[   71.899258][ T6326] pgmajfault 4
[   71.900686][ T6326] inactive_anon 24576
[   71.902482][ T6326] active_anon 12288
[   71.904014][ T6326] inactive_file 0
[   71.905366][ T6326] active_file 0
[   71.906513][ T6326] unevictable 0
[   71.907609][ T6326] hierarchical_memory_limit 314572800
[   71.909263][ T6326] hierarchical_memsw_limit 9223372036854771712
[   71.911270][ T6326] total_cache 0
[   71.912535][ T6326] total_rss 0
[   71.913621][ T6326] total_rss_huge 0
[   71.914840][ T6326] total_shmem 0
[   71.915926][ T6326] total_mapped_file 0
[   71.917161][ T6326] total_dirty 0
[   71.918207][ T6326] total_writeback 0
[   71.919442][ T6326] total_workingset_refault_anon 5
[   71.921120][ T6326] total_workingset_refault_file 28
[   71.922726][ T6326] total_swap 176128
[   71.923920][ T6326] total_swapcached 266240
[   71.925243][ T6326] total_pgpgin 16349
[   71.926530][ T6326] total_pgpgout 16340
[   71.928012][ T6326] total_pgfault 22643
[   71.929610][ T6326] total_pgmajfault 4
[   71.931361][ T6326] total_inactive_anon 24576
[   71.933121][ T6326] total_active_anon 12288
[   71.934725][ T6326] total_inactive_file 0
[   71.936270][ T6326] total_active_file 0
[   71.937777][ T6326] total_unevictable 0
[   71.939422][ T6326] anon_cost 0
[   71.940948][ T6326] file_cost 0
[   71.942303][ T6326] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.137,pid=6326,uid=0
[   71.947726][ T6326] Memory cgroup out of memory: Killed process 6326 (syz.0.137) total-vm:102424kB, anon-rss:1240kB, file-rss:23072kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[   71.958535][ T6327] syz.0.137 (6327) used greatest stack depth: 19800 bytes left
[   71.986317][ T6329] syz.0.137 (6329) used greatest stack depth: 18656 bytes left
[   72.301919][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'.
[   72.316702][ T6345] netlink: 27 bytes leftover after parsing attributes in process `syz.1.142'.
[   72.362225][ T6354] ipt_ECN: cannot use operation on non-tcp rule
[   72.578009][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'.
[   72.639664][ T6368] netlink: 'syz.1.148': attribute type 33 has an invalid length.
[   72.917565][ T6379] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.149'.
[   73.005233][ T6386] bond0: entered promiscuous mode
[   73.006944][ T6386] bond_slave_0: entered promiscuous mode
[   73.009114][ T6386] bond_slave_1: entered promiscuous mode
[   73.030158][ T6386] bond0: left promiscuous mode
[   73.032883][ T6386] bond_slave_0: left promiscuous mode
[   73.035354][ T6386] bond_slave_1: left promiscuous mode
[   73.053181][ T6387] bond0: entered promiscuous mode
[   73.055354][ T6387] bond_slave_0: entered promiscuous mode
[   73.057621][ T6387] bond_slave_1: entered promiscuous mode
[   73.061462][ T6387] bond0: left promiscuous mode
[   73.063072][ T6387] bond_slave_0: left promiscuous mode
[   73.064910][ T6387] bond_slave_1: left promiscuous mode
[   73.258529][ T6394] IPVS: set_ctl: invalid protocol: 50 100.1.1.10:20002
[   74.311500][ T6420] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.315363][ T6420] 8021q: adding VLAN 0 to HW filter on device team0
[   74.320055][ T6421] netlink: 36 bytes leftover after parsing attributes in process `syz.2.160'.
[   74.383233][ T6420] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   74.387553][ T6420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.395294][ T6420] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   74.409303][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.412449][ T6275] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.416935][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.419958][ T6275] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.487959][ T6423] syzkaller0: entered promiscuous mode
[   74.490320][ T6423] syzkaller0: entered allmulticast mode
[   74.732522][ T6436] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   74.736505][ T6436] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   75.101967][ T6449] netlink: 36 bytes leftover after parsing attributes in process `syz.2.169'.
[   75.110380][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'.
[   75.113833][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'.
[   75.149198][ T6452] netlink: 'syz.2.170': attribute type 1 has an invalid length.
[   75.151942][ T6452] netlink: 236 bytes leftover after parsing attributes in process `syz.2.170'.
[   75.155832][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'.
[   75.238239][ T6456] netlink: 56 bytes leftover after parsing attributes in process `syz.2.171'.
[   75.278640][ T6461] netlink: 'syz.2.172': attribute type 1 has an invalid length.
[   75.284469][ T6461] netlink: 236 bytes leftover after parsing attributes in process `syz.2.172'.
[   75.287518][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.172'.
[   75.335802][ T6465] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   75.529010][ T6470] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[   75.611834][ T6477] netlink: 'syz.0.176': attribute type 1 has an invalid length.
[   75.627241][ T6477] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   75.776316][ T6485] bridge1: entered promiscuous mode
[   75.780862][ T6485] bridge1: entered allmulticast mode
[   75.785038][ T6485] team0: Port device bridge1 added
[   75.861811][ T6491] netlink: 'syz.0.179': attribute type 1 has an invalid length.
[   75.915346][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.920358][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.133836][ T6514] netlink: 'syz.0.184': attribute type 23 has an invalid length.
[   76.136236][ T6514] netlink: 'syz.0.184': attribute type 21 has an invalid length.
[   76.483027][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[   76.485464][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[   76.652405][ T6539] bond0: entered promiscuous mode
[   76.654639][ T6539] bond_slave_0: entered promiscuous mode
[   76.657175][ T6539] bond_slave_1: entered promiscuous mode
[   76.663038][ T6539] bond0: left promiscuous mode
[   76.664811][ T6539] bond_slave_0: left promiscuous mode
[   76.666825][ T6539] bond_slave_1: left promiscuous mode
[   76.703225][ T6540] bond0: entered promiscuous mode
[   76.705275][ T6540] bond_slave_0: entered promiscuous mode
[   76.707403][ T6540] bond_slave_1: entered promiscuous mode
[   76.712417][ T6540] bond0: left promiscuous mode
[   76.714133][ T6540] bond_slave_0: left promiscuous mode
[   76.716079][ T6540] bond_slave_1: left promiscuous mode
[   76.871072][ T6549] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   76.928382][ T6551] Driver unsupported XDP return value 0 on prog  (id 61) dev N/A, expect packet loss!
[   77.058495][ T6555] netlink: 'syz.2.196': attribute type 1 has an invalid length.
[   77.248228][ T6573] netlink: 'syz.2.202': attribute type 1 has an invalid length.
[   77.300978][ T6577] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[   77.338491][ T6579] warning: `syz.2.204' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.379856][ T6583] syzkaller1: entered promiscuous mode
[   77.381727][ T6583] syzkaller1: entered allmulticast mode
[   77.940378][ T6612] __nla_validate_parse: 18 callbacks suppressed
[   77.940387][ T6612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.213'.
[   78.014088][ T6616] netlink: 'syz.2.212': attribute type 4 has an invalid length.
[   78.024408][ T6616] netlink: 'syz.2.212': attribute type 4 has an invalid length.
[   78.066540][ T6619] openvswitch: netlink: VXLAN extension 317 out of range max 1
[   78.318127][ T6638] netlink: 36 bytes leftover after parsing attributes in process `syz.1.219'.
[   78.332874][ T6641] netlink: 'syz.0.221': attribute type 1 has an invalid length.
[   78.335462][ T6641] netlink: 236 bytes leftover after parsing attributes in process `syz.0.221'.
[   78.507166][ T6653] netlink: 36 bytes leftover after parsing attributes in process `syz.2.224'.
[   78.666494][ T6656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.225'.
[   78.670515][ T6656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.225'.
[   78.846791][ T6663] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.228'.
[   79.620372][ T6699] netlink: 44 bytes leftover after parsing attributes in process `syz.2.232'.
[   79.942910][ T6734] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   79.949772][ T6734] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   80.272938][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'.
[   80.397509][ T6799] tap0: tun_chr_ioctl cmd 1074025676
[   80.401212][ T6799] tap0: owner set to 0
[   80.511330][ T6812] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[   80.645482][ T6818] netlink: 108 bytes leftover after parsing attributes in process `syz.0.248'.
[   80.825158][ T6830] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.828520][ T6830] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.838389][ T6833] No such timeout policy "syz0"
[   81.863200][ T6865] sock: sock_set_timeout: `syz.2.263' (pid 6865) tries to set negative timeout
[   81.900825][ T6867] syzkaller0: entered promiscuous mode
[   81.909469][ T6867] syzkaller0: entered allmulticast mode
[   82.104586][ T6877] x_tables: duplicate underflow at hook 3
[   82.725810][ T6884] openvswitch: netlink: Flow actions attr not present in new flow.
[   83.252848][ T6921] __nla_validate_parse: 5 callbacks suppressed
[   83.252858][ T6921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.278'.
[   83.257642][ T6921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.278'.
[   83.394504][ T6932] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.281'.
[   83.400216][ T6932] smc: net device wlan0 applied user defined pnetid SYZ0
[   83.403088][ T6932] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.281'.
[   83.569716][ T6943] netlink: 'syz.0.284': attribute type 11 has an invalid length.
[   83.576835][ T6943] netlink: 'syz.0.284': attribute type 4 has an invalid length.
[   83.583687][ T6943] netlink: 220 bytes leftover after parsing attributes in process `syz.0.284'.
[   83.618536][ T6945] netlink: 'syz.1.285': attribute type 1 has an invalid length.
[   83.625145][ T6945] netlink: 236 bytes leftover after parsing attributes in process `syz.1.285'.
[   83.628532][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'.
[   84.491347][ T6970] netlink: 'syz.1.291': attribute type 1 has an invalid length.
[   84.499906][ T6970] netlink: 240 bytes leftover after parsing attributes in process `syz.1.291'.
[   84.592241][ T6980] netlink: 40 bytes leftover after parsing attributes in process `syz.1.292'.
[   84.599771][ T6980] netlink: 88 bytes leftover after parsing attributes in process `syz.1.292'.
[   84.749073][ T6990] netlink: 'syz.1.295': attribute type 1 has an invalid length.
[   84.886973][ T6996] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   84.946519][ T6998] bond0: entered promiscuous mode
[   84.956526][ T6998] bond_slave_0: entered promiscuous mode
[   84.958971][ T6998] bond_slave_1: entered promiscuous mode
[   84.963496][ T6998] bond0: left promiscuous mode
[   84.965041][ T6998] bond_slave_0: left promiscuous mode
[   84.966874][ T6998] bond_slave_1: left promiscuous mode
[   84.985358][ T7002] bond0: entered promiscuous mode
[   84.987072][ T7002] bond_slave_0: entered promiscuous mode
[   84.988954][ T7002] bond_slave_1: entered promiscuous mode
[   84.991759][ T7002] bond0: left promiscuous mode
[   84.993310][ T7002] bond_slave_0: left promiscuous mode
[   84.995080][ T7002] bond_slave_1: left promiscuous mode
[   85.068863][ T7006] bond0: entered promiscuous mode
[   85.071358][ T7006] bond_slave_0: entered promiscuous mode
[   85.074147][ T7006] bond_slave_1: entered promiscuous mode
[   85.076794][ T7006] bond0: left promiscuous mode
[   85.078269][ T7006] bond_slave_0: left promiscuous mode
[   85.080401][ T7006] bond_slave_1: left promiscuous mode
[   85.124895][ T7012] bond0: entered promiscuous mode
[   85.126652][ T7012] bond_slave_0: entered promiscuous mode
[   85.128764][ T7012] bond_slave_1: entered promiscuous mode
[   85.134218][ T7012] bond0: left promiscuous mode
[   85.135945][ T7012] bond_slave_0: left promiscuous mode
[   85.141375][ T7012] bond_slave_1: left promiscuous mode
[   85.319650][ T7026] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   85.952169][ T7038] netlink: 'syz.1.307': attribute type 13 has an invalid length.
[   85.954516][ T7038] netlink: 'syz.1.307': attribute type 17 has an invalid length.
[   85.976484][ T7038] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.979180][ T7038] 8021q: adding VLAN 0 to HW filter on device team0
[   86.008998][ T7038] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   86.012578][ T7038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   86.017456][ T7038] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   86.028475][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.030828][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.034513][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.037111][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.215842][ T7045] bridge2: entered promiscuous mode
[   86.217514][ T7045] bridge2: entered allmulticast mode
[   86.221417][ T7045] team0: Port device bridge2 added
[   86.300359][ T7052] netlink: 'syz.2.311': attribute type 9 has an invalid length.
[   86.308368][ T7052] netlink: 'syz.2.311': attribute type 4 has an invalid length.
[   86.311254][ T7052] netlink: 'syz.2.311': attribute type 8 has an invalid length.
[   86.670263][ T7081] xt_hashlimit: size too large, truncated to 1048576
[   86.731532][ T7084] nbd0: detected capacity change from 0 to 63
[   86.736022][ T7083] block nbd0: NBD_DISCONNECT
[   86.739766][ T7083] block nbd0: Disconnected due to user request.
[   86.741653][ T7083] block nbd0: shutting down sockets
[   86.750733][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[   86.753617][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[   86.756402][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[   86.758870][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[   86.761703][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[   86.766474][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[   86.769726][   T52] Buffer I/O error on dev nbd0, logical block 0, async page read
[   86.772747][   T52] Buffer I/O error on dev nbd0, logical block 1, async page read
[   86.775652][   T52] Buffer I/O error on dev nbd0, logical block 2, async page read
[   86.779653][   T52] Buffer I/O error on dev nbd0, logical block 3, async page read
[   86.783185][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[   86.786520][   T52] Buffer I/O error on dev nbd0, logical block 0, async page read
[   86.788971][   T52] Buffer I/O error on dev nbd0, logical block 1, async page read
[   86.793170][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[   86.799763][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[   86.804742][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[   86.808786][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[   86.812489][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   86.816197][   T52] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   86.819141][   T52] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   86.822485][ T5612] ldm_validate_partition_table(): Disk read failed.
[   86.826544][ T5612] Dev nbd0: unable to read RDB block 0
[   86.830307][ T5612]  nbd0: unable to read partition table
[   86.839691][ T5612] ldm_validate_partition_table(): Disk read failed.
[   86.843651][ T5612] Dev nbd0: unable to read RDB block 0
[   86.844473][ T7083] sctp: [Deprecated]: syz.0.320 (pid 7083) Use of int in max_burst socket option deprecated.
[   86.844473][ T7083] Use struct sctp_assoc_value instead
[   86.846513][ T5612]  nbd0: unable to read partition table
[   86.900312][ T7102] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[   87.084787][ T7123] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   87.103325][ T7123] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   87.159111][ T7127] syzkaller0: entered promiscuous mode
[   87.162554][ T7127] syzkaller0: entered allmulticast mode
[   87.167534][ T7127] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   87.171557][ T7127] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   87.174725][ T7127] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[   88.893673][ T7147] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[   88.896376][ T7147] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[   88.902811][ T7147] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:32770
[   89.219285][ T7228] __nla_validate_parse: 14 callbacks suppressed
[   89.219296][ T7228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.343'.
[   89.222524][ T7236] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.255503][ T7238] netlink: 19 bytes leftover after parsing attributes in process `syz.1.346'.
[   89.263617][ T7238] netlink: 19 bytes leftover after parsing attributes in process `syz.1.346'.
[   89.287267][ T7240] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[   89.295857][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'.
[   89.611235][ T7258] syzkaller1: entered promiscuous mode
[   89.613464][ T7258] syzkaller1: entered allmulticast mode
[   89.630861][ T7258] openvswitch: netlink: Message has 4 unknown bytes.
[   89.725897][ T7262] x_tables: ip_tables: ah match: only valid for protocol 51
[   89.871626][ T7269] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   90.287262][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'.
[   90.380574][ T7296] netlink: 68 bytes leftover after parsing attributes in process `syz.1.361'.
[   90.461738][ T7303] netlink: 44 bytes leftover after parsing attributes in process `syz.1.363'.
[   90.483710][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'.
[   90.719203][ T7317] xt_CT: You must specify a L4 protocol and not use inversions on it
[   90.726779][ T7316] netlink: 220 bytes leftover after parsing attributes in process `syz.1.366'.
[   90.837445][ T7328] bridge_slave_0: left allmulticast mode
[   90.845295][ T7328] bridge_slave_0: left promiscuous mode
[   90.848178][ T7328] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.854664][ T7328] bridge_slave_1: left allmulticast mode
[   90.856587][ T7328] bridge_slave_1: left promiscuous mode
[   90.858493][ T7328] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.865284][ T7328] bond0: (slave bond_slave_0): Releasing backup interface
[   90.874501][ T7328] bond0: (slave bond_slave_1): Releasing backup interface
[   90.888295][ T7328] team0: Port device team_slave_0 removed
[   90.897014][ T7328] team0: Port device team_slave_1 removed
[   90.902053][ T7328] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   91.052729][ T7347] netlink: 20 bytes leftover after parsing attributes in process `syz.1.373'.
[   91.169472][ T7350] nbd0: detected capacity change from 0 to 63
[   91.173300][ T7350] sctp: [Deprecated]: syz.2.374 (pid 7350) Use of int in max_burst socket option deprecated.
[   91.173300][ T7350] Use struct sctp_assoc_value instead
[   91.181403][ T7351] sctp: [Deprecated]: syz.2.374 (pid 7351) Use of int in max_burst socket option deprecated.
[   91.181403][ T7351] Use struct sctp_assoc_value instead
[   91.930650][ T7086] block nbd0: Receive control failed (result -104)
[   92.146791][ T7369] tipc: Started in network mode
[   92.149949][ T7369] tipc: Node identity ac14140f, cluster identity 4711
[   92.154043][ T7369] tipc: New replicast peer: 255.255.255.255
[   92.157785][ T7369] tipc: Enabled bearer <udp:syz2>, priority 10
[   92.181733][ T7372] trusted_key: syz.2.380 sent an empty control message without MSG_MORE.
[   92.525033][ T7392] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   92.527243][ T7392] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   92.529973][ T7392] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   93.012250][ T7427] bridge0: port 3(macvlan0) entered blocking state
[   93.015012][ T7427] bridge0: port 3(macvlan0) entered disabled state
[   93.017566][ T7427] macvlan0: entered allmulticast mode
[   93.019859][ T7427] veth1_vlan: entered allmulticast mode
[   93.024194][ T7427] macvlan0: entered promiscuous mode
[   93.027100][ T7427] bridge0: port 3(macvlan0) entered blocking state
[   93.030392][ T7427] bridge0: port 3(macvlan0) entered forwarding state
[   93.252323][ T7435] bond0: entered promiscuous mode
[   93.254465][ T7435] bond_slave_0: entered promiscuous mode
[   93.256921][ T7435] bond_slave_1: entered promiscuous mode
[   93.262848][ T7435] bond0: left promiscuous mode
[   93.264856][ T7435] bond_slave_0: left promiscuous mode
[   93.267569][ T7435] bond_slave_1: left promiscuous mode
[   93.275840][ T6153] tipc: Node number set to 2886997007
[   93.303027][ T7439] bond0: entered promiscuous mode
[   93.305228][ T7439] bond_slave_0: entered promiscuous mode
[   93.307662][ T7439] bond_slave_1: entered promiscuous mode
[   93.314199][ T7439] bond0: left promiscuous mode
[   93.316172][ T7439] bond_slave_0: left promiscuous mode
[   93.318371][ T7439] bond_slave_1: left promiscuous mode
[   93.376666][ T7445] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   93.432751][ T7448] bridge1: entered promiscuous mode
[   93.434941][ T7448] bridge1: entered allmulticast mode
[   93.441435][ T7448] team0: Port device bridge1 added
[   93.448459][ T7450] bridge2: entered promiscuous mode
[   93.451046][ T7450] bridge2: entered allmulticast mode
[   93.454793][ T7450] team0: Port device bridge2 added
[   93.865280][ T7467] netlink: 'syz.0.409': attribute type 13 has an invalid length.
[   93.889196][ T7466] bridge0: port 3(macvlan0) entered disabled state
[   93.891397][ T7466] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.128180][ T7466] veth1_vlan: left allmulticast mode
[   94.208618][ T7466] geneve0: left promiscuous mode
[   94.228975][ T5666] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.233222][ T5666] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.238433][ T5666] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.243000][ T5666] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.483768][ T7494] openvswitch: netlink: Flow actions attr not present in new flow.
[   95.221346][ T7514] IPVS: wlc: FWM 3 0x00000003 - no destination available
[   95.332819][ T7526] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   95.343689][ T7527] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   95.346350][ T7522] __nla_validate_parse: 9 callbacks suppressed
[   95.346358][ T7522] netlink: 5520 bytes leftover after parsing attributes in process `syz.0.421'.
[   95.352644][ T7528] netlink: 5520 bytes leftover after parsing attributes in process `syz.0.421'.
[   95.355467][ T7528] openvswitch: netlink: Flow actions attr not present in new flow.
[   95.362959][ T7522] openvswitch: netlink: Flow actions attr not present in new flow.
[   95.564758][ T7555] netlink: 40 bytes leftover after parsing attributes in process `syz.2.432'.
[   95.691403][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'.
[   95.798467][ T7567] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   96.392657][ T7572] syzkaller0: entered promiscuous mode
[   96.396654][ T7572] syzkaller0: entered allmulticast mode
[   96.452403][ T7576] netlink: 'syz.0.439': attribute type 1 has an invalid length.
[   96.455683][ T7577] netlink: 'syz.0.439': attribute type 1 has an invalid length.
[   96.458854][ T7577] netlink: 236 bytes leftover after parsing attributes in process `syz.0.439'.
[   96.464893][ T7576] netlink: 236 bytes leftover after parsing attributes in process `syz.0.439'.
[   96.468563][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.439'.
[   96.473779][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.439'.
[   96.566339][ T7586] bond0: entered promiscuous mode
[   96.568075][ T7586] bond_slave_0: entered promiscuous mode
[   96.570235][ T7586] bond_slave_1: entered promiscuous mode
[   96.572709][ T7586] bond0: left promiscuous mode
[   96.574335][ T7586] bond_slave_0: left promiscuous mode
[   96.576111][ T7586] bond_slave_1: left promiscuous mode
[   96.616043][ T7587] bond0: entered promiscuous mode
[   96.618118][ T7587] bond_slave_0: entered promiscuous mode
[   96.622023][ T7587] bond_slave_1: entered promiscuous mode
[   96.626934][ T7587] bond0: left promiscuous mode
[   96.628949][ T7587] bond_slave_0: left promiscuous mode
[   96.631549][ T7587] bond_slave_1: left promiscuous mode
[   96.671119][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'.
[   96.773788][ T7589] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.442'.
[   96.841640][ T7606] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   96.848549][ T7606] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   96.942853][ T7612] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   97.477222][ T7616] ieee802154 phy0 wpan0: encryption failed: -22
[   97.893296][ T7649] netlink: 'syz.2.456': attribute type 1 has an invalid length.
[   98.245462][ T7687] netlink: 'syz.2.467': attribute type 1 has an invalid length.
[   98.257378][ T7690] netlink: 'syz.1.468': attribute type 1 has an invalid length.
[   98.276984][ T7687] bond4: (slave veth3): Enslaving as an active interface with a down link
[   98.752260][ T7725] pimreg1: renamed from bridge0
[   98.758550][ T7725] pimreg1: entered allmulticast mode
[   98.762906][ T7725] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check.
[   98.841925][ T7725] nbd1: detected capacity change from 0 to 268435519
[   98.848906][ T7725] sctp: [Deprecated]: syz.0.478 (pid 7725) Use of int in max_burst socket option deprecated.
[   98.848906][ T7725] Use struct sctp_assoc_value instead
[   99.585967][   T56] block nbd1: Receive control failed (result -104)
[   99.627872][ T7768] syzkaller0: entered promiscuous mode
[   99.629997][ T7768] syzkaller0: entered allmulticast mode
[   99.814838][ T7776] netlink: 'syz.0.492': attribute type 4 has an invalid length.
[   99.821194][ T7776] .`: renamed from bond0
[   99.855314][ T7779] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000
[   99.866423][ T7779] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20002
[   99.965787][ T7789] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  100.126694][ T7794] netlink: 'syz.2.499': attribute type 2 has an invalid length.
[  100.129108][ T7794] netlink: 'syz.2.499': attribute type 1 has an invalid length.
[  100.181838][ T7799] netlink: 'syz.1.500': attribute type 1 has an invalid length.
[  100.215851][ T7799] bond1: entered promiscuous mode
[  100.220120][ T7799] 8021q: adding VLAN 0 to HW filter on device bond1
[  100.328362][ T7810] netlink: 'syz.1.503': attribute type 21 has an invalid length.
[  100.331076][ T7810] netlink: 'syz.1.503': attribute type 21 has an invalid length.
[  100.856910][ T7836] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  100.881264][ T7836] __nla_validate_parse: 16 callbacks suppressed
[  100.881273][ T7836] netlink: 36 bytes leftover after parsing attributes in process `syz.2.508'.
[  100.886261][ T7835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.510'.
[  101.002262][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'.
[  101.005866][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'.
[  101.010312][ T7846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.513'.
[  101.046166][ T7849] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  101.926789][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.518'.
[  101.933077][ T7869] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  101.936916][ T7869] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  102.797177][ T7894] syzkaller0: entered promiscuous mode
[  102.804955][ T7894] syzkaller0: entered allmulticast mode
[  103.090339][ T7917] netlink: 'syz.1.530': attribute type 1 has an invalid length.
[  103.092752][ T7917] netlink: 236 bytes leftover after parsing attributes in process `syz.1.530'.
[  103.096325][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'.
[  103.173063][ T7920] IPVS: set_ctl: invalid protocol: 128 100.1.1.6:20006
[  103.307482][ T7928] netlink: 'syz.1.534': attribute type 1 has an invalid length.
[  103.310030][ T7928] netlink: 236 bytes leftover after parsing attributes in process `syz.1.534'.
[  103.396325][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.399631][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.438900][ T7935] netlink: 84 bytes leftover after parsing attributes in process `syz.1.535'.
[  103.447695][ T7935] netlink: 'syz.1.535': attribute type 13 has an invalid length.
[  103.451173][ T7935] netlink: 'syz.1.535': attribute type 17 has an invalid length.
[  103.468252][ T7935] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.471293][ T7935] 8021q: adding VLAN 0 to HW filter on device team0
[  103.483974][ T7935] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.486326][ T7935] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.491115][ T7935] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.493363][ T7935] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.508469][ T7935] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  103.536312][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.122205][ T7961] xt_hashlimit: size too large, truncated to 1048576
[  104.191449][ T7961] netlink: 'syz.2.543': attribute type 11 has an invalid length.
[  104.194939][ T7963] netlink: 'syz.2.543': attribute type 11 has an invalid length.
[  104.318241][ T7968] bond5: entered promiscuous mode
[  104.320951][ T7968] 8021q: adding VLAN 0 to HW filter on device bond5
[  105.042701][ T8028] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  105.045239][ T8029] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  105.293631][ T8050] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  105.334221][ T8051] sctp: [Deprecated]: syz.1.565 (pid 8051) Use of int in max_burst socket option deprecated.
[  105.334221][ T8051] Use struct sctp_assoc_value instead
[  105.341892][ T8051] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.361671][ T8048] nbd2: detected capacity change from 0 to 63
[  105.442215][ T8053] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  105.492793][ T8058] validate_nla: 2 callbacks suppressed
[  105.492808][ T8058] netlink: 'syz.2.568': attribute type 1 has an invalid length.
[  105.743880][ T8066] netlink: 'syz.2.570': attribute type 4 has an invalid length.
[  105.783159][ T8072] netlink: 'syz.0.572': attribute type 1 has an invalid length.
[  105.859904][ T8075] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  106.100549][   T56] block nbd2: Receive control failed (result -104)
[  106.146723][ T8098] openvswitch: netlink: IPv6 tunnel dst address is zero
[  106.556358][ T8133] __nla_validate_parse: 12 callbacks suppressed
[  106.556484][ T8133] netlink: 19 bytes leftover after parsing attributes in process `syz.2.592'.
[  106.577137][ T8138] netlink: 32 bytes leftover after parsing attributes in process `syz.1.593'.
[  106.680006][ T8151] netlink: 'syz.0.595': attribute type 1 has an invalid length.
[  106.687971][ T8151] netlink: 236 bytes leftover after parsing attributes in process `syz.0.595'.
[  106.696100][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'.
[  107.151751][ T8179] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.165176][ T8180] netlink: 'syz.1.603': attribute type 13 has an invalid length.
[  107.167612][ T8180] netlink: 'syz.1.603': attribute type 17 has an invalid length.
[  107.367582][ T8180] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.370737][ T8180] 8021q: adding VLAN 0 to HW filter on device team0
[  107.384221][ T8180] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.386446][ T8180] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.406829][ T8180] veth1_vlan: left promiscuous mode
[  107.409848][ T8180] veth0_vlan: left promiscuous mode
[  107.413551][ T8180] veth0_vlan: entered promiscuous mode
[  107.416713][ T8180] veth1_vlan: entered promiscuous mode
[  107.422249][ T8180] veth1_macvtap: left promiscuous mode
[  107.424838][ T8180] veth0_macvtap: left promiscuous mode
[  107.427297][ T8180] veth0_macvtap: entered promiscuous mode
[  107.433853][ T8180] veth1_macvtap: entered promiscuous mode
[  107.438652][ T8180] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  107.447706][ T8180] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  107.453181][ T8180] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  107.458392][ T8180] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  107.463441][ T8180] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  107.465719][ T8180] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  107.475031][ T8180] bond1: left promiscuous mode
[  107.477178][ T8180] 8021q: adding VLAN 0 to HW filter on device bond1
[  107.511241][ T7212] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.514161][ T7212] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.536856][ T8181] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.548401][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.554557][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.557923][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.561782][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.596815][ T8189] netlink: 64 bytes leftover after parsing attributes in process `syz.1.605'.
[  107.618614][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.605'.
[  107.774098][ T8199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.830338][ T8199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.920042][ T6168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  108.006366][ T8200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.540117][ T8230] netlink: 'syz.0.617': attribute type 1 has an invalid length.
[  108.543783][ T8230] netlink: 236 bytes leftover after parsing attributes in process `syz.0.617'.
[  108.639828][ T5666] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  108.646702][ T5666] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  109.014326][ T8221] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  109.146924][ T8244] netlink: 40 bytes leftover after parsing attributes in process `syz.1.622'.
[  109.208273][ T8249] netlink: 40 bytes leftover after parsing attributes in process `syz.1.622'.
[  109.536822][ T8262] 8021q: adding VLAN 0 to HW filter on device .`
[  109.541013][ T8262] 8021q: adding VLAN 0 to HW filter on device team0
[  109.573335][ T8262] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  109.580887][ T3331] pimreg1: port 1(bridge_slave_0) entered blocking state
[  109.583703][ T3331] pimreg1: port 1(bridge_slave_0) entered forwarding state
[  109.588765][ T3331] pimreg1: port 2(bridge_slave_1) entered blocking state
[  109.591638][ T3331] pimreg1: port 2(bridge_slave_1) entered forwarding state
[  110.202111][ T8274] openvswitch: netlink: Flow actions attr not present in new flow.
[  110.360860][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.633'.
[  110.412497][ T8289] unsupported nla_type 58368
[  110.468247][ T8290] netlink: 'syz.1.634': attribute type 6 has an invalid length.
[  110.485411][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.592981][ T8294] netlink: 'syz.1.634': attribute type 13 has an invalid length.
[  110.599412][ T8294] netlink: 'syz.1.634': attribute type 17 has an invalid length.
[  111.034096][ T8294] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.048306][ T8294] 8021q: adding VLAN 0 to HW filter on device team0
[  111.070964][ T8299] xt_hashlimit: max too large, truncated to 1048576
[  111.077335][ T8299] xt_ecn: cannot match TCP bits for non-tcp packets
[  111.088756][ T8294] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  111.098064][ T8305] netlink: 'syz.0.637': attribute type 1 has an invalid length.
[  111.099018][ T8294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  111.106181][ T8294] veth1_vlan: left promiscuous mode
[  111.112991][ T8294] veth0_vlan: left promiscuous mode
[  111.122949][ T8294] veth0_vlan: entered promiscuous mode
[  111.127205][ T8294] veth1_vlan: entered promiscuous mode
[  111.132729][ T8294] veth1_macvtap: left promiscuous mode
[  111.134971][ T8294] veth0_macvtap: left promiscuous mode
[  111.136998][ T8294] veth0_macvtap: entered promiscuous mode
[  111.139092][ T8294] veth1_macvtap: entered promiscuous mode
[  111.143559][ T8294] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  111.146443][ T8294] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  111.149056][ T8294] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  111.152621][ T8294] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  111.161586][ T8294] 8021q: adding VLAN 0 to HW filter on device bond1
[  111.168830][ T8295] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.175051][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.177401][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.351234][ T8325] openvswitch: netlink: Flow key attr not present in new flow.
[  111.422026][ T8325] block nbd3: server does not support multiple connections per device.
[  111.427187][ T8325] block nbd3: shutting down sockets
[  111.884035][ T8371] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  112.072522][ T8383] __nla_validate_parse: 8 callbacks suppressed
[  112.072536][ T8383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.654'.
[  112.311528][ T8406] netlink: 'syz.0.659': attribute type 1 has an invalid length.
[  112.314631][ T8406] netlink: 236 bytes leftover after parsing attributes in process `syz.0.659'.
[  113.040418][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  113.110619][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'.
[  113.126872][ T8416] netlink: 50936 bytes leftover after parsing attributes in process `syz.2.661'.
[  113.337643][ T8437] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  113.343116][ T8437] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  113.381894][ T8441] sctp: [Deprecated]: syz.2.668 (pid 8441) Use of int in max_burst socket option.
[  113.381894][ T8441] Use struct sctp_assoc_value instead
[  113.388117][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'.
[  113.555694][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'.
[  114.254107][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'.
[  114.418710][ T8471] netlink: 'syz.0.675': attribute type 1 has an invalid length.
[  114.421840][ T8471] netlink: 236 bytes leftover after parsing attributes in process `syz.0.675'.
[  114.425954][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.675'.
[  114.763120][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'.
[  114.956672][ T8511] xt_hashlimit: size too large, truncated to 1048576
[  115.013139][ T8514] pimreg1: port 1(bridge_slave_0) entered disabled state
[  115.029027][ T8514] bridge_slave_0 (unregistering): left allmulticast mode
[  115.033675][ T8514] bridge_slave_0 (unregistering): left promiscuous mode
[  115.036056][ T8514] pimreg1: port 1(bridge_slave_0) entered disabled state
[  115.062625][ T8511] netlink: 'syz.0.685': attribute type 11 has an invalid length.
[  115.844681][ T8527] netlink: 'syz.1.690': attribute type 1 has an invalid length.
[  115.847288][ T8527] netlink: 'syz.1.690': attribute type 3 has an invalid length.
[  116.379073][ T8540] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  116.553966][ T8557] xt_hashlimit: size too large, truncated to 1048576
[  116.611299][ T8557] netlink: 'syz.2.699': attribute type 11 has an invalid length.
[  116.954885][ T8581] netlink: 'syz.1.707': attribute type 1 has an invalid length.
[  117.664109][ T8608] netlink: 'syz.2.713': attribute type 1 has an invalid length.
[  117.666698][ T8608] __nla_validate_parse: 11 callbacks suppressed
[  117.666708][ T8608] netlink: 236 bytes leftover after parsing attributes in process `syz.2.713'.
[  117.673771][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.713'.
[  117.826954][ T8624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.885975][ T8624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.071905][ T8630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.124010][ T8635] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  118.370345][ T8653] block nbd3: server does not support multiple connections per device.
[  118.374246][ T8653] block nbd3: shutting down sockets
[  118.450527][ T8660] syzkaller0: entered promiscuous mode
[  118.452367][ T8660] syzkaller0: entered allmulticast mode
[  118.513298][ T8664] netlink: 36 bytes leftover after parsing attributes in process `syz.0.728'.
[  118.566579][ T8666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.770442][ T8673] bond0: entered allmulticast mode
[  118.845557][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.733'.
[  118.915630][ T8680] pimreg1: port 2(bridge_slave_1) entered disabled state
[  118.920139][ T8680] pimreg1: left allmulticast mode
[  119.105886][ T8680] bridge1: left allmulticast mode
[  119.107884][ T8680] bridge2: left allmulticast mode
[  119.109773][ T8680] bond0: left allmulticast mode
[  119.392603][ T8710] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.410600][ T8710] syzkaller0: entered promiscuous mode
[  119.412191][ T8710] syzkaller0: entered allmulticast mode
[  119.414087][ T8710] tipc: Resetting bearer <eth:syzkaller0>
[  119.428166][ T8709] tipc: Resetting bearer <eth:syzkaller0>
[  120.178776][ T8717] x_tables: duplicate underflow at hook 2
[  120.346664][ T8709] tipc: Disabling bearer <eth:syzkaller0>
[  120.616651][ T8743] syzkaller0: entered promiscuous mode
[  120.618442][ T8743] syzkaller0: entered allmulticast mode
[  120.912235][ T8759] netlink: 5520 bytes leftover after parsing attributes in process `syz.1.755'.
[  120.915232][ T8759] openvswitch: netlink: Flow actions attr not present in new flow.
[  120.915306][ T8758] netlink: 5520 bytes leftover after parsing attributes in process `syz.1.755'.
[  120.926290][ T8758] openvswitch: netlink: Flow actions attr not present in new flow.
[  121.284926][   T52] block nbd0: Possible stuck request ffff888101bb0000: control (read@0,1024B). Runtime 30 seconds
[  121.292900][   T52] block nbd0: Possible stuck request ffff888101bb0200: control (read@1024,1024B). Runtime 30 seconds
[  121.298529][   T52] block nbd0: Possible stuck request ffff888101bb0400: control (read@2048,1024B). Runtime 30 seconds
[  121.300531][ T8774] IPVS: set_ctl: invalid protocol: 94 100.1.1.1:20003
[  121.303210][   T52] block nbd0: Possible stuck request ffff888101bb0600: control (read@3072,1024B). Runtime 30 seconds
[  121.689115][ T8801] xt_hashlimit: size too large, truncated to 1048576
[  121.740790][ T8803] netlink: 'syz.0.767': attribute type 11 has an invalid length.
[  121.743850][ T8803] netlink: 224 bytes leftover after parsing attributes in process `syz.0.767'.
[  122.150789][ T8806] netlink: 92 bytes leftover after parsing attributes in process `syz.1.768'.
[  122.157118][ T8806] xt_hashlimit: size too large, truncated to 1048576
[  122.160836][ T8805] xt_hashlimit: size too large, truncated to 1048576
[  122.214624][ T8806] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.221968][ T8806] bridge_slave_0 (unregistering): left allmulticast mode
[  122.224396][ T8806] bridge_slave_0 (unregistering): left promiscuous mode
[  122.226889][ T8806] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.262594][ T8807] netlink: 'syz.1.768': attribute type 11 has an invalid length.
[  122.265066][ T8807] netlink: 224 bytes leftover after parsing attributes in process `syz.1.768'.
[  122.267925][ T8805] netlink: 'syz.1.768': attribute type 11 has an invalid length.
[  122.271260][ T8805] netlink: 224 bytes leftover after parsing attributes in process `syz.1.768'.
[  122.299118][ T6261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.302550][ T6261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.417435][ T8831] bond0: entered promiscuous mode
[  122.419090][ T8831] bond_slave_0: entered promiscuous mode
[  122.424235][ T8831] bond_slave_1: entered promiscuous mode
[  122.427228][ T8831] bond0: left promiscuous mode
[  122.428727][ T8831] bond_slave_0: left promiscuous mode
[  122.430554][ T8831] bond_slave_1: left promiscuous mode
[  122.471940][ T8837] bond0: entered promiscuous mode
[  122.477574][ T8837] bond_slave_0: entered promiscuous mode
[  122.482327][ T8837] bond_slave_1: entered promiscuous mode
[  122.491122][ T8837] bond0: left promiscuous mode
[  122.493768][ T8837] bond_slave_0: left promiscuous mode
[  122.497913][ T8837] bond_slave_1: left promiscuous mode
[  122.564947][ T8844] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  122.786155][ T8870] __nla_validate_parse: 1 callbacks suppressed
[  122.786164][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.786'.
[  122.792150][ T8870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.786'.
[  122.823290][ T8873] netlink: 21 bytes leftover after parsing attributes in process `syz.2.787'.
[  122.827079][ T8874] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  122.973819][ T8884] netlink: 'syz.2.790': attribute type 1 has an invalid length.
[  122.976373][ T8884] netlink: 236 bytes leftover after parsing attributes in process `syz.2.790'.
[  122.980761][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'.
[  123.095394][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.791'.
[  123.149227][ T8895] netlink: 'syz.2.793': attribute type 12 has an invalid length.
[  123.246280][ T8902] netlink: 228 bytes leftover after parsing attributes in process `syz.2.796'.
[  123.302287][ T8903] netlink: 'syz.2.796': attribute type 13 has an invalid length.
[  123.305596][ T8903] netlink: 'syz.2.796': attribute type 17 has an invalid length.
[  123.674894][ T8903] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.677924][ T8903] 8021q: adding VLAN 0 to HW filter on device team0
[  123.706462][ T8903] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  123.709781][ T8903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  123.723853][ T8903] veth1_vlan: left promiscuous mode
[  123.726269][ T8903] veth0_vlan: left promiscuous mode
[  123.728785][ T8903] veth0_vlan: entered promiscuous mode
[  123.732291][ T8903] veth1_vlan: entered promiscuous mode
[  123.739875][ T8903] veth1_macvtap: left promiscuous mode
[  123.744975][ T8903] veth0_macvtap: left promiscuous mode
[  123.748213][ T8903] veth0_macvtap: entered promiscuous mode
[  123.754444][ T8903] veth1_macvtap: entered promiscuous mode
[  123.762480][ T8903] 8021q: adding VLAN 0 to HW filter on device eth0
[  123.767157][ T8903] 8021q: adding VLAN 0 to HW filter on device eth1
[  123.772431][ T8903] 8021q: adding VLAN 0 to HW filter on device eth2
[  123.777152][ T8903] 8021q: adding VLAN 0 to HW filter on device eth3
[  123.782591][ T8903] 8021q: adding VLAN 0 to HW filter on device bond1
[  123.787238][ T8903] 8021q: adding VLAN 0 to HW filter on device bond2
[  123.791326][ T8903] 8021q: adding VLAN 0 to HW filter on device bond3
[  123.794105][ T8903] bridge1: left promiscuous mode
[  123.795744][ T8903] bridge1: left allmulticast mode
[  123.798112][ T8903] bridge2: left promiscuous mode
[  123.800050][ T8903] bridge2: left allmulticast mode
[  123.804287][ T8903] 8021q: adding VLAN 0 to HW filter on device bond4
[  123.808718][ T8903] bond5: left promiscuous mode
[  123.811104][ T8903] 8021q: adding VLAN 0 to HW filter on device bond5
[  123.847935][ T5890] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.854775][ T5890] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.866091][ T5890] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.873840][ T5890] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.896032][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'.
[  123.910312][ T8906] syzkaller0: entered promiscuous mode
[  123.912676][ T8906] syzkaller0: entered allmulticast mode
[  123.916851][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'.
[  124.799552][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  124.830780][   T12] bond4: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  124.836824][   T12] bond4: (slave veth3): making interface the new active one
[  124.846735][   T12] bond4: active interface up!
[  124.901853][ T8949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.805'.
[  124.982562][ T8953] geneve2: entered promiscuous mode
[  125.929122][ T8984] netlink: 'syz.0.811': attribute type 1 has an invalid length.
[  125.932251][ T8984] netlink: 'syz.0.811': attribute type 1 has an invalid length.
[  125.934798][ T8984] netlink: 'syz.0.811': attribute type 1 has an invalid length.
[  125.937474][ T8984] netlink: 'syz.0.811': attribute type 1 has an invalid length.
[  126.119278][ T5890] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.127951][ T5890] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.134169][ T5890] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.137286][ T8998] netlink: 'syz.2.814': attribute type 10 has an invalid length.
[  126.140015][ T5890] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.142916][ T8998] netlink: 'syz.2.814': attribute type 8 has an invalid length.
[  126.148172][ T8998] geneve2: entered promiscuous mode
[  126.150154][ T8998] geneve2: entered allmulticast mode
[  126.242047][ T9002] bond6: (slave gretap1): making interface the new active one
[  126.245722][ T9002] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  126.253288][ T9002] macvlan2: entered promiscuous mode
[  126.255099][ T9002] macvlan2: entered allmulticast mode
[  126.257260][ T9002] bond6: entered promiscuous mode
[  126.259031][ T9002] gretap1: entered promiscuous mode
[  126.263005][ T9002] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  126.265576][ T9002] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  126.271176][ T9002] bond6: left promiscuous mode
[  126.273055][ T9002] gretap1: left promiscuous mode
[  126.587472][ T9029] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  126.679593][ T9029] block nbd3: server does not support multiple connections per device.
[  126.684165][ T9029] block nbd3: shutting down sockets
[  127.039186][ T9073] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  127.111398][ T9076] 8021q: adding VLAN 0 to HW filter on device .`
[  127.114171][ T9076] 8021q: adding VLAN 0 to HW filter on device team0
[  127.164670][ T9076] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  127.172745][ T7212] pimreg1: port 2(bridge_slave_1) entered blocking state
[  127.174916][ T7212] pimreg1: port 2(bridge_slave_1) entered forwarding state
[  127.487480][ T9117] bridge0: entered promiscuous mode
[  127.489158][ T9117] bridge0: entered allmulticast mode
[  127.492644][ T9117] team0: Port device bridge0 added
[  127.714704][ T9132] xt_hashlimit: size too large, truncated to 1048576
[  127.781105][ T9132] syzkaller1: entered promiscuous mode
[  127.783418][ T9132] syzkaller1: entered allmulticast mode
[  127.786396][ T9132] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96
[  127.792561][ T9132] netlink: 'syz.0.847': attribute type 11 has an invalid length.
[  127.795117][ T9132] __nla_validate_parse: 13 callbacks suppressed
[  127.795124][ T9132] netlink: 224 bytes leftover after parsing attributes in process `syz.0.847'.
[  127.915456][ T9145] netlink: 236 bytes leftover after parsing attributes in process `syz.2.851'.
[  127.932643][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'.
[  128.965984][   T52] block nbd1: Possible stuck request ffff888101be0000: control (read@0,1024B). Runtime 30 seconds
[  128.969485][   T52] block nbd1: Possible stuck request ffff888101be0200: control (read@1024,1024B). Runtime 30 seconds
[  128.972920][   T52] block nbd1: Possible stuck request ffff888101be0400: control (read@2048,1024B). Runtime 30 seconds
[  128.976311][   T52] block nbd1: Possible stuck request ffff888101be0600: control (read@3072,1024B). Runtime 30 seconds
[  129.119469][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  129.188762][ T9259] sch_tbf: burst 4 is lower than device lo mtu (1294) !
[  129.314713][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'.
[  129.481726][ T9289] xt_policy: output policy not valid in PREROUTING and INPUT
[  129.550423][ T9295] xt_CT: No such helper "syz1"
[  129.585626][ T9300] bond4: option primary_reselect: invalid value (6)
[  129.592274][ T9300] bond4 (unregistering): Released all slaves
[  129.808687][ T9317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.880'.
[  129.832676][ T9319] validate_nla: 4 callbacks suppressed
[  129.832685][ T9319] netlink: 'syz.1.881': attribute type 1 has an invalid length.
[  129.836724][ T9319] netlink: 236 bytes leftover after parsing attributes in process `syz.1.881'.
[  129.841909][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'.
[  130.000235][ T9332] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  130.003413][ T9332] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  130.574048][ T9343] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  130.583098][ T9343] netlink: 36 bytes leftover after parsing attributes in process `syz.0.886'.
[  130.743404][ T9357] netlink: 284 bytes leftover after parsing attributes in process `syz.0.889'.
[  130.814921][ T9369] ieee802154 phy0 wpan0: encryption failed: -22
[  130.934509][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.896'.
[  130.943909][ T9384] xt_hashlimit: size too large, truncated to 1048576
[  130.997482][ T9385] netlink: 'syz.0.897': attribute type 11 has an invalid length.
[  131.011646][ T9388] netlink: 'syz.0.897': attribute type 11 has an invalid length.
[  131.178190][ T9399] syzkaller1: entered promiscuous mode
[  131.189496][ T9399] syzkaller1: entered allmulticast mode
[  131.351087][ T9413] tipc: New replicast peer: 255.255.255.255
[  131.353325][ T9413] tipc: Enabled bearer <udp:syz0>, priority 10
[  131.707899][ T9441] netlink: 'syz.0.914': attribute type 1 has an invalid length.
[  131.707926][ T9442] netlink: 'syz.0.914': attribute type 1 has an invalid length.
[  131.884639][ T9452] netlink: 'syz.0.917': attribute type 23 has an invalid length.
[  131.887382][ T9452] netlink: 'syz.0.917': attribute type 21 has an invalid length.
[  132.381100][ T9468] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  132.392932][ T9468] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  133.141135][ T9494] netlink: 'syz.0.927': attribute type 1 has an invalid length.
[  133.145854][ T9494] __nla_validate_parse: 12 callbacks suppressed
[  133.145861][ T9494] netlink: 236 bytes leftover after parsing attributes in process `syz.0.927'.
[  133.347504][ T9503] xt_hashlimit: size too large, truncated to 1048576
[  133.402114][ T9505] netlink: 'syz.0.929': attribute type 11 has an invalid length.
[  133.404855][ T9505] netlink: 224 bytes leftover after parsing attributes in process `syz.0.929'.
[  133.507569][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'.
[  133.661598][ T9514] netlink: 'syz.1.931': attribute type 4 has an invalid length.
[  133.764565][ T9520] IPVS: set_ctl: invalid protocol: 43 172.20.20.30:20004
[  133.808146][ T9523] netlink: 'syz.1.935': attribute type 1 has an invalid length.
[  133.811413][ T9523] netlink: 236 bytes leftover after parsing attributes in process `syz.1.935'.
[  133.817822][ T9523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.935'.
[  134.030653][ T9530] bond0: entered promiscuous mode
[  134.043122][ T9530] bond0: left promiscuous mode
[  134.053894][ T9539] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  134.281438][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'.
[  134.293419][ T5890] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  134.296274][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'.
[  134.299006][ T5890] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  134.303830][ T5890] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  134.309551][ T5890] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  134.343929][ T9555] netlink: 52 bytes leftover after parsing attributes in process `syz.2.946'.
[  134.395495][ T9560] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20002
[  134.398665][ T9560] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20002
[  134.402713][ T9560] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20002
[  134.405408][ T9560] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20002
[  134.408550][ T9560] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20002
[  134.411717][ T9560] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20002
[  134.414443][ T9560] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20002
[  134.417151][ T9560] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20002
[  134.420337][ T9560] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20002
[  134.423016][ T9560] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20002
[  134.425700][ T9560] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20002
[  134.428346][ T9560] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20002
[  134.433087][ T9560] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20002
[  134.435450][ T9555] xt_hashlimit: size too large, truncated to 1048576
[  134.438821][ T9558] xt_hashlimit: size too large, truncated to 1048576
[  134.441074][ T9560] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20002
[  134.445562][ T9560] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20002
[  134.451125][ T9560] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20002
[  134.456660][ T9560] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20002
[  134.467348][ T9560] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20002
[  134.715389][ T9576] netlink: 48 bytes leftover after parsing attributes in process `syz.0.951'.
[  134.718332][ T9576] netlink: 48 bytes leftover after parsing attributes in process `syz.0.951'.
[  134.884478][ T9579] netlink: 'syz.0.952': attribute type 4 has an invalid length.
[  135.259769][ T9588] sctp: [Deprecated]: syz.2.954 (pid 9588) Use of int in max_burst socket option.
[  135.259769][ T9588] Use struct sctp_assoc_value instead
[  135.277281][ T9586] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  135.828821][ T9605] bond0: entered promiscuous mode
[  135.833038][ T9605] bond_slave_0: entered promiscuous mode
[  135.835146][ T9605] bond_slave_1: entered promiscuous mode
[  135.844540][ T9605] bond0: left promiscuous mode
[  135.850509][ T9605] bond_slave_0: left promiscuous mode
[  135.866963][ T9605] bond_slave_1: left promiscuous mode
[  136.018004][   T52] block nbd2: Possible stuck request ffff888101f10000: control (read@0,1024B). Runtime 30 seconds
[  136.022521][   T52] block nbd2: Possible stuck request ffff888101f10200: control (read@1024,1024B). Runtime 30 seconds
[  136.026976][   T52] block nbd2: Possible stuck request ffff888101f10400: control (read@2048,1024B). Runtime 30 seconds
[  136.031367][   T52] block nbd2: Possible stuck request ffff888101f10600: control (read@3072,1024B). Runtime 30 seconds
[  136.202058][ T9626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.358006][ T9640] netlink: 'syz.1.966': attribute type 12 has an invalid length.
[  136.361737][ T9640] netlink: 'syz.1.966': attribute type 1 has an invalid length.
[  136.409207][ T9642] IPVS: set_ctl: invalid protocol: 92 100.1.1.5:20002
[  136.757723][ T9673] sctp: [Deprecated]: syz.2.976 (pid 9673) Use of int in max_burst socket option.
[  136.757723][ T9673] Use struct sctp_assoc_value instead
[  136.968161][ T9685] pimreg1: port 2(bridge_slave_1) entered disabled state
[  137.066372][ T9696] openvswitch: netlink: Unknown key attributes 20
[  137.091834][ T9697] openvswitch: netlink: Flow actions attr not present in new flow.
[  137.755044][ T9723] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  137.759912][ T9723] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  137.766415][ T9723] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  137.774355][ T9723] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  137.782488][ T9723] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  137.922015][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  137.924248][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  138.559600][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  138.741172][ T6275] smbdirect: ib_dev[syz2] removed
[  139.255131][ T9775] netlink: 'syz.2.1000': attribute type 1 has an invalid length.
[  139.257797][ T9775] __nla_validate_parse: 13 callbacks suppressed
[  139.257805][ T9775] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1000'.
[  139.457363][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1003'.
[  139.546497][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'.
[  139.554175][ T9790] wlan0 speed is unknown, defaulting to 1000
[  139.564664][ T9790] wlan0 speed is unknown, defaulting to 1000
[  139.572189][ T9790] wlan0 speed is unknown, defaulting to 1000
[  139.579263][ T9790] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  139.593758][ T9790] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  139.615893][ T9790] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  139.650091][ T9790] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  139.699509][ T9790] wlan0 speed is unknown, defaulting to 1000
[  139.712748][ T9790] wlan0 speed is unknown, defaulting to 1000
[  139.734354][ T9790] wlan0 speed is unknown, defaulting to 1000
[  139.986553][ T9810] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  139.998894][ T9810] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  140.111909][ T9814] wlan0 speed is unknown, defaulting to 1000
[  140.212957][ T9823] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1010'.
[  140.374169][ T9829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1015'.
[  140.378635][ T9828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1015'.
[  140.399036][ T9829] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  140.675080][ T9845] netlink: 'syz.1.1019': attribute type 1 has an invalid length.
[  140.682757][ T9845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1019'.
[  140.916843][ T9852] netlink: 1200 bytes leftover after parsing attributes in process `syz.2.1020'.
[  140.962293][ T9856] netlink: 'syz.0.1021': attribute type 4 has an invalid length.
[  140.972986][ T9856] netlink: 'syz.0.1021': attribute type 4 has an invalid length.
[  140.984962][ T9858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1022'.
[  141.152498][ T9862] nbd3: detected capacity change from 0 to 63
[  141.157017][ T9865] nbd: couldn't find device at index 571998208
[  141.160911][ T9862] sctp: [Deprecated]: syz.0.1024 (pid 9862) Use of int in max_burst socket option deprecated.
[  141.160911][ T9862] Use struct sctp_assoc_value instead
[  141.169920][ T9864] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1025'.
[  141.813105][ T9880] syzkaller0: entered promiscuous mode
[  141.815404][ T9880] syzkaller0: entered allmulticast mode
[  141.911112][   T56] block nbd3: Receive control failed (result -104)
[  142.295197][ T9901] netlink: 'syz.1.1036': attribute type 3 has an invalid length.
[  142.772139][ T9918] syzkaller0: entered promiscuous mode
[  142.775071][ T9918] syzkaller0: entered allmulticast mode
[  142.782529][ T9918] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.787800][ T9917] tipc: Resetting bearer <eth:syzkaller0>
[  142.808415][ T9917] tipc: Disabling bearer <eth:syzkaller0>
[  142.915504][ T9922] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  143.154072][ T9932] netlink: 'syz.0.1046': attribute type 1 has an invalid length.
[  143.200490][ T9932] bond6: entered promiscuous mode
[  143.204516][ T9932] 8021q: adding VLAN 0 to HW filter on device bond6
[  143.262931][ T9943] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  143.307502][ T9943] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  144.191271][ T9962] netlink: 'syz.0.1053': attribute type 1 has an invalid length.
[  144.486951][ T9993] bond0: entered promiscuous mode
[  144.489109][ T9993] bond_slave_0: entered promiscuous mode
[  144.496409][ T9993] bond_slave_1: entered promiscuous mode
[  144.502467][ T9993] bond0: left promiscuous mode
[  144.507798][ T9993] bond_slave_0: left promiscuous mode
[  144.512815][ T9993] bond_slave_1: left promiscuous mode
[  144.548285][ T9994] __nla_validate_parse: 6 callbacks suppressed
[  144.548299][ T9994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1057'.
[  144.618749][ T9997] bond0: entered promiscuous mode
[  144.621828][ T9997] bond_slave_0: entered promiscuous mode
[  144.623843][ T9997] bond_slave_1: entered promiscuous mode
[  144.626434][ T9997] bond0: left promiscuous mode
[  144.628663][ T9997] bond_slave_0: left promiscuous mode
[  144.631250][ T9997] bond_slave_1: left promiscuous mode
[  144.872649][T10006] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  144.877862][T10006] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  144.884704][T10006] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  144.892173][T10006] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  144.898499][T10007] xt_hashlimit: size too large, truncated to 1048576
[  145.019046][T10007] netlink: 'syz.0.1062': attribute type 11 has an invalid length.
[  145.022831][T10007] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1062'.
[  145.146699][ T6275] smbdirect: ib_dev[syz2] removed
[  145.372055][T10017] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1066'.
[  145.388034][   T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.405266][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.416967][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.426536][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.514777][T10027] bond0: entered promiscuous mode
[  145.516503][T10027] bond_slave_0: entered promiscuous mode
[  145.518404][T10027] bond_slave_1: entered promiscuous mode
[  145.524500][T10027] bond0: left promiscuous mode
[  145.526127][T10027] bond_slave_0: left promiscuous mode
[  145.527975][T10027] bond_slave_1: left promiscuous mode
[  145.567819][T10032] bond0: entered promiscuous mode
[  145.570068][T10032] bond_slave_0: entered promiscuous mode
[  145.572472][T10032] bond_slave_1: entered promiscuous mode
[  145.575903][T10032] bond0: left promiscuous mode
[  145.580466][T10032] bond_slave_0: left promiscuous mode
[  145.585622][T10032] bond_slave_1: left promiscuous mode
[  145.855098][T10044] wlan0 speed is unknown, defaulting to 1000
[  145.990937][T10052] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  145.994098][T10052] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  146.646622][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'.
[  146.652909][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'.
[  146.657561][T10089] netlink: 'syz.1.1086': attribute type 18 has an invalid length.
[  146.705282][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0
[  146.715476][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0
[  146.728218][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0
[  146.738772][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0
[  146.784284][T10094] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  146.958957][T10105] netlink: 'syz.2.1089': attribute type 1 has an invalid length.
[  146.974656][T10105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1089'.
[  146.983824][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'.
[  146.999882][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'.
[  147.010577][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'.
[  147.056071][ T5666] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  147.058850][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'.
[  147.070688][ T5666] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  147.090059][T10106] bridge5: entered promiscuous mode
[  147.093398][T10106] bridge5: entered allmulticast mode
[  147.102614][T10106] team0: Port device bridge5 added
[  147.106447][ T5666] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  147.113765][ T5666] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  147.288193][T10122] netlink: 'syz.1.1094': attribute type 11 has an invalid length.
[  147.571267][T10145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.633520][T10145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.978774][T10148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.136346][T10150] openvswitch: netlink: Message has 8 unknown bytes.
[  148.303305][T10152] netlink: 'syz.2.1101': attribute type 1 has an invalid length.
[  148.773199][T10159] netlink: 'syz.2.1103': attribute type 23 has an invalid length.
[  148.775849][T10159] netlink: 'syz.2.1103': attribute type 21 has an invalid length.
[  148.928263][T10161] nbd4: detected capacity change from 0 to 63
[  148.962333][T10159] nbd: must specify an index to disconnect
[  149.005887][T10159] sctp: [Deprecated]: syz.2.1103 (pid 10159) Use of int in max_burst socket option deprecated.
[  149.005887][T10159] Use struct sctp_assoc_value instead
[  149.086625][T10166] netlink: 'syz.1.1105': attribute type 1 has an invalid length.
[  149.598428][   T56] block nbd4: Receive control failed (result -104)
[  149.862901][T10186] __nla_validate_parse: 12 callbacks suppressed
[  149.862911][T10186] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1110'.
[  149.882099][T10186] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1110'.
[  150.119452][T10194] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1112'.
[  150.210761][T10198] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20004
[  150.634386][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'.
[  150.639779][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1114'.
[  151.022929][T10229] bond4: option ad_user_port_key: invalid value (65535)
[  151.025579][T10229] bond4: option ad_user_port_key: allowed values 0 - 1023
[  151.029853][T10229] bond4 (unregistering): Released all slaves
[  151.124708][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1117'.
[  151.363715][   T52] block nbd0: Possible stuck request ffff888101bb0000: control (read@0,1024B). Runtime 60 seconds
[  151.367294][   T52] block nbd0: Possible stuck request ffff888101bb0200: control (read@1024,1024B). Runtime 60 seconds
[  151.370920][   T52] block nbd0: Possible stuck request ffff888101bb0400: control (read@2048,1024B). Runtime 60 seconds
[  151.374461][   T52] block nbd0: Possible stuck request ffff888101bb0600: control (read@3072,1024B). Runtime 60 seconds
[  151.711633][T10252] can: request_module (can-proto-0) failed.
[  151.727748][T10252] veth1_vlan: left promiscuous mode
[  151.732413][T10252] veth0_vlan: left promiscuous mode
[  151.735045][T10252] veth0_vlan: entered promiscuous mode
[  151.738638][T10252] veth1_vlan: entered promiscuous mode
[  151.740714][T10252] veth1_vlan: entered allmulticast mode
[  151.746643][T10252] veth1_macvtap: left promiscuous mode
[  151.749776][T10252] veth0_macvtap: left promiscuous mode
[  151.752295][T10252] veth0_macvtap: entered promiscuous mode
[  151.759726][T10252] veth1_macvtap: entered promiscuous mode
[  151.773585][T10252] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  151.785812][T10254] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1123'.
[  151.796729][T10252] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  151.817891][T10254] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1123'.
[  151.823727][T10252] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  151.845922][T10252] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  151.884505][T10252] geneve0: entered promiscuous mode
[  151.892192][T10252] 8021q: adding VLAN 0 to HW filter on device bond1
[  151.895960][T10252] bridge1: left promiscuous mode
[  151.898938][T10252] 8021q: adding VLAN 0 to HW filter on device bond2
[  151.902548][T10252] bridge2: left promiscuous mode
[  151.908709][T10252] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.915918][T10252] 8021q: adding VLAN 0 to HW filter on device bond3
[  151.918980][T10252] geneve2: left promiscuous mode
[  151.921459][T10252] bridge0: left promiscuous mode
[  151.924184][T10252] 8021q: adding VLAN 0 to HW filter on device bond4
[  151.927432][T10252] 8021q: adding VLAN 0 to HW filter on device bond5
[  151.935503][T10252] bond6: left promiscuous mode
[  151.946176][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.952670][ T6270] pimreg1: port 3(macvlan0) entered blocking state
[  151.955133][ T6270] pimreg1: port 3(macvlan0) entered forwarding state
[  151.958278][ T5666] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.961747][ T5666] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.964681][ T5666] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.695626][T10275] wlan0 speed is unknown, defaulting to 1000
[  153.017258][T10288] netlink: 'syz.1.1131': attribute type 13 has an invalid length.
[  153.022228][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'.
[  153.243414][T10297] netlink: 'syz.2.1132': attribute type 13 has an invalid length.
[  153.259587][T10297] netlink: 'syz.2.1132': attribute type 17 has an invalid length.
[  153.683212][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1133'.
[  154.012118][T10297] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.048595][T10297] 8021q: adding VLAN 0 to HW filter on device team0
[  154.067929][T10312] netlink: 'syz.1.1135': attribute type 1 has an invalid length.
[  154.156673][T10297] veth1_vlan: left promiscuous mode
[  154.163257][T10297] veth0_vlan: left promiscuous mode
[  154.167198][T10297] veth0_vlan: entered promiscuous mode
[  154.174676][T10297] veth1_vlan: entered promiscuous mode
[  154.188163][T10297] veth1_macvtap: left promiscuous mode
[  154.209898][T10297] veth0_macvtap: left promiscuous mode
[  154.212776][T10297] veth0_macvtap: entered promiscuous mode
[  154.218214][T10320] netlink: 'syz.1.1137': attribute type 1 has an invalid length.
[  154.227013][T10297] veth1_macvtap: entered promiscuous mode
[  154.244120][T10297] 8021q: adding VLAN 0 to HW filter on device eth0
[  154.253398][T10297] 8021q: adding VLAN 0 to HW filter on device eth1
[  154.262236][T10297] 8021q: adding VLAN 0 to HW filter on device eth2
[  154.268005][T10297] 8021q: adding VLAN 0 to HW filter on device eth3
[  154.273880][T10297] 8021q: adding VLAN 0 to HW filter on device bond1
[  154.276818][T10297] 8021q: adding VLAN 0 to HW filter on device bond2
[  154.283501][T10297] 8021q: adding VLAN 0 to HW filter on device bond3
[  154.293488][T10297] 8021q: adding VLAN 0 to HW filter on device bond4
[  154.302128][T10297] 8021q: adding VLAN 0 to HW filter on device bond5
[  154.313473][T10297] geneve2: left promiscuous mode
[  154.315633][T10297] geneve2: left allmulticast mode
[  154.322702][T10297] 8021q: adding VLAN 0 to HW filter on device bond6
[  154.328766][T10297] 8021q: adding VLAN 0 to HW filter on device bond7
[  154.364629][   T24] wlan0 speed is unknown, defaulting to 1000
[  154.578040][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  155.169909][T10356] __nla_validate_parse: 4 callbacks suppressed
[  155.169921][T10356] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1145'.
[  155.285316][T10359] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.1145'.
[  155.699657][T10356] 0: renamed from hsr0
[  155.708856][T10356] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  155.712835][T10356] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  155.716420][T10356] 0: entered allmulticast mode
[  155.718135][T10356] hsr_slave_0: entered allmulticast mode
[  155.725174][T10356] hsr_slave_1: entered allmulticast mode
[  155.733551][T10356] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  155.739462][T10361] IPVS: sh: SCTP 172.20.20.187:0 - no destination available
[  155.744273][ T5890] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.747650][ T5890] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.753015][ T5890] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.756341][ T5890] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.777613][ T5890] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.780959][ T5890] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.784219][ T5890] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.787490][ T5890] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.906825][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'.
[  155.910644][T10368] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1149'.
[  155.913855][T10368] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1149'.
[  156.351758][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1150'.
[  156.501691][T10390] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.504979][T10390] 8021q: adding VLAN 0 to HW filter on device team0
[  156.532207][T10390] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  156.651987][T10398] netlink: 'syz.2.1155': attribute type 29 has an invalid length.
[  156.791772][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1156'.
[  156.837904][T10404] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1157'.
[  159.128325][   T52] block nbd1: Possible stuck request ffff888101be0000: control (read@0,1024B). Runtime 60 seconds
[  159.138805][   T52] block nbd1: Possible stuck request ffff888101be0200: control (read@1024,1024B). Runtime 60 seconds
[  159.149897][   T52] block nbd1: Possible stuck request ffff888101be0400: control (read@2048,1024B). Runtime 60 seconds
[  159.160462][   T52] block nbd1: Possible stuck request ffff888101be0600: control (read@3072,1024B). Runtime 60 seconds
[  162.972397][T10442] netlink: 'syz.1.1163': attribute type 1 has an invalid length.
[  162.974718][T10442] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1163'.
[  164.420332][T10448] netlink: 'syz.0.1164': attribute type 1 has an invalid length.
[  164.422891][T10448] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1164'.
[  166.134516][   T52] block nbd2: Possible stuck request ffff888101f10000: control (read@0,1024B). Runtime 60 seconds
[  166.137800][   T52] block nbd2: Possible stuck request ffff888101f10200: control (read@1024,1024B). Runtime 60 seconds
[  166.162362][   T52] block nbd2: Possible stuck request ffff888101f10400: control (read@2048,1024B). Runtime 60 seconds
[  166.165654][   T52] block nbd2: Possible stuck request ffff888101f10600: control (read@3072,1024B). Runtime 60 seconds
[  167.053145][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'.
[  167.475020][T10479] sctp: [Deprecated]: syz.2.1171 (pid 10479) Use of int in max_burst socket option deprecated.
[  167.475020][T10479] Use struct sctp_assoc_value instead
[  167.521527][T10477] nbd5: detected capacity change from 0 to 63
[  167.533221][T10478] block nbd2: NBD_DISCONNECT
[  167.560091][T10478] block nbd2: Send disconnect failed -32
[  167.565265][T10478] block nbd2: shutting down sockets
[  167.625627][    C1] blk_print_req_error: 117 callbacks suppressed
[  167.625640][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.630463][    C1] buffer_io_error: 138 callbacks suppressed
[  167.630469][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[  167.634678][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.637661][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[  167.640189][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.643392][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[  167.646323][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.649764][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[  167.667033][   T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.682306][   T52] Buffer I/O error on dev nbd2, logical block 0, async page read
[  167.685720][   T52] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  167.701919][   T52] Buffer I/O error on dev nbd2, logical block 1, async page read
[  167.705162][   T52] Buffer I/O error on dev nbd2, logical block 2, async page read
[  167.708315][   T52] Buffer I/O error on dev nbd2, logical block 3, async page read
[  167.726459][   T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  167.739718][   T52] Buffer I/O error on dev nbd2, logical block 0, async page read
[  167.742229][   T52] Buffer I/O error on dev nbd2, logical block 1, async page read
[  167.752770][   T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  167.755930][   T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  167.763168][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'.
[  167.763226][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'.
[  167.792068][   T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  167.808295][ T5951] ldm_validate_partition_table(): Disk read failed.
[  167.828442][ T5951] Dev nbd2: unable to read RDB block 0
[  167.841596][ T5951]  nbd2: unable to read partition table
[  167.854588][ T5951] ldm_validate_partition_table(): Disk read failed.
[  167.866455][ T5951] Dev nbd2: unable to read RDB block 0
[  167.879287][ T5951]  nbd2: unable to read partition table
[  168.098067][ T7086] block nbd5: Receive control failed (result -104)
[  168.786634][T10483] bond0: entered promiscuous mode
[  168.803284][T10483] bond_slave_0: entered promiscuous mode
[  168.822812][T10483] bond_slave_1: entered promiscuous mode
[  168.857214][T10483] bond0: left promiscuous mode
[  168.868720][T10483] bond_slave_0: left promiscuous mode
[  168.893569][T10483] bond_slave_1: left promiscuous mode
[  169.097063][T10484] bond0: entered promiscuous mode
[  169.103534][T10484] bond_slave_0: entered promiscuous mode
[  169.105903][T10484] bond_slave_1: entered promiscuous mode
[  169.509846][T10484] bond0: left promiscuous mode
[  169.511860][T10484] bond_slave_0: left promiscuous mode
[  169.650805][T10484] bond_slave_1: left promiscuous mode
[  170.712863][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1173'.
[  172.123018][ T5059] udevd[5059]: worker [5612] /devices/virtual/block/nbd0 is taking a long time
[  172.127825][ T5059] udevd[5059]: worker [5958] /devices/virtual/block/nbd1 is taking a long time
[  187.404197][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  187.571722][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  187.600526][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  187.677493][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  187.742867][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  189.606693][ T4999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  190.363555][ T4999] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  190.396140][ T4999] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  190.764065][ T4999] Bluetooth: hci3: command tx timeout
[  191.432646][ T4999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  191.618694][ T4999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  192.838213][ T4999] Bluetooth: hci3: command tx timeout
[  193.046235][ T4999] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  193.822312][ T4999] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  194.006943][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  194.115690][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  194.328383][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  194.749005][   T54] Bluetooth: hci4: command tx timeout
[  195.001174][ T5618] Bluetooth: hci3: command tx timeout
[  196.963662][   T54] Bluetooth: hci4: command tx timeout
[  197.059832][ T5618] Bluetooth: hci3: command tx timeout
[  197.304171][ T5618] Bluetooth: hci5: command tx timeout
[  197.432028][T10485] bond0: entered promiscuous mode
[  197.433734][T10485] bond_slave_0: entered promiscuous mode
[  197.467136][T10485] bond_slave_1: entered promiscuous mode
[  198.384608][T10485] bond0: left promiscuous mode
[  198.386175][T10485] bond_slave_0: left promiscuous mode
[  199.053271][ T5618] Bluetooth: hci4: command tx timeout
[  199.515355][ T5618] Bluetooth: hci5: command tx timeout
[  199.601704][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  199.614081][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  199.905203][T10485] bond_slave_1: left promiscuous mode
[  201.186127][ T5618] Bluetooth: hci4: command tx timeout
[  201.587227][ T5618] Bluetooth: hci5: command tx timeout
[  203.349387][    C1] sched: DL replenish lagged too much
[  203.364043][ T5059] udevd[5059]: worker [8116] /devices/virtual/block/nbd3 is taking a long time
[  203.692919][ T5618] Bluetooth: hci5: command tx timeout
[  207.297650][   T52] block nbd3: Possible stuck request ffff888101f58000: control (read@0,1024B). Runtime 30 seconds
[  207.312892][   T52] block nbd3: Possible stuck request ffff888101f58200: control (read@1024,1024B). Runtime 30 seconds
[  207.328218][   T52] block nbd3: Possible stuck request ffff888101f58400: control (read@2048,1024B). Runtime 30 seconds
[  207.343943][   T52] block nbd3: Possible stuck request ffff888101f58600: control (read@3072,1024B). Runtime 30 seconds
[  209.875632][ T5059] udevd[5059]: worker [8118] /devices/virtual/block/nbd4 is taking a long time
[  214.215094][T10490] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  224.854950][T10503] wlan0 speed is unknown, defaulting to 1000
[  229.144663][ T5059] udevd[5059]: worker [8114] /devices/virtual/block/nbd5 is taking a long time
[  234.671450][ T7092] block nbd4: Possible stuck request ffff888101f88000: control (read@0,4096B). Runtime 30 seconds
[  234.766852][   T43] block nbd0: Possible stuck request ffff888101bb0000: control (read@0,1024B). Runtime 90 seconds
[  234.779770][   T43] block nbd0: Possible stuck request ffff888101bb0200: control (read@1024,1024B). Runtime 90 seconds
[  234.783155][   T43] block nbd0: Possible stuck request ffff888101bb0400: control (read@2048,1024B). Runtime 90 seconds
[  234.786533][   T43] block nbd0: Possible stuck request ffff888101bb0600: control (read@3072,1024B). Runtime 90 seconds
[  235.164677][T10497] block nbd1: Possible stuck request ffff888101be0000: control (read@0,1024B). Runtime 90 seconds
[  235.168316][T10497] block nbd1: Possible stuck request ffff888101be0200: control (read@1024,1024B). Runtime 90 seconds
[  235.184256][T10497] block nbd1: Possible stuck request ffff888101be0400: control (read@2048,1024B). Runtime 90 seconds
[  235.188520][T10497] block nbd1: Possible stuck request ffff888101be0600: control (read@3072,1024B). Runtime 90 seconds
[  236.470921][T10506] wlan0 speed is unknown, defaulting to 1000
[  236.483757][T10501] wlan0 speed is unknown, defaulting to 1000
[  253.506222][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  253.534602][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  253.570000][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  254.922113][ T4999] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  254.961827][ T4999] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  255.481220][ T4999] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  255.616054][ T4999] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  255.634586][ T4999] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  255.690489][ T4999] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  256.002781][ T4999] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  257.445759][ T4999] Bluetooth: hci6: command tx timeout
[  259.470706][   T54] Bluetooth: hci7: command tx timeout
[  260.070160][   T54] Bluetooth: hci6: command tx timeout
[  260.075717][ T4999] Bluetooth: hci8: Opcode 0x0c03 failed: -110
[  260.424407][ T4999] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  260.963612][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  260.972346][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  261.637508][ T4999] Bluetooth: hci7: command tx timeout
[  262.152152][ T4999] Bluetooth: hci6: command tx timeout
[  262.582007][T10547] Bluetooth: hci8: Opcode 0x0c03 failed: -110
[  263.766363][ T4999] Bluetooth: hci7: command tx timeout
[  264.249906][ T4999] Bluetooth: hci6: command tx timeout
[  265.907351][ T4999] Bluetooth: hci7: command tx timeout
[  273.723197][ T5059] udevd[5059]: worker [5612] /devices/virtual/block/nbd0 timeout; kill it
[  273.822192][ T5059] udevd[5059]: seq 11157 '/devices/virtual/block/nbd0' killed
[  280.325181][ T5059] udevd[5059]: worker [5958] /devices/virtual/block/nbd1 timeout; kill it
[  280.340559][ T5059] udevd[5059]: seq 11414 '/devices/virtual/block/nbd1' killed
[  312.880701][T10497] block nbd3: Possible stuck request ffff888101f58000: control (read@0,1024B). Runtime 60 seconds
[  312.883924][T10497] block nbd3: Possible stuck request ffff888101f58200: control (read@1024,1024B). Runtime 60 seconds
[  312.887134][T10497] block nbd3: Possible stuck request ffff888101f58400: control (read@2048,1024B). Runtime 60 seconds
[  312.938154][T10497] block nbd3: Possible stuck request ffff888101f58600: control (read@3072,1024B). Runtime 60 seconds
[  312.948309][   T52] block nbd1: Possible stuck request ffff888101be0000: control (read@0,1024B). Runtime 120 seconds
[  312.958112][ T7092] block nbd0: Possible stuck request ffff888101bb0000: control (read@0,1024B). Runtime 120 seconds
[  312.968133][T10508] block nbd4: Possible stuck request ffff888101f88000: control (read@0,4096B). Runtime 60 seconds
[  312.978218][   T52] block nbd1: Possible stuck request ffff888101be0200: control (read@1024,1024B). Runtime 120 seconds
[  312.993949][ T7092] block nbd0: Possible stuck request ffff888101bb0200: control (read@1024,1024B). Runtime 120 seconds
[  312.997360][ T7092] block nbd0: Possible stuck request ffff888101bb0400: control (read@2048,1024B). Runtime 120 seconds
[  313.007921][   T52] block nbd1: Possible stuck request ffff888101be0400: control (read@2048,1024B). Runtime 120 seconds
[  313.017745][   T52] block nbd1: Possible stuck request ffff888101be0600: control (read@3072,1024B). Runtime 120 seconds
[  313.027823][ T7092] block nbd0: Possible stuck request ffff888101bb0600: control (read@3072,1024B). Runtime 120 seconds
[  315.161983][ T5618] Bluetooth: hci3: command 0x0406 tx timeout
[  320.223306][ T4999] Bluetooth: hci5: command 0x0406 tx timeout
[  320.225171][ T4999] Bluetooth: hci4: command 0x0406 tx timeout
[  322.599406][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  322.610903][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  324.462199][ T5059] udevd[5059]: worker [8116] /devices/virtual/block/nbd3 timeout; kill it
[  324.467175][ T5059] udevd[5059]: seq 13078 '/devices/virtual/block/nbd3' killed
[  325.064035][  T895] block nbd5: Possible stuck request ffff888101fd0000: control (read@0,1024B). Runtime 30 seconds
[  325.741926][  T895] block nbd5: Possible stuck request ffff888101fd0200: control (read@1024,1024B). Runtime 30 seconds
[  326.323214][  T895] block nbd5: Possible stuck request ffff888101fd0400: control (read@2048,1024B). Runtime 30 seconds
[  326.495430][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  326.520787][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  326.682766][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  327.114456][  T895] block nbd5: Possible stuck request ffff888101fd0600: control (read@3072,1024B). Runtime 30 seconds
[  327.133094][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  327.212396][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  328.224061][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  328.574481][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  328.593641][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  328.721816][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  328.783910][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  329.564968][ T5618] Bluetooth: hci0: command tx timeout
[  331.141128][ T5610] Bluetooth: hci1: command tx timeout
[  331.254666][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  331.302821][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  331.340380][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  331.606575][ T5618] Bluetooth: hci0: command tx timeout
[  332.022689][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  332.311388][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  333.251269][ T5618] Bluetooth: hci1: command tx timeout
[  333.825789][ T5618] Bluetooth: hci0: command tx timeout
[  335.202245][ T5618] Bluetooth: hci2: command tx timeout
[  335.294294][ T5618] Bluetooth: hci1: command tx timeout
[  335.882560][ T5618] Bluetooth: hci0: command tx timeout
[  336.604074][ T5059] udevd[5059]: worker [8118] /devices/virtual/block/nbd4 timeout; kill it
[  336.608708][ T5059] udevd[5059]: seq 13414 '/devices/virtual/block/nbd4' killed
[  337.301211][ T5618] Bluetooth: hci2: command tx timeout
[  337.381697][ T5618] Bluetooth: hci1: command tx timeout
[  339.392088][ T5618] Bluetooth: hci2: command tx timeout
[  341.471064][ T5618] Bluetooth: hci2: command tx timeout
[  351.475761][ T5059] udevd[5059]: worker [8114] /devices/virtual/block/nbd5 timeout; kill it
[  351.492891][ T5059] udevd[5059]: seq 13638 '/devices/virtual/block/nbd5' killed
[  380.748362][ T4999] Bluetooth: hci6: command 0x0406 tx timeout
[  381.631493][ T4999] Bluetooth: hci7: command 0x0406 tx timeout
[  383.921413][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  383.932590][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  395.414954][ T5618] Bluetooth: hci8: Opcode 0x0c03 failed: -110
[  395.954108][ T5618] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  396.004712][ T5618] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  396.035580][ T5618] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  396.202114][ T5618] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  396.283409][ T5618] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  397.142294][   T35] INFO: task kworker/u8:3:5666 blocked for more than 143 seconds.
[  397.145416][   T35]       Not tainted syzkaller #0
[  397.147475][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  397.240169][   T35] task:kworker/u8:3    state:D stack:23520 pid:5666  tgid:5666  ppid:2      task_flags:0x4208060 flags:0x00080000
[  397.244071][   T35] Workqueue: ipv6_addrconf addrconf_verify_work
[  397.246141][   T35] Call Trace:
[  397.247186][   T35]  <TASK>
[  397.248102][   T35]  __schedule+0x17d9/0x56c0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  397.987210][ T5610] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  398.164932][   T35]  ? __lock_acquire+0x683/0x2cf0
[  398.166870][   T35]  ? __lock_acquire+0x683/0x2cf0
[  398.168799][   T35]  ? __lock_acquire+0x683/0x2cf0
[  398.182707][   T35]  ? stack_depot_save_flags+0x33/0x800
[  398.184807][   T35]  ? __pfx___schedule+0x10/0x10
[  398.186399][   T35]  ? schedule+0x90/0x2b0
[  398.187760][   T35]  schedule+0x164/0x2b0
[  398.189100][   T35]  schedule_preempt_disabled+0x13/0x30
[  398.488619][ T5610] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  398.533216][ T5610] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  398.655626][ T5610] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  398.693702][ T5610] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  398.734483][ T5610] Bluetooth: hci9: command tx timeout
[  399.790636][   T35]  __mutex_lock+0x7bf/0x1550
[  399.792153][   T35]  ? __mutex_lock+0x5d4/0x1550
[  399.793775][   T35]  ? addrconf_verify_work+0x19/0x30
[  399.795362][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  400.449008][   T35]  ? process_scheduled_works+0xa20/0x14e0
[  400.463809][   T35]  ? rcu_is_watching+0x15/0xb0
[  400.465533][   T35]  ? process_scheduled_works+0xa20/0x14e0
[  400.467388][   T35]  addrconf_verify_work+0x19/0x30
[  400.468959][   T35]  process_scheduled_works+0xa8e/0x14e0
[  401.679882][ T5610] Bluetooth: hci9: command tx timeout
[  401.727332][   T35]  ? __pfx_process_scheduled_works+0x10/0x10
[  401.729282][   T35]  ? assign_work+0x3cf/0x5d0
[  401.736544][   T35]  worker_thread+0xa47/0xfb0
[  401.738017][   T35]  ? __kthread_parkme+0x71/0x1f0
[  401.998129][   T35]  kthread+0x388/0x470
[  402.004837][   T35]  ? __pfx_worker_thread+0x10/0x10
[  402.006464][   T35]  ? __pfx_kthread+0x10/0x10
[  402.007933][   T35]  ret_from_fork+0x514/0xb70
[  402.020072][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  402.021716][   T35]  ? __switch_to+0xc89/0x1420
[  402.023206][   T35]  ? __pfx_kthread+0x10/0x10
[  402.024665][   T35]  ret_from_fork_asm+0x1a/0x30
[  402.026183][   T35]  </TASK>
[  402.027207][   T35] 
[  402.027207][   T35] Showing all locks held in the system:
[  402.281189][ T5610] Bluetooth: hci10: command tx timeout
[  403.243450][   T35] 1 lock held by khungtaskd/35:
[  403.245007][   T35]  #0: ffffffff8e959c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  403.248037][   T35] 2 locks held by kworker/1:1H/52:
[  403.752105][   T35]  #0: ffff888160ef0140 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  403.755613][   T35]  #1: ffffc90000bc7c40 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  403.793161][ T5618] Bluetooth: hci9: command tx timeout
[  404.681532][ T5618] Bluetooth: hci10: command tx timeout
[  405.100325][   T35] 2 locks held by kworker/0:1H/895:
[  405.102535][   T35]  #0: ffff888160ef0140 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  405.106182][   T35]  #1: ffffc9000678fc40 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  406.035617][ T5618] Bluetooth: hci9: command tx timeout
[  406.690554][   T35] 2 locks held by getty/5439:
[  406.700408][   T35]  #0: ffff888172df60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  406.703366][   T35]  #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  406.963033][ T5618] Bluetooth: hci10: command tx timeout
[  406.998041][   T35] 1 lock held by udevd/5612:
[  407.017348][   T35]  #0: ffff88816d5e0350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
