last executing test programs:

2.143369872s ago: executing program 2 (id=4527):
syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500001cc300000001019078ac1e0001ac1414aa0000907800670d27"], 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, 0x25, 0x319, 0x70bd26, 0x8000, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0xe0, 0xa, 0x148, 0xe0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'ip6erspan0\x00', {}, {}, 0x89}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg2\x00', {0xffffffffffffffff, 0x20, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x1, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x428)

1.860150589s ago: executing program 2 (id=4532):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@getnetconf={0x14, 0x52, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x4000)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000000400)=""/19, 0x13}, 0x90}], 0x1, 0x40002122, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000080)="feee5c86", 0x4}], 0x1, 0x0, 0x0, 0x4000}, 0x4800)
sendto$unix(r1, &(0x7f0000000000)="1f2e3bd46328c26f4982c2bfbe5792627751a410442db96966bb4a4a8bbe4a53da030b0e2acd3eba8310d06b782c44d157650eddf010765514186d253c89218defd63c765da3a393eaac85fa1c652211a9a2012c2ceac314c446572fd64dc2405a46165e3a9436dbdae02a09c6eaa7", 0x6f, 0x20000000, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)

1.794562068s ago: executing program 3 (id=4533):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@generic={0x81, 0x1, 0x1, 0x48}]}, &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000ff6122314a0f0800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x240480c0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_IKEY={0x8, 0x4, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0)

1.660723357s ago: executing program 2 (id=4535):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@map_fd={0x18, 0x6, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

1.570054836s ago: executing program 3 (id=4536):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r2=>0x0})
bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000280)=0xe9, 0x4)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="0201140098dc18000e1a"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x44040)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x1c, r5, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x8}]}, 0x1c}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000c1409042cbd7000ffdbdf2508003d0004000000080001000a0000000800010001000000"], 0x28}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
socket(0x11, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) (async)
bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) (async)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000280)=0xe9, 0x4) (async)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="0201140098dc18000e1a"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x44040) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) (async)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x1c, r5, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000c1409042cbd7000ffdbdf2508003d0004000000080001000a0000000800010001000000"], 0x28}}, 0x0) (async)

1.569761835s ago: executing program 4 (id=4537):
socket$kcm(0x21, 0x2, 0x2)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x2000000, 0x800, 0x0, 0x8000100ffffe}, 0x0, 0x0, 0x0, 0x0)

1.454301864s ago: executing program 2 (id=4538):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c010000100013072ebd7008fedbdf246401010200000000000000000000000000000000000000000001000000004e2101020a0000001d000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/292], 0x16c}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) (async)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x50, 0x0, &(0x7f0000000000))
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000008b2f00001c00128009000100626f6e64000000000c00028008000500ffedffff080003"], 0x44}}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001200000080001"], 0x104}}, 0x0)

1.392070411s ago: executing program 3 (id=4539):
r0 = socket$l2tp(0x2, 0x2, 0x73)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8020, 0x11000}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

1.266705331s ago: executing program 4 (id=4540):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x10, 0x803, 0x2)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
r8 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1000000000000000100100000e0000001000000000000000100100000e"], 0x20}, 0x0)

1.202252279s ago: executing program 1 (id=4541):
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) (async)
sendmsg$nl_generic(r0, 0x0, 0x4000084) (async)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000040), 0x0}, 0x20) (async)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000f14010025bd7000fcdbdf25080001000200000008000300040000000c00450069625f73727074"], 0x48}, 0x1, 0x0, 0x0, 0x20008005}, 0xc0) (async)
close(0x3) (async)
socket$kcm(0x21, 0x2, 0x2) (async)
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_u8={{0xff70}}, @ip_tos_int={{0x14, 0x110, 0xd}}], 0x30}, 0x84) (async)
r3 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="20a3cdd6ca", 0x5}, {&(0x7f0000000140)="417573c2", 0x4}], 0x2}, 0x20000090) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x7, 0x7f, 0x1, 0x2}, 0x609d, 0x1, 0x8, 0xfffffffa, 0x2, 0x2, 0x18, 0x1, 0x6, 0xe, {0x3, 0xfffffeff, 0x5, 0x0, 0x9, 0x2}}}}]}, 0x78}}, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000008000000000000000000000071122a0000000000950000000000000079b7a60f02a7ba6c"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
close(0x3)

1.18940192s ago: executing program 3 (id=4543):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000001bc0)={'veth1_to_team\x00', {0x2, 0x0, @loopback}})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48)
r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0x7, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c)
bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r3, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0)
recvmmsg(r4, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/4085, 0xff5}, {&(0x7f0000000080)=""/244, 0xf4}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f0000001280)=""/151, 0x97}], 0x4}}], 0x1, 0x140, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000080)=@routing={0x86, 0x0, 0x2, 0xf8}, 0x8)
getsockopt$inet6_opts(r6, 0x29, 0x37, 0x0, &(0x7f0000000000)=0xa4)
syz_emit_ethernet(0x83, &(0x7f0000001c00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86ddaf6d87fba463bb7a4e004d110020010000000000000000000000000002fe8000000000080000000000000000aa4e224e22004d907864ebe114f6ff9df4140f23e2ade56a28ace6c0b8bec259e8e5f080d1c010f41f47c8d635763c513854126120383901cb1a9402e67ce9cafd6b9ed54721cd27bdb7a937e850f3c8ee4305fd735b1e55e1025c02"], 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000001600)={@void, @val={0x1, 0x4, 0x76bb, 0xffff, 0x7, 0xf1}, @ipv4=@generic={{0x3d, 0x4, 0x2, 0x9, 0x1de, 0x68, 0x0, 0x3, 0xff, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0x4c, 0x18, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x41}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10}, {@rand_addr=0x64010102, 0xffff2c9a}, {@empty}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0xf3}, {@private=0xa010100, 0x8}, {@broadcast, 0x7f}, {@multicast1, 0x7fffffff}]}, @timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0xb, [{@loopback, 0x7ff}]}, @timestamp={0x44, 0x8, 0x36, 0x0, 0x2, [0x7dd]}, @timestamp_addr={0x44, 0x34, 0x16, 0x1, 0xd, [{@private=0xa010101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x34}, {@multicast2, 0x3}, {@broadcast, 0x9}, {@loopback, 0xfff80000}, {@broadcast, 0x2}]}, @noop, @rr={0x7, 0x7, 0x8b, [@local]}, @timestamp={0x44, 0x24, 0x72, 0x0, 0x0, [0x49, 0x0, 0x2, 0x7, 0x1, 0x7, 0x8280, 0x80000000]}, @cipso={0x86, 0x20, 0x3, [{0x7, 0x12, "926e13f715e50156fffcf9347174d35f"}, {0x6, 0x8, "e24f60db3598"}]}]}}, "eb8c2cddbe251cd2fbb361d4fafef8ba17a728843319735b7baff76292f3e1e92f9907dcb110f197fcc503452ea554f85db08d3b1906e8baca0f5c2f79a33da59f93111ef0284cf161f4cbf8ee1d124a30c518774e66d7bd6f5f54df9f183c1db2a8c268bda5ac813bea5513cbb7368cead32f2f27131a515d5ec26089190c2d6fe08b58f2fa8b41891132317292fe1f9087e6558c13e3eeeaef725d1908352dfc118e709183f7f09f3c090920a56c5cd03646bae06fee24e131f3248dd7e4b8ee745cf892d28d28c5cf4672a9936370f8ac50070f658148f8b32eaec92b4c938103274ab486dc1e18a8"}}, 0x1e8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000000)={<r7=>0x0, 0xffffff80}, &(0x7f00000001c0)=0xc)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r10, 0x0, r8, 0x0, 0xf3a, 0x0)
write(r8, &(0x7f0000000380)=' ', 0x1)
write(r9, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000001900)={0x7, {{0x2, 0x4e21, @private=0xa010101}}, 0x0, 0x4, [{{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}}]}, 0x290)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000015c0)={0xfffc, 0x6, 0x8202, 0x74d, 0x100, 0x4, 0xd460, 0x4e9e, r7}, &(0x7f0000001540)=0x20)
sendmsg$nl_route_sched(r8, &(0x7f00000018c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)=@gettfilter={0x5c, 0x2e, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {0xe, 0xa}, {0x2, 0x2}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0xffa4}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x97d4}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40050}, 0x8801)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001340)={<r11=>0x0, @in6={{0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}}, &(0x7f0000001400)=0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000001440)={r11, @in6={{0xa, 0x4e24, 0xc, @local, 0x5}}, 0x7, 0x0, 0x1, 0xc1, 0x5}, &(0x7f0000001500)=0x98)

1.089483722s ago: executing program 1 (id=4544):
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000020010", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local, {[@end, @end, @timestamp_addr={0x44, 0x4, 0x7d, 0x1, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async)
r5 = socket(0x10, 0x80003, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', <r6=>0x0}) (async)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0)
r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@bloom_filter={0x1e, 0x7f, 0x1000, 0xe7c, 0x200, r0, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4, 0x4}, 0x50) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000096000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c43f"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xffffff1f, 0x1}}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000a00)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x22}, 0x94)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "000000000002040000000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
accept(r11, &(0x7f0000000000)=@ll={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x80) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="18000000", @ANYRES16=r14, @ANYBLOB="010000000000000000001700000004000680191b4a050abae5e114ea446c064a2a36392cac28f983ca16eb31fe7f402d4ccb83aee1e8d43d00f220c70d55939f510a96376b389b4b90628aaab067a156dcc5594d7689b2e300f51ac8d494bc68deae510368b46a4f95a369191e56133851b35f653d150dcac6905152da5d71d25b4aee29bd5022f69201835ac4e8f2e271037a41fc809f95b0e3559904b380a8965b1b2a3140c9b813af30f245a8bf67d78ca0c9faca32e72d89b762f6a9d88eafd62189932518357e63e738a27dbc5f5bd89d84a7f6da4b93"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x24004004) (async)
sendmsg$TIPC_NL_BEARER_SET(r11, &(0x7f0000000240)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r2, @ANYRES64=r6, @ANYRESHEX=r12], 0x29c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
socket$nl_crypto(0x10, 0x3, 0x15)

945.669827ms ago: executing program 1 (id=4546):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x1, 0xff, 0x0, 0x4}, 0x20)
r1 = socket(0x10, 0x3, 0x0)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write(r2, &(0x7f0000001300)='-', 0x1)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000100001082cbd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="fffe03001001020308001b000000000024001a8020000a"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
accept$nfc_llcp(r1, &(0x7f0000000100), &(0x7f00000001c0)=0x60)

833.155775ms ago: executing program 0 (id=4547):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[], 0x20)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="05000000010001", 0x7)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x42901, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
r2 = socket$kcm(0x2, 0xd, 0x2)
close(0x4)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1)
sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x200, 0x70bd25, 0x25dfdbfc, {0x1, 0x0, 0x1, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x40080)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b000000018000100000000000000000002000000000000090000000006001500040000008c00168088000880840001"], 0xb0}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0)
unshare(0x400)
bpf$MAP_CREATE(0x0, 0x0, 0x50)

831.500604ms ago: executing program 1 (id=4548):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94)

816.864494ms ago: executing program 4 (id=4549):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x2, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

812.172889ms ago: executing program 3 (id=4550):
socket$kcm(0x21, 0x2, 0x2)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x3000000, 0x800, 0x0, 0x8000100ffffe}, 0x0, 0x0, 0x0, 0x0)

648.888109ms ago: executing program 1 (id=4551):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004090) (async)
syz_emit_ethernet(0x590, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) (async)
sendto(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/14, 0xe}, 0xdabc}], 0x1, 0x10022, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', <r2=>r1, 0x29, 0x3, 0x8, 0xf9, 0x16, @private2, @private2, 0x40, 0x8, 0x6, 0x9e}})
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000400)=0x8) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001d40)={0x604, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3941a918}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r1}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x284, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe6}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r1}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x5c, 0x0, 0x7}, {0xf2, 0x8, 0x5, 0x8}, {0x4, 0x1, 0x7, 0xfffffffb}]}}}]}}, {{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}]}}, {{0x8, 0x1, r1}, {0x4}}]}, 0x604}, 0x1, 0x0, 0x0, 0x44}, 0x41) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x80, 0xba, 0x2}, [@NDA_VLAN={0x6, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) (async)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r5=>0x0}) (async)
r6 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x0, @private=0xa010100, 0x4e21, 0x4, 'lc\x00', 0x5, 0x8, 0x74}, {@multicast2, 0x4e20, 0x10000, 0xcd}}, 0x44) (async)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001300010029bd7000f8dbdf2500000000", @ANYRES32=r5, @ANYBLOB="07301c00745d58d76c59919a70238d590d083db8891c956be3c9"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x1, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}}, 0x20048014)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x24040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

648.460929ms ago: executing program 0 (id=4552):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000e0100000e010000040000000a0000000000000f020000004d6d0d0000000100008508000000040000000500000002000000000000000000000300000000050000000100000075e200000a0000000000000b050000000b00253502000084b60000000d00000005000000ff0700000300000002000000040000000a00000000000008020000000100000000000008050000000e0000000800008502768c6156b1e5e9b1c2a14c9f0300000000000000000000000800000002000000040000000f0000000500000004000000080000000902000000000000000000000400000002000000000400000e00000004000000090000000600000004000000470600000c0000000300000094000000020000000001000700000000000000000000000100"], &(0x7f0000000140)=""/239, 0x12c, 0xef, 0x0, 0x400}, 0x28)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fddbdf252100000007006a000301ab00"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1)

644.189005ms ago: executing program 4 (id=4553):
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) (async)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r5, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x1000000000000053}, 0xfffe}], 0x1, 0x0, 0x0) (async)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
epoll_create1(0x0) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 64)
recvmmsg(r5, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$kcm(0xa, 0x1, 0x0)
getsockopt$sock_int(r7, 0x1, 0xc, 0x0, &(0x7f0000000400)) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) (async)
pread64(r4, &(0x7f0000002200)=""/87, 0x57, 0xfffd) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000010000007b01f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)

566.556589ms ago: executing program 2 (id=4554):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r3, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24000000190001002cbd7000000000001c140000fe020001000000ed070001"], 0x24}}, 0x0)

566.182935ms ago: executing program 0 (id=4555):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2f}, [@alu={0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfc4}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0)
setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r6 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880)
syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaae0daa78d0181881892ba551ec8b8ef88da74f34ffbd4102159902ccbef54d129bd5999b98dec92266314ad3f763b613b8621f66ebabc2ffb6c05385635a9dc9ee80796f808f410fb1f5f0590fa725283473ff9319a5ab1436a2c86e36ebf66582f99bb342fe7e76edfa03163f03d65f612730622483555b9920dfbb6747a9228a153b948f355675a03d1ac4fc1f67b059c48461563b1eac9ce045a4e14e31a8e49dac8992415d6a8cbe41b33576c05fcdf00d70f0fe7d7439847313150f66c357e046a1300ce176ff676f77163ca91cfd643c37990cdb52d7ed5b12b2ad75cdd2a7bffa3530ae8"], 0x0)
ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x2, 0x1, 0x0, 0x6, 0x6, 0x80000000})
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000100)={0x80000018})
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32], 0x10)
close(0x3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000014080002400000000408000b40000000000900010073797a30000000001400000011"], 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r7, 0x58, &(0x7f0000000500)}, 0x10)
close(0x4)

495.26347ms ago: executing program 1 (id=4556):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xf)
socket$igmp(0x2, 0x3, 0x2)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6(0xa, 0x3, 0x3a)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000009060101000000000000000001000037a441b8c94996a64f480a2c000880100007800900120073797a30000000000c00078005001a000000090000000000000000000000000050f6b783989336d8577e7fade4a0e6d18fa62f246cd99db30c2fce31e3e47cb21a6665d2cb33d0cd9e4d47d4e9461a92f2c1c978be5ffc39a09bed2d12a867fb463003f05fc5dc87b5e764a4e9326fd139d7425d59401398c11140de6398e1798516c88e3fe8b6383fc0a4e3b29dc7772a59ea31519c51b830dc237a6a8d6d5bb7"], 0x40}, 0x1, 0x0, 0x0, 0x24040800}, 0x80)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x2, 0x0)

431.97695ms ago: executing program 3 (id=4557):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0xffdf, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800035700000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x400c880}, 0x20000000)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000300)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1, 0x9)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b03feff", 0x4, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc040445)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000200)=0x7, 0x8)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x204010}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x40080)

325.91653ms ago: executing program 2 (id=4558):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x27, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35e}}, @printk={@ld, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94)
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0xff03, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ffffffe}, [@jmp={0x7, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r2)
sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x1c, r4, 0x3c6c21e685b1151b, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x4)

325.090282ms ago: executing program 4 (id=4559):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x8, 0x4)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000700)=ANY=[], 0x8)
setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x26, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23)

310.475262ms ago: executing program 0 (id=4560):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r2=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r3=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=<r4=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=<r5=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=<r7=>0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=<r8=>0x0)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fec000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r9, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0={0xfc, 0x0, '\x00', 0x8}, 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)='\t', 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) (async)
shutdown(r9, 0x1) (async)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r10, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r10}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRES32=r11], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x2, @private2, 0x5}}}, &(0x7f0000000180)=0x84)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=<r12=>0x0)
r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14)
ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f00000000c0)=<r16=>0x0)
sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r16], 0x1c}}, 0x4008054) (async)
sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x64}, 0x1, 0x0, 0x0, 0x4840}, 0x94) (async)
r17 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x16c, 0x10, 0x44b, 0x0, 0x1, {0x7a, 0x0, 0x0, 0x0, 0x9c12}, [@IFLA_VF_PORTS={0x14c, 0x18, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x7618}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cb1831c5ae57970f7c41c03ca3742b2e"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0f50bc8808c4675b53eb92e96fe144d1"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4d07b203cd33960cdf058ef7617bb6bc"}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "5f17ca631235d3ffce396131d9cfdbf9"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "dc2b9f6e8760c3dede9e61f50de69c60"}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6edb77dd350f389f3f65e52d77b670de"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7fefa5a282574c2ddb23bcc14cf24487"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0960fdcc2116082ff6811b86312629ee"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c04dfaf3e15f0e86105d65672dc7e89e"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b8668c91ced3583a5248732f8155c344"}, @IFLA_PORT_PROFILE={0xc, 0x2, '%/+)!@}\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xff}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a205795f4b30f3bb355fcfb6000cdcc2"}, @IFLA_PORT_PROFILE={0xa, 0x2, '.&.$/\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xc8}, @IFLA_PORT_VF={0x8, 0x1, 0x10}]}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

192.196725ms ago: executing program 4 (id=4561):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0)
recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}, {&(0x7f0000000440)=""/128, 0x80}], 0x2}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f00000002c0), &(0x7f0000000240)=r6}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

97.800389ms ago: executing program 0 (id=4562):
r0 = socket$alg(0x26, 0x5, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) (async)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x10}, 0x18) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r4, @ANYRES64=r3], 0x32600) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) (async)
r6 = accept4(r0, 0x0, 0x0, 0x800)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000340)={0x4, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1, 0x4, [{{0x2, 0x4e24, @private=0xa010100}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e24, @local}}]}, 0x290) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000007200)={0x0, 0x0, &(0x7f00000071c0)={&(0x7f000000e6c0)=ANY=[], 0x7470}, 0x1, 0x0, 0x0, 0x40001}, 0x95)

0s ago: executing program 0 (id=4563):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x800)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095", @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="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", @ANYRESOCT=r6, @ANYRESHEX=r4], 0x128}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x84, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1000}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7f, 0xea99, 0x1, 0x1, 0x1d, 0x0, 0x3}}, {0xa, 0x2, [0x1, 0x40, 0xeea]}}, {{0x1c, 0x1, {0x7, 0x30, 0x3ff, 0x8001, 0x2, 0xe08, 0x547c}}, {0x4}}]}]}, 0x84}}, 0x4000010)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000080)={r7, 0x2, 0x0, 0xd05})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=""/4100, 0x1004}, 0x0)
close(r10)
pipe(0x0)
r12 = openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_pressure(r12, 0x0, 0xfffffffffffffddf)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r14 = openat$cgroup_procs(r13, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r14, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r15 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r15, 0x400452c9, &(0x7f0000000100))

kernel console output (not intermixed with test programs):

30][T19228] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  535.029786][T19228] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  535.039359][T19228] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  535.054721][T19228] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  535.067836][T19421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3131'.
[  535.109541][T19421] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3131'.
[  535.141749][T19421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3131'.
[  535.166062][T19421] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3131'.
[  535.195987][T19228] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  535.236589][T19228] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  535.255213][T19228] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  535.277733][T19228] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  535.610997][T19228] 8021q: adding VLAN 0 to HW filter on device bond0
[  535.620534][ T5636] Bluetooth: hci2: command tx timeout
[  535.671132][T19228] 8021q: adding VLAN 0 to HW filter on device team0
[  535.688382][T16968] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.695671][T16968] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.725217][T16968] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.732685][T16968] bridge0: port 2(bridge_slave_1) entered forwarding state
[  535.753012][T19446] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3138'.
[  536.033193][T19446] nbd0: detected capacity change from 0 to 1
[  536.048729][ T5636] block nbd0: Receive control failed (result -32)
[  536.054175][T17929] buffer_io_error: 138 callbacks suppressed
[  536.054192][T17929] Buffer I/O error on dev nbd0, logical block 0, async page read
[  536.176779][T17929] Buffer I/O error on dev nbd0, logical block 0, async page read
[  536.215288][T17929] Buffer I/O error on dev nbd0, logical block 0, async page read
[  536.256569][T17929] Buffer I/O error on dev nbd0, logical block 0, async page read
[  536.294930][T17929] Buffer I/O error on dev nbd0, logical block 0, async page read
[  536.323212][T17929] ldm_validate_partition_table(): Disk read failed.
[  536.344547][T17929] Buffer I/O error on dev nbd0, logical block 0, async page read
[  536.375474][T17929] Buffer I/O error on dev nbd0, logical block 0, async page read
[  536.409284][T17929] Buffer I/O error on dev nbd0, logical block 0, async page read
[  536.453757][T17929] Buffer I/O error on dev nbd0, logical block 0, async page read
[  536.484999][T17929] Dev nbd0: unable to read RDB block 0
[  536.508396][T17929] Buffer I/O error on dev nbd0, logical block 0, async page read
[  536.544083][T17929]  nbd0: unable to read partition table
[  536.581851][T17929] nbd0: partition table beyond EOD, truncated
[  536.821019][T19470] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20001
[  537.010017][T19478] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3145'.
[  537.328039][T19493] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3150'.
[  537.390146][T19493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3150'.
[  537.704156][ T5636] Bluetooth: hci2: command tx timeout
[  537.831714][T19228] 8021q: adding VLAN 0 to HW filter on device batadv0
[  537.938717][T19515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3155'.
[  537.959327][T16977] batadv2: left allmulticast mode
[  537.971286][T19515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3155'.
[  537.980055][T16977] batadv2: left promiscuous mode
[  537.987359][T19515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3155'.
[  538.008369][T16977] bridge0: port 4(batadv2) entered disabled state
[  538.029327][T19515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3155'.
[  538.062022][T16977] batadv1: left allmulticast mode
[  538.091789][T16977] batadv1: left promiscuous mode
[  538.114756][T16977] bridge0: port 3(batadv1) entered disabled state
[  538.159310][T16977] bridge_slave_1: left allmulticast mode
[  538.196232][T16977] bridge_slave_1: left promiscuous mode
[  538.225169][T16977] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.306665][T16977] bond8: left allmulticast mode
[  538.570039][T19538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3158'.
[  539.549452][T16977] bond5 (unregistering): (slave gretap1): Releasing active interface
[  539.859036][T16977] team0: Port device bridge2 removed
[  539.879790][T16977] team0: Port device bridge3 removed
[  539.910112][T16977] bond1 (unregistering): Released all slaves
[  539.944198][T16977] bond2 (unregistering): Released all slaves
[  539.961187][T16977] bond3 (unregistering): Released all slaves
[  539.978257][T16977] bond4 (unregistering): Released all slaves
[  539.990200][T16977] bond5 (unregistering): Released all slaves
[  540.011165][T16977] bond6 (unregistering): (slave bond7): Releasing backup interface
[  540.021529][T16977] bond6 (unregistering): Released all slaves
[  540.039839][T16977] bond7 (unregistering): Released all slaves
[  540.058601][T16977] bond0 (unregistering): Released all slaves
[  540.079286][T16977] bond8 (unregistering): Released all slaves
[  540.094304][T16977] bond9 (unregistering): Released all slaves
[  540.116107][T16977] bond10 (unregistering): Released all slaves
[  540.132112][T16977] bond11 (unregistering): Released all slaves
[  540.149805][T16977] bond12 (unregistering): Released all slaves
[  540.172065][T16977] bond13 (unregistering): (slave bond14): Releasing backup interface
[  540.181562][T16977] bond13 (unregistering): Released all slaves
[  540.196484][T16977] bond14 (unregistering): Released all slaves
[  540.211402][T16977] bond15 (unregistering): Released all slaves
[  540.231303][T16977] bond16 (unregistering): (slave bond17): Releasing backup interface
[  540.250135][T16977] bond16 (unregistering): Released all slaves
[  540.276671][T16977] bond17 (unregistering): Released all slaves
[  540.510007][T19228] veth0_vlan: entered promiscuous mode
[  540.572341][T19228] veth1_vlan: entered promiscuous mode
[  540.684407][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3162'.
[  540.747638][T19228] veth0_macvtap: entered promiscuous mode
[  540.782342][T16977] tipc: Left network mode
[  540.824820][T19228] veth1_macvtap: entered promiscuous mode
[  540.856600][T19558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3165'.
[  540.925213][T19228] batman_adv: batadv0: Interface activated: batadv_slave_0
[  540.994257][T19228] batman_adv: batadv0: Interface activated: batadv_slave_1
[  541.074233][  T141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  541.115493][  T141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  541.150910][  T141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  541.161714][  T141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  542.046283][T19593] bond0: entered promiscuous mode
[  542.103081][T19593] bond_slave_0: entered promiscuous mode
[  542.113211][T19593] bond_slave_1: entered promiscuous mode
[  542.380306][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.420152][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.641923][T16976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.660930][T16976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.661955][T19618] __nla_validate_parse: 1 callbacks suppressed
[  542.661971][T19618] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3182'.
[  542.936703][T19620] bond9: option primary_reselect: invalid value (6)
[  543.007558][T19620] bond9 (unregistering): Released all slaves
[  543.036233][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3183'.
[  543.733775][ T5648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  543.749685][ T5648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  543.780841][T19657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3190'.
[  543.781185][ T5648] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  543.820706][ T5648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  543.833456][ T5648] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  543.882496][T19653] netlink: 'syz.4.3190': attribute type 1 has an invalid length.
[  543.976831][T19653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3190'.
[  543.987598][T19663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3192'.
[  544.165688][T16977] hsr_slave_0: left promiscuous mode
[  544.199699][T16977] hsr_slave_1: left promiscuous mode
[  544.224116][T16977] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  544.256521][T16977] batman_adv: batadv0: Removing interface: batadv_slave_0
[  544.339578][T16977] batadv0: left promiscuous mode
[  544.393640][T16977] veth1_macvtap: left promiscuous mode
[  544.415260][T16977] veth1_vlan: left promiscuous mode
[  544.449635][T16977] veth0_vlan: left promiscuous mode
[  544.878037][T16977] pim6reg (unregistering): left allmulticast mode
[  545.044716][T16977] team0 (unregistering): Port device team_slave_1 removed
[  545.272951][T19676] tipc: Started in network mode
[  545.289866][T19676] tipc: Node identity 8e42dcd8ce65, cluster identity 4711
[  545.313056][T19676] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  545.337131][T19679] syzkaller0: entered promiscuous mode
[  545.369921][T19679] syzkaller0: entered allmulticast mode
[  545.453787][T16978] smbdirect: ib_dev[syz2] removed
[  545.669749][T19679] tipc: Resetting bearer <eth:syzkaller0>
[  545.675471][T19717] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3199'.
[  545.679032][T19716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3198'.
[  545.818205][T19679] tipc: Disabling bearer <eth:syzkaller0>
[  545.934472][ T5648] Bluetooth: hci0: command tx timeout
[  546.065706][   T30] audit: type=1800 audit(1780525539.577:8): pid=19728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3202" name="memory.events" dev="tmpfs" ino=38 res=0 errno=0
[  546.185361][T19733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3203'.
[  546.348054][T19733] bond3: entered promiscuous mode
[  546.356167][T19733] 8021q: adding VLAN 0 to HW filter on device bond3
[  546.794969][T16977] IPVS: stop unused estimator thread 0...
[  547.097308][T19775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3211'.
[  547.246524][T19768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3211'.
[  547.282093][T19768] lo: Caught tx_queue_len zero misconfig
[  547.546025][T16977] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  547.754457][T16977] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  547.823458][T19654] bridge0: port 1(bridge_slave_0) entered blocking state
[  547.831194][T19654] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.840695][T19654] bridge_slave_0: entered allmulticast mode
[  547.864509][T19654] bridge_slave_0: entered promiscuous mode
[  547.940384][T19654] bridge0: port 2(bridge_slave_1) entered blocking state
[  547.956107][T19654] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.966435][T19654] bridge_slave_1: entered allmulticast mode
[  547.977254][T19654] bridge_slave_1: entered promiscuous mode
[  548.013460][ T5648] Bluetooth: hci0: command tx timeout
[  548.029137][T16977] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  548.269064][T19817] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  548.308678][T19817] batman_adv: batadv0: Adding interface: gretap1
[  548.323028][T19817] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  548.353399][T19817] batman_adv: batadv0: Interface activated: gretap1
[  548.362339][T19831] tipc: Enabled bearer <ib:vxcan1>, priority 18
[  548.455954][T16977] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  548.462341][T19843] __nla_validate_parse: 1 callbacks suppressed
[  548.463724][T19843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3224'.
[  548.489091][T19654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  548.546367][T19654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  548.561217][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3224'.
[  548.618630][T19654] team0: Port device team_slave_0 added
[  548.656010][T19654] team0: Port device team_slave_1 added
[  548.956729][T19853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3225'.
[  549.238675][T19654] batman_adv: batadv0: Adding interface: batadv_slave_0
[  549.257095][T19654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  549.288632][T19654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  549.331245][T19654] batman_adv: batadv0: Adding interface: batadv_slave_1
[  549.349025][T19654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  549.376450][T19654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  549.473050][   T10] tipc: Node number set to 1076354264
[  549.818864][T19654] hsr_slave_0: entered promiscuous mode
[  549.826782][T19654] hsr_slave_1: entered promiscuous mode
[  549.859581][T19654] debugfs: 'hsr0' already exists in 'hsr'
[  549.874386][T19654] Cannot create hsr debugfs directory
[  549.967440][T16977] dvmrp0: left allmulticast mode
[  549.975072][T16977] lo: left allmulticast mode
[  550.010301][T19899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3234'.
[  550.049943][T19899] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3234'.
[  550.076715][T19899] IPv6: NLM_F_CREATE should be specified when creating new route
[  550.094091][ T5648] Bluetooth: hci0: command tx timeout
[  550.163689][T19899] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3234'.
[  550.512313][T16977] tipc: Disabling bearer <ib:bridge0>
[  550.532184][T16977] bond0 (unregistering): Released all slaves
[  550.548106][T16977] bond1 (unregistering): Released all slaves
[  550.572323][T16977] bond2 (unregistering): Released all slaves
[  550.592326][T16977] bond3 (unregistering): Released all slaves
[  550.607826][T16977] bond4 (unregistering): Released all slaves
[  550.623695][T16977] bond5 (unregistering): Released all slaves
[  550.650495][T16977] bond6 (unregistering): Released all slaves
[  550.673186][T16977] bond7 (unregistering): Released all slaves
[  550.690788][T16977] bond8 (unregistering): Released all slaves
[  551.074056][T19918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3236'.
[  551.221126][T16977] 5nè: left promiscuous mode
[  551.257004][T19924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3239'.
[  551.298339][T19927] IPVS: ip_vs_edit_dest(): server weight less than zero
[  551.306099][   T10] IPVS: starting estimator thread 0...
[  551.364426][T19919] macvlan2: entered promiscuous mode
[  551.369893][T19919] macvlan2: entered allmulticast mode
[  551.392482][T19932] IPVS: using max 27 ests per chain, 64800 per kthread
[  551.400318][T19924] tipc: Resetting bearer <ib:vxcan1>
[  551.421906][T19924] tipc: Disabling bearer <ib:vxcan1>
[  551.536651][T16977] tipc: Disabling bearer <eth:veth0_to_batadv>
[  551.558419][T16977] tipc: Left network mode
[  551.747201][T19942] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3244'.
[  551.894643][T19946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3245'.
[  551.915578][T19953] xt_TPROXY: Can be used only with -p tcp or -p udp
[  551.937461][T19947] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  551.950613][T19947] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  552.080230][T19962] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  552.129072][T19962] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  552.174356][ T5648] Bluetooth: hci0: command tx timeout
[  552.188129][T19957] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  552.626592][T19981] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  552.897254][T20000] netlink: 'syz.0.3255': attribute type 4 has an invalid length.
[  552.918375][T19999] netlink: 'syz.0.3255': attribute type 4 has an invalid length.
[  553.380598][T20009] nbd2: detected capacity change from 0 to 127
[  553.424375][ T5648] block nbd2: Receive control failed (result -104)
[  553.588159][T20028] __nla_validate_parse: 1 callbacks suppressed
[  553.588178][T20028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3263'.
[  553.697396][T20030] x_tables: duplicate underflow at hook 3
[  553.959154][T20038] netlink: 'syz.2.3266': attribute type 49 has an invalid length.
[  553.986544][T20038] netlink: 'syz.2.3266': attribute type 1 has an invalid length.
[  554.006354][T20038] netlink: 'syz.2.3266': attribute type 4 has an invalid length.
[  554.015371][T20038] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3266'.
[  554.053090][T20035] netlink: 'syz.4.3265': attribute type 3 has an invalid length.
[  554.950464][T19654] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  555.017318][T19654] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  555.199681][T20077] netlink: 'syz.0.3272': attribute type 1 has an invalid length.
[  555.229461][T20077] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3272'.
[  556.030139][T19654] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  556.071242][T19654] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  556.079360][T20062] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3270'.
[  556.157575][T19654] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  556.187608][T20105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3276'.
[  556.219592][T19654] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  556.236981][T19654] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  556.284543][T19654] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  556.351571][T20105] macsec1: entered promiscuous mode
[  556.359913][T20105] macsec1: entered allmulticast mode
[  556.400083][T20111] netlink: 'syz.4.3278': attribute type 4 has an invalid length.
[  556.494807][T20109] netlink: 'syz.4.3278': attribute type 4 has an invalid length.
[  556.556362][T20124] Cannot find add_set index 1 as target
[  556.667489][T20126] Cannot find add_set index 1 as target
[  556.741958][ T1697] block nbd2: Connection timed out, retrying (0/1 alive)
[  556.755780][ T1697] block nbd2: Connection timed out, retrying (0/1 alive)
[  556.764037][ T1697] block nbd2: Connection timed out, retrying (0/1 alive)
[  556.773193][ T1697] block nbd2: Connection timed out, retrying (0/1 alive)
[  556.782217][ T1697] block nbd2: Dead connection, failed to find a fallback
[  556.790996][ T1697] block nbd2: shutting down sockets
[  556.815908][ T1697] blk_print_req_error: 138 callbacks suppressed
[  556.815930][ T1697] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  556.835736][ T1697] buffer_io_error: 18 callbacks suppressed
[  556.835754][ T1697] Buffer I/O error on dev nbd2, logical block 3, async page read
[  556.853839][ T1697] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  556.865719][ T1697] Buffer I/O error on dev nbd2, logical block 2, async page read
[  556.873694][ T1697] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  556.883109][ T1697] Buffer I/O error on dev nbd2, logical block 1, async page read
[  556.893797][ T1697] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  556.903543][ T1697] Buffer I/O error on dev nbd2, logical block 0, async page read
[  556.915152][T17929] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  556.928986][T17929] Buffer I/O error on dev nbd2, logical block 0, async page read
[  556.937712][T17929] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  556.947461][T17929] Buffer I/O error on dev nbd2, logical block 1, async page read
[  556.957730][T17929] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  556.967495][T17929] Buffer I/O error on dev nbd2, logical block 2, async page read
[  556.976123][T17929] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  556.986065][T17929] Buffer I/O error on dev nbd2, logical block 3, async page read
[  556.994726][T17929] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  557.005006][T17929] Buffer I/O error on dev nbd2, logical block 0, async page read
[  557.007474][T20130] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.013450][T17929] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  557.020648][T20130] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.039437][T17929] Buffer I/O error on dev nbd2, logical block 1, async page read
[  557.051447][T17929] ldm_validate_partition_table(): Disk read failed.
[  557.061435][T17929] Dev nbd2: unable to read RDB block 0
[  557.070042][T17929]  nbd2: unable to read partition table
[  557.090007][T17929] ldm_validate_partition_table(): Disk read failed.
[  557.099495][T17929] Dev nbd2: unable to read RDB block 0
[  557.111838][T17929]  nbd2: unable to read partition table
[  557.178998][T20130] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  557.191562][T20130] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  557.391232][T16973] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  557.424367][T16973] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  557.448670][T16977] IPVS: stop unused estimator thread 0...
[  557.467429][T16973] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  557.503102][T16973] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  557.679149][T19654] 8021q: adding VLAN 0 to HW filter on device bond0
[  557.771092][T19654] 8021q: adding VLAN 0 to HW filter on device team0
[  557.818486][  T141] bridge0: port 1(bridge_slave_0) entered blocking state
[  557.825703][  T141] bridge0: port 1(bridge_slave_0) entered forwarding state
[  557.846719][T20153] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3288'.
[  557.851544][T20169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3290'.
[  557.882869][ T5648] block nbd3: Receive control failed (result -32)
[  557.883579][ T5636] block nbd3: Receive control failed (result -32)
[  557.895512][ T5642] block nbd3: Receive control failed (result -32)
[  557.914567][  T141] bridge0: port 2(bridge_slave_1) entered blocking state
[  557.921768][  T141] bridge0: port 2(bridge_slave_1) entered forwarding state
[  558.310036][T20185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3295'.
[  558.348721][T20185] openvswitch: netlink: Flow actions attr not present in new flow.
[  558.505787][T20195] syz_tun: entered allmulticast mode
[  558.837855][T20214] veth1_to_bond: entered allmulticast mode
[  558.895189][T20218] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3301'.
[  558.918770][T20214] veth1_to_bond: left allmulticast mode
[  559.097882][T20224] Bluetooth: MGMT ver 1.23
[  559.195066][T20224] syzkaller0: entered promiscuous mode
[  559.201649][T20224] syzkaller0: entered allmulticast mode
[  559.217864][T20231] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3305'.
[  559.227662][T19654] 8021q: adding VLAN 0 to HW filter on device batadv0
[  562.450525][T20234] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  562.625943][T20238] bond0: entered promiscuous mode
[  562.638611][T20238] bond_slave_0: entered promiscuous mode
[  562.663165][T20238] bond_slave_1: entered promiscuous mode
[  562.738869][T19654] veth0_vlan: entered promiscuous mode
[  562.795979][T19654] veth1_vlan: entered promiscuous mode
[  562.964662][T19654] veth0_macvtap: entered promiscuous mode
[  563.005541][T19654] veth1_macvtap: entered promiscuous mode
[  563.052329][T19654] batman_adv: batadv0: Interface activated: batadv_slave_0
[  563.169783][T20273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3316'.
[  563.189621][T19654] batman_adv: batadv0: Interface activated: batadv_slave_1
[  563.242185][T20273] netlink: 'syz.2.3316': attribute type 30 has an invalid length.
[  563.270803][T20278] Bluetooth: MGMT ver 1.23
[  563.281736][  T141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  563.304912][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  563.327776][  T141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  563.423812][  T141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  563.464561][  T141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  563.700623][  T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  563.730017][  T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  563.834996][T20292] bond0: entered promiscuous mode
[  563.868243][  T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  563.896294][  T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  563.902168][ T5749] IPVS: starting estimator thread 0...
[  564.016273][T20298] IPVS: using max 26 ests per chain, 62400 per kthread
[  564.325065][T20318] syz_tun: entered allmulticast mode
[  564.330843][T20320] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3328'.
[  564.383038][T20325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3328'.
[  564.495252][T20325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3328'.
[  564.574380][T20336] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 2, id = 0
[  564.750747][T20325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3328'.
[  565.090972][T20358] syz_tun: entered allmulticast mode
[  565.125639][T20358] bond0: entered promiscuous mode
[  565.148484][T20358] bond_slave_0: entered promiscuous mode
[  565.172094][T20358] bond_slave_1: entered promiscuous mode
[  565.460848][T20382] xt_hashlimit: size too large, truncated to 1048576
[  565.716241][T20401] sctp: [Deprecated]: syz.1.3343 (pid 20401) Use of int in maxseg socket option.
[  565.716241][T20401] Use struct sctp_assoc_value instead
[  566.058021][T20408] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3344'.
[  566.084659][T20408] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  566.321104][T20420] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3347'.
[  566.546310][T20437] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3352'.
[  566.580286][T20437] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3352'.
[  566.630781][T20435] bond0: entered promiscuous mode
[  566.640454][T20435] bond_slave_0: entered promiscuous mode
[  566.660779][T20435] bond_slave_1: entered promiscuous mode
[  566.815083][T20451] sctp: [Deprecated]: syz.4.3356 (pid 20451) Use of struct sctp_assoc_value in delayed_ack socket option.
[  566.815083][T20451] Use struct sctp_sack_info instead
[  567.045441][T20448] syzkaller0: entered promiscuous mode
[  567.077627][T20448] syzkaller0: entered allmulticast mode
[  567.098823][T20471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3360'.
[  567.110337][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3359'.
[  570.845472][T20469] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  570.847785][T20470] 8021q: adding VLAN 0 to HW filter on device bond1
[  570.920542][T20483] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  570.934926][T20483] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  570.964058][T20483] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  571.184656][T20506] __nla_validate_parse: 2 callbacks suppressed
[  571.184674][T20506] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3366'.
[  571.599034][T20525] netlink: 'syz.3.3371': attribute type 6 has an invalid length.
[  571.750459][T20531] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3374'.
[  571.761334][T20531] netlink: 'syz.1.3374': attribute type 11 has an invalid length.
[  571.788577][T20534] xt_TPROXY: Can be used only with -p tcp or -p udp
[  571.821844][T20531] 8021q: adding VLAN 0 to HW filter on device bond0
[  571.924205][T20531] virt_wifi0: entered promiscuous mode
[  571.944866][T20531] virt_wifi0: entered allmulticast mode
[  571.977285][T20536] mac80211_hwsim hwsim59 wlan0: entered promiscuous mode
[  571.990040][T20536] mac80211_hwsim hwsim59 wlan0: entered allmulticast mode
[  572.009645][T20539] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3377'.
[  572.095557][T20539] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3377'.
[  572.098459][T20542] netlink: 'syz.3.3377': attribute type 39 has an invalid length.
[  572.193150][T20547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  572.319834][T20559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3383'.
[  572.336505][T20560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3383'.
[  572.557433][T20570] netlink: 'syz.4.3386': attribute type 1 has an invalid length.
[  572.648076][T20570] bond2: entered promiscuous mode
[  572.678375][T20570] 8021q: adding VLAN 0 to HW filter on device bond2
[  572.739994][T20569] syz_tun: entered promiscuous mode
[  572.750916][T20569] syz_tun: left promiscuous mode
[  572.882221][T20589] x_tables: ip_tables: ah match: only valid for protocol 51
[  572.899807][T20570] bond2: (slave bridge1): making interface the new active one
[  572.910290][T20570] bridge1: entered promiscuous mode
[  572.917751][T20570] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  573.030394][T20588] 8021q: adding VLAN 0 to HW filter on device bond1
[  573.477066][T20611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3396'.
[  573.736492][T20621] netlink: 'syz.2.3398': attribute type 1 has an invalid length.
[  573.774102][T20621] netlink: 'syz.2.3398': attribute type 1 has an invalid length.
[  573.806907][T20624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3400'.
[  573.834397][T20622] bridge0: port 3(vlan2) entered blocking state
[  573.842268][T20622] bridge0: port 3(vlan2) entered disabled state
[  573.850928][T20622] vlan2: entered allmulticast mode
[  573.856599][T20622] dummy0: entered allmulticast mode
[  573.869675][T20622] vlan2: entered promiscuous mode
[  573.875272][T20622] dummy0: entered promiscuous mode
[  573.885542][T20630] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3400'.
[  573.927584][T20628] netlink: 'syz.1.3401': attribute type 83 has an invalid length.
[  573.998895][T20632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3401'.
[  574.027566][T20635] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  574.071844][T20635] syzkaller0: mtu less than device minimum
[  574.091519][T20634] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  574.165245][T20631] tipc: Disabling bearer <eth:syzkaller0>
[  574.541158][T20662] syzkaller0: entered promiscuous mode
[  574.564458][T20662] syzkaller0: entered allmulticast mode
[  574.725537][T20670] netlink: 'syz.2.3408': attribute type 1 has an invalid length.
[  574.793190][T20670] netlink: 'syz.2.3408': attribute type 3 has an invalid length.
[  574.874348][T20678] netlink: 'syz.0.3411': attribute type 1 has an invalid length.
[  574.891102][T20678] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  575.095504][T20688] netlink: 'syz.0.3414': attribute type 1 has an invalid length.
[  575.540127][T20688] bond1: entered promiscuous mode
[  575.549279][T20688] 8021q: adding VLAN 0 to HW filter on device bond1
[  575.590692][T20695] bond1: (slave bridge1): making interface the new active one
[  575.618798][T20695] bridge1: entered promiscuous mode
[  575.645443][T20695] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  576.181895][   T24] IPVS: starting estimator thread 0...
[  576.292605][T20737] IPVS: using max 26 ests per chain, 62400 per kthread
[  576.639315][T20732] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  576.665393][T20732] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  576.698715][T20732] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  576.775577][T20732] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  577.028501][T20765] syzkaller0: entered promiscuous mode
[  577.042589][T20765] syzkaller0: entered allmulticast mode
[  577.057386][T20771] tipc: New replicast peer: 172.30.0.3
[  577.067452][T20771] tipc: Enabled bearer <udp:syz2>, priority 10
[  577.094330][T20771] __nla_validate_parse: 8 callbacks suppressed
[  577.094350][T20771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3430'.
[  577.138667][T20771] tipc: Disabling bearer <udp:syz2>
[  577.293706][T20777] macvtap1: entered promiscuous mode
[  577.304697][T20777] bridge0: entered promiscuous mode
[  577.510276][T20785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3438'.
[  577.632141][T20798] nbd: socks must be embedded in a SOCK_ITEM attr
[  577.830579][T20807] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3443'.
[  577.842225][T20808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3445'.
[  577.932825][T20810] netlink: 'syz.1.3446': attribute type 1 has an invalid length.
[  578.043819][T20819] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3447'.
[  578.249864][T20810] bond4: (slave gretap2): making interface the new active one
[  578.287890][T20810] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  578.349654][T20825] macvlan2: entered promiscuous mode
[  578.355332][T20825] macvlan2: entered allmulticast mode
[  578.362209][T20825] bond4: entered promiscuous mode
[  578.368685][T20825] gretap2: entered promiscuous mode
[  578.377998][T20825] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  578.387041][T20825] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  578.404289][T20825] bond4: left promiscuous mode
[  578.409307][T20825] gretap2: left promiscuous mode
[  579.055065][T20861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3459'.
[  579.095386][T20861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3459'.
[  579.221311][T20873] tap0: tun_chr_ioctl cmd 1074025677
[  579.237470][T20873] tap0: linktype set to 6
[  579.539055][T20887] netlink: 'syz.3.3463': attribute type 4 has an invalid length.
[  579.574607][T20887] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3463'.
[  579.589717][T20887] netlink: 'syz.3.3463': attribute type 8 has an invalid length.
[  579.781076][T20893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3466'.
[  579.815497][T20893] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3466'.
[  579.957700][T20896] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  579.989460][T20896] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  580.233013][T20908] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  580.309562][T20906] bond2 (unregistering): Released all slaves
[  580.376212][T20915] netlink: 'syz.1.3473': attribute type 1 has an invalid length.
[  580.409787][T20908] batadv0: entered promiscuous mode
[  580.417577][T20908] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  580.446161][T20908] 8021q: adding VLAN 0 to HW filter on device hsr1
[  580.615102][T20915] 8021q: adding VLAN 0 to HW filter on device bond5
[  580.697684][T20921] vlan2: entered promiscuous mode
[  580.724826][T20921] bond5: entered promiscuous mode
[  580.761768][T20921] vlan2: entered allmulticast mode
[  580.779578][T20921] bond5: entered allmulticast mode
[  580.817743][T20926] bond5: (slave bridge1): making interface the new active one
[  580.826244][T20926] bridge1: entered promiscuous mode
[  580.834432][T20926] bridge1: entered allmulticast mode
[  580.842091][T20926] bond5: (slave bridge1): Enslaving as an active interface with an up link
[  581.736557][T20988] netlink: 'syz.4.3495': attribute type 2 has an invalid length.
[  582.184321][T21012] __nla_validate_parse: 7 callbacks suppressed
[  582.184342][T21012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3503'.
[  582.351899][T21023] xt_l2tp: wrong L2TP version: 0
[  582.418173][T21016] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3504'.
[  582.456419][T21007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3501'.
[  582.918748][T21052] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3511'.
[  583.221541][T21062] netlink: 'syz.3.3518': attribute type 6 has an invalid length.
[  583.321549][T21068] openvswitch: netlink: Message has 4 unknown bytes.
[  583.698676][T21089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3526'.
[  583.727480][T21094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3525'.
[  583.911463][T21077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3523'.
[  583.950762][T21104] pim6reg: entered allmulticast mode
[  583.998829][T21082] netlink: 'syz.2.3524': attribute type 13 has an invalid length.
[  584.275269][T21116] ÿ: renamed from bond_slave_0 (while UP)
[  584.401182][T21118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3530'.
[  584.467575][T21128] bond0: (slave wlan0): Enslaving as an active interface with an up link
[  584.775261][T21141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3535'.
[  584.793369][T21141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3535'.
[  585.588067][T21167] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  586.156167][T21167] ip6erspan0: entered promiscuous mode
[  586.173349][T21167] ip6erspan0: entered allmulticast mode
[  586.545677][T21215] netlink: zone id is out of range
[  586.568046][T21215] netlink: zone id is out of range
[  586.591610][T21215] netlink: zone id is out of range
[  586.606919][T21215] netlink: zone id is out of range
[  586.628049][T21215] netlink: zone id is out of range
[  586.674366][T21215] netlink: zone id is out of range
[  586.695063][T21215] netlink: zone id is out of range
[  586.719836][T21215] netlink: zone id is out of range
[  586.744127][T21215] netlink: zone id is out of range
[  587.291922][T21255] xt_CT: You must specify a L4 protocol and not use inversions on it
[  587.604330][T21261] syzkaller1: entered promiscuous mode
[  587.633324][T21261] syzkaller1: entered allmulticast mode
[  587.929061][T21291] __nla_validate_parse: 5 callbacks suppressed
[  587.929082][T21291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3573'.
[  588.088327][T21297] netlink: 396 bytes leftover after parsing attributes in process `syz.2.3576'.
[  588.312789][T21315] xt_hl: Unknown Hop Limit match mode: 206
[  588.319035][T21301] Can't find ip_set type ñ©sh:ip,port,ip
[  588.923213][ T5642] block nbd4: Receive control failed (result -32)
[  588.934033][ T5636] block nbd5: Receive control failed (result -32)
[  589.147085][T21355] xt_hashlimit: size too large, truncated to 1048576
[  589.230546][T21358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3586'.
[  589.246269][T21357] bridge_slave_0 (unregistering): left allmulticast mode
[  589.311899][T21357] bridge_slave_0 (unregistering): left promiscuous mode
[  589.367840][T21357] bridge0: port 1(bridge_slave_0) entered disabled state
[  589.374011][T21360] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3583'.
[  589.725375][T21373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3589'.
[  590.375723][T21397] netlink: 'syz.4.3591': attribute type 2 has an invalid length.
[  590.468490][T21397] netlink: 'syz.4.3591': attribute type 2 has an invalid length.
[  590.710703][T21388] macsec1: entered promiscuous mode
[  591.816549][T21445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3602'.
[  591.827048][T21442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3601'.
[  591.863077][T21445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3602'.
[  591.900496][T21445] syzkaller0: entered promiscuous mode
[  591.908133][T21445] syzkaller0: entered allmulticast mode
[  592.258954][T21463] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1794354000/1794354002
[  592.285320][T21463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3608'.
[  592.306416][T21462] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1794354000/1794354002
[  592.332676][T21462] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1794354000/1794354002
[  592.349027][T21468] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3610'.
[  592.614055][T21466] netlink: 'syz.0.3607': attribute type 1 has an invalid length.
[  597.814085][T21541] __nla_validate_parse: 3 callbacks suppressed
[  597.814105][T21541] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3623'.
[  597.827583][T21538] x_tables: duplicate underflow at hook 1
[  598.224536][T21556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3625'.
[  598.286965][T21561] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3628'.
[  598.311031][T21561] netlink: 'syz.2.3628': attribute type 1 has an invalid length.
[  598.398562][T21566] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3629'.
[  598.469220][T21569] sctp: [Deprecated]: syz.4.3630 (pid 21569) Use of int in max_burst socket option deprecated.
[  598.469220][T21569] Use struct sctp_assoc_value instead
[  599.017493][T21585] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3634'.
[  599.079039][T21585] net_ratelimit: 8 callbacks suppressed
[  599.079062][T21585] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  599.159778][T21582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3633'.
[  599.206777][T21601] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3636'.
[  599.403973][T21601] bond0 (unregistering): (slave 
0
7ÿ): Releasing backup interface
[  599.417533][T21601] ÿ: left promiscuous mode
[  599.426858][T21601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  599.450803][T21601] bond_slave_1: left promiscuous mode
[  599.475204][T21601] bond0 (unregistering): Released all slaves
[  599.551826][T21610] bridge2: entered promiscuous mode
[  599.555268][T21615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3640'.
[  599.569664][T21610] bridge2: entered allmulticast mode
[  599.696747][T21617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3641'.
[  599.822015][T21624] netlink: 'syz.1.3644': attribute type 1 has an invalid length.
[  599.930310][T21624] 8021q: adding VLAN 0 to HW filter on device bond6
[  599.966572][T21634] xt_hashlimit: size too large, truncated to 1048576
[  600.148085][T21624] bond6: (slave veth3): Enslaving as an active interface with a down link
[  600.255991][T21635] 8021q: adding VLAN 0 to HW filter on device batadv1
[  600.275944][T21643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3646'.
[  600.290962][T21635] bond6: (slave batadv1): making interface the new active one
[  600.304878][T21635] batadv1: entered promiscuous mode
[  600.311456][T21635] bond6: (slave batadv1): Enslaving as an active interface with an up link
[  600.363556][T21642] bond6 (unregistering): (slave veth3): Releasing active interface
[  600.406404][T21642] bond6 (unregistering): (slave batadv1): Releasing active interface
[  600.444158][T21642] bond6 (unregistering): Released all slaves
[  600.506884][T21655] netlink: 'syz.4.3648': attribute type 3 has an invalid length.
[  600.726959][T21658] netlink: 'syz.3.3650': attribute type 10 has an invalid length.
[  600.774413][T21658] bridge0: port 3(vlan2) entered blocking state
[  600.783254][T21658] bridge0: port 3(vlan2) entered forwarding state
[  600.829745][T21662] netlink: 'syz.3.3650': attribute type 10 has an invalid length.
[  600.851731][T21658] team0: Port device dummy0 added
[  600.904941][T21662] bridge0: port 3(vlan2) entered disabled state
[  600.940225][T21662] team0: Port device dummy0 removed
[  600.995861][T21662] bridge0: port 3(vlan2) entered blocking state
[  601.002630][T21662] bridge0: port 3(vlan2) entered forwarding state
[  601.013731][T21671] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  601.115223][T21662] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  601.170151][T21681] netlink: 'syz.0.3654': attribute type 3 has an invalid length.
[  603.111475][T21745] __nla_validate_parse: 3 callbacks suppressed
[  603.111497][T21745] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3663'.
[  603.631370][T21738] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3663'.
[  603.638928][T21759] siw: device registration error -23
[  603.670681][T21738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3663'.
[  603.753437][T21738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3663'.
[  603.783889][T21738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3663'.
[  603.809331][T21738] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3663'.
[  603.821711][T21738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3663'.
[  603.831763][T21738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3663'.
[  604.903255][T21798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3669'.
[  605.696560][T21824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3674'.
[  605.976617][T21824] 8021q: adding VLAN 0 to HW filter on device bond0
[  606.178138][T21833] 8021q: adding VLAN 0 to HW filter on device bond3
[  606.235286][T21833] bond0: (slave bond3): Enslaving as an active interface with an up link
[  606.300018][T21836] bond0 (unregistering): (slave bond3): Releasing backup interface
[  606.343986][T21836] bond0 (unregistering): Released all slaves
[  607.255579][T21883] netlink: 'syz.4.3684': attribute type 1 has an invalid length.
[  607.293779][T21883] 8021q: adding VLAN 0 to HW filter on device bond0
[  607.339598][T21883] bond0: (slave veth3): Enslaving as an active interface with a down link
[  607.410550][T21883] 8021q: adding VLAN 0 to HW filter on device batadv1
[  607.468306][T21883] bond0: (slave batadv1): making interface the new active one
[  607.501376][T21883] batadv1: entered promiscuous mode
[  607.508900][T21883] bond0: (slave batadv1): Enslaving as an active interface with an up link
[  608.287980][T21929] __nla_validate_parse: 5 callbacks suppressed
[  608.288009][T21929] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3694'.
[  608.393530][T21933] x_tables: ip6_tables: mh match: only valid for protocol 135
[  609.501719][T21975] syz.3.3699: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  609.524882][T21975] CPU: 0 UID: 0 PID: 21975 Comm: syz.3.3699 Not tainted syzkaller #0 PREEMPT(full) 
[  609.524906][T21975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  609.524915][T21975] Call Trace:
[  609.524923][T21975]  <TASK>
[  609.524931][T21975]  dump_stack_lvl+0xe8/0x150
[  609.524956][T21975]  warn_alloc+0x249/0x340
[  609.524990][T21975]  ? stack_trace_save+0xa9/0x100
[  609.525016][T21975]  ? __pfx_warn_alloc+0x10/0x10
[  609.525044][T21975]  ? kasan_save_track+0x4f/0x80
[  609.525064][T21975]  ? kasan_save_track+0x3e/0x80
[  609.525082][T21975]  ? __kasan_kmalloc+0x93/0xb0
[  609.525102][T21975]  ? __kmalloc_cache_noprof+0x31c/0x660
[  609.525122][T21975]  ? xskq_create+0x56/0x170
[  609.525144][T21975]  ? xsk_setsockopt+0x54c/0x990
[  609.525163][T21975]  ? do_sock_setsockopt+0x17c/0x1b0
[  609.525178][T21975]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  609.525193][T21975]  ? do_syscall_64+0x174/0x580
[  609.525213][T21975]  __vmalloc_node_range_noprof+0x132/0x1750
[  609.525264][T21975]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  609.525292][T21975]  ? __kasan_kmalloc+0x93/0xb0
[  609.525320][T21975]  vmalloc_user_noprof+0xad/0xe0
[  609.525342][T21975]  ? xskq_create+0xbf/0x170
[  609.525365][T21975]  xskq_create+0xbf/0x170
[  609.525390][T21975]  xsk_init_queue+0x8a/0xe0
[  609.525414][T21975]  xsk_setsockopt+0x54c/0x990
[  609.525438][T21975]  ? __pfx_xsk_setsockopt+0x10/0x10
[  609.525460][T21975]  ? __pfx_aa_sk_perm+0x10/0x10
[  609.525486][T21975]  ? aa_sock_opt_perm+0xff/0x1a0
[  609.525512][T21975]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  609.525537][T21975]  ? __pfx_xsk_setsockopt+0x10/0x10
[  609.525559][T21975]  do_sock_setsockopt+0x17c/0x1b0
[  609.525580][T21975]  __x64_sys_setsockopt+0x13d/0x1b0
[  609.525600][T21975]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.525617][T21975]  do_syscall_64+0x174/0x580
[  609.525633][T21975]  ? trace_irq_disable+0x3b/0x140
[  609.525655][T21975]  ? clear_bhb_loop+0x40/0x90
[  609.525675][T21975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.525690][T21975] RIP: 0033:0x7f514059ce59
[  609.525706][T21975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  609.525719][T21975] RSP: 002b:00007f51413a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  609.525738][T21975] RAX: ffffffffffffffda RBX: 00007f5140815fa0 RCX: 00007f514059ce59
[  609.525749][T21975] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  609.525759][T21975] RBP: 00007f5140632d6f R08: 0000000000000004 R09: 0000000000000000
[  609.525768][T21975] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  609.525778][T21975] R13: 00007f5140816038 R14: 00007f5140815fa0 R15: 00007fffc60cb868
[  609.525807][T21975]  </TASK>
[  609.525827][T21975] Mem-Info:
[  609.815137][T21975] active_anon:5848 inactive_anon:5 isolated_anon:0
[  609.815137][T21975]  active_file:2817 inactive_file:40540 isolated_file:0
[  609.815137][T21975]  unevictable:768 dirty:183 writeback:0
[  609.815137][T21975]  slab_reclaimable:12772 slab_unreclaimable:140780
[  609.815137][T21975]  mapped:29536 shmem:1432 pagetables:1318
[  609.815137][T21975]  sec_pagetables:0 bounce:0
[  609.815137][T21975]  kernel_misc_reclaimable:0
[  609.815137][T21975]  free:1277631 free_pcp:9553 free_cma:0
[  609.911578][T21975] Node 0 active_anon:23492kB inactive_anon:20kB active_file:11268kB inactive_file:161952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118144kB dirty:732kB writeback:0kB shmem:4192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16432kB pagetables:4876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  609.953932][T21975] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:96kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  610.041462][T21975] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  610.074786][T21975] lowmem_reserve[]: 0 2492 2493 2493 2493
[  610.077958][T21997] openvswitch: netlink: nsh attr 0 has unexpected len 6 expected 0
[  610.080727][T21975] Node 0 DMA32 free:1158704kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23392kB inactive_anon:20kB active_file:11268kB inactive_file:161952kB unevictable:1536kB writepending:732kB zspages:0kB present:3129332kB managed:2552596kB mlocked:0kB bounce:0kB free_pcp:34168kB local_pcp:12976kB free_cma:0kB
[  610.090374][T21997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  610.135925][T21975] lowmem_reserve[]: 0 0 0 0 0
[  610.178583][T21975] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  610.240021][T21975] lowmem_reserve[]: 0 0 0 0 0
[  610.302892][T21975] Node 1 Normal free:3936232kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:3776kB local_pcp:3776kB free_cma:0kB
[  610.391858][T21975] lowmem_reserve[]: 0 0 0 0 0
[  610.407997][T21975] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  610.434037][T22007] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  610.445593][T21975] Node 0 DMA32: 6439*4kB (UME) 6041*8kB (UME) 3046*16kB (UME) 344*32kB (UME) 468*64kB (UME) 806*128kB (UME) 611*256kB (UME) 317*512kB (UME) 217*1024kB (UME) 116*2048kB (UME) 28*4096kB (UM) = 1160132kB
[  610.500632][T22013] pim6reg1: entered promiscuous mode
[  610.505003][T21975] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  610.506319][T22013] pim6reg1: entered allmulticast mode
[  610.533648][T21975] Node 1 Normal: 0*4kB 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 0*2048kB 960*4096kB (M) = 3936232kB
[  610.552003][T21975] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  610.575053][T21975] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  610.598439][T21975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  610.609423][T21975] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  610.622196][T21975] 44785 total pagecache pages
[  610.635537][T22018] netlink: 'syz.1.3712': attribute type 1 has an invalid length.
[  610.644101][T21975] 0 pages in swap cache
[  610.648321][T21975] Free swap  = 124996kB
[  610.656416][T21975] Total swap = 124996kB
[  610.665497][T21975] 2097051 pages RAM
[  610.675188][T21975] 0 pages HighMem/MovableOnly
[  610.682583][T21975] 427119 pages reserved
[  610.697826][T22018] bond6: entered promiscuous mode
[  610.703965][T22018] 8021q: adding VLAN 0 to HW filter on device bond6
[  610.719000][T22018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3712'.
[  610.720663][T21975] 0 pages cma reserved
[  610.728571][T22018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3712'.
[  610.799279][T22018] bond6: (slave bridge3): making interface the new active one
[  610.807539][T22018] bridge3: entered promiscuous mode
[  610.849349][T22018] bond6: (slave bridge3): Enslaving as an active interface with an up link
[  611.246395][T22044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3716'.
[  611.306462][T22045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3716'.
[  611.426790][T22051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3718'.
[  611.771643][T22051] syzkaller0: entered promiscuous mode
[  611.777680][T22051] syzkaller0: entered allmulticast mode
[  611.968924][T22051] veth5: entered allmulticast mode
[  611.984691][T22077] netlink: 'syz.3.3724': attribute type 4 has an invalid length.
[  611.992027][T22051] bond7: (slave veth5): Enslaving as an active interface with an up link
[  612.028964][T22077] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3724'.
[  612.029678][T22056] bond7 (unregistering): (slave veth5): Releasing backup interface
[  612.130447][T22056] bond7 (unregistering): Released all slaves
[  612.179349][T22092] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3724'.
[  612.194505][T22092] openvswitch: netlink: Flow key attr not present in new flow.
[  612.228112][T22093] xt_CT: You must specify a L4 protocol and not use inversions on it
[  612.228695][T22093] netlink: 'syz.2.3726': attribute type 21 has an invalid length.
[  612.294445][T22084] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3724'.
[  613.012177][T22135] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3734'.
[  613.057445][T22131] netlink: 'syz.3.3734': attribute type 1 has an invalid length.
[  613.099286][T22131] netlink: 'syz.3.3734': attribute type 1 has an invalid length.
[  613.341701][T22150] netlink: 'syz.1.3741': attribute type 1 has an invalid length.
[  613.381083][T22150] 8021q: adding VLAN 0 to HW filter on device bond7
[  613.435891][T22150] vlan4: entered promiscuous mode
[  613.444503][T22150] bond7: entered promiscuous mode
[  613.449837][T22150] vlan4: entered allmulticast mode
[  613.458480][T22150] bond7: entered allmulticast mode
[  613.532590][T22152] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3741'.
[  613.789907][T22164] netlink: 'syz.1.3744': attribute type 1 has an invalid length.
[  613.831972][T22164] Bluetooth: MGMT ver 1.23
[  614.101298][T22186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3750'.
[  614.229007][T22184] syzkaller0: entered promiscuous mode
[  614.240154][T22184] syzkaller0: entered allmulticast mode
[  614.315306][T22192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3752'.
[  614.345470][T22192] hsr_slave_0: left promiscuous mode
[  614.365613][T22192] hsr_slave_1: left promiscuous mode
[  614.386911][T22195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3753'.
[  614.449917][T22195] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  614.483590][T22202] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3754'.
[  614.538192][T22203] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3754'.
[  614.692061][T22213] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3757'.
[  614.791702][T22218] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3758'.
[  614.794502][T22219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3756'.
[  614.814990][T22213] bond0: left promiscuous mode
[  614.819923][T22213] bond_slave_0: left promiscuous mode
[  614.828583][T22213] bond_slave_1: left promiscuous mode
[  614.854896][T22213] 8021q: adding VLAN 0 to HW filter on device bond0
[  614.864978][T22213] 8021q: adding VLAN 0 to HW filter on device team0
[  614.894938][T22213] 8021q: adding VLAN 0 to HW filter on device batadv0
[  615.055167][T22213] batman_adv: batadv0: Interface activated: batadv_slave_0
[  615.081675][T22213] batman_adv: batadv0: Interface activated: batadv_slave_1
[  615.102301][T22213] veth1_macvtap: left promiscuous mode
[  615.138056][T22213] veth0_macvtap: left promiscuous mode
[  615.157688][T22213] veth0_macvtap: entered promiscuous mode
[  615.169978][T22213] veth1_macvtap: entered promiscuous mode
[  615.228972][T22213] bond1: left promiscuous mode
[  615.248576][T22213] bridge1: left promiscuous mode
[  615.273408][T22213] 8021q: adding VLAN 0 to HW filter on device eth0
[  615.288657][T22213] 8021q: adding VLAN 0 to HW filter on device eth1
[  615.306568][T22213] 8021q: adding VLAN 0 to HW filter on device eth2
[  615.323891][T22213] 8021q: adding VLAN 0 to HW filter on device eth3
[  615.348717][T16973] bridge0: port 2(bridge_slave_1) entered blocking state
[  615.356001][T16973] bridge0: port 2(bridge_slave_1) entered forwarding state
[  615.484484][T10018] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  615.500825][T22246] netlink: 'syz.0.3762': attribute type 10 has an invalid length.
[  615.511390][T22246] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3762'.
[  615.513861][T10018] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  615.521249][T22248] netlink: 'syz.0.3762': attribute type 10 has an invalid length.
[  615.582880][T10018] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  615.623107][T10018] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  615.852471][ T5648] Bluetooth: hci2: command 0x0401 tx timeout
[  615.855364][ T5636] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  616.023945][T22243] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.278255][T22268] bond0: entered promiscuous mode
[  616.292909][T22268] bond_slave_0: entered promiscuous mode
[  616.307906][T22268] bond_slave_1: entered promiscuous mode
[  616.348381][T16968] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  616.495342][T22243] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.586327][ T5636] Bluetooth: hci5: command 0x0406 tx timeout
[  616.678483][T22285] bridge0: port 2(bridge_slave_1) entered disabled state
[  616.688817][T22285] bridge0: port 1(bridge_slave_0) entered disabled state
[  616.834761][T22243] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.949968][T22294] netlink: 'syz.0.3771': attribute type 1 has an invalid length.
[  617.001684][T22294] 8021q: adding VLAN 0 to HW filter on device bond2
[  617.155697][T22243] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  617.208351][T22294] veth0: entered promiscuous mode
[  617.286534][T22304] xt_CT: No such helper "netbios-ns"
[  617.288175][T22294] veth0: left promiscuous mode
[  617.748803][ T6151] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  617.875406][T10563] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  617.963775][T16968] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  618.051983][ T6151] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  618.798556][T22356] __nla_validate_parse: 6 callbacks suppressed
[  618.798578][T22356] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3784'.
[  619.003221][T22362] netlink: 'syz.3.3786': attribute type 10 has an invalid length.
[  619.088047][T22362] bridge0: port 3(vlan2) entered disabled state
[  619.148182][T22362] bond0: (slave dummy0): Releasing backup interface
[  619.199223][T22371] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6
[  619.236611][T22362] bridge0: port 3(vlan2) entered blocking state
[  619.243144][T22362] bridge0: port 3(vlan2) entered forwarding state
[  619.338482][T22362] team0: Port device dummy0 added
[  619.565444][T10563] batadv1: left promiscuous mode
[  619.711285][T22389] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3793'.
[  619.911180][T22400] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  619.911665][T22382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3791'.
[  620.092689][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  620.119003][   T30] audit: type=1800 audit(1780525613.627:9): pid=22405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3795" name="r" dev="tmpfs" ino=920 res=0 errno=0
[  620.317664][T22409] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3796'.
[  620.409281][T22417] netlink: 'syz.3.3798': attribute type 1 has an invalid length.
[  620.419949][T22415] netlink: 'syz.3.3798': attribute type 1 has an invalid length.
[  620.753871][T22400] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  621.089297][T22455] veth1_macvtap: left promiscuous mode
[  621.137252][T22441] netlink: 'syz.0.3806': attribute type 29 has an invalid length.
[  621.145958][T22441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3806'.
[  621.155331][T22452] xt_CT: You must specify a L4 protocol and not use inversions on it
[  621.246792][T22455] veth1_macvtap: entered promiscuous mode
[  621.560885][T22465] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  621.641814][T22467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3810'.
[  622.328146][T22492] geneve2: entered promiscuous mode
[  622.616426][T22511] netlink: set zone limit has 8 unknown bytes
[  622.679744][T22511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3816'.
[  622.829518][T22517] netlink: 'syz.4.3822': attribute type 8 has an invalid length.
[  622.850531][T22520] lo: entered allmulticast mode
[  622.853433][T22517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3822'.
[  622.881135][T22519] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3822'.
[  622.884387][T22520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  622.939074][T22517] veth1_to_team: entered promiscuous mode
[  622.947030][T22517] gretap0: entered promiscuous mode
[  622.958447][T22517] veth1_to_team: left promiscuous mode
[  622.979971][T22517] gretap0: left promiscuous mode
[  623.227247][T22542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3827'.
[  623.504516][T22550] tun0: tun_chr_ioctl cmd 1074025681
[  623.595872][T22558] siw: device registration error -23
[  623.838634][T22569] bridge4: entered allmulticast mode
[  624.537870][T22596] __nla_validate_parse: 1 callbacks suppressed
[  624.537891][T22596] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3842'.
[  624.753625][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  625.000475][T22611] netlink: 'syz.3.3848': attribute type 1 has an invalid length.
[  625.009970][T22611] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  625.356276][T22624] netlink: 'syz.4.3853': attribute type 3 has an invalid length.
[  625.515840][T22635] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3856'.
[  625.553564][T22635] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3856'.
[  625.560764][T22636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3855'.
[  625.609024][T22635] bridge0: port 2(bridge_slave_1) entered blocking state
[  625.616426][T22635] bridge0: port 2(bridge_slave_1) entered listening state
[  625.624040][T22635] bridge0: port 1(bridge_slave_0) entered blocking state
[  625.631294][T22635] bridge0: port 1(bridge_slave_0) entered listening state
[  625.739232][T22634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3854'.
[  625.794831][T22634] ipvlan2: entered allmulticast mode
[  626.338238][T22657] syzkaller0: entered promiscuous mode
[  626.348209][T22657] syzkaller0: entered allmulticast mode
[  626.665850][T22667] xt_cgroup: invalid path, errno=-2
[  626.749538][T22668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3863'.
[  626.823834][ T5636] Bluetooth: hci1: command 0x0406 tx timeout
[  627.932894][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  628.459779][T22636] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  631.012108][T22700] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3869'.
[  631.574856][T22727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3874'.
[  632.287652][T22757] netlink: 'syz.2.3883': attribute type 1 has an invalid length.
[  632.515101][T22760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3884'.
[  632.544868][T22760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3884'.
[  632.646134][T22767] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  632.755365][T22767] team0: Mode changed to "activebackup"
[  632.892036][T22782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3887'.
[  633.531051][T22806] syzkaller1: entered promiscuous mode
[  633.545266][T22806] syzkaller1: entered allmulticast mode
[  634.409359][T22838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3901'.
[  634.476722][T22838] bridge3: port 1(veth0_to_bond) entered blocking state
[  634.490132][T22838] bridge3: port 1(veth0_to_bond) entered disabled state
[  634.498406][T22838] veth0_to_bond: entered allmulticast mode
[  634.509207][T22838] veth0_to_bond: entered promiscuous mode
[  634.517769][T22838] bridge3: port 1(veth0_to_bond) entered blocking state
[  634.525039][T22838] bridge3: port 1(veth0_to_bond) entered forwarding state
[  634.808984][T22852] batman_adv: batadv0: Adding interface: dummy0
[  634.835078][T22852] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  634.886344][T22852] batman_adv: batadv0: Interface activated: dummy0
[  635.061484][T22850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3904'.
[  635.076173][T22861] batadv0: mtu less than device minimum
[  635.131540][T22861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  635.143625][T22861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  635.155784][T22861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  635.167791][T22861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  635.179851][T22861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  635.191894][T22861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  635.203967][T22861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  635.216032][T22861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  635.830128][T22896] bond1: option resend_igmp: invalid value (2878)
[  635.843511][T22896] bond1: option resend_igmp: allowed values 0 - 255
[  635.875699][T22896] bond1 (unregistering): Released all slaves
[  635.941826][T22905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3912'.
[  636.174869][ T5642] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  636.445857][T22925] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3918'.
[  636.631811][T22936] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3920'.
[  636.672871][T22937] Cannot find add_set index 0 as target
[  637.471333][T22982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3930'.
[  637.665591][T22982] tipc: Started in network mode
[  637.703263][T22982] tipc: Node identity ca239fb5f741, cluster identity 4711
[  637.732223][T22983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3932'.
[  637.746683][T22982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  637.768437][T22983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3932'.
[  637.802018][T22983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3932'.
[  637.933929][T22989] syzkaller0: entered promiscuous mode
[  637.939841][T22989] syzkaller0: entered allmulticast mode
[  637.944568][T22975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3931'.
[  637.956185][T22989] tipc: Resetting bearer <eth:syzkaller0>
[  638.006427][T22969] tipc: Resetting bearer <eth:syzkaller0>
[  640.174219][ T5648] Bluetooth: hci2: command 0x0401 tx timeout
[  642.190003][ T5642] Bluetooth: hci3: command 0x0406 tx timeout
[  642.411250][T22969] tipc: Disabling bearer <eth:syzkaller0>
[  642.467963][T11463] tipc: Node number set to 1029873589
[  642.652622][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  642.713557][T23028] xt_hashlimit: size too large, truncated to 1048576
[  642.799257][T23030] syzkaller0: entered promiscuous mode
[  642.806284][T23028] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  642.823752][T23030] syzkaller0: entered allmulticast mode
[  643.228290][T23047] syzkaller0: entered promiscuous mode
[  643.249478][T23047] syzkaller0: entered allmulticast mode
[  643.870444][T23075] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3951'.
[  643.891040][T23075] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3951'.
[  643.914194][T23077] netlink: 632 bytes leftover after parsing attributes in process `syz.0.3950'.
[  644.209650][T23085] Cannot find set identified by id 65534 to match
[  644.248523][T23085] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3952'.
[  644.270549][T23085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3952'.
[  644.374963][T23094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3956'.
[  644.385056][T23096] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3954'.
[  644.601129][T23099] net_ratelimit: 11 callbacks suppressed
[  644.601148][T23099] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  645.182171][T23123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3963'.
[  645.652652][T23146] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  645.680681][T23143] syzkaller0: entered promiscuous mode
[  645.702546][T23143] syzkaller0: entered allmulticast mode
[  645.907930][T23158] netlink: 'syz.4.3970': attribute type 1 has an invalid length.
[  645.917122][T23158] netlink: 'syz.4.3970': attribute type 2 has an invalid length.
[  645.917239][T23160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3971'.
[  645.931759][T23158] netlink: 'syz.4.3970': attribute type 1 has an invalid length.
[  645.957907][T23158] netlink: 'syz.4.3970': attribute type 3 has an invalid length.
[  645.985315][T23158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3970'.
[  646.235080][T23179] sctp: [Deprecated]: syz.0.3974 (pid 23179) Use of int in maxseg socket option.
[  646.235080][T23179] Use struct sctp_assoc_value instead
[  646.781349][T23191] netlink: 'syz.2.3977': attribute type 4 has an invalid length.
[  646.973216][T23200] 8021q: VLANs not supported on wg2
[  647.105506][T23205] xt_TPROXY: Can be used only with -p tcp or -p udp
[  647.823511][T23242] bridge0: port 1(vlan3) entered blocking state
[  647.830716][T23242] bridge0: port 1(vlan3) entered disabled state
[  647.839244][T23242] vlan3: entered allmulticast mode
[  647.861291][T23242] geneve0: entered allmulticast mode
[  647.909098][T23242] vlan3: entered promiscuous mode
[  647.943439][T23242] geneve0: entered promiscuous mode
[  650.987711][T23251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  651.166919][T23280] openvswitch: netlink: IP tunnel dst address not specified
[  651.276660][T23280] IPv6: sit1: Disabled Multicast RS
[  651.425144][T23280] __nla_validate_parse: 7 callbacks suppressed
[  651.425166][T23280] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3999'.
[  651.453033][T23280] bond0: left promiscuous mode
[  651.460240][T23280] bond_slave_0: left promiscuous mode
[  651.470401][T23280] bond_slave_1: left promiscuous mode
[  651.481900][T23280] 8021q: adding VLAN 0 to HW filter on device bond0
[  651.552077][T23280] mac80211_hwsim hwsim59 wlan0: left promiscuous mode
[  651.591636][T23280] bond3: left promiscuous mode
[  651.624008][T23280] macsec1: left promiscuous mode
[  651.647076][T23280] macvtap1: left promiscuous mode
[  651.671463][T23280] 8021q: adding VLAN 0 to HW filter on device bond4
[  651.687821][T23280] vlan2: left promiscuous mode
[  651.695567][T23280] bond5: left promiscuous mode
[  651.700679][T23280] bridge1: left promiscuous mode
[  651.708697][T23280] ip6erspan0: left promiscuous mode
[  651.715640][T23280] bridge2: left promiscuous mode
[  651.727288][T23280] 8021q: adding VLAN 0 to HW filter on device batadv1
[  651.736156][T23280] bond6: left promiscuous mode
[  651.741077][T23280] bridge3: left promiscuous mode
[  651.757434][T23280] vlan4: left promiscuous mode
[  651.763055][T23280] bond7: left promiscuous mode
[  651.788025][T16973] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  651.871784][T23310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4006'.
[  651.939129][T23314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4006'.
[  652.029669][T23290] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.109323][T23290] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.166778][T23330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4008'.
[  652.176541][T23330] openvswitch: netlink: Message has 2 unknown bytes.
[  652.185516][T23330] ieee802154 phy1 wpan1: encryption failed: -22
[  652.214020][T23290] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.302226][T23290] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.387859][T10018] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  652.414113][ T5642] Bluetooth: hci2: command 0x0401 tx timeout
[  652.438820][T10018] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  652.462723][T23338] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4009'.
[  652.500126][T16973] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  652.585930][T10018] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  652.954700][T23353] x_tables: duplicate underflow at hook 1
[  654.679782][T23310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  654.945291][T23366] veth1: entered promiscuous mode
[  654.959123][T23366] macsec1: entered promiscuous mode
[  654.980087][T23366] macsec1: entered allmulticast mode
[  654.995537][T23366] veth1: entered allmulticast mode
[  655.005563][T23374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4016'.
[  655.024259][T23366] veth1: left allmulticast mode
[  655.035661][T23366] veth1: left promiscuous mode
[  655.077938][T23361] netlink: 'syz.1.4015': attribute type 1 has an invalid length.
[  655.460137][T23380] x_tables: duplicate underflow at hook 2
[  655.621967][T16973] pimreg: left allmulticast mode
[  655.696833][T23408] netlink: 277 bytes leftover after parsing attributes in process `syz.3.4025'.
[  656.093960][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  656.101510][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  656.109074][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  656.581762][T16973] bond7 (unregistering): (slave gretap2): Releasing active interface
[  656.614894][T16973] bond12 (unregistering): (slave gretap3): Releasing backup interface
[  656.757129][T16973] bond11 (unregistering): (slave geneve2): Releasing active interface
[  656.825501][T16973] bond4 (unregistering): (slave bridge2): Releasing backup interface
[  656.835408][T16973] bridge2 (unregistering): left promiscuous mode
[  656.841796][T16973] bridge2 (unregistering): left allmulticast mode
[  656.892060][T16973] bond0 (unregistering): Released all slaves
[  656.904627][T16973] bond1 (unregistering): Released all slaves
[  656.920200][T16973] bond2 (unregistering): Released all slaves
[  656.941895][T16973] bond3 (unregistering): Released all slaves
[  656.959260][T16973] bond4 (unregistering): Released all slaves
[  656.981401][T16973] bond5 (unregistering): (slave veth5): Releasing backup interface
[  656.995469][T16973] veth5: left promiscuous mode
[  657.001284][T16973] bond5 (unregistering): Released all slaves
[  657.017199][T16973] bond6 (unregistering): Released all slaves
[  657.033076][T16973] bond7 (unregistering): Released all slaves
[  657.049019][T16973] bond8 (unregistering): (slave bond9): Releasing backup interface
[  657.057952][T16973] bond9 (unregistering): left promiscuous mode
[  657.073124][T16973] bond8 (unregistering): Released all slaves
[  657.090135][T16973] bond9 (unregistering): Released all slaves
[  657.113353][T16973] bond10 (unregistering): Released all slaves
[  657.136766][T16973] bond11 (unregistering): Released all slaves
[  657.151705][T16973] bond12 (unregistering): Released all slaves
[  657.175519][T16973] bond13 (unregistering): Released all slaves
[  657.571447][T16973] hmac(sha2: left promiscuous mode
[  657.635676][T23445] netlink: 'syz.3.4030': attribute type 1 has an invalid length.
[  657.696492][T23447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4033'.
[  657.891476][T23460] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.4035'.
[  657.996821][T23462] xt_HMARK: spi-set and port-set can't be combined
[  658.104827][T23447] bond0: left promiscuous mode
[  658.133572][T23435] syzkaller1: tun_chr_ioctl cmd 1074025677
[  658.183124][T23435] syzkaller1: Refused to change device type
[  658.501885][T23473] netlink: 'syz.1.4037': attribute type 13 has an invalid length.
[  658.541609][T23473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4037'.
[  660.105651][T16973] IPVS: stop unused estimator thread 0...
[  661.150031][T23465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  661.435463][T23495] syzkaller1: entered promiscuous mode
[  661.449967][T23495] syzkaller1: entered allmulticast mode
[  661.496895][T23497] pimreg: entered allmulticast mode
[  661.524627][T23497] pimreg: left allmulticast mode
[  661.696078][T23511] netlink: 'syz.1.4051': attribute type 4 has an invalid length.
[  661.752237][T23511] netlink: 'syz.1.4051': attribute type 4 has an invalid length.
[  661.941190][T23521] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4053'.
[  661.983261][T23511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4051'.
[  662.000096][T23532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4055'.
[  662.109642][T23536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4055'.
[  662.245522][T23541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4057'.
[  662.686348][T23554] netlink: 'syz.0.4062': attribute type 12 has an invalid length.
[  662.719779][T23558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4062'.
[  662.760862][T23554] macsec0: entered promiscuous mode
[  662.815422][T23551] macsec0: left promiscuous mode
[  662.859505][T23570] netlink: 'syz.3.4067': attribute type 3 has an invalid length.
[  662.872937][T23563] syzkaller0: entered promiscuous mode
[  662.895690][T23563] syzkaller0: entered allmulticast mode
[  662.904463][T23570] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4067'.
[  663.313221][T23589] syzkaller0: entered promiscuous mode
[  663.321165][T23589] syzkaller0: entered allmulticast mode
[  663.335817][T23589] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  663.381022][T23589] tipc: Resetting bearer <eth:syzkaller0>
[  663.399033][T23588] tipc: Resetting bearer <eth:syzkaller0>
[  663.424156][T23598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4073'.
[  663.434411][T23588] tipc: Disabling bearer <eth:syzkaller0>
[  663.461027][T23593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4072'.
[  663.490586][T23603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4073'.
[  663.598395][T23598] team1: entered promiscuous mode
[  663.614805][ T5636] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  663.621298][ T5636] Bluetooth: hci2: command 0x0401 tx timeout
[  663.631341][T23598] team1: entered allmulticast mode
[  663.637851][T23598] 8021q: adding VLAN 0 to HW filter on device team1
[  663.683340][T23603] team2: entered promiscuous mode
[  663.688606][T23603] team2: entered allmulticast mode
[  663.695083][T23603] 8021q: adding VLAN 0 to HW filter on device team2
[  663.720396][T23613] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  663.745780][T23598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4073'.
[  663.774159][T23611] ip6erspan1: entered allmulticast mode
[  663.788338][T23613] netlink: 'syz.0.4077': attribute type 3 has an invalid length.
[  663.805680][T23611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4076'.
[  664.298411][T23632] syzkaller0: entered promiscuous mode
[  664.310557][T23632] syzkaller0: entered allmulticast mode
[  664.328100][T23632] netlink: 'syz.4.4084': attribute type 2 has an invalid length.
[  664.675343][T23650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4091'.
[  664.724357][T23663] netlink: 'syz.2.4095': attribute type 25 has an invalid length.
[  664.733399][T23663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4095'.
[  664.937626][T23673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4096'.
[  665.052781][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  665.105373][T23677] bond0: left promiscuous mode
[  665.110568][T23677] bond_slave_0: left promiscuous mode
[  665.118823][T23677] bond_slave_1: left promiscuous mode
[  665.129142][T23677] 8021q: adding VLAN 0 to HW filter on device bond0
[  665.498910][T23685] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  665.730902][T23694] sctp: [Deprecated]: syz.1.4104 (pid 23694) Use of struct sctp_assoc_value in delayed_ack socket option.
[  665.730902][T23694] Use struct sctp_sack_info instead
[  665.996258][T23706] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  666.014268][T23706] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  666.039984][T23711] netlink: 'syz.0.4108': attribute type 21 has an invalid length.
[  666.363356][T23727] netlink: 'syz.1.4113': attribute type 1 has an invalid length.
[  666.417652][T23727] bond8: entered promiscuous mode
[  666.423659][T23727] 8021q: adding VLAN 0 to HW filter on device bond8
[  670.844321][T23770] __nla_validate_parse: 2 callbacks suppressed
[  670.844343][T23770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4122'.
[  670.916167][T23770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4122'.
[  671.007502][T23780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4125'.
[  671.081365][T23782] veth0: entered promiscuous mode
[  671.289907][T23795] pim6reg: entered allmulticast mode
[  671.452628][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  671.653318][T23785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  671.769970][T23807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4132'.
[  671.824421][T23807] ip6gre2: entered promiscuous mode
[  671.845208][T23807] ip6gre2: entered allmulticast mode
[  671.855397][T23779] veth0: left promiscuous mode
[  671.886035][T23807] netlink: 'syz.4.4132': attribute type 6 has an invalid length.
[  671.914248][T23807] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4132'.
[  672.351545][T23843] IPv6: NLM_F_CREATE should be specified when creating new route
[  672.361576][T23842] tipc: Started in network mode
[  672.376439][T23843] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  672.385571][T23842] tipc: Node identity ac1414aa, cluster identity 4711
[  672.386332][T23842] tipc: Enabled bearer <udp:s>, priority 10
[  672.394427][T23843] IPv6: NLM_F_CREATE should be set when creating new route
[  672.607692][T23853] syzkaller0: entered promiscuous mode
[  672.628114][T23853] syzkaller0: entered allmulticast mode
[  672.646721][T23853] syzkaller0: tun_net_xmit 14
[  672.669299][T23856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4143'.
[  672.776537][T23861] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4146'.
[  672.803461][T23861] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4146'.
[  672.909819][T23869] bond0: entered promiscuous mode
[  673.010435][T23873] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4148'.
[  673.054647][T23880] netlink: 'syz.4.4148': attribute type 11 has an invalid length.
[  673.295830][T23885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4148'.
[  673.353798][T23888] nbd: nbd0 already in use
[  673.358800][T23888] block nbd0: NBD_DISCONNECT
[  673.378449][T23888] block nbd0: Send disconnect failed -32
[  673.388447][T23888] block nbd0: shutting down sockets
[  673.429316][T23890] syz_tun: left allmulticast mode
[  673.504024][T14238] tipc: Node number set to 2886997162
[  673.640268][T23898] netlink: 'syz.0.4154': attribute type 15 has an invalid length.
[  673.665384][T23898] netlink: 'syz.0.4154': attribute type 25 has an invalid length.
[  674.076139][   T57] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 256 - 0
[  674.092003][   T57] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 256 - 0
[  674.120482][   T57] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 256 - 0
[  674.176050][T23911] bridge0: port 2(batadv1) entered blocking state
[  674.201244][T23911] bridge0: port 2(batadv1) entered disabled state
[  674.220706][T23911] batadv1: entered allmulticast mode
[  674.240889][T23911] batadv1: entered promiscuous mode
[  674.257271][   T57] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 256 - 0
[  674.335302][T23915] syzkaller0: entered promiscuous mode
[  674.347211][T23915] syzkaller0: entered allmulticast mode
[  674.665049][T10563] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  674.674975][T10563] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  675.295037][T23951] netlink: 'syz.1.4165': attribute type 11 has an invalid length.
[  675.438979][T23957] netlink: 'syz.0.4168': attribute type 1 has an invalid length.
[  675.468113][T23959] netlink: 'syz.3.4169': attribute type 10 has an invalid length.
[  675.637964][T23957] 8021q: adding VLAN 0 to HW filter on device bond3
[  675.686983][T23961] netlink: 'syz.2.4170': attribute type 7 has an invalid length.
[  675.750237][T23963] bond3: option lp_interval: invalid value (18446744073709551607)
[  675.762837][T23963] bond3: option lp_interval: allowed values 1 - 2147483647
[  676.085348][T23982] netlink: 'syz.1.4175': attribute type 9 has an invalid length.
[  676.114543][ T6151] lo: left allmulticast mode
[  676.213320][T23989] __nla_validate_parse: 4 callbacks suppressed
[  676.213340][T23989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4177'.
[  676.229424][T23989] netlink: 'syz.0.4177': attribute type 7 has an invalid length.
[  676.238303][T23989] netlink: 'syz.0.4177': attribute type 8 has an invalid length.
[  676.247142][T23989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4177'.
[  676.455042][ T6151] bond13 (unregistering): (slave gretap1): Releasing active interface
[  676.555011][ T6151] bond0 (unregistering): Released all slaves
[  676.568363][ T6151] bond1 (unregistering): Released all slaves
[  676.591087][ T6151] bond2 (unregistering): Released all slaves
[  676.609882][ T6151] bond3 (unregistering): Released all slaves
[  676.630011][ T6151] bond4 (unregistering): Released all slaves
[  676.650089][ T6151] bond5 (unregistering): Released all slaves
[  676.668679][ T6151] bond6 (unregistering): Released all slaves
[  676.687822][ T6151] bond7 (unregistering): Released all slaves
[  676.707055][ T6151] bond8 (unregistering): Released all slaves
[  676.727680][ T6151] bond9 (unregistering): Released all slaves
[  676.746365][ T6151] bond10 (unregistering): Released all slaves
[  676.773160][ T6151] bond11 (unregistering): Released all slaves
[  676.788260][ T6151] bond12 (unregistering): Released all slaves
[  676.806980][ T6151] bond13 (unregistering): Released all slaves
[  677.169367][ T6151] tipc: Left network mode
[  677.200782][T23995] netlink: 'syz.0.4179': attribute type 7 has an invalid length.
[  677.265808][T24001] netlink: 'syz.3.4181': attribute type 1 has an invalid length.
[  677.403237][T24010] netlink: 'syz.2.4183': attribute type 10 has an invalid length.
[  677.596633][T24010] batman_adv: batadv0: Interface deactivated: dummy0
[  677.620817][T24001] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4181'.
[  677.644159][T24010] batman_adv: batadv0: Removing interface: dummy0
[  677.661056][T24010] team0: Port device dummy0 added
[  677.751588][T24013] 8021q: adding VLAN 0 to HW filter on device bond4
[  677.767359][T24013] bond3: (slave bond4): making interface the new active one
[  677.776782][T24013] bond3: (slave bond4): Enslaving as an active interface with an up link
[  677.980884][T24032] xt_hashlimit: size too large, truncated to 1048576
[  678.050879][T24036] bridge0: port 1(bridge_slave_0) entered disabled state
[  678.089832][T24041] netlink: 'syz.4.4188': attribute type 1 has an invalid length.
[  678.129867][T24041] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4188'.
[  678.130512][T24036] bridge_slave_0 (unregistering): left allmulticast mode
[  678.207499][T24048] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4188'.
[  678.242572][T24036] bridge_slave_0 (unregistering): left promiscuous mode
[  678.265861][T24036] bridge0: port 1(bridge_slave_0) entered disabled state
[  678.407908][T24039] bond5: Unable to set peer notification delay as MII monitoring is disabled
[  678.430324][T24039] bond5 (unregistering): Released all slaves
[  678.472994][T24049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4193'.
[  678.749650][T24066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4195'.
[  679.958029][T24108] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4206'.
[  680.595650][T24137] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4213'.
[  680.660367][T24108] bridge0: port 2(bridge_slave_1) entered disabled state
[  680.777008][T24139] v: renamed from ip6_vti0 (while UP)
[  681.208714][T24145] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  681.276038][T24145] bond4 (unregistering): Released all slaves
[  681.285745][T24148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4218'.
[  681.414767][T24154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4219'.
[  681.608828][T24170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4223'.
[  681.655293][ T6151] IPVS: stop unused estimator thread 0...
[  681.719196][T24163] nbd: must specify a device to reconfigure
[  681.754075][T24172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4224'.
[  681.940218][T24185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4229'.
[  681.990424][T24185] 8021q: adding VLAN 0 to HW filter on device bond1
[  682.029706][T24193] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4228'.
[  682.037477][T24191] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  682.058941][T24191] bond5: (slave lo): Enslaving as an active interface with an up link
[  682.071297][T24191] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  682.110141][T24187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4231'.
[  682.154993][T24187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4231'.
[  682.343703][ T6151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.437402][ T6151] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  682.446618][ T6151] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  682.473166][ T6151] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  682.483189][ T6151] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  682.491974][ T6151] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  682.502786][ T6151] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  682.533499][ T6151] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  682.551565][ T6151] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  682.579819][T24209] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4235'.
[  682.589867][T24210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4234'.
[  682.605377][T24210] netlink: 'syz.2.4234': attribute type 6 has an invalid length.
[  682.614387][T24210] netlink: 'syz.2.4234': attribute type 5 has an invalid length.
[  682.633592][T16977] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  682.633637][T24210] netlink: 'syz.2.4234': attribute type 6 has an invalid length.
[  682.650950][T16977] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  682.669655][T24210] netlink: 'syz.2.4234': attribute type 5 has an invalid length.
[  682.684300][T16977] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  682.708425][T16977] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  682.972824][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  683.007145][T24223] xt_CT: No such helper "syz1"
[  683.684663][T24257] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  683.716499][T24257] netlink: 'syz.0.4243': attribute type 1 has an invalid length.
[  683.721715][T24260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  683.725345][T24257] netlink: 'syz.0.4243': attribute type 2 has an invalid length.
[  683.725366][T24257] netlink: 'syz.0.4243': attribute type 1 has an invalid length.
[  683.725380][T24257] netlink: 'syz.0.4243': attribute type 3 has an invalid length.
[  684.285107][T24282] bridge0: port 4(batadv1) entered blocking state
[  684.305281][T24282] bridge0: port 4(batadv1) entered disabled state
[  684.320946][T24282] batadv1: entered allmulticast mode
[  684.329588][T24282] batadv1: entered promiscuous mode
[  684.368967][T24292] netlink: 'syz.4.4252': attribute type 10 has an invalid length.
[  684.375022][T24294] netlink: 'syz.1.4253': attribute type 32 has an invalid length.
[  684.387198][T24294] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  684.516384][T24282] IPVS: Scheduler module ip_vs_ not found
[  684.753924][T10563] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  684.763792][T10563] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  685.294504][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.305237][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.818384][T10563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  685.845825][T10563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  686.174305][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  686.181605][    C0] bridge0: topology change detected, propagating
[  686.410046][T24388] __nla_validate_parse: 12 callbacks suppressed
[  686.410070][T24388] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4272'.
[  687.338186][T24427] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.4280'.
[  687.445181][T24423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4279'.
[  688.032072][T24446] bridge0: port 2(bridge_slave_1) entered disabled state
[  688.099129][T24449] FAULT_INJECTION: forcing a failure.
[  688.099129][T24449] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  688.101097][T10018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.142179][T24449] CPU: 0 UID: 0 PID: 24449 Comm: syz.1.4287 Not tainted syzkaller #0 PREEMPT(full) 
[  688.142206][T24449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  688.142218][T24449] Call Trace:
[  688.142226][T24449]  <TASK>
[  688.142235][T24449]  dump_stack_lvl+0xe8/0x150
[  688.142264][T24449]  should_fail_ex+0x412/0x560
[  688.142292][T24449]  _copy_to_user+0x31/0xb0
[  688.142322][T24449]  simple_read_from_buffer+0xe1/0x170
[  688.142353][T24449]  proc_fail_nth_read+0x1bb/0x230
[  688.142383][T24449]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  688.142421][T24449]  ? rw_verify_area+0x2a6/0x4d0
[  688.142448][T24449]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  688.142476][T24449]  vfs_read+0x20c/0xa70
[  688.142509][T24449]  ? __pfx___mutex_lock+0x10/0x10
[  688.142532][T24449]  ? __pfx_vfs_read+0x10/0x10
[  688.142562][T24449]  ? __fget_files+0x2a/0x420
[  688.142592][T24449]  ? __fget_files+0x3a0/0x420
[  688.142615][T24449]  ? __fget_files+0x2a/0x420
[  688.142649][T24449]  ksys_read+0x150/0x270
[  688.142678][T24449]  ? __pfx_ksys_read+0x10/0x10
[  688.142722][T24449]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.142744][T24449]  do_syscall_64+0x174/0x580
[  688.142764][T24449]  ? trace_irq_disable+0x3b/0x140
[  688.142794][T24449]  ? clear_bhb_loop+0x40/0x90
[  688.142819][T24449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.142838][T24449] RIP: 0033:0x7fc815f5d68e
[  688.142858][T24449] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  688.142875][T24449] RSP: 002b:00007fc816ed1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  688.142897][T24449] RAX: ffffffffffffffda RBX: 00007fc816ed26c0 RCX: 00007fc815f5d68e
[  688.142911][T24449] RDX: 000000000000000f RSI: 00007fc816ed20a0 RDI: 0000000000000009
[  688.142923][T24449] RBP: 00007fc816ed2090 R08: 0000000000000000 R09: 0000000000000000
[  688.142935][T24449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  688.142947][T24449] R13: 00007fc816216038 R14: 00007fc816215fa0 R15: 00007ffd97e1e748
[  688.142982][T24449]  </TASK>
[  688.731602][T24461] openvswitch: netlink: IP tunnel dst address not specified
[  689.256009][T24495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4297'.
[  689.745977][T24511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4301'.
[  690.100880][T24533] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4307'.
[  690.188721][T24529] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4307'.
[  690.214686][T24533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  690.257978][T24533] bond_slave_0: left promiscuous mode
[  690.306957][T24533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  690.337685][T24533] bond_slave_1: left promiscuous mode
[  690.356432][T24533] bond0 (unregistering): Released all slaves
[  690.711421][T24571] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4317'.
[  690.724018][T24570] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4316'.
[  690.916596][T24582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4322'.
[  690.949812][T24578] : option downdelay: invalid value (18446744073709547007)
[  690.958168][T24578] : option downdelay: allowed values 0 - 2147483647
[  690.967697][T24578]  (unregistering): Released all slaves
[  691.007360][T24586] 8021q: VLANs not supported on wg0
[  691.071706][T24584] bond5: (slave lo): Releasing backup interface
[  691.084957][T24584] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  691.117862][T24584] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  691.170348][T24584] bond0: (slave lo): Enslaving as an active interface with an up link
[  691.189555][T24584] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  691.229543][T24583] dvmrp1: tun_chr_ioctl cmd 1074025677
[  691.260189][T24606] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  691.274608][T24583] dvmrp1: linktype set to 0
[  692.210602][T24642] netlink: 688 bytes leftover after parsing attributes in process `syz.0.4332'.
[  692.248528][T24642] netlink: 23 bytes leftover after parsing attributes in process `syz.0.4332'.
[  692.310255][T24647] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4336'.
[  692.320995][T24647] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4336'.
[  693.213567][ T1327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  693.400160][T24686] netlink: 840 bytes leftover after parsing attributes in process `syz.4.4347'.
[  693.694891][T24704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4351'.
[  694.129641][T24718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4353'.
[  694.239835][T24722] validate_nla: 1 callbacks suppressed
[  694.239855][T24722] netlink: 'syz.0.4354': attribute type 5 has an invalid length.
[  694.554687][T24741] netlink: 288 bytes leftover after parsing attributes in process `syz.4.4358'.
[  694.971144][T24754] netlink: 'syz.2.4361': attribute type 4 has an invalid length.
[  694.999798][T24754] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4361'.
[  695.301562][T24775] netlink: 'syz.0.4364': attribute type 13 has an invalid length.
[  695.346215][T24775] netlink: 'syz.0.4364': attribute type 17 has an invalid length.
[  695.529650][T24771] bridge3: port 1(veth0_to_bond) entered disabled state
[  695.593652][T24795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4364'.
[  695.660225][T24771] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  695.746417][T24771] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  696.135124][T24775] 8021q: adding VLAN 0 to HW filter on device bond0
[  696.145051][T24775] 8021q: adding VLAN 0 to HW filter on device team0
[  696.165524][T24775] 8021q: adding VLAN 0 to HW filter on device batadv0
[  696.194690][T24775] bridge0: port 2(bridge_slave_1) entered blocking state
[  696.201962][T24775] bridge0: port 2(bridge_slave_1) entered forwarding state
[  696.235903][T24775] batman_adv: batadv0: Interface activated: batadv_slave_0
[  696.248313][T24775] batman_adv: batadv0: Interface activated: batadv_slave_1
[  696.287842][T24775] veth1_macvtap: left promiscuous mode
[  696.296135][T24775] veth0_macvtap: left promiscuous mode
[  696.306226][T24775] veth0_macvtap: entered promiscuous mode
[  696.329820][T24775] veth1_macvtap: entered promiscuous mode
[  696.349033][T24775] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  696.415382][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.457775][T10559] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 256 - 0
[  696.488112][T10559] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 256 - 0
[  696.530877][T10559] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 256 - 0
[  696.572931][T10559] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 256 - 0
[  696.941412][T24844] netlink: 'syz.1.4375': attribute type 5 has an invalid length.
[  696.961178][T24844] netlink: 'syz.1.4375': attribute type 4 has an invalid length.
[  697.017535][T24844] netlink: 'syz.1.4375': attribute type 4 has an invalid length.
[  697.292123][T24852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.304341][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.314732][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.323174][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.331554][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.339965][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.348328][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.030384][T24877] __nla_validate_parse: 1 callbacks suppressed
[  698.030405][T24877] netlink: 280 bytes leftover after parsing attributes in process `syz.4.4379'.
[  698.155573][T24870] xt_hashlimit: size too large, truncated to 1048576
[  698.222477][    C0] net_ratelimit: 4987 callbacks suppressed
[  698.222501][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.237035][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.245429][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.253878][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.262199][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.270624][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.279127][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.287836][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.296314][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.304926][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.446492][T24897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4383'.
[  699.620499][T24898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4383'.
[  699.667728][T24898] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4383'.
[  700.111468][T24900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4384'.
[  700.160708][ T5831] IPVS: starting estimator thread 0...
[  700.305531][T24911] IPVS: using max 24 ests per chain, 57600 per kthread
[  700.753775][T24920] xt_CT: You must specify a L4 protocol and not use inversions on it
[  701.437242][T24930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4392'.
[  701.488741][T24930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4392'.
[  702.176610][T24951] netlink: 'syz.3.4397': attribute type 10 has an invalid length.
[  702.256172][T24951] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4397'.
[  702.503296][T24951] bridge0: port 3(vlan2) entered disabled state
[  702.555380][T24951] team0: Port device dummy0 removed
[  702.586616][T24951] bridge0: port 5(dummy0) entered blocking state
[  702.623733][T24951] bridge0: port 5(dummy0) entered disabled state
[  702.671016][T24959] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.4400'.
[  702.773671][T24964] bridge0: port 2(bridge_slave_1) entered disabled state
[  702.781461][T24964] bridge0: port 1(bridge_slave_0) entered disabled state
[  702.965405][T24964] bridge0: entered allmulticast mode
[  703.069126][T24969] netlink: 'syz.3.4403': attribute type 1 has an invalid length.
[  703.089769][T24964] bridge_slave_1: left allmulticast mode
[  703.121360][T24964] bridge_slave_1: left promiscuous mode
[  703.149020][T24964] bridge0: port 2(bridge_slave_1) entered disabled state
[  703.232555][    C0] net_ratelimit: 28526 callbacks suppressed
[  703.232578][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.239960][T24964] bridge_slave_0: left allmulticast mode
[  703.246982][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.260940][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.269406][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.277870][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.286283][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.294725][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.303172][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.309509][T24964] bridge_slave_0: left promiscuous mode
[  703.311540][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.325313][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.346305][T24964] bridge0: port 1(bridge_slave_0) entered disabled state
[  703.770490][T24991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4406'.
[  703.810947][T24991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4406'.
[  703.952873][T24977] bridge0: port 5(dummy0) entered disabled state
[  704.015976][T24977] bridge0: port 3(vlan2) entered blocking state
[  704.023196][T24977] bridge0: port 3(vlan2) entered forwarding state
[  704.068830][T24977] bond6: (slave dummy0): making interface the new active one
[  704.100164][T24977] bond6: (slave dummy0): Enslaving as an active interface with an up link
[  704.119665][T24976] syz_tun: entered allmulticast mode
[  704.131277][T24978] bond6: entered promiscuous mode
[  704.154400][T24978] bond6: left promiscuous mode
[  704.251866][T25003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4408'.
[  704.659351][T25014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4409'.
[  704.811387][T25020] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4411'.
[  705.319897][T25030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4413'.
[  706.004223][T25055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4419'.
[  707.068921][T25073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4421'.
[  707.120991][T25073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4421'.
[  707.514358][T25092] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  708.242411][    C0] net_ratelimit: 26913 callbacks suppressed
[  708.242433][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.256830][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.265202][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.273627][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.281958][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.290354][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.298751][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.307130][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.315604][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.324022][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.818703][T25135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4437'.
[  709.096426][T25145] netlink: 758 bytes leftover after parsing attributes in process `syz.4.4439'.
[  709.167728][T25145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4439'.
[  709.804271][T25164] netlink: 'syz.0.4443': attribute type 1 has an invalid length.
[  710.107659][T25168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4445'.
[  710.165299][T25169] syzkaller0: entered promiscuous mode
[  710.192202][T25169] syzkaller0: entered allmulticast mode
[  710.199668][T25174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4445'.
[  710.347094][T25168] veth1_to_team: entered promiscuous mode
[  710.418998][T25168] veth1_to_team: left promiscuous mode
[  710.537635][T25180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4448'.
[  710.595312][T25181] xt_nfacct: accounting object `syz0' does not exist
[  711.447825][T25193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4451'.
[  711.495968][T25153] dvmrp0: entered allmulticast mode
[  711.789595][   T12] dvmrp0: left allmulticast mode
[  711.807998][T25204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4453'.
[  712.494759][T25198] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4453'.
[  712.666365][T25219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4459'.
[  713.252382][    C0] net_ratelimit: 29568 callbacks suppressed
[  713.252406][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.266676][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.274920][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.283577][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.291811][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.300140][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.308593][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.316974][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.325222][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.333564][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.843777][T25222] bond0: entered promiscuous mode
[  714.848980][T25222] bond_slave_0: entered promiscuous mode
[  714.856059][T25222] bond_slave_1: entered promiscuous mode
[  714.961243][T25235] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4461'.
[  714.971811][T25224] bridge2: port 1(veth5) entered blocking state
[  714.985340][T25224] bridge2: port 1(veth5) entered disabled state
[  715.002101][T25224] veth5: entered allmulticast mode
[  715.026926][T25224] veth5: entered promiscuous mode
[  715.080907][T25220] bridge2: port 2(veth7) entered blocking state
[  715.087879][T25220] bridge2: port 2(veth7) entered disabled state
[  715.101808][T25220] veth7: entered allmulticast mode
[  715.113484][T25220] veth7: entered promiscuous mode
[  715.600822][T25244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4464'.
[  715.843179][T25251] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4466'.
[  716.252104][T25259] netlink: 'syz.3.4468': attribute type 12 has an invalid length.
[  716.409949][T25265] netlink: 'syz.4.4470': attribute type 1 has an invalid length.
[  716.468685][T25265] 8021q: adding VLAN 0 to HW filter on device bond4
[  716.613384][T25276] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4470'.
[  716.653222][T25275] block nbd0: server does not support multiple connections per device.
[  716.668736][T25268] bond4: (slave veth9): Enslaving as an active interface with a down link
[  716.697092][T25275] block nbd0: shutting down sockets
[  716.714189][T25280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4473'.
[  716.731699][T25280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4473'.
[  716.757476][T25284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4470'.
[  716.861381][T25265] bond4: (slave dummy0): making interface the new active one
[  716.890820][T25265] dummy0: entered promiscuous mode
[  716.916079][T25265] bond4: (slave dummy0): Enslaving as an active interface with an up link
[  716.918656][T25290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4475'.
[  716.978329][T25276] bond4: (slave dummy0): Releasing active interface
[  717.000302][T25276] dummy0 (unregistering): left promiscuous mode
[  717.030451][T25295] netlink: 'syz.0.4475': attribute type 58 has an invalid length.
[  717.059915][T25280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4473'.
[  717.095557][T25280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4473'.
[  717.121023][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  717.147242][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  717.198312][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  717.327245][T24374] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  717.357029][T25303] bridge0: port 3(batadv2) entered blocking state
[  717.364100][T25303] bridge0: port 3(batadv2) entered disabled state
[  717.370813][T25303] batadv2: entered allmulticast mode
[  717.386035][T25303] batadv2: entered promiscuous mode
[  717.640523][T25321] nbd: couldn't find a device at index 65546
[  717.661171][T25303] IPVS: Scheduler module ip_vs_ not found
[  717.857022][T10018] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  717.866958][T10018] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  718.421448][T25353] veth7: entered promiscuous mode
[  718.471645][T25362] netlink: 'syz.4.4494': attribute type 9 has an invalid length.
[  718.487405][T25362] netlink: 'syz.4.4494': attribute type 6 has an invalid length.
[  718.510329][T25362] netlink: 'syz.4.4494': attribute type 7 has an invalid length.
[  718.526730][T25362] netlink: 'syz.4.4494': attribute type 8 has an invalid length.
[  718.861795][T25384] bond0: entered promiscuous mode
[  718.867435][T25384] bond_slave_0: entered promiscuous mode
[  718.873848][T25384] bond_slave_1: entered promiscuous mode
[  718.879710][T25384] mac80211_hwsim hwsim59 wlan0: entered promiscuous mode
[  719.452593][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  720.853784][T25336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  721.113152][T25398] __nla_validate_parse: 6 callbacks suppressed
[  721.113173][T25398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4503'.
[  721.206393][T25410] netlink: 'syz.0.4507': attribute type 1 has an invalid length.
[  721.570100][T25423] tipc: Enabled bearer <ib:veth0_to_batadv>, priority 9
[  721.575144][T25426] net_ratelimit: 26561 callbacks suppressed
[  721.575164][T25426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  721.681579][T25428] bond7: option all_slaves_active: invalid value (127)
[  721.696988][T25428] bond7 (unregistering): Released all slaves
[  721.734159][T25434] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4514'.
[  721.793880][T25432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4513'.
[  721.837806][T25434] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4514'.
[  721.876939][T25434] sctp: [Deprecated]: syz.4.4514 (pid 25434) Use of struct sctp_assoc_value in delayed_ack socket option.
[  721.876939][T25434] Use struct sctp_sack_info instead
[  722.014691][T16968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  722.614003][T25467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4524'.
[  722.704518][T25467] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  722.777231][T25467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4524'.
[  727.772991][T10018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.533868][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  737.774290][T25476] xt_hashlimit: overflow, try lower: 18446744073709551615/32
[  738.400679][T25520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  738.559830][T25523] netlink: 'syz.4.4540': attribute type 1 has an invalid length.
[  738.628055][T25523] bond5: entered promiscuous mode
[  738.634009][T25523] 8021q: adding VLAN 0 to HW filter on device bond5
[  738.653612][T16968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.676467][T25523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4540'.
[  738.726180][T25523] bond5: entered allmulticast mode
[  738.788695][T25523] bond5: (slave bridge4): making interface the new active one
[  738.796941][T25523] bridge4: entered promiscuous mode
[  738.803005][T25523] bridge4: entered allmulticast mode
[  738.809929][T25523] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  738.821597][T25542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4546'.
[  739.193092][T25570] netlink: 'syz.2.4554': attribute type 1 has an invalid length.
[  739.378974][T25578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4557'.
[  739.415698][T25578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4557'.
[  739.678927][T25593] syzkaller0: entered promiscuous mode
[  739.698229][T25593] syzkaller0: entered allmulticast mode
[  739.766614][T25590] 
[  739.769011][T25590] ======================================================
[  739.776048][T25590] WARNING: possible circular locking dependency detected
[  739.783092][T25590] syzkaller #0 Not tainted
[  739.787614][T25590] ------------------------------------------------------
[  739.794637][T25590] syz.3.4557/25590 is trying to acquire lock:
[  739.800752][T25590] ffffffff8f0aeec8 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x211/0x5f0
[  739.810606][T25590] 
[  739.810606][T25590] but task is already holding lock:
[  739.817973][T25590] ffff888053dd1d60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0
[  739.827304][T25590] 
[  739.827304][T25590] which lock already depends on the new lock.
[  739.827304][T25590] 
[  739.837806][T25590] 
[  739.837806][T25590] the existing dependency chain (in reverse order) is:
[  739.846827][T25590] 
[  739.846827][T25590] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  739.854586][T25590]        lock_sock_nested+0x41/0x100
[  739.859978][T25590]        inet_shutdown+0x6a/0x390
[  739.865013][T25590]        nbd_mark_nsock_dead+0x2e9/0x560
[  739.870660][T25590]        sock_shutdown+0x15e/0x260
[  739.875779][T25590]        nbd_clear_sock+0x24/0x170
[  739.880891][T25590]        nbd_config_put+0x2dd/0x580
[  739.886185][T25590]        nbd_genl_connect+0x19d5/0x1cf0
[  739.891740][T25590]        genl_family_rcv_msg_doit+0x22a/0x330
[  739.897816][T25590]        genl_rcv_msg+0x61c/0x7a0
[  739.902852][T25590]        netlink_rcv_skb+0x232/0x4b0
[  739.908137][T25590]        genl_rcv+0x28/0x40
[  739.912647][T25590]        netlink_unicast+0x75c/0x8e0
[  739.918029][T25590]        netlink_sendmsg+0x813/0xb40
[  739.923317][T25590]        ____sys_sendmsg+0x972/0x9f0
[  739.928608][T25590]        ___sys_sendmsg+0x2a5/0x360
[  739.933892][T25590]        __x64_sys_sendmsg+0x1bd/0x2a0
[  739.939358][T25590]        do_syscall_64+0x174/0x580
[  739.944488][T25590]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.950906][T25590] 
[  739.950906][T25590] -> #7 (&nsock->tx_lock){+.+.}-{4:4}:
[  739.958564][T25590]        __mutex_lock+0x1a3/0x1550
[  739.963682][T25590]        nbd_queue_rq+0x37b/0x1100
[  739.968801][T25590]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  739.974870][T25590]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  739.981731][T25590]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  739.988235][T25590]        blk_mq_run_hw_queue+0x348/0x4f0
[  739.993872][T25590]        blk_mq_dispatch_list+0xd16/0xe10
[  739.999598][T25590]        blk_mq_flush_plug_list+0x48d/0x570
[  740.005668][T25590]        __blk_flush_plug+0x3ed/0x4d0
[  740.011049][T25590]        __submit_bio+0x28d/0x580
[  740.016085][T25590]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  740.022240][T25590]        block_read_full_folio+0x599/0x830
[  740.028084][T25590]        filemap_read_folio+0x137/0x3b0
[  740.033733][T25590]        do_read_cache_folio+0x358/0x590
[  740.039396][T25590]        read_part_sector+0xb6/0x2b0
[  740.044685][T25590]        adfspart_check_ICS+0xb1/0x960
[  740.050145][T25590]        bdev_disk_changed+0x817/0x1770
[  740.055693][T25590]        blkdev_get_whole+0x380/0x510
[  740.061081][T25590]        bdev_open+0x31e/0xd30
[  740.065848][T25590]        blkdev_open+0x470/0x610
[  740.070789][T25590]        do_dentry_open+0x822/0x13a0
[  740.076073][T25590]        vfs_open+0x3b/0x340
[  740.080676][T25590]        path_openat+0x2e08/0x3860
[  740.085792][T25590]        do_file_open+0x23e/0x4a0
[  740.090824][T25590]        do_sys_openat2+0x113/0x200
[  740.096026][T25590]        __x64_sys_openat+0x138/0x170
[  740.101402][T25590]        do_syscall_64+0x174/0x580
[  740.106515][T25590]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.112936][T25590] 
[  740.112936][T25590] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  740.120153][T25590]        __mutex_lock+0x1a3/0x1550
[  740.125272][T25590]        nbd_queue_rq+0xc6/0x1100
[  740.130313][T25590]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  740.136413][T25590]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  740.143273][T25590]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  740.149805][T25590]        blk_mq_run_hw_queue+0x348/0x4f0
[  740.155439][T25590]        blk_mq_dispatch_list+0xd16/0xe10
[  740.161167][T25590]        blk_mq_flush_plug_list+0x48d/0x570
[  740.167063][T25590]        __blk_flush_plug+0x3ed/0x4d0
[  740.172535][T25590]        __submit_bio+0x28d/0x580
[  740.177584][T25590]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  740.183749][T25590]        block_read_full_folio+0x599/0x830
[  740.189581][T25590]        filemap_read_folio+0x137/0x3b0
[  740.195148][T25590]        do_read_cache_folio+0x358/0x590
[  740.200801][T25590]        read_part_sector+0xb6/0x2b0
[  740.206096][T25590]        adfspart_check_ICS+0xb1/0x960
[  740.211559][T25590]        bdev_disk_changed+0x817/0x1770
[  740.217106][T25590]        blkdev_get_whole+0x380/0x510
[  740.222490][T25590]        bdev_open+0x31e/0xd30
[  740.227283][T25590]        blkdev_open+0x470/0x610
[  740.232257][T25590]        do_dentry_open+0x822/0x13a0
[  740.237558][T25590]        vfs_open+0x3b/0x340
[  740.242426][T25590]        path_openat+0x2e08/0x3860
[  740.247643][T25590]        do_file_open+0x23e/0x4a0
[  740.252675][T25590]        do_sys_openat2+0x113/0x200
[  740.257910][T25590]        __x64_sys_openat+0x138/0x170
[  740.263289][T25590]        do_syscall_64+0x174/0x580
[  740.268417][T25590]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.274858][T25590] 
[  740.274858][T25590] -> #5 (set->srcu){.+.+}-{0:0}:
[  740.282101][T25590]        __synchronize_srcu+0xca/0x300
[  740.287573][T25590]        elevator_switch+0x1e8/0x7a0
[  740.292870][T25590]        elevator_change+0x2cc/0x450
[  740.298255][T25590]        elevator_set_default+0x36c/0x430
[  740.304066][T25590]        blk_register_queue+0x3e9/0x4e0
[  740.309617][T25590]        __add_disk+0x677/0xd50
[  740.314476][T25590]        add_disk_fwnode+0xfb/0x480
[  740.319689][T25590]        nbd_dev_add+0x72c/0xb50
[  740.324636][T25590]        nbd_init+0x168/0x1f0
[  740.329327][T25590]        do_one_initcall+0x250/0x870
[  740.334617][T25590]        do_initcall_level+0x104/0x190
[  740.340077][T25590]        do_initcalls+0x59/0xa0
[  740.344926][T25590]        kernel_init_freeable+0x2a6/0x3e0
[  740.350651][T25590]        kernel_init+0x1d/0x1d0
[  740.355508][T25590]        ret_from_fork+0x514/0xb70
[  740.360622][T25590]        ret_from_fork_asm+0x1a/0x30
[  740.365910][T25590] 
[  740.365910][T25590] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  740.373734][T25590]        __mutex_lock+0x1a3/0x1550
[  740.378852][T25590]        elevator_change+0x1b3/0x450
[  740.384145][T25590]        elevator_set_none+0xb5/0x140
[  740.389520][T25590]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  740.395857][T25590]        nbd_start_device+0x17f/0xb10
[  740.401247][T25590]        nbd_genl_connect+0x165b/0x1cf0
[  740.406802][T25590]        genl_family_rcv_msg_doit+0x22a/0x330
[  740.413089][T25590]        genl_rcv_msg+0x61c/0x7a0
[  740.418145][T25590]        netlink_rcv_skb+0x232/0x4b0
[  740.423438][T25590]        genl_rcv+0x28/0x40
[  740.427951][T25590]        netlink_unicast+0x75c/0x8e0
[  740.433235][T25590]        netlink_sendmsg+0x813/0xb40
[  740.438522][T25590]        ____sys_sendmsg+0x972/0x9f0
[  740.443820][T25590]        ___sys_sendmsg+0x2a5/0x360
[  740.449023][T25590]        __x64_sys_sendmsg+0x1bd/0x2a0
[  740.454484][T25590]        do_syscall_64+0x174/0x580
[  740.459603][T25590]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.466018][T25590] 
[  740.466018][T25590] -> #3 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  740.474974][T25590]        blk_alloc_queue+0x546/0x680
[  740.480265][T25590]        __blk_mq_alloc_disk+0x197/0x390
[  740.485905][T25590]        nbd_dev_add+0x499/0xb50
[  740.490851][T25590]        nbd_init+0x168/0x1f0
[  740.495553][T25590]        do_one_initcall+0x250/0x870
[  740.500839][T25590]        do_initcall_level+0x104/0x190
[  740.506299][T25590]        do_initcalls+0x59/0xa0
[  740.511146][T25590]        kernel_init_freeable+0x2a6/0x3e0
[  740.516874][T25590]        kernel_init+0x1d/0x1d0
[  740.521728][T25590]        ret_from_fork+0x514/0xb70
[  740.526931][T25590]        ret_from_fork_asm+0x1a/0x30
[  740.532232][T25590] 
[  740.532232][T25590] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  740.539451][T25590]        fs_reclaim_acquire+0x71/0x100
[  740.544920][T25590]        __kmalloc_cache_noprof+0x40/0x660
[  740.550735][T25590]        cryptomgr_notify+0x85/0x930
[  740.556044][T25590]        notifier_call_chain+0x1ad/0x3d0
[  740.561679][T25590]        blocking_notifier_call_chain+0x6a/0x90
[  740.567923][T25590]        crypto_alg_mod_lookup+0x3b1/0x5f0
[  740.573732][T25590]        crypto_alloc_tfm_node+0x13e/0x3f0
[  740.579637][T25590]        crypto_alloc_sync_skcipher+0x39/0xd0
[  740.585713][T25590]        rxkad_init+0x20/0xe0
[  740.590388][T25590]        rxrpc_init_security+0x72/0x120
[  740.595934][T25590]        af_rxrpc_init+0x13d/0x2e0
[  740.601050][T25590]        do_one_initcall+0x250/0x870
[  740.606337][T25590]        do_initcall_level+0x104/0x190
[  740.611793][T25590]        do_initcalls+0x59/0xa0
[  740.616637][T25590]        kernel_init_freeable+0x2a6/0x3e0
[  740.622362][T25590]        kernel_init+0x1d/0x1d0
[  740.627220][T25590]        ret_from_fork+0x514/0xb70
[  740.632330][T25590]        ret_from_fork_asm+0x1a/0x30
[  740.637624][T25590] 
[  740.637624][T25590] -> #1 ((crypto_chain).rwsem){++++}-{4:4}:
[  740.645705][T25590]        down_read+0x47/0x2e0
[  740.650470][T25590]        blocking_notifier_call_chain+0x54/0x90
[  740.656715][T25590]        __crypto_register_alg+0x32b/0x3c0
[  740.662526][T25590]        crypto_register_alg+0x447/0x810
[  740.668163][T25590]        do_one_initcall+0x250/0x870
[  740.673451][T25590]        do_initcall_level+0x104/0x190
[  740.678908][T25590]        do_initcalls+0x59/0xa0
[  740.683757][T25590]        kernel_init_freeable+0x2a6/0x3e0
[  740.689479][T25590]        kernel_init+0x1d/0x1d0
[  740.694337][T25590]        ret_from_fork+0x514/0xb70
[  740.699555][T25590]        ret_from_fork_asm+0x1a/0x30
[  740.704842][T25590] 
[  740.704842][T25590] -> #0 (crypto_alg_sem){++++}-{4:4}:
[  740.712493][T25590]        __lock_acquire+0x15a5/0x2cf0
[  740.717883][T25590]        lock_acquire+0x106/0x350
[  740.722916][T25590]        down_write+0x96/0x200
[  740.727685][T25590]        crypto_alg_mod_lookup+0x211/0x5f0
[  740.733495][T25590]        crypto_alloc_tfm_node+0x13e/0x3f0
[  740.739316][T25590]        tls_set_sw_offload+0xa33/0x1780
[  740.744960][T25590]        tls_setsockopt+0xf3e/0x15c0
[  740.750257][T25590]        do_sock_setsockopt+0x17c/0x1b0
[  740.755801][T25590]        __x64_sys_setsockopt+0x13d/0x1b0
[  740.761623][T25590]        do_syscall_64+0x174/0x580
[  740.766735][T25590]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.773149][T25590] 
[  740.773149][T25590] other info that might help us debug this:
[  740.773149][T25590] 
[  740.783376][T25590] Chain exists of:
[  740.783376][T25590]   crypto_alg_sem --> &nsock->tx_lock --> sk_lock-AF_INET6
[  740.783376][T25590] 
[  740.796465][T25590]  Possible unsafe locking scenario:
[  740.796465][T25590] 
[  740.803942][T25590]        CPU0                    CPU1
[  740.809309][T25590]        ----                    ----
[  740.814682][T25590]   lock(sk_lock-AF_INET6);
[  740.819222][T25590]                                lock(&nsock->tx_lock);
[  740.826174][T25590]                                lock(sk_lock-AF_INET6);
[  740.833218][T25590]   lock(crypto_alg_sem);
[  740.837570][T25590] 
[  740.837570][T25590]  *** DEADLOCK ***
[  740.837570][T25590] 
[  740.845714][T25590] 1 lock held by syz.3.4557/25590:
[  740.850821][T25590]  #0: ffff888053dd1d60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0
[  740.860579][T25590] 
[  740.860579][T25590] stack backtrace:
[  740.866564][T25590] CPU: 1 UID: 0 PID: 25590 Comm: syz.3.4557 Not tainted syzkaller #0 PREEMPT(full) 
[  740.866582][T25590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  740.866592][T25590] Call Trace:
[  740.866602][T25590]  <TASK>
[  740.866610][T25590]  dump_stack_lvl+0xe8/0x150
[  740.866631][T25590]  print_circular_bug+0x2e1/0x300
[  740.866652][T25590]  check_noncircular+0x12e/0x150
[  740.866672][T25590]  __lock_acquire+0x15a5/0x2cf0
[  740.866695][T25590]  ? crypto_alg_mod_lookup+0x211/0x5f0
[  740.866714][T25590]  lock_acquire+0x106/0x350
[  740.866729][T25590]  ? crypto_alg_mod_lookup+0x211/0x5f0
[  740.866751][T25590]  down_write+0x96/0x200
[  740.866769][T25590]  ? crypto_alg_mod_lookup+0x211/0x5f0
[  740.866787][T25590]  ? __pfx_down_write+0x10/0x10
[  740.866806][T25590]  ? crypto_larval_alloc+0x1bf/0x290
[  740.866824][T25590]  crypto_alg_mod_lookup+0x211/0x5f0
[  740.866844][T25590]  crypto_alloc_tfm_node+0x13e/0x3f0
[  740.866866][T25590]  tls_set_sw_offload+0xa33/0x1780
[  740.866896][T25590]  tls_setsockopt+0xf3e/0x15c0
[  740.866918][T25590]  ? __pfx_tls_setsockopt+0x10/0x10
[  740.866939][T25590]  ? __fget_files+0x2a/0x420
[  740.866956][T25590]  ? aa_sock_opt_perm+0xff/0x1a0
[  740.866978][T25590]  ? sock_common_setsockopt+0x36/0xc0
[  740.866999][T25590]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  740.867020][T25590]  do_sock_setsockopt+0x17c/0x1b0
[  740.867037][T25590]  __x64_sys_setsockopt+0x13d/0x1b0
[  740.867053][T25590]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.867069][T25590]  do_syscall_64+0x174/0x580
[  740.867084][T25590]  ? trace_irq_disable+0x3b/0x140
[  740.867105][T25590]  ? clear_bhb_loop+0x40/0x90
[  740.867122][T25590]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.867137][T25590] RIP: 0033:0x7f514059ce59
[  740.867151][T25590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  740.867165][T25590] RSP: 002b:00007f513e7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  740.867181][T25590] RAX: ffffffffffffffda RBX: 00007f5140816180 RCX: 00007f514059ce59
[  740.867191][T25590] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000006
[  740.867201][T25590] RBP: 00007f5140632d6f R08: 0000000000000038 R09: 0000000000000000
[  740.867211][T25590] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  740.867221][T25590] R13: 00007f5140816218 R14: 00007f5140816180 R15: 00007fffc60cb868
[  740.867239][T25590]  </TASK>
[  741.121038][ T5636] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  744.413624][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog