last executing test programs:

2.175672812s ago: executing program 3 (id=3875):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000200000000140012800b00010065727370616e000004000280060001"], 0x40}}, 0x20000045)

2.110322281s ago: executing program 4 (id=3876):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_VIF(r0, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x1}}, 0xffffff4b)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000080)={0x0, 0x9})
socket$igmp(0x2, 0x3, 0x2) (async)
setsockopt$MRT_DEL_VIF(r0, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x1}}, 0xffffff4b) (async)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000080)={0x0, 0x9}) (async)

2.083244871s ago: executing program 4 (id=3877):
r0 = socket(0x2, 0x80805, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f0000000040))
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000004780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)='}', 0x1}], 0x1}}], 0x1, 0x40090)
shutdown(r4, 0x1)
setsockopt(r4, 0x84, 0x77, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x50, r0, 0x8338f000)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r2, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000200)="72c1807bf3d8d909984e9a4f27515a7e3b6f9e4950227c0cf1c1f247279d7e47a6a51d53cdef6d3c6cddc4e670a2b1235843", 0x32}, {&(0x7f00000002c0)="269e7a0e1b98b782853ff19fb64d658d9c850b93a9a55da438e14b5823cbd49eab0058b7b46d8c2e200ffeace4ff033ff36aa0d5056378c7c64326e53c68303c12713c419e30bf84012ba5fc074bb63c305620f1ef371f57f62f25782fd40f558e135c108dc2c6ffc7", 0x69}, {&(0x7f0000000040)="1cfa596bf35ea4ec804fe60a98941d086a6ef7eb6b477133", 0x18}, {&(0x7f0000000340)="4c631c16ea0012e49498d467cfabdd2e48be63e3437ae35b39fb124cbbe3a8bd779e46b2038a7b1dd682af498d14f13d479ab00d77bdb36d927d6305e1988318f2565b1c3e5cb38091b3582efe17c4803736b7af3ff8f51e970aac2f67f7e118bfdf4d7a710080a5e0f22aa66af29e71e4b8a80b4bbfe8dec496e0a3e57ea895c9b26752e16475c992448a3b4f3f2ab58fb10da496e5b0067cd547fcd14f2668c21283c1cbb413935613d9ccfb10a4d0881cc9b43e5b5f5fbde01573be", 0xbd}, {&(0x7f0000000640)="0c8ce66b00b40a70d3cc5d1fb1333cda45077f08cfb3ec7320b20f9d099c7378fa19a09ee54c6e3a80fe453a746260ec5bf8c0fd3545b2aec6ebc1087eae2e4be5e1a449d66552c09163dd4eb0790159cacf6c5a511879685100ca1fa2b65a6fd24be7cf3a0e7a095804b0b6beb8f0c58ae49a36d94f4689985be3ab4b46efb8711cd81b875e0f46f395e47e08", 0x8d}, {&(0x7f0000000700)="325eb845023ef8cf1d5edfeed5ae1367d73921ae1fdea3b48037c39a51fe732e7b005bd7bfb311c77ffd838f58e40a36d552b5712c83128d3e615cea43b36307d3f3dfddc1871400816339bb20ffdc07168880acbc3fe46a", 0x58}], 0x6, &(0x7f0000000f00)=ANY=[@ANYBLOB="110000000000000000000000010000000000000000000000c800000000000000000000000700000001891b8be0000002ac1414aae000000164010102ac1414aa64010102443c2a43ac1414bbfffffffbe000000100000007ffffffff00010000ac14141553a74b1affffffff00000007ffffffff00000005ac1e01010000007f442c5a81ac1414bbfffff000e00000010000000964010101000000020000000000000000ac14141e00000004441c0c33e0000002000000100000000000000004ac14141600000400010713a1ac1414bb000000007f000001ac141427000000001400000000000000000000000200000000040000000000001c"], 0x118}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a00)="ff3bc1090cb022cb1f5f739fda1c87920cf98b55c6", 0x15}, {&(0x7f0000000d40)="b930449b63feaa3c01843a10aa32c531f152a43fd318ade55b7f2871c252c3d382df50db29b5272be91841e9f61be798008a3768b567cb6a0b5c22fe242c084f87ed3d17733e9551a021f2609a7b7206e887e036f490988c71acff080f3bea4e5128e3c094b52493ca2e3583d863dcb0db75ebf2497d", 0x76}], 0x2}}], 0x2, 0x2010)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004)

2.075843811s ago: executing program 3 (id=3878):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, 'ip6_vti0\x00'}}, 0x1e)
r1 = socket$unix(0x1, 0x5, 0x0)
sendmmsg$sock(r0, &(0x7f0000002280)=[{{&(0x7f0000000040)=@ethernet={0x1, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="35d3e8b70a3fbd286fa8e35957534e21244f2872d67c5b768fac427b36768ba69355cbaeaaa514ab425efbdc7717edece3bbba921beb856afdb27a1f834ab42ca5786a1e4baf3d76a730836ea6b6e5a9a66ad1724a9e3ea5485cb3979e9af94079", 0x61}, {&(0x7f0000000140)="e5d923071f4c61449d1bf35ea054f063df5dcb5fee81a31a98f4c98377ca7f37c74810a1acc864807a727d43cfa7ca6b0022fec24bb3ba0f459b7998bec42128fe1c58e0f4c6049d5168faf4e1932770c90e77b1f1a19f8a15b1b26fb863972d8590e7a12fd93661de2a851df542a6c037b348185ed74fafa7c341b2126d0c343ad2f4cfd93d91694e20a75119a063e49a5a86722271651c7b9973ff09a40de044c0d90c2cf5f76c3daddca4b8", 0xad}, {&(0x7f0000000200)="857b17a2e141201fbc56f3b176cfac07c37db9fed85d77540396b038441ba4d9", 0x20}], 0x3, &(0x7f0000000280)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14}}], 0x48}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="215762c24ae4921d69cbd8d5", 0xc}, {&(0x7f0000000340)="d608752f61cd02fac7c5f82828696cbbeb7745eef9b3fa92600eaef357668f3c4ac6e303c9aa77b4662d5ee13dc1aa1f8fb4577d44e0a098bbac3707828bfe130d76e06672d90e7e99765b451044944fe60e775a9ff6ad7722563ec3bb38c8471dc2532b782091ace91dda052f168b452851c6bb2aeb4d28cc551f00df91dc6bf3e4ba8d31b08e4b2948bf15590c17bd1040b1cf8e5c532dfa8f8f389ccae5c731fa1d1e3c6019ffe78195a44b46ce07", 0xb0}, {&(0x7f0000000400)="a01ac55c3a702a5e095d93ca64d03d931e407727eae236607b6ec1a0cf9a5b59a9f01a147a3d3ed33ea48bc6e9cf54a52e65a21023931257a6133d0ab1c738e7be62986d4486ecb76b28e48405be864fb99895339c9d5c26f4487e42870829579754b0f575d144206eb7d5ace8f26103eb814e7fa93d05235936b5626cb362b3d0e684", 0x83}, {&(0x7f00000004c0)="51b3c9dff03ccaa3da698323bd4bbee36be9adafb30e6cb9c35c8a0ddcaa80c938b5018d6cf72ced8007b8d3475e5b5cfb7945e208990de439b5b2cccc11f58b46e83af4b0b9a5de1d1b4932f46b84f01566c0aca8f65ce56662fd5dd87afa4b4b4681600cc62702abb94a8e537e7b2b17e8702d62cf821899f51200cf888ac9f5f94796ede6591d6f63f3587d5c8abf0012ff3837c92c42fac3b013821ee822967e78da451050765d9c0bbb5d2649b51033a317e11c2f38effcf6480605f5bded98cac885a3272d60abe6c807a64e", 0xcf}], 0x4, &(0x7f0000000600)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x92ab}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0xc0}}, {{&(0x7f00000006c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @remote}, 0x1, 0x4, 0x0, 0x3}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)="cedabe690befd1ac7244e4d3c73c7e5c44817723ea2826fc9fcf495a359b5f29d38d2731271de94babbb03d3c6ccd4d66b571471a79156c5f55bad357a0559403bcba0d169daa4a9f5a9ec446cc56d32917b71a7a4fb285d21330eaae32a8ddea6a529e0de01f19115a2bd11", 0x6c}, {&(0x7f00000007c0)="61a2ce4730e1abd784f2032090282d2a670f8a21d84548cf6dfda94e2a560e38576205ec765392e411978d60d8b101c6ac25421679e65022576382ac2ed68aa36a99bbc18a8194e38a765939bd9d090d22229e9a3c0c8da1aa0efe1c5591b778dd40c0876bbf6c8b7abd39f4e30eb843132395db8af83a5349338a01ce3ab3d5c001a4edc54ea38c3e50656d0fccc5466e4d85a9b6663018b317e31a45a71ef050eb7817c48d6525860fdef84786982303c04e51c8d6b3071638697224c3b9be1d749270921ad5cd9c5a1774c63050dab181ec214c27a81fc3bd21492d3d32d9a09f97289c4bafbdac43028d25fa1e923a438707b8", 0xf5}], 0x2, &(0x7f0000000900)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xb123c506}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x78}}, {{&(0x7f0000000980)=@nl=@unspec, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a00)="bb7de58bb638c1b575313d7fc1e71f680e08dfeccfe26f9a28d1f7f0aacf3ba4594309af01168be6895a218fc4a7f1879d268981dd5808f96f299ac6d09759a8c56b496b54aa6fb0a583c73e360b5187ff7ee3367e74048934101de467558ff5804bba711e224fbcd2712523cc6e312e25a69f", 0x73}, {&(0x7f0000000a80)="39177915ddb3", 0x6}, {&(0x7f0000000ac0)="d4d36acc4abef7b485782d0118cea257e24e8e4344dfdd3bc919adb3ba06f128024d74575f8f1ff33b628c59", 0x2c}, {&(0x7f0000000b00)="60ee87c66dddba20d6dae3aa013f8ca3b9eea8ea89f331e3ad051419eba1c57c9c3e9ea87a5d01338b1d5c30f027d55562797ad6bbbaaaf1e0b6db8fa8602147c725563010715bbd5c2fea58568a464ef048d05025f00ec124ce28013ff84e80d1a3b3f748865d1f13655e6bdb", 0x6d}, {&(0x7f0000000b80)="ad8d9ba084509473de98f74904059a8ef9c983ffe93290e0177d779efcdea1c130e6e83ff4d0b2bf04e07e612cbb", 0x2e}], 0x5, &(0x7f0000000c40)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x100}}, @mark={{0x14, 0x1, 0x24, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0xff}}], 0x78}}, {{&(0x7f0000000cc0)=@rc={0x1f, @none, 0x9}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000d40)="f9d599be6161df469b1ca1ef6e177146d53af7f6086686cb845630862b1d6d5f5acfc08f4fcab09e49c744d7e6a89e14a96c16700a32e98759478496165b4f8f2136af896b5aa209c36218330f6f4e5969ff5df57032aa9814c5b92bfc05e66c9a8c8f8a2092228e99b1a46b0ee86f5ced867c3b240c8380a5e7cd14f81b84e4008542cbc38003769329cc4470ca51769ecaf9523c473c356a4391e62388258cb3ab43", 0xa3}, {&(0x7f0000000e00)="22a8cfd011a16d684fbe4c3fc7de278b082452ce700e10163160bb564ccd2a7f72d67fc517ff11840215bb15b4c4dc0e64292210c4c97a3287a06c8001f55faca3064f68705b22eefc88f52793be4f53b21c6b2fba91bc494cf8bcb099ab568fe676eafbcc35c5b879432a96fc22403f", 0x70}, {&(0x7f0000000e80)="0a463cb63faecaee9aa540625c11f67c29d9f7c46228bfe75a4ea3c5cd3fb5287ed761bb4efd2e0a2ab7d0e2285439432cb9a9bae3ca81be46dc4fdf3061dc20", 0x40}, {&(0x7f0000000ec0)="e6b83b7b2d3d6a29402f2a5f1e8df2ba44cba73d4fe81ad2cfff6f5e58b25e572614da975e3bfad39ab32c76bb087427954d88e5d3884cafa87ea1d95176d4ce84fd6e0a6547b583466e2bea3b7e5d7c87e805c2cb5153beb08fa4aec62b0002c943beb137c7158299d17de9da2d5d196f315df98511875c3f863dce066a1d6d8a58d2f35d8c66dab5ebd089f74a1203c2c9b359431f774a7bbcccb66badd34c85e61ca91590c7170fe3c690b46279bf9757d746c23fb082dee670fef3629ac913667aa92a12d6f0f3f2febec8be6c72f70d38734ffe6f9caba6f604359acc060c2def424ac6bcd274719e469ec24a76de78665483ac", 0xf6}, {&(0x7f0000000fc0)="cc2dc7ac5761ad7b0c86c35757043eb1be77fcf9c22de60d58fe11b524337290c7faafb54e131ed8b12b020d0f78699d809eb8259c894500c529830374ac0506843b86be3f9e8a83e5dda91b8212b70a4b87643c6aaae33dd356d80ac23c25b5f1073faff5aa5a816d549f4e5adc7350d31e3e5f6a970feb389fac37b4033a8e1c5223d1a8425534f3165e7fc7dc4bdd42fdd0f8d2af8e38dbcf71bd57dea322", 0xa0}, {&(0x7f0000001080)="cd8831358ce7566605877205bb9e659b867d4f41b5d4a568e9dc6feea31808185f25718ad5c9b7929c0f0dda0150bdefc30a62ac4e167b35bfdfd7", 0x3b}, {&(0x7f00000010c0)="1b20ce8c88e7a57faea4f351f4ce494eac456da6f6eef409b6e469dd850b25268e0976595407bf2b7123041c5726d5874218c2788c2666f44fb05a5379447d6ba6b8073ffee325bc23edac5b6595cfa1be77d98f45d880", 0x57}, {&(0x7f0000001140)="5c5cb33d37dd35c736fdfe4593fef333aebb", 0x12}, {&(0x7f0000001180)="5bbd7eb277e9596d4d679bf0f8d1f1e86b27a7a2b360919c784e831574ec7d54e05025cca2b0ee2529aba38869", 0x2d}, {&(0x7f00000011c0)="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", 0x1000}], 0xa}}], 0x5, 0x40800)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002400)={0x2, &(0x7f00000023c0)=[{0x4, 0xb8, 0x8, 0x1}, {0x7, 0x6, 0x5, 0x9}]}, 0x10)
connect$pppoe(r0, &(0x7f0000002440)={0x18, 0x0, {0x2, @local, 'syzkaller0\x00'}}, 0x1e)
getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000002480)=0x5, &(0x7f00000024c0)=0x4)
ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000002500))
pselect6(0x40, &(0x7f0000002540)={0xc, 0x9, 0x9, 0x8b6, 0xcacb, 0x4, 0xfffffffffffffffc, 0xfff}, &(0x7f0000002580)={0x3, 0x3, 0x0, 0x4, 0xb, 0x7326e12c, 0x2, 0x9}, &(0x7f00000025c0)={0x7, 0x3d3, 0x0, 0x7, 0x1ff, 0x9, 0x7, 0x1}, &(0x7f0000002600)={0x0, 0x3938700}, &(0x7f0000002680)={&(0x7f0000002640)={[0x5]}, 0x8})
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x34, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4010)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002840)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000027c0), 0xc, &(0x7f00000029c0)={&(0x7f0000002880)={0x114, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x4}}}}, [@NL80211_ATTR_IE={0xeb, 0x2a, [@mesh_id={0x72, 0x6}, @random={0xd, 0x40, "ffda7e07b47196ed3d9cdf04a82d6646fd3d166475d5d4e11484b4194a9f339329b9eb1d3d48111db377a81c293338cc3ac555ef1b7e368368777bdb1c5e3f70"}, @peer_mgmt={0x75, 0x6, {0x3bb, 0x5, @val=0x1ff, @void, @void}}, @random_vendor={0xdd, 0x3a, "8c2fbbf9fe91702e17d210883467614d800f19cfd5a2a8e626d3fd03adf5766aa2a38b48fd8ed0f34323c882096af86aa5ccd12da89fab9f8bfb"}, @preq={0x82, 0x57, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x40, 0x1, 0x8, @device_a, 0x401, @value=@device_b, 0x0, 0x7dde, 0x5, [{{0x1}, @device_b, 0x8}, {{}, @broadcast, 0xffffff01}, {{0x1}, @broadcast, 0x10000}, {{}, @device_a, 0x1}, {{}, @device_b, 0xc}]}}]}]}, 0x114}}, 0x4001)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002a40), &(0x7f0000002a80)=0xc)
socketpair(0x1d, 0x80000, 0x5, &(0x7f0000002ac0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f0000002b00)={'veth0_macvtap\x00'})
shutdown(r0, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002b40)='./cgroup/syz1\x00', 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000002b80)='cgroup.events\x00', 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000002d00)={'syztnl2\x00', &(0x7f0000002c80)={'syztnl2\x00', <r9=>0x0, 0x4, 0x2, 0x3, 0xee69, 0x3c, @private1, @empty, 0x7, 0x40, 0x2, 0x3}})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002dc0)={r8, <r10=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002e80)={0x18, 0xa, &(0x7f0000002bc0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit, @ldst={0x0, 0x2, 0x0, 0x8, 0x3, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0xa, 0x6, 0x5, 0xffffffffffffffc0}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}], &(0x7f0000002c40)='GPL\x00', 0x3, 0x0, 0x0, 0xb2fd6fe3d1c8d23b, 0x44, '\x00', r9, 0x0, r8, 0x8, &(0x7f0000002d40)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000002d80)={0x4, 0x6, 0xb, 0xfffffffc}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002e00)=[r8, r10], &(0x7f0000002e40)=[{0x1, 0x4, 0x6, 0x5}, {0x4, 0x2, 0x5, 0x6}], 0x10, 0xfffffffb}, 0x94)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000002f80)={&(0x7f0000002f40)=""/48, 0x30})
ppoll(&(0x7f0000002fc0)=[{r6, 0x201}, {r8, 0x8}, {0xffffffffffffffff, 0x1000}, {r2}], 0x4, &(0x7f0000003000)={0x0, 0x989680}, &(0x7f0000003040)={[0x2]}, 0x8)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000004100)={'broute\x00', 0x0, 0x4, 0x1000, [0x0, 0xffffffff, 0xe00000, 0x8, 0x10001, 0x40], 0x6, &(0x7f0000003080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000003100)=""/4096}, &(0x7f0000004180)=0x78)
syz_genetlink_get_family_id$SEG6(&(0x7f00000041c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000004200)={'wg1\x00', <r11=>0x0})
connect$packet(r5, &(0x7f0000004240)={0x11, 0x11, r11, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14)

1.890424574s ago: executing program 3 (id=3882):
socket$kcm(0x1e, 0x4, 0x0) (async)
r0 = socket$kcm(0x1e, 0x4, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socket$kcm(0x1e, 0x4, 0x0) (async)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ec595cfbe1f66c72a47d3397cdfc265a6f6e4c1bd5a3e4f6083c55afaba6bafeff1ae02b4b8719f84419a40cfc926b89e7db5bdc54026a9a59018da9be70c786f6c35f9a101b72aae893492bb331d4ea43d668b4be0df623e6fc420370045597c965925fd4bd2d4722c21d845ee7806c66", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r4, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef)
close(r3) (async)
close(r3)
recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003a80)=""/4101, 0x1005}], 0x1}, 0x2101)

1.618227968s ago: executing program 1 (id=3886):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r0, 0x28, 0x7, 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b1690bb8dc095ebae95baccdce177a97389ae7df65487e3996df64c35efa6e159bd2f2180", 0x25}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @private=0xa010102}}}], 0x40}, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
r6 = gettid()
ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000080)=r6)

1.605686381s ago: executing program 1 (id=3888):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
writev(r0, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98)
splice(r1, 0x0, r0, 0x0, 0xfffffffc, 0xf)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1406, 0x1}, 0x10}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80)

1.391175412s ago: executing program 2 (id=3892):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003040002000c000280050001000000000014000280080001000000000008000200ac141400080005400000000081ec92cb6f4beb8b000000007bf61a9b76eff13a4c05c85612"], 0x58}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f0000000d80)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000080)=0x10)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000300)={r4, 0x1, 0x401, 0x6, 0x6dada434, 0xfff}, 0x14)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x810)

1.294008112s ago: executing program 2 (id=3893):
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a", 0x86}], 0x1}, 0x20000004)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0xbb8, 0x0, 0x5, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [{{0x254, 0x1, {{0x2, 0x8}, 0xa8, 0x67, 0x4, 0x800, 0x11, 'syz0\x00', "9cc2974d6ca7642d6f75412fb61ec23e44e31f1ec4404bd78b2b3c7778fad50b", "6c55fa44701cd37cf2923e4dd95d703a3b1903f73d6d99bf14596406ea940356", [{0x8, 0x673, {0x2, 0x9}}, {0xf8ce, 0x7, {0x0, 0x3}}, {0xab, 0x5, {0x3, 0x40}}, {0x8, 0x4, {0x2, 0x3}}, {0x9702, 0x2, {0x0, 0x40}}, {0x0, 0x100, {0x0, 0xfff}}, {0x20, 0x9, {0x3, 0x9}}, {0x1000, 0x6, {0x0, 0xfffffffb}}, {0x1, 0x4, {0x3}}, {0x1, 0xdc02, {0x2, 0x77}}, {0x8001, 0x3, {0x0, 0x3}}, {0x3, 0xa, {0x3, 0x8}}, {0x3, 0x4, {0x1, 0x6}}, {0x8, 0x9, {0x3, 0x80}}, {0x7, 0x8972, {0x3, 0x1}}, {0x3, 0x8, {0x3, 0x1}}, {0x4, 0x0, {0x3, 0x2}}, {0x8, 0xff, {0x1, 0x5}}, {0x4, 0x2f80, {0x3, 0x4ff}}, {0x8, 0x0, {0x0, 0x3}}, {0x4, 0x2, {0x0, 0x6}}, {0x22, 0xc, {0x3, 0x130b}}, {0x1ff, 0x3, {0x2, 0x3}}, {0x9, 0x9, {0x3, 0x6}}, {0x101, 0xa, {0x3}}, {0x5, 0x671, {0x2, 0xfffffff7}}, {0x9, 0x6, {0x2, 0x3}}, {0x8ec, 0x742, {0x3, 0x4c}}, {0x6, 0x1000, {0x0, 0x5}}, {0x3, 0x1000, {0x2, 0x4ff7d554}}, {0xfff7, 0x0, {0x2, 0x7fffffff}}, {0x5, 0xa189, {0x1, 0x9}}, {0x8, 0x800, {0x1, 0x3}}, {0x9, 0x3, {0x1, 0xb}}, {0x1fef, 0xf, {0x3, 0x3}}, {0xa, 0x2, {0x1, 0x5}}, {0x1, 0x8c0, {0x2, 0x4c8573d5}}, {0xa, 0x0, {0x0, 0xd0a}}, {0xf, 0x0, {0x2, 0x5}}, {0xfff3, 0x6, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x2}, 0x3, 0x0, 0x7, 0x2, 0x23, 'syz1\x00', "6c6e9ba78b03ab1c644197fcb82f59bd26100ed08716e5b9d8a5ec3a0d658b04", "c9b5ac9de9b73f1de2209dced46458de43ce426d7d81fe152e362faae0aa6380", [{0x2, 0x7fff, {0x3, 0x8}}, {0x101, 0x5, {0x2, 0x31}}, {0x2, 0x5, {0x1, 0x2}}, {0x7fff, 0x0, {0x2, 0x7}}, {0xf, 0x1df, {0x1, 0x181cdb5}}, {0x600, 0xb, {0x1, 0x6bad7e94}}, {0x10, 0x7, {0x2, 0x7fff}}, {0x9, 0x1, {0x2, 0x6}}, {0x1, 0x8, {0x3, 0x5}}, {0x800, 0x63, {0x3, 0xd1}}, {0x9, 0x2, {0x0, 0x4}}, {0x1d1, 0xea40, {0x2, 0x1a33}}, {0x4, 0x1000, {0x2, 0xfffff271}}, {0x5, 0x9, {0x1, 0x7d}}, {0x8, 0xf4, {0x2, 0xac}}, {0x8000, 0x1, {0x3, 0xf}}, {0x7, 0xbc7, {0x0, 0x2}}, {0x9400, 0x8000, {0x3, 0x5}}, {0x1, 0x4, {0x2, 0x23}}, {0x4, 0x2, {0x2, 0x3df}}, {0x6, 0xfe01, {0x3}}, {0x7, 0x7, {0x0, 0x81}}, {0x2, 0x9, {0x3, 0x2}}, {0x5, 0x4, {0x3, 0x88}}, {0x5, 0x8, {0x2, 0x2696}}, {0xa, 0xf, {0x0, 0x3}}, {0x3, 0xb, {0x3, 0xa}}, {0x7, 0x3, {0x1, 0x7fff}}, {0x8001, 0x6, {0x2, 0x5}}, {0x7, 0x9, {0x3, 0x8}}, {0x1, 0x81, {0x2}}, {0x8, 0x7, {0x3, 0x7}}, {0x7, 0x5, {0x3, 0x243aa238}}, {0x0, 0x70, {0x1, 0x6}}, {0x5, 0x5a57, {0x1, 0x5c}}, {0x0, 0x7, {0x0, 0x2}}, {0xc10d, 0x0, {0x1, 0xe1fd}}, {0x1, 0xffb0, {0x1, 0x2}}, {0x1, 0x927, {0x2, 0x4}}, {0x0, 0x8000, {0x1, 0x34}}]}}}, {{0x254, 0x1, {{0x3, 0x5}, 0x8, 0x4, 0x9, 0x1, 0x13, 'syz1\x00', "a6713c0b5e5d83361e072a8a4c3df275e81e0ec8988079255092d67a6e1547b5", "baa7124b1a894e4e942e4733d961c7a086b1ae3e95c55646f69d5c2f110adffe", [{0x5, 0x7fff, {0x2, 0xcfda}}, {0xff3, 0x8, {0x1, 0x1ff}}, {0xf800, 0x7ff, {0x1, 0x3}}, {0x1, 0x0, {0x3, 0x5}}, {0x40, 0x8, {0x3, 0x7ff}}, {0x2, 0x2, {0x3, 0x7}}, {0xfdff, 0x4, {0x3, 0x7fffffff}}, {0x6, 0xc, {0x0, 0x80000001}}, {0x7, 0xb, {0x2, 0x7}}, {0x0, 0x5d20, {0x0, 0xdd6}}, {0x9, 0x9, {0x1, 0x80000001}}, {0x8000, 0x5f, {0x2, 0xff}}, {0xd, 0x9, {0x2, 0x2}}, {0x9, 0x3, {0x3, 0x7b}}, {0x7, 0x0, {0x3, 0x3}}, {0x3, 0xa, {0x2, 0x9}}, {0x6, 0x0, {0x1, 0x2}}, {0x9a, 0x5, {0x0, 0xf5}}, {0x9, 0x9, {0x0, 0x3}}, {0x4, 0xfffb, {0x2, 0xffffffff}}, {0x5ae6, 0x2, {0x0, 0x3}}, {0xee, 0x0, {0x3, 0x1}}, {0x8, 0x3109, {0x3, 0x3}}, {0x7, 0x8, {0x3}}, {0x5, 0x1, {0x1, 0x400}}, {0x5, 0x8000, {0x0, 0x27a9}}, {0x1, 0x8, {0x0, 0x7f}}, {0x8000, 0x5, {0x1}}, {0x200, 0x6, {0x3}}, {0x8de5, 0x66, {0x2, 0x1ff}}, {0xcd, 0x9, {0x2, 0x6a959261}}, {0x6, 0x6, {0x2, 0x8000}}, {0x7fff, 0x9, {0x3, 0x200}}, {0x4, 0x7b, {0x3, 0x6}}, {0x8, 0x8001, {0x0, 0x1000}}, {0x9c, 0x9, {0x1, 0x9}}, {0x8, 0xfff9, {0x1, 0x9}}, {0x7f}, {0xf, 0x3, {0x1, 0x8}}, {0x6, 0x299, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0x6, 0x7, 0x96, 0x9, 0xa, 'syz0\x00', "5e2bec84f38c1f9b4fcb8daa08bfc925fa947151e4f325f7ec2964e13ffbac8e", "aba7deb6750ef0e4dbb4698c80b48dc9c94f48a94b1e726ab7314daec6496404", [{0x7, 0xcd, {0x2, 0x81}}, {0x1, 0x26, {0x0, 0x7}}, {0xaa7d, 0x401, {0x1, 0x443}}, {0x0, 0x1, {0x3, 0x80000000}}, {0x6, 0x5, {0x1, 0x3}}, {0x2, 0x5, {0x3, 0x7}}, {0x4, 0x8, {0x1, 0x8}}, {0x7, 0x5, {0x1, 0x7ff}}, {0x0, 0x5, {0x0, 0x20000}}, {0x4, 0x386, {0x1, 0x1}}, {0x9, 0x0, {0x1, 0x8}}, {0x1, 0x8000, {0x1, 0x6084}}, {0x82c, 0x2, {0x2, 0x37}}, {0x3502, 0x1, {0x1, 0x3}}, {0x6, 0x5e5a, {0x1, 0x5}}, {0x8, 0x0, {0x3, 0x4}}, {0x4, 0x0, {0x1, 0xe000}}, {0x2, 0x4, {0x0, 0x80000}}, {0x1ff, 0x8, {0x1, 0x6}}, {0x7fff, 0x4, {0x3, 0x2}}, {0x3ff, 0x2, {0x1, 0x67}}, {0x7, 0xf, {0x1, 0x5}}, {0x5, 0x1, {0x3, 0x480}}, {0x2, 0x9, {0x2, 0xb}}, {0x2, 0x0, {0x3, 0x1}}, {0x5, 0x4, {0x1, 0x531}}, {0xfffe, 0x0, {0x0, 0x7d}}, {0x0, 0x0, {0x3, 0x40}}, {0x4af, 0x7, {0x2, 0x7}}, {0xff, 0x9, {0x1}}, {0x40, 0xfff2, {0x1, 0x7bc61e27}}, {0x8, 0x3, {0x1, 0x9}}, {0xa, 0x8, {0x3, 0x9}}, {0x9, 0x3, {0x2, 0x3}}, {0x5, 0x9, {0x3, 0x7}}, {0x2, 0xf800, {0x1, 0x1}}, {0xfffa, 0x5, {0x0, 0x8}}, {0x0, 0xe, {0x0, 0x6}}, {0xb2, 0x4, {0x3, 0x7fff}}, {0x8, 0x3, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0xd8}, 0x8, 0x6, 0x0, 0x8, 0x10, 'syz1\x00', "78ad8fee8307378c912a2c6a007d7f0d44f55cffd71c9ddaf24905eb94db79be", "b9525ff399b3b78b4381bc060faa490879892743ed977a5b53ca9ea1bf007ae1", [{0xff, 0x0, {0x2, 0x3}}, {0xf9, 0x8, {0x0, 0x9}}, {0xed04, 0x1, {0x1, 0x5}}, {0x8000, 0x980, {0x2, 0x7}}, {0x2, 0x1648, {0x329e0a36994bfd83, 0x8001}}, {0x6, 0x5, {0x1, 0x821}}, {0x0, 0x5, {0x2, 0xd67}}, {0xfff1, 0x1ff, {0x1, 0x10}}, {0x1, 0x2, {0x0, 0x5}}, {0xffff, 0x81, {0x0, 0x8000}}, {0xc46d, 0x3, {0x1, 0x4}}, {0x8, 0xcf4, {0x3, 0xf}}, {0x0, 0x1, {0x3, 0xd}}, {0x8, 0xab5, {0x0, 0xff}}, {0x4, 0x8, {0x3, 0x9}}, {0xaa0, 0x2, {0x3, 0x5}}, {0x7, 0xf}, {0x1, 0xfffa, {0x3, 0x7}}, {0x3ff, 0x8, {0x1, 0x101}}, {0xf, 0x2, {0x2, 0xb5}}, {0x83d, 0x0, {0x1, 0x7f}}, {0x3, 0xff00, {0x1, 0x1}}, {0x84, 0xd, {0x3}}, {0x1, 0x7, {0x1, 0x4}}, {0x4, 0x3, {0x1, 0x78c9660a}}, {0x0, 0x7, {0x0, 0x6}}, {0x8, 0x101, {0x3, 0x490}}, {0x4, 0x7f, {0x1, 0x400}}, {0x400, 0x4e, {0x3, 0x9}}, {0x2, 0x1}, {0x1, 0x1, {0x2, 0x63}}, {0xb, 0x3ff, {0x0, 0x3}}, {0x3, 0x6, {0x3, 0x40000}}, {0x4, 0x80, {0x3, 0xfffffffb}}, {0x100, 0x472, {0x1, 0x3ff}}, {0x9, 0x1000, {0x0, 0x2}}, {0x401, 0x7, {0x0, 0x7fffffff}}, {0x3, 0x8, {0x3}}, {0x8, 0x83, {0x2, 0x63}}, {0xbb, 0x3e33, {0x2, 0x8d2}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x30}, 0x4000040)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r0)

1.263366824s ago: executing program 0 (id=3895):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, &(0x7f00000000c0)) (async)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, &(0x7f00000000c0))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002880), r2)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000028c0)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.261374793s ago: executing program 2 (id=3896):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff}) (async, rerun: 32)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 32)
bind$bt_l2cap(r3, &(0x7f0000000980), 0xe) (async, rerun: 32)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x20}}, 0x40004) (rerun: 32)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x4) (async)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018006000100", @ANYRES32=r2, @ANYBLOB="0c0002"], 0x3c}}, 0x20000000) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x909, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x60, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
r6 = socket$caif_stream(0x25, 0x1, 0x3) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d00000000140002080001000300000008000200250000000a00"], 0x50}}, 0xc080) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c000280080003400000001608000140"], 0x110}}, 0x40040)
setsockopt$CAIFSO_LINK_SELECT(r6, 0x116, 0x7f, &(0x7f0000000080)=0x3, 0x4)

1.102209081s ago: executing program 0 (id=3897):
socket$l2tp6(0xa, 0x2, 0x73) (async)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x90) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r3}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r3}, 0x10)
close(r2) (async)
close(r2)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @local}, 0xc) (async)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @local}, 0xc)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) (async)
connect$inet6(r6, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "ffffffdd00", "67b8825e3412c094fcd45c560968bcf3", "4807a1e6", "ee979d05f7ea4b9b"}, 0x28)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x28}, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0)
close(0x4)
listen(0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r8], 0x20}}, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x437, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x40)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="6400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000088520300440012800b000100697036746e6c00003400028014000300fc00000000000000000000000000000008000100", @ANYRES32, @ANYBLOB="14000200fe0000bb"], 0x64}}, 0x4000080)
setsockopt$inet6_int(r0, 0x29, 0x34, &(0x7f00000000c0)=0x46, 0x4)

1.101703709s ago: executing program 4 (id=3898):
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r2}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000009000000000000000000000300000700"], 0x0, 0x51}, 0x28)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x24, 0x14, 0x1, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "35becb4662d39f0437"}]}, 0x24}}, 0x0)
setsockopt(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100)="01000000020006fc", 0x8)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
accept(r7, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0)

1.049546763s ago: executing program 0 (id=3899):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xd}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x10}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x10}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe4, r3, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x78, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ec}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xffffffd5, 0x1, 0x6, 0xff, 0x6]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0xfffffffb, 0xcb5, 0x80000000, 0x4, 0x3, 0x9, 0x9, 0x6]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x502}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffffbc, 0x9]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6bf}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x63}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4c}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fff}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1000}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x110}, 0x44000)
socket$l2tp(0x2, 0x2, 0x73) (async)
r5 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r6=>0x0})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000400)={0x8, 'veth0_to_bridge\x00', {'veth0_to_bond\x00'}, 0x9})
r7 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000440)={'nat\x00', 0xa, "0e4393333da076b80608"}, &(0x7f0000000480)=0x2e) (async)
getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000440)={'nat\x00', 0xa, "0e4393333da076b80608"}, &(0x7f0000000480)=0x2e)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r3, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x32}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004080}, 0x20000980)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000005c0)={<r8=>0x0, 0x6}, &(0x7f0000000600)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000640)={r8, 0x18, "f71196d4fdb243450073aeb32d2956c86362a5cb0f9e750f"}, &(0x7f0000000680)=0x20) (async)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000640)={<r9=>r8, 0x18, "f71196d4fdb243450073aeb32d2956c86362a5cb0f9e750f"}, &(0x7f0000000680)=0x20)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000800)={&(0x7f00000006c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x88, r3, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x14)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r5)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, r10, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x4}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xfff}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5a}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008010}, 0x4040818)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000980)={'veth0_to_bridge\x00', 0x7ff})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000b80)={'ip_vti0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x8, 0x40, 0xd20, 0x0, {{0x49, 0x4, 0x2, 0x2, 0x124, 0x67, 0x0, 0xe, 0x4, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x34, 0xf2, 0x1, 0x5, [{@multicast1, 0x1}, {@multicast2, 0x5}, {@rand_addr=0x64010102, 0x5}, {@private=0xa010100, 0x9}, {@remote, 0x31199000}, {@remote, 0x4}]}, @rr={0x7, 0xb, 0xb4, [@private=0xa010102, @multicast1]}, @timestamp_addr={0x44, 0x24, 0xa, 0x1, 0x0, [{@multicast1}, {@multicast2, 0x6}, {@multicast2, 0x8001}, {@remote, 0x5}]}, @end, @ssrr={0x89, 0x23, 0x69, [@loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2]}, @ssrr={0x89, 0x27, 0xde, [@private=0xa010100, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010102, @remote, @multicast1, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0x8d, 0x3, 0x3, [{@empty, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@empty, 0x6}]}, @timestamp={0x44, 0x2c, 0xb2, 0x0, 0xa, [0x0, 0xffffffff, 0x2, 0x6, 0x37, 0x380, 0xadf, 0x428f, 0x5, 0x7]}, @ssrr={0x89, 0xf, 0x17, [@broadcast, @broadcast, @multicast2]}, @generic={0x16, 0xa, "bbf9ee9aeeef788e"}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000b80)={'ip_vti0\x00', &(0x7f0000000a00)={'ip_vti0\x00', <r11=>0x0, 0x8, 0x40, 0xd20, 0x0, {{0x49, 0x4, 0x2, 0x2, 0x124, 0x67, 0x0, 0xe, 0x4, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x34, 0xf2, 0x1, 0x5, [{@multicast1, 0x1}, {@multicast2, 0x5}, {@rand_addr=0x64010102, 0x5}, {@private=0xa010100, 0x9}, {@remote, 0x31199000}, {@remote, 0x4}]}, @rr={0x7, 0xb, 0xb4, [@private=0xa010102, @multicast1]}, @timestamp_addr={0x44, 0x24, 0xa, 0x1, 0x0, [{@multicast1}, {@multicast2, 0x6}, {@multicast2, 0x8001}, {@remote, 0x5}]}, @end, @ssrr={0x89, 0x23, 0x69, [@loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2]}, @ssrr={0x89, 0x27, 0xde, [@private=0xa010100, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010102, @remote, @multicast1, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0x8d, 0x3, 0x3, [{@empty, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@empty, 0x6}]}, @timestamp={0x44, 0x2c, 0xb2, 0x0, 0xa, [0x0, 0xffffffff, 0x2, 0x6, 0x37, 0x380, 0xadf, 0x428f, 0x5, 0x7]}, @ssrr={0x89, 0xf, 0x17, [@broadcast, @broadcast, @multicast2]}, @generic={0x16, 0xa, "bbf9ee9aeeef788e"}]}}}}})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c00)=0x14)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000d00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x7c, r10, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', <r13=>0x0})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) (async)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800)
r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000e80), 0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r14, 0x84, 0x75, &(0x7f0000000ec0)={r9, 0x1}, &(0x7f0000000f00)=0x8) (async)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r14, 0x84, 0x75, &(0x7f0000000ec0)={r9, 0x1}, &(0x7f0000000f00)=0x8)
sendmsg$NL80211_CMD_DEL_MPATH(r14, &(0x7f0000001040)={&(0x7f0000000f40), 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x70, r3, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x84)
setsockopt$kcm_KCM_RECV_DISABLE(r14, 0x119, 0x1, &(0x7f0000001080)=0x5, 0x4)
ioctl$BTRFS_IOC_DEFRAG(r14, 0x50009402, 0x0) (async)
ioctl$BTRFS_IOC_DEFRAG(r14, 0x50009402, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f00000010c0)='rxrpc_notify_socket\x00', r14, 0x0, 0x9}, 0x18)

968.737031ms ago: executing program 3 (id=3900):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0xa, [@type_tag={0x7, 0x0, 0x0, 0x12, 0x2}, @float={0x4, 0x0, 0x0, 0x10, 0x2}, @var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}, @ptr={0x7}, @union={0x2, 0x3, 0x0, 0x5, 0x0, 0x580, [{0x6, 0x0, 0x4}, {0x6, 0x5, 0x3}, {0x4, 0x4, 0x5}]}, @enum64={0x3, 0x6, 0x0, 0x13, 0x1, 0x4, [{0xb, 0x2, 0x9}, {0x1, 0x0, 0x5}, {0xa, 0x10000, 0xffff}, {0x5, 0x7f}, {0x7, 0x23, 0xd8}, {0x9, 0xff, 0x6}]}, @ptr={0x7, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x30, 0x30, 0x30, 0xe, 0x2e, 0x2e, 0x0, 0x5f]}}, &(0x7f0000000140)=""/49, 0xf2, 0x31, 0x1, 0x7}, 0x28)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x4050)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r2, 0x325, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10014}, 0x4008008)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x0, r0}, 0x94)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan4\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan3\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x100)

914.217591ms ago: executing program 2 (id=3901):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000071102200000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @private, <r2=>0x0}, &(0x7f0000000140)=0xc)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@mpls_getnetconf={0x24, 0x52, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x636}, @NETCONFA_IFINDEX={0x8, 0x1, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0xc000802)

913.919896ms ago: executing program 0 (id=3902):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x3c, r2, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8}]}, 0x3c}}, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'syzkaller0\x00', 0x400})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r4)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x90010010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r5, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_vlan\x00'}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000880)
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1)

883.192155ms ago: executing program 4 (id=3903):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0)
syz_emit_ethernet(0x76, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_emit_ethernet(0xf1, &(0x7f0000000600)={@local, @broadcast, @void, {@generic={0x5, "c08e23dbea167da395ac6f8191e68e7eddf0593116bd2989e93828e50d0fea165d04d635597c65d87f42ad6b351465f227bee5e48f81eb0dad339e00635732e22071bb9923adb82cec2df95a839f709e7ed751d311f7aa7d6d2c62b5281141a276da854e493b97513a4e4a84305012fba9d7f089e1814158ca12a90de9032f3a4fa49c7c574ce00e58178c5c04214592949799d795e0c7b5775b76362279bb16a81c4796cca78fe05ddb7adf266b12bc05cb12919ab81e331a67f061873ca3ec77fbdc26c9eb8e51dc33bb9c3d24a2ad2208c5ed63ed770dea05a05ae76efa5c24cf6b"}}}, 0x0) (fail_nth: 1)

790.73419ms ago: executing program 2 (id=3904):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, <r1=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000200)={r1, 0x1})

650.17047ms ago: executing program 1 (id=3905):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
syz_emit_ethernet(0x76, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_emit_ethernet(0x108, &(0x7f0000000000)={@local, @broadcast, @void, {@generic={0x5, "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"}}}, 0x0)

374.067104ms ago: executing program 4 (id=3906):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000140)=0x9d, 0x4)
recvmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0)
r2 = getpid()
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000000c0)=r2)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) (async)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e1f, 0x4, @empty, 0xe0c9}, 0x1c) (async)
recvmmsg(r4, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a80)=""/9, 0x9}, 0x5}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0) (async)
setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) (async)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000980)={0x2}, 0x10) (async)
write(r3, &(0x7f0000000300)="1c0000001a005f0214f9f4070d0903001f000000fe05000000020000", 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xb, 0x1, 'nfacct\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r5)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x844) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x48, 0x1411, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) (async)
r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x44, r10, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xa}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008084}, 0x4)

339.937301ms ago: executing program 2 (id=3907):
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb2, 0xffffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x24}, @exit={0x95, 0x0, 0x33, 0x48000000}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x6}, 0x94)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})

269.4978ms ago: executing program 3 (id=3908):
syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa620202"], 0x0)
syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x20, 0x0, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x1}], "b9365394fc379af00659ab39e65121dd3e8c7219b1f783b2"}}}}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080040"], 0x3c}}, 0x0)

267.843075ms ago: executing program 0 (id=3909):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x52}, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
socket$l2tp(0x2, 0x2, 0x73) (async)
r4 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r4, &(0x7f0000000000), 0x10)
bind$l2tp(r4, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) (async)
bind$l2tp(r4, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, 0x0, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd65080000000000000000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x5}]}]}, 0x20}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFBR(r9, 0x8940, &(0x7f0000000600)=@get={0x1, 0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffefc, &(0x7f0000001080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES64=r1, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) (async)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffefc, &(0x7f0000001080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES64=r1, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800)

267.684359ms ago: executing program 1 (id=3910):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0xc800)
sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf256a00000008000300", @ANYRES32=0x0, @ANYBLOB="0500d20c0a0000000a000600ffffffffffff00000500d2000e0001000500d200b0603125d668240a0000000a000600080211000001000060975328effabea8d51a76706e8d15756d962f9ab982af0d986f915704a09c8a1b6754"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

224.326018ms ago: executing program 1 (id=3911):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x13, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

182.733561ms ago: executing program 4 (id=3912):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f00000003c0)="b9cd14014b2671248fde59610bf57eff3f53017e0cdf8ce84f7d2ca79f9aeb566a3601b017d430b387b22662af00", 0x2e}], 0x1}}], 0x1, 0x20008000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x28)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9f76f4661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28)
r1 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x2000c01d)
write(r1, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000806}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x5, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41010}, 0x20040810)

49.964167ms ago: executing program 3 (id=3913):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x13, 0xfffffffb}, 0x50)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe00006600"], 0xfe33)

8.017958ms ago: executing program 1 (id=3914):
r0 = socket$inet6(0xa, 0x80803, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x200, 0x0, 0xa, 0x547b31180522e14c, 0x0, 0x3b}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x4d2}, 0x0, @in6=@private1, 0xfffffffd, 0x0, 0x0, 0x0, 0x7fffffff}}, 0xe8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x15, 'pids'}]}, 0x6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x10)

0s ago: executing program 0 (id=3915):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, 0x0, &(0x7f0000000300))
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002a00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, 0x0, &(0x7f0000000300)) (async)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002a00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async)

kernel console output (not intermixed with test programs):

nvalid length.
[  292.515819][ T8936] hsr0 speed is unknown, defaulting to 1000
[  292.559486][T13705] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  292.568326][T13705] syzkaller0: entered promiscuous mode
[  292.573834][T13705] syzkaller0: entered allmulticast mode
[  292.615536][T13705] tipc: Resetting bearer <eth:syzkaller0>
[  292.635299][T13704] tipc: Resetting bearer <eth:syzkaller0>
[  292.654600][T13704] tipc: Disabling bearer <eth:syzkaller0>
[  292.666013][T13712] netlink: 'syz.4.2139': attribute type 63 has an invalid length.
[  292.674688][T13712] netlink: 'syz.4.2139': attribute type 63 has an invalid length.
[  292.717564][T13712] netlink: 'syz.4.2139': attribute type 63 has an invalid length.
[  292.725815][T13715] netlink: 'syz.4.2139': attribute type 63 has an invalid length.
[  292.726234][T13717] netlink: 'syz.1.2141': attribute type 12 has an invalid length.
[  292.804742][T13717] bond4: option primary_reselect: invalid value (255)
[  292.835735][T13717] bond4 (unregistering): Released all slaves
[  293.071353][T13741] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2148'.
[  293.088949][T13741] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2148'.
[  293.240151][T13751] xt_CT: You must specify a L4 protocol and not use inversions on it
[  293.246548][T13751] xt_CT: You must specify a L4 protocol and not use inversions on it
[  293.419091][T13770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2157'.
[  293.450562][T13767] !
: renamed from dummy0 (while UP)
[  293.493293][T13770] netlink: 'syz.3.2157': attribute type 1 has an invalid length.
[  293.501440][T13770] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2157'.
[  293.748788][T13797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2160'.
[  293.803225][T13801] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  294.848470][T13834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2172'.
[  294.985450][T13839] netlink: 'syz.4.2176': attribute type 1 has an invalid length.
[  295.103067][T13848] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  295.191994][T13857] netlink: zone id is out of range
[  295.215263][T13857] netlink: zone id is out of range
[  295.240397][T13857] netlink: set zone limit has 8 unknown bytes
[  295.308934][T13866] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  295.393418][T13875] --map-set only usable from mangle table
[  295.530969][ T5149] Bluetooth: hci4: command 0x0405 tx timeout
[  295.634289][T13893] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  295.702156][T13893] tipc: Disabling bearer <eth:syzkaller0>
[  295.770499][T13891] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  295.829513][T13903] sctp: [Deprecated]: syz.2.2195 (pid 13903) Use of struct sctp_assoc_value in delayed_ack socket option.
[  295.829513][T13903] Use struct sctp_sack_info instead
[  296.424927][T13949] pimreg: left allmulticast mode
[  296.437196][T13950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.459531][T13950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.484126][T13950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.499614][T13950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.509128][T13950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.519007][T13950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.528313][T13950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.538087][T13950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.547343][T13950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.567391][T13950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.658870][T13965] __nla_validate_parse: 12 callbacks suppressed
[  296.658887][T13965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2212'.
[  296.692952][T13965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2212'.
[  296.711362][T13965] netlink: 'syz.1.2212': attribute type 15 has an invalid length.
[  296.744645][T13965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2212'.
[  296.775490][ T8713] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  296.789723][ T8713] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  296.799509][ T8713] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  296.808509][ T8713] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  296.874277][T13979] ipt_rpfilter: unknown options
[  296.880033][T13980] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  296.936337][T13983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2218'.
[  297.078644][T13988] 8021q: adding VLAN 0 to HW filter on device bond10
[  297.165161][T13988] vlan2: entered allmulticast mode
[  297.196028][T13988] bond10: entered allmulticast mode
[  297.949291][T14034] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  297.999440][T14037] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  298.034322][T14042] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.062875][T14042] syzkaller0: entered promiscuous mode
[  298.088735][T14042] syzkaller0: entered allmulticast mode
[  298.116604][T14042] netlink: 'syz.4.2230': attribute type 21 has an invalid length.
[  298.133792][T14042] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2230'.
[  298.153691][T14042] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2230'.
[  298.171825][T14046] sch_fq: defrate 0 ignored.
[  298.203839][T14036] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  298.274919][T14036] tipc: Resetting bearer <eth:syzkaller0>
[  298.308500][T14035] tipc: Resetting bearer <eth:syzkaller0>
[  298.337934][T14035] tipc: Disabling bearer <eth:syzkaller0>
[  298.350469][T14056] : renamed from hsr0
[  298.359042][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2238'.
[  298.369543][T14061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2238'.
[  298.498880][T14064] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  298.566365][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2242'.
[  298.662806][T14077] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2245'.
[  298.677952][T14083] netlink: 'syz.2.2243': attribute type 7 has an invalid length.
[  298.685725][T14083] netlink: 'syz.2.2243': attribute type 8 has an invalid length.
[  298.825983][T14098] IPv6: sit1: Disabled Multicast RS
[  298.834284][T14098] sit1: entered allmulticast mode
[  298.983854][T14108] syzkaller1: entered promiscuous mode
[  299.003879][T14108] syzkaller1: entered allmulticast mode
[  299.057245][T14099] sctp: [Deprecated]: syz.2.2252 (pid 14099) Use of struct sctp_assoc_value in delayed_ack socket option.
[  299.057245][T14099] Use struct sctp_sack_info instead
[  299.333738][T14133] tc_dump_action: action bad kind
[  299.390074][T14127] batman_adv: batadv0: Removing interface: batadv_slave_0
[  299.420307][T14127] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.002648][T14170] netlink: 'syz.2.2273': attribute type 17 has an invalid length.
[  300.112236][T14175] bond5 (unregistering): Released all slaves
[  300.340514][T14194] netlink: 'syz.4.2277': attribute type 2 has an invalid length.
[  300.373828][T14194] netlink: 'syz.4.2277': attribute type 8 has an invalid length.
[  300.453631][T14202] xt_hashlimit: size too large, truncated to 1048576
[  300.971151][T14242] netlink: 'syz.1.2291': attribute type 1 has an invalid length.
[  301.112952][T14242] 8021q: adding VLAN 0 to HW filter on device bond4
[  301.230460][T14247] bond4: (slave veth15): Enslaving as an active interface with a down link
[  301.264176][T14252] veth17: entered promiscuous mode
[  301.281925][T14252] bond4: (slave veth17): Enslaving as an active interface with a down link
[  301.429949][T14268] delete_channel: no stack
[  301.494831][T14270] netlink: 'syz.4.2298': attribute type 21 has an invalid length.
[  301.509861][T14270] netlink: 'syz.4.2298': attribute type 5 has an invalid length.
[  301.651486][T14289] net_ratelimit: 24 callbacks suppressed
[  301.651505][T14289] openvswitch: netlink: nsh attribute has 996 unknown bytes.
[  301.673675][T14290] openvswitch: netlink: nsh attribute has 996 unknown bytes.
[  301.708314][T14289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.717045][T14290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.998041][T14314] __nla_validate_parse: 16 callbacks suppressed
[  301.998061][T14314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2311'.
[  302.061040][T14314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2311'.
[  302.152296][T14333] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2318'.
[  302.169176][T14333] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  302.385130][T14355] xt_CT: No such helper "pptp"
[  302.883042][T14358] netdevsim netdevsim1: Direct firmware load for ..� failed with error -2
[  302.907011][T14358] netdevsim netdevsim1: Falling back to sysfs fallback for: ..�
[  303.163373][T14377] syz.3.2330 uses old SIOCAX25GETINFO
[  303.340191][T14390] veth9: entered promiscuous mode
[  303.345428][T14390] veth9: entered allmulticast mode
[  303.876350][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2347'.
[  304.153055][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2350'.
[  304.634727][T14466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'.
[  304.779846][T14482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2359'.
[  304.879708][T14488] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  304.968854][T14499] IPVS: set_ctl: invalid protocol: 136 172.20.20.26:20000
[  305.072727][T14499] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2366'.
[  305.086596][   T56] block nbd0: Possible stuck request ffff888024cee000: control (read@0,1024B). Runtime 210 seconds
[  305.097783][   T56] block nbd0: Possible stuck request ffff888024cee1c0: control (read@1024,1024B). Runtime 210 seconds
[  305.108368][T14499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  305.109135][   T56] block nbd0: Possible stuck request ffff888024cee380: control (read@2048,1024B). Runtime 210 seconds
[  305.138435][   T56] block nbd0: Possible stuck request ffff888024cee540: control (read@3072,1024B). Runtime 210 seconds
[  305.180377][T14502] netlink: 'syz.0.2367': attribute type 10 has an invalid length.
[  305.471300][T14510] xt_limit: Overflow, try lower: 604147548/4200216962
[  305.739629][T14534] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2378'.
[  305.748366][T14536] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2379'.
[  305.881330][T14542] netlink: 'syz.1.2381': attribute type 1 has an invalid length.
[  305.984753][T14553] netlink: 'syz.0.2385': attribute type 2 has an invalid length.
[  305.996170][T14553] netlink: 'syz.0.2385': attribute type 1 has an invalid length.
[  306.043351][T14543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  306.287717][T14576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  306.288901][T14579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  306.629286][T14605] bond5: Removing last arp target with arp_interval on
[  306.691821][T14612] netlink: 'syz.3.2403': attribute type 2 has an invalid length.
[  308.102422][T14632] __nla_validate_parse: 6 callbacks suppressed
[  308.102442][T14632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2410'.
[  308.262732][T14642] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  308.276732][T14646] xt_CT: You must specify a L4 protocol and not use inversions on it
[  308.286723][T14642] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  308.308539][T14652] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001
[  308.384586][T14632] macvlan3: entered promiscuous mode
[  308.402174][T14632] macvlan3: entered allmulticast mode
[  308.412699][T14632] bond7: (slave macvlan3): Error -98 calling set_mac_address
[  308.478807][T14662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2419'.
[  308.648162][T14671] syzkaller0: entered promiscuous mode
[  308.653722][T14671] syzkaller0: entered allmulticast mode
[  308.714591][T14673] block nbd1: NBD_DISCONNECT
[  308.757529][T14673] block nbd1: Send disconnect failed -32
[  308.767719][T14673] block nbd1: shutting down sockets
[  308.774104][T14677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2424'.
[  308.972677][T14682] bridge0: port 3(batadv0) entered blocking state
[  308.980601][T14682] bridge0: port 3(batadv0) entered disabled state
[  308.987440][T14682] batadv0: entered allmulticast mode
[  308.995224][T14682] batadv0: entered promiscuous mode
[  309.136949][T14688] bond1: (slave lo): Releasing backup interface
[  309.144102][T14688] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  309.154939][T14688] erspan0: left promiscuous mode
[  309.160548][T14688] erspan0: left allmulticast mode
[  309.172985][T14688] team0: Port device dummy0 removed
[  309.179117][T14688] bridge_slave_0: left allmulticast mode
[  309.187683][T14688] bridge_slave_0: left promiscuous mode
[  309.199885][T14688] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.232454][T14688] bridge_slave_1: left allmulticast mode
[  309.240919][T14688] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.260630][T14688] bond0: (slave bond_slave_0): Releasing backup interface
[  309.269668][T14688] bond0: (slave bond_slave_1): Releasing backup interface
[  309.281472][T14688] team0: Port device team_slave_0 removed
[  309.313314][T14688] team0: Port device team_slave_1 removed
[  309.319873][T14688] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  309.468778][ T7056] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  309.479295][ T7056] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  309.697195][T14722] syzkaller0: entered promiscuous mode
[  309.702891][T14722] syzkaller0: entered allmulticast mode
[  310.213845][T14769] netlink: 'syz.0.2447': attribute type 2 has an invalid length.
[  310.222625][T14769] netlink: 'syz.0.2447': attribute type 8 has an invalid length.
[  310.234057][T14769] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2447'.
[  310.345338][T14775] Cannot find add_set index 2 as target
[  310.377418][T14774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  310.516724][T14777] bond7: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  310.540095][T14777] bond7 (unregistering): Released all slaves
[  310.602614][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2453'.
[  311.040001][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2463'.
[  311.049464][T14812] xt_l2tp: v2 doesn't support IP mode
[  311.097682][T14808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2461'.
[  311.111401][T14824] netlink: 'syz.3.2464': attribute type 64 has an invalid length.
[  311.122716][T14825] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  311.147142][T14824] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2464'.
[  311.319526][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2467'.
[  311.321574][   T30] audit: type=1804 audit(1762691356.580:4): pid=14838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2467" name="/newroot/551/cgroup.controllers" dev="tmpfs" ino=2811 res=1 errno=0
[  311.371772][   T30] audit: type=1800 audit(1762691356.580:5): pid=14838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2467" name="cgroup.controllers" dev="tmpfs" ino=2811 res=0 errno=0
[  311.646326][T14868] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2477'.
[  311.977819][T14897] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000
[  312.010429][T14899] 8021q: VLANs not supported on ip6tnl0
[  312.210855][T14919] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  312.211286][T14913] netlink: 'syz.2.2491': attribute type 1 has an invalid length.
[  312.290437][T14919] netlink: 'syz.3.2490': attribute type 1 has an invalid length.
[  312.301196][T14919] netlink: 'syz.3.2490': attribute type 3 has an invalid length.
[  312.366624][T14925] bond11: (slave geneve3): making interface the new active one
[  312.375076][T14925] bond11: (slave geneve3): Enslaving as an active interface with an up link
[  312.386340][ T8711] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  312.387808][T14929] netlink: 'syz.1.2496': attribute type 1 has an invalid length.
[  312.425855][T14929] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.456036][ T8711] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  312.464918][ T5828] Bluetooth: hci4: link tx timeout
[  312.471456][ T5828] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  312.480039][ T5828] Bluetooth: hci4: link tx timeout
[  312.485250][ T5828] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  312.497785][ T8720] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  312.508573][ T8720] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  312.993540][T14956] syzkaller1: entered promiscuous mode
[  313.013012][T14956] syzkaller1: entered allmulticast mode
[  313.045021][T14966] 8021q: VLANs not supported on ip6tnl0
[  313.275811][T14990] __nla_validate_parse: 7 callbacks suppressed
[  313.275829][T14990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2515'.
[  313.368676][T14987] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2516'.
[  313.391664][T14987] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2516'.
[  313.554855][T15003] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  313.577413][T15003] netlink: 39071 bytes leftover after parsing attributes in process `syz.0.2520'.
[  313.577413][T15004] netlink: 39071 bytes leftover after parsing attributes in process `syz.0.2520'.
[  313.789207][T15019] netlink: 'syz.3.2525': attribute type 8 has an invalid length.
[  313.815568][T15019] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2525'.
[  314.488591][T15066] netlink: 'syz.2.2539': attribute type 1 has an invalid length.
[  314.525889][T15058] syz.3.2536 (15058) used greatest stack depth: 17832 bytes left
[  314.554808][T15070] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2538'.
[  314.567070][ T5841] Bluetooth: hci4: command 0x0405 tx timeout
[  314.624386][T15066] bond12: entered promiscuous mode
[  314.630357][T15066] 8021q: adding VLAN 0 to HW filter on device bond12
[  314.732188][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2542'.
[  314.800730][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2542'.
[  315.091484][T15111] netlink: 'syz.3.2551': attribute type 2 has an invalid length.
[  315.129024][T15107] xt_limit: Overflow, try lower: 271964/0
[  315.136204][T15117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2549'.
[  315.435663][T15143] validate_nla: 1 callbacks suppressed
[  315.435681][T15143] netlink: 'syz.4.2560': attribute type 29 has an invalid length.
[  315.758496][T15159] xt_hashlimit: size too large, truncated to 1048576
[  315.895595][T15164] A link change request failed with some changes committed already. Interface ������Z7nz>RA� may have been left with an inconsistent configuration, please check.
[  315.960922][T15164] netlink: 'syz.1.2563': attribute type 1 has an invalid length.
[  316.276457][T15170] bridge_slave_1: mtu greater than device maximum
[  316.524074][T15185] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  316.655288][ T5841] Bluetooth: hci4: command 0x0405 tx timeout
[  316.735659][T15199] netlink: 'syz.0.2577': attribute type 6 has an invalid length.
[  316.776283][T15199] netlink: 'syz.0.2577': attribute type 6 has an invalid length.
[  317.099187][T15224] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (65485) !
[  317.651092][T15262] syz_tun: entered allmulticast mode
[  317.657692][T15258] Cannot find del_set index 4 as target
[  317.686480][T15260] dvmrp6: entered allmulticast mode
[  317.702915][T15260] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  317.716703][T15260] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  317.831270][T15259] syz_tun: left allmulticast mode
[  318.152310][T15290] batadv_slave_0: entered promiscuous mode
[  318.499099][T15313] __nla_validate_parse: 15 callbacks suppressed
[  318.499116][T15313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2610'.
[  318.579397][T15320] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2612'.
[  318.650041][T15323] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2613'.
[  318.659663][T15323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2613'.
[  319.158307][T15355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2621'.
[  319.168022][T15356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2621'.
[  319.336215][T15368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2626'.
[  319.350868][T15363] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.377673][T15363] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.384960][T15363] bridge0: port 1(bridge_slave_0) entered forwarding state
[  319.645759][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2630'.
[  319.928272][T15399] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2631'.
[  319.938469][T15399] nbd: socks must be embedded in a SOCK_ITEM attr
[  320.113269][T15409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2635'.
[  320.212143][T15412] 8021q: adding VLAN 0 to HW filter on device bond8
[  320.450378][T15425] netlink: 'syz.1.2641': attribute type 4 has an invalid length.
[  320.548364][T15436] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0
[  320.758752][T15450] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  320.770141][T15450] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  321.508609][T15492] vxcan1 speed is unknown, defaulting to 1000
[  321.637737][T15492] hsr0 speed is unknown, defaulting to 1000
[  322.251552][T15526] netlink: 'syz.4.2673': attribute type 11 has an invalid length.
[  322.503696][T15538] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  322.702057][T15553] gretap0: entered promiscuous mode
[  322.738593][T15550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.769020][T15550] syzkaller0: entered promiscuous mode
[  322.774539][T15550] syzkaller0: entered allmulticast mode
[  322.874233][T15550] tipc: Resetting bearer <eth:syzkaller0>
[  322.907474][T15549] tipc: Resetting bearer <eth:syzkaller0>
[  322.947446][T15549] tipc: Disabling bearer <eth:syzkaller0>
[  323.072449][T15574] netlink: 'syz.0.2683': attribute type 2 has an invalid length.
[  323.312230][T15574] : entered promiscuous mode
[  323.368063][T15576] vxcan1 speed is unknown, defaulting to 1000
[  323.942387][T15612] __nla_validate_parse: 23 callbacks suppressed
[  323.942404][T15612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2695'.
[  323.971841][T15614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2696'.
[  323.997598][T15576] hsr0 speed is unknown, defaulting to 1000
[  324.001291][T15614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2696'.
[  324.052898][T15619] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2696'.
[  324.132277][T15619] bond7 (unregistering): Released all slaves
[  324.193898][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  324.207161][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  324.217642][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  324.234606][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  324.244411][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  324.425880][T15637] xt_l2tp: missing protocol rule (udp|l2tpip)
[  324.457811][T15623] vxcan1 speed is unknown, defaulting to 1000
[  324.685216][T15647] netlink: 'syz.1.2703': attribute type 8 has an invalid length.
[  324.694098][T15652] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  325.022512][T15623] hsr0 speed is unknown, defaulting to 1000
[  325.080844][T15666] dvmrp0: entered allmulticast mode
[  325.098909][T15666] dvmrp0: left allmulticast mode
[  325.104177][T15666] dvmrp6: left allmulticast mode
[  325.150939][T15668] : entered promiscuous mode
[  325.198005][T15672] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  325.208097][T15672] IPVS: set_ctl: invalid protocol: 183 0.0.0.0:0
[  325.342999][T15680] bridge7: entered promiscuous mode
[  325.350270][T15680] bridge7: entered allmulticast mode
[  325.402116][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2715'.
[  325.460018][T15623] chnl_net:caif_netlink_parms(): no params data found
[  325.555659][T15692] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2718'.
[  325.588955][T15690] bond0: (slave dummy0): Releasing backup interface
[  325.612991][T15690] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  325.790701][T15712] Bluetooth: MGMT ver 1.23
[  325.818317][T15623] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.826199][T15623] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.837497][T15623] bridge_slave_0: entered allmulticast mode
[  325.845485][T15623] bridge_slave_0: entered promiscuous mode
[  325.879414][T15623] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.890924][T15623] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.899296][T15623] bridge_slave_1: entered allmulticast mode
[  325.907514][T15623] bridge_slave_1: entered promiscuous mode
[  326.008395][T15623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  326.035493][T15728] tunl0: entered promiscuous mode
[  326.069022][T15623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  326.133114][T15734] xt_time: invalid argument - start or stop time greater than 23:59:59
[  326.211503][T15623] team0: Port device team_slave_0 added
[  326.250911][T15623] team0: Port device team_slave_1 added
[  326.267684][T15737] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  326.282557][T15737] syzkaller0: entered promiscuous mode
[  326.298479][T15737] syzkaller0: entered allmulticast mode
[  326.328202][ T5149] Bluetooth: hci0: command tx timeout
[  326.435024][T15623] batman_adv: batadv0: Adding interface: batadv_slave_0
[  326.456649][T15623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  326.485919][T15623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  326.493154][T15752] IPVS: Scheduler module ip_vs_sip not found
[  326.500005][T15623] batman_adv: batadv0: Adding interface: batadv_slave_1
[  326.510628][T15623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  326.542745][T15623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  326.588871][T15736] tipc: Resetting bearer <eth:syzkaller0>
[  326.613718][T15736] tipc: Disabling bearer <eth:syzkaller0>
[  326.645922][T15623] hsr_slave_0: entered promiscuous mode
[  326.652843][T15623] hsr_slave_1: entered promiscuous mode
[  327.078049][T15784] netlink: 'syz.1.2740': attribute type 1 has an invalid length.
[  327.089911][T15784] nbd: error processing sock list
[  327.096690][T15784] block nbd1: shutting down sockets
[  327.235581][T15795] netlink: 'syz.3.2744': attribute type 21 has an invalid length.
[  327.322113][T15623] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  327.364596][T15623] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  327.401429][T15623] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  327.541575][T15810] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  327.828695][T15623] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  327.957321][T15825] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  327.990017][T15827] netlink: 'syz.4.2750': attribute type 83 has an invalid length.
[  328.098346][T15833] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2752'.
[  328.142057][T15840] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2755'.
[  328.155662][T15841] openvswitch: netlink: IP tunnel dst address not specified
[  328.189622][T15623] 8021q: adding VLAN 0 to HW filter on device bond0
[  328.232633][T15847] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2758'.
[  328.240643][T15833] bond7: (slave gre0): Device is not bonding slave
[  328.248696][T15833] bond7: option active_slave: invalid value (gre0)
[  328.259327][T15833] bond7 (unregistering): Released all slaves
[  328.353127][T15847] bridge_slave_0: default FDB implementation only supports local addresses
[  328.374112][T15850] netlink: 'syz.2.2759': attribute type 1 has an invalid length.
[  328.405658][T15623] 8021q: adding VLAN 0 to HW filter on device team0
[  328.407099][ T5149] Bluetooth: hci0: command tx timeout
[  328.425441][T15848] IPv6: NLM_F_CREATE should be specified when creating new route
[  328.488493][T15850] bond13: entered promiscuous mode
[  328.494032][T15858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2760'.
[  328.503552][T15850] 8021q: adding VLAN 0 to HW filter on device bond13
[  328.549029][T15855] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  328.561212][T15855] bond6 (unregistering): Released all slaves
[  328.611392][T15853] bond13: (slave bridge8): making interface the new active one
[  328.624471][T15853] bridge8: entered promiscuous mode
[  328.668870][T15853] bond13: (slave bridge8): Enslaving as an active interface with an up link
[  328.703347][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.710568][ T8711] bridge0: port 1(bridge_slave_0) entered forwarding state
[  328.748787][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.755998][ T8711] bridge0: port 2(bridge_slave_1) entered forwarding state
[  328.769326][T15866] netlink: 'syz.1.2762': attribute type 13 has an invalid length.
[  329.349814][T15898] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  329.423450][T15623] 8021q: adding VLAN 0 to HW filter on device batadv0
[  329.540965][T15623] veth0_vlan: entered promiscuous mode
[  329.566794][T15623] veth1_vlan: entered promiscuous mode
[  329.632189][T15623] veth0_macvtap: entered promiscuous mode
[  329.662299][T15623] veth1_macvtap: entered promiscuous mode
[  329.727728][T15623] batman_adv: batadv0: Interface activated: batadv_slave_0
[  329.754320][T15623] batman_adv: batadv0: Interface activated: batadv_slave_1
[  329.804264][ T7055] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  329.816321][ T7055] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  329.876172][ T7055] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  329.894965][T15929] vlan3: entered promiscuous mode
[  329.902769][T15929] geneve1: entered promiscuous mode
[  329.913110][T15929] vlan3: entered allmulticast mode
[  329.921326][T15929] geneve1: entered allmulticast mode
[  329.947367][ T7055] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  330.118758][ T7055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.140068][ T7055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.178496][ T8720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.187106][ T8720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.391270][T15957] netlink: 'syz.2.2789': attribute type 9 has an invalid length.
[  330.487264][ T5149] Bluetooth: hci0: command tx timeout
[  330.607241][T15976] __nla_validate_parse: 4 callbacks suppressed
[  330.607258][T15976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2794'.
[  330.626242][T15976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2794'.
[  330.837430][T15991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.981317][T16003] netlink: 'syz.2.2804': attribute type 1 has an invalid length.
[  330.989697][T16003] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2804'.
[  331.004345][T16003] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2804'.
[  331.219215][T16014] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2810'.
[  331.238176][T16014] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2810'.
[  331.342045][T16026] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2813'.
[  331.361623][T16026] nbd: illegal input index -8454144
[  331.533862][T16033] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.629812][T16042] netlink: 'syz.3.2814': attribute type 1 has an invalid length.
[  331.657725][T16042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2814'.
[  332.228413][T16078] openvswitch: netlink: IP tunnel dst address not specified
[  332.252290][T16080] sock: sock_set_timeout: `syz.2.2829' (pid 16080) tries to set negative timeout
[  332.270016][T16082] vxcan1 speed is unknown, defaulting to 1000
[  332.289723][T16080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2829'.
[  332.308442][T16080] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  332.529945][T16093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  332.571938][ T5149] Bluetooth: hci0: command tx timeout
[  332.662291][T16082] hsr0 speed is unknown, defaulting to 1000
[  332.845292][T16111] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2838'.
[  333.614924][T16159] netlink: 'syz.4.2852': attribute type 29 has an invalid length.
[  334.186364][T16192] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  334.252541][T16210] IPVS: set_ctl: invalid protocol: 108 172.20.20.41:20001
[  334.721058][T16245] bond1: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  335.038374][T16259] syzkaller0: entered promiscuous mode
[  335.044039][T16259] syzkaller0: entered allmulticast mode
[  335.071824][T16259] netlink: 'syz.3.2884': attribute type 10 has an invalid length.
[  335.102622][T16259] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  335.133843][   T56] block nbd0: Possible stuck request ffff888024cee000: control (read@0,1024B). Runtime 240 seconds
[  335.145183][   T56] block nbd0: Possible stuck request ffff888024cee1c0: control (read@1024,1024B). Runtime 240 seconds
[  335.162193][   T56] block nbd0: Possible stuck request ffff888024cee380: control (read@2048,1024B). Runtime 240 seconds
[  335.173316][   T56] block nbd0: Possible stuck request ffff888024cee540: control (read@3072,1024B). Runtime 240 seconds
[  335.251443][T16270] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  335.371965][T16280] netlink: 'syz.3.2891': attribute type 1 has an invalid length.
[  335.523982][T16285] bond7: (slave geneve3): making interface the new active one
[  335.537377][T16285] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  335.547190][T16280] netlink: 'syz.3.2891': attribute type 9 has an invalid length.
[  335.555407][ T7055] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0
[  335.587340][ T7055] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0
[  335.621573][ T7055] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0
[  335.634468][ T7055] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0
[  335.701900][T16299] __nla_validate_parse: 10 callbacks suppressed
[  335.701918][T16299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2897'.
[  335.880501][T16318] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  335.915124][T16319] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2903'.
[  335.998715][T16316] bond0: left allmulticast mode
[  336.044726][T16316] wg2: left allmulticast mode
[  336.160874][T16316] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  336.223356][T16316] gretap0: left promiscuous mode
[  336.229147][T16316] gretap0: left allmulticast mode
[  336.242000][T16316] bond3: left promiscuous mode
[  336.250474][T16316] bridge4: left promiscuous mode
[  336.311836][T16316] veth7: left promiscuous mode
[  336.323990][T16316] vlan2: left allmulticast mode
[  336.329634][T16316] bond10: left allmulticast mode
[  336.341988][T16316] bond12: left promiscuous mode
[  336.352145][T16316] bridge7: left promiscuous mode
[  336.358088][T16316] bridge7: left allmulticast mode
[  336.372001][T16316] bond13: left promiscuous mode
[  336.377573][T16316] bridge8: left promiscuous mode
[  336.394293][T16316] vlan3: left promiscuous mode
[  336.401383][T16316] geneve1: left promiscuous mode
[  336.409141][T16329] IPVS: stopping master sync thread 15436 ...
[  336.420713][T16316] vlan3: left allmulticast mode
[  336.425834][T16316] geneve1: left allmulticast mode
[  336.434133][ T8937] hsr0 speed is unknown, defaulting to 1000
[  336.434132][ T8724] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  336.434159][ T8724] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0
[  336.467365][ T8937] syz1: Port: 1 Link DOWN
[  336.511253][ T8724] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.535522][ T8724] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  336.561090][ T8724] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  336.605733][ T8724] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0
[  336.633853][ T8724] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.656988][ T8724] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  336.681438][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2910'.
[  336.693140][ T8724] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  336.703274][ T8724] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0
[  336.736259][ T8724] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.764629][ T8724] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  336.843838][ T8724] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  336.875457][T16348] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2912'.
[  336.899250][ T8724] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0
[  336.931196][ T8724] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.964331][ T8724] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  337.253537][T16373] ip6gre1: entered allmulticast mode
[  337.258197][T16375] netlink: 'syz.2.2920': attribute type 11 has an invalid length.
[  337.325681][T16379] sctp: [Deprecated]: syz.3.2922 (pid 16379) Use of int in maxseg socket option.
[  337.325681][T16379] Use struct sctp_assoc_value instead
[  337.353166][T16379] delete_channel: no stack
[  337.673118][T16400] IPVS: persistence engine module ip_vs_pe_�
 not found
[  337.692112][T16404] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2926'.
[  337.701649][T16405] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2926'.
[  337.731543][T16409] syz_tun: entered allmulticast mode
[  337.757310][T16409] dvmrp8: entered allmulticast mode
[  337.771673][T16406] syz_tun: left allmulticast mode
[  337.862384][T16414] 0: reclassify loop, rule prio 0, protocol 800
[  337.930249][T16423] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2932'.
[  338.192228][T16438] netlink: 'syz.2.2939': attribute type 1 has an invalid length.
[  338.202232][T16438] netlink: 'syz.2.2939': attribute type 3 has an invalid length.
[  338.212901][T16438] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2939'.
[  338.233361][T16438] NCSI netlink: No device for ifindex 813332851
[  338.328840][T16452] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.354641][T16452] syzkaller0: entered promiscuous mode
[  338.370872][T16452] syzkaller0: entered allmulticast mode
[  338.401170][T16452] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  338.431270][T16452] tipc: Resetting bearer <eth:syzkaller0>
[  338.451874][T16447] tipc: Resetting bearer <eth:syzkaller0>
[  338.499361][T16447] tipc: Disabling bearer <eth:syzkaller0>
[  338.517313][T16462] veth0_to_bridge: entered promiscuous mode
[  338.529638][T16459] veth0_to_bridge: left promiscuous mode
[  338.633693][T16474] syz_tun: entered allmulticast mode
[  338.690791][T16470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2951'.
[  338.713516][T16470] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.789787][T16487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2957'.
[  338.934185][T16490] xt_TCPMSS: Only works on TCP SYN packets
[  338.959835][T16472] syz_tun: left allmulticast mode
[  339.230407][T16518] delete_channel: no stack
[  339.397022][T16537] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  339.544172][T16545] netlink: 'syz.2.2974': attribute type 1 has an invalid length.
[  339.589895][T16545] bond14: entered promiscuous mode
[  339.597471][T16545] 8021q: adding VLAN 0 to HW filter on device bond14
[  339.716692][T16551] 8021q: adding VLAN 0 to HW filter on device bond14
[  339.724314][T16551] bond14: (slave gre2): The slave device specified does not support setting the MAC address
[  339.751628][T16551] bond14: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  339.773565][T16551] bond14: (slave gre2): making interface the new active one
[  339.797865][T16551] gre2: entered promiscuous mode
[  339.810343][T16551] bond14: (slave gre2): Enslaving as an active interface with an up link
[  340.034453][T16584] netlink: 'syz.4.2985': attribute type 5 has an invalid length.
[  340.189900][T16595] netlink: 'syz.3.2986': attribute type 1 has an invalid length.
[  340.297670][T16595] veth7: entered promiscuous mode
[  340.320283][T16595] bond8: (slave veth7): Enslaving as a backup interface with a down link
[  340.340739][T16596] 8021q: adding VLAN 0 to HW filter on device bond8
[  340.573749][T16623] : entered promiscuous mode
[  340.707078][T16629] __nla_validate_parse: 10 callbacks suppressed
[  340.707095][T16629] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2995'.
[  340.773709][T16641] netlink: 'syz.3.2998': attribute type 8 has an invalid length.
[  340.885888][T16649] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3002'.
[  340.941212][T16653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3003'.
[  341.140406][T16668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3006'.
[  341.246135][T16674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3007'.
[  341.377951][T16683] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3009'.
[  365.207321][   T56] block nbd0: Possible stuck request ffff888024cee000: control (read@0,1024B). Runtime 270 seconds
[  365.218453][   T56] block nbd0: Possible stuck request ffff888024cee1c0: control (read@1024,1024B). Runtime 270 seconds
[  365.229546][   T56] block nbd0: Possible stuck request ffff888024cee380: control (read@2048,1024B). Runtime 270 seconds
[  365.240806][   T56] block nbd0: Possible stuck request ffff888024cee540: control (read@3072,1024B). Runtime 270 seconds
[  367.758087][T16699] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3011'.
[  367.869927][T16702] sctp: [Deprecated]: syz.0.3015 (pid 16702) Use of int in max_burst socket option deprecated.
[  367.869927][T16702] Use struct sctp_assoc_value instead
[  368.015746][T16707] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  368.156287][T16717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3020'.
[  368.421717][ T5149] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  368.432051][ T5149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  368.443362][ T5149] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  368.453640][ T5149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  368.461734][ T5149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  368.515124][T16727] vxcan1 speed is unknown, defaulting to 1000
[  368.891657][T16748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3028'.
[  368.942631][T16727] hsr0 speed is unknown, defaulting to 1000
[  369.364013][T16771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3034'.
[  369.431860][T16727] chnl_net:caif_netlink_parms(): no params data found
[  369.781803][T16727] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.800570][T16727] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.817495][T16727] bridge_slave_0: entered allmulticast mode
[  369.835613][T16727] bridge_slave_0: entered promiscuous mode
[  369.873003][T16727] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.881263][T16727] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.889173][T16727] bridge_slave_1: entered allmulticast mode
[  369.896458][T16727] bridge_slave_1: entered promiscuous mode
[  369.933262][T16727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  369.946517][T16727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  369.986198][T16801] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  369.996079][T16727] team0: Port device team_slave_0 added
[  370.017327][T16727] team0: Port device team_slave_1 added
[  370.023592][T16801] syzkaller0: entered promiscuous mode
[  370.031845][T16801] syzkaller0: entered allmulticast mode
[  370.063128][T16801] tipc: Resetting bearer <eth:syzkaller0>
[  370.102809][T16800] tipc: Resetting bearer <eth:syzkaller0>
[  370.123438][T16800] tipc: Disabling bearer <eth:syzkaller0>
[  370.134392][T16727] batman_adv: batadv0: Adding interface: batadv_slave_0
[  370.141910][T16727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  370.168235][T16727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  370.180993][T16727] batman_adv: batadv0: Adding interface: batadv_slave_1
[  370.188407][T16727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  370.214643][T16727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  370.280149][T16805] ipt_ECN: cannot use operation on non-tcp rule
[  370.357785][T16727] hsr_slave_0: entered promiscuous mode
[  370.368547][T16727] hsr_slave_1: entered promiscuous mode
[  370.379633][T16727] debugfs: 'hsr0' already exists in 'hsr'
[  370.385903][T16727] Cannot create hsr debugfs directory
[  370.452248][T16816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3046'.
[  370.566940][ T5828] Bluetooth: hci1: command tx timeout
[  370.784158][T16831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3050'.
[  371.180367][T16727] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  371.194880][T16727] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  371.217449][T16727] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  371.231508][T16727] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  371.373838][T16853] netlink: 'syz.1.3056': attribute type 1 has an invalid length.
[  371.423274][T16727] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.501421][T16727] 8021q: adding VLAN 0 to HW filter on device team0
[  371.551825][ T7049] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.559022][ T7049] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.591146][T16864] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3059'.
[  371.623147][ T7049] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.630374][ T7049] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.669414][T16865] syzkaller1: entered promiscuous mode
[  371.685355][T16865] syzkaller1: entered allmulticast mode
[  371.709970][T16866] netlink: 'syz.3.3061': attribute type 1 has an invalid length.
[  371.720133][T16866] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3061'.
[  371.783658][T16865] syzkaller0: entered promiscuous mode
[  371.790882][T16865] syzkaller0: entered allmulticast mode
[  371.871690][T16882] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3066'.
[  371.873270][T16883] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3066'.
[  371.914445][T16727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  372.648321][ T5828] Bluetooth: hci1: command tx timeout
[  373.515269][T16727] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.737500][T16924] IPv6: NLM_F_CREATE should be specified when creating new route
[  373.849004][T16727] veth0_vlan: entered promiscuous mode
[  373.862842][T16727] veth1_vlan: entered promiscuous mode
[  373.909565][T16727] veth0_macvtap: entered promiscuous mode
[  373.925204][T16727] veth1_macvtap: entered promiscuous mode
[  373.963245][T16727] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.991002][T16727] batman_adv: batadv0: Interface activated: batadv_slave_1
[  374.000522][T16935] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3079'.
[  374.014708][ T8703] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.023806][ T8703] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.050507][ T8703] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.066248][ T8703] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.181466][ T8703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.188812][T16930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  374.205200][ T8703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.251074][ T8702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.267976][ T8702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.477987][T16946] netlink: 'syz.1.3082': attribute type 4 has an invalid length.
[  374.727402][ T5828] Bluetooth: hci1: command tx timeout
[  374.960441][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3091'.
[  375.023931][T16976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3092'.
[  375.170412][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  375.189329][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  375.203352][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  375.224869][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  375.245722][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  375.350509][T16983] vxcan1 speed is unknown, defaulting to 1000
[  375.608523][T17004] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  375.615374][T17004] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  375.644872][T16965] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  375.676028][T16983] hsr0 speed is unknown, defaulting to 1000
[  376.011380][T16983] chnl_net:caif_netlink_parms(): no params data found
[  376.074436][T17027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3109'.
[  376.092688][T17027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3109'.
[  376.127846][T17027] xfrm1: entered promiscuous mode
[  376.133009][T17027] xfrm1: entered allmulticast mode
[  376.141331][T17027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3109'.
[  376.181173][T17031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3110'.
[  376.203454][T17031] 8021q: adding VLAN 0 to HW filter on device team0
[  376.261337][T16983] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.272432][T16983] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.282135][T16983] bridge_slave_0: entered allmulticast mode
[  376.301550][T16983] bridge_slave_0: entered promiscuous mode
[  376.320973][T16983] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.330164][T16983] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.340496][T16983] bridge_slave_1: entered allmulticast mode
[  376.372329][T16983] bridge_slave_1: entered promiscuous mode
[  376.411511][T17042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3113'.
[  376.415330][T17044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3115'.
[  376.469309][T17042] netlink: 'syz.2.3113': attribute type 1 has an invalid length.
[  376.474586][T16983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  376.493580][T16983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  376.610826][T17057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3117'.
[  376.645645][T16983] team0: Port device team_slave_0 added
[  376.669404][T16983] team0: Port device team_slave_1 added
[  376.768134][T16983] batman_adv: batadv0: Adding interface: batadv_slave_0
[  376.786324][T16983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  376.813085][ T5841] Bluetooth: hci1: command tx timeout
[  376.858609][T16983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  376.909777][T16983] batman_adv: batadv0: Adding interface: batadv_slave_1
[  376.922051][T16983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  376.978667][T16983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  377.027156][T17070] syzkaller1: entered promiscuous mode
[  377.032742][T17070] syzkaller1: entered allmulticast mode
[  377.173476][T16983] hsr_slave_0: entered promiscuous mode
[  377.180592][T16983] hsr_slave_1: entered promiscuous mode
[  377.187769][T16983] debugfs: 'hsr0' already exists in 'hsr'
[  377.196041][T16983] Cannot create hsr debugfs directory
[  377.293952][ T5841] Bluetooth: hci3: command tx timeout
[  377.432476][T17101] netlink: 'syz.1.3128': attribute type 21 has an invalid length.
[  377.595258][T17109] netlink: 'syz.4.3131': attribute type 21 has an invalid length.
[  377.605991][T17109] netlink: 'syz.4.3131': attribute type 6 has an invalid length.
[  377.711870][T16983] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  377.726025][T16983] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.743324][T16983] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  377.757468][T16983] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  377.878087][T16983] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  377.890420][T16983] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.900870][T16983] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  377.920786][T16983] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  378.037438][T16983] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.061313][T16983] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.107622][T16983] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  378.140871][T16983] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  378.199150][T17140] netlink: 'syz.0.3139': attribute type 1 has an invalid length.
[  378.222712][T17140] 8021q: adding VLAN 0 to HW filter on device bond2
[  378.294475][T16983] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.313608][T16983] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.333080][T16983] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  378.344775][T16983] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  378.480724][T17153] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  378.777996][T17154] syzkaller0: entered promiscuous mode
[  378.787149][T17154] syzkaller0: entered allmulticast mode
[  378.896368][T17154] tipc: Resetting bearer <eth:syzkaller0>
[  378.928790][T17154] tipc: Disabling bearer <eth:syzkaller0>
[  379.051143][T16983] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  379.083104][T16983] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  379.154390][T16983] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  379.171900][T17193] __nla_validate_parse: 6 callbacks suppressed
[  379.171917][T17193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3156'.
[  379.203917][T17194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3154'.
[  379.223435][T17196] netlink: 'syz.1.3157': attribute type 5 has an invalid length.
[  379.250773][T16983] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  379.328054][T17203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3158'.
[  379.371889][ T5841] Bluetooth: hci3: command tx timeout
[  379.380753][T17203] 8021q: adding VLAN 0 to HW filter on device bond16
[  379.400514][T17213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3161'.
[  379.499019][T16983] 8021q: adding VLAN 0 to HW filter on device bond0
[  379.573651][T16983] 8021q: adding VLAN 0 to HW filter on device team0
[  379.597880][T17221] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  379.614491][ T8698] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.621690][ T8698] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.645901][ T7025] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.653105][ T7025] bridge0: port 2(bridge_slave_1) entered forwarding state
[  379.755154][T17231] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3166'.
[  379.982256][T16983] 8021q: adding VLAN 0 to HW filter on device batadv0
[  380.093220][T16983] veth0_vlan: entered promiscuous mode
[  380.113599][T16983] veth1_vlan: entered promiscuous mode
[  380.194228][T16983] veth0_macvtap: entered promiscuous mode
[  380.204348][T16983] veth1_macvtap: entered promiscuous mode
[  380.232825][T16983] batman_adv: batadv0: Interface activated: batadv_slave_0
[  380.254932][T16983] batman_adv: batadv0: Interface activated: batadv_slave_1
[  380.299914][ T8698] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.315657][ T8698] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.326426][ T8698] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.348625][ T8698] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  380.480849][ T8698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.508257][ T8698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.573366][ T7017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.588946][ T7017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.734838][T17287] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3084'.
[  380.752626][T17287] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3084'.
[  380.818805][T17293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3183'.
[  380.828437][T17293] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  380.901399][T17293] batman_adv: batadv0: Removing interface: batadv_slave_1
[  381.451127][ T5841] Bluetooth: hci3: command tx timeout
[  381.653390][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  381.665095][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  381.674071][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  381.681793][T17316] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3188'.
[  381.698754][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  381.706630][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  381.919631][T17314] tap0: tun_chr_ioctl cmd 2148553947
[  381.938429][T17322] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.217244][T17331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  382.230386][T17331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.243568][T17331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  382.287302][T17311] vxcan1 speed is unknown, defaulting to 1000
[  382.345566][T17344] syzkaller1: entered promiscuous mode
[  382.368222][T17344] syzkaller1: entered allmulticast mode
[  382.440252][T17331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  382.477620][T17331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.497085][T17331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  382.553530][T17355] netlink: 'syz.2.3195': attribute type 83 has an invalid length.
[  382.587938][T17352] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  382.761195][T17331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  382.818113][T17331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.865949][T17331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  382.944192][T17311] hsr0 speed is unknown, defaulting to 1000
[  383.129199][T17331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  383.140087][T17331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.151421][T17331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  383.175406][T17381] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3202'.
[  383.190977][T17382] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  383.274415][T17390] netlink: 'syz.2.3205': attribute type 1 has an invalid length.
[  383.448724][T17399] netlink: 'syz.4.3207': attribute type 1 has an invalid length.
[  383.533305][ T5828] Bluetooth: hci3: command tx timeout
[  383.571811][T17399] 8021q: adding VLAN 0 to HW filter on device bond1
[  383.581034][T17331] bridge_slave_1: left allmulticast mode
[  383.592498][T17331] bridge_slave_1: left promiscuous mode
[  383.610900][T17331] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.631531][T17331] bridge_slave_0: left allmulticast mode
[  383.638340][T17331] bridge_slave_0: left promiscuous mode
[  383.644284][T17331] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.768418][ T5828] Bluetooth: hci5: command tx timeout
[  384.629344][T17331] bond2 (unregistering): (slave bridge10): Releasing backup interface
[  384.637852][T17331] bridge10 (unregistering): left promiscuous mode
[  384.762356][T17331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  384.771542][T17331] bond_slave_0: left promiscuous mode
[  384.780947][T17331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  384.790538][T17331] bond_slave_1: left promiscuous mode
[  384.798484][T17331] bond0 (unregistering): Released all slaves
[  384.893008][T17331] bond1 (unregistering): Released all slaves
[  384.983131][T17331] bond2 (unregistering): Released all slaves
[  385.077924][T17331] bond3 (unregistering): Released all slaves
[  385.166216][T17331] bond4 (unregistering): (slave veth15): Releasing active interface
[  385.177321][T17331] bond4 (unregistering): (slave veth17): Releasing active interface
[  385.187576][T17331] bond4 (unregistering): Released all slaves
[  385.201151][T17331] bond5 (unregistering): Released all slaves
[  385.214537][T17331] bond6 (unregistering): Released all slaves
[  385.227408][T17331] bond7 (unregistering): Released all slaves
[  385.322464][T17331] bond8 (unregistering): Released all slaves
[  385.342992][T17411] vlan2: entered promiscuous mode
[  385.348220][T17411] bond1: entered promiscuous mode
[  385.353412][T17411] vlan2: entered allmulticast mode
[  385.358717][T17411] bond1: entered allmulticast mode
[  385.383092][T17399] bond1: (slave gretap1): making interface the new active one
[  385.409438][T17399] gretap1: entered promiscuous mode
[  385.414853][T17399] gretap1: entered allmulticast mode
[  385.426222][T17399] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  385.556258][T17311] chnl_net:caif_netlink_parms(): no params data found
[  385.617776][T17442] netlink: 'syz.3.3216': attribute type 3 has an invalid length.
[  385.629138][T17331] tipc: Disabling bearer <udp:syz1>
[  385.647521][T17442] netlink: 'syz.3.3216': attribute type 3 has an invalid length.
[  385.665612][T17442] netlink: 'syz.3.3216': attribute type 3 has an invalid length.
[  385.677185][T17331] tipc: Left network mode
[  385.700402][T17435] __nla_validate_parse: 1 callbacks suppressed
[  385.700419][T17435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3215'.
[  385.847203][ T5841] Bluetooth: hci5: command tx timeout
[  386.056504][T17311] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.070890][T17311] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.080627][T17311] bridge_slave_0: entered allmulticast mode
[  386.093187][T17311] bridge_slave_0: entered promiscuous mode
[  386.102046][T17311] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.118986][T17311] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.126270][T17311] bridge_slave_1: entered allmulticast mode
[  386.150707][T17311] bridge_slave_1: entered promiscuous mode
[  386.212959][T17461] tipc: Started in network mode
[  386.230929][T17461] tipc: Node identity ee16d82b679f, cluster identity 4711
[  386.238871][T17461] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  386.288719][T17473] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  386.375823][T17481] netlink: 'syz.2.3227': attribute type 2 has an invalid length.
[  386.417987][T17463] tipc: Resetting bearer <eth:syzkaller0>
[  386.441086][T17311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.471275][T17311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.618385][T17311] team0: Port device team_slave_0 added
[  386.638087][T17311] team0: Port device team_slave_1 added
[  386.780087][T17490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3231'.
[  386.819909][T17311] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.830425][T17311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.877710][T17311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.893220][T17311] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.901070][T17311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.928396][T17311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.953738][T17331] hsr_slave_0: left promiscuous mode
[  386.960331][T17331] hsr_slave_1: left promiscuous mode
[  386.979906][T17331] batadv_slave_0: left promiscuous mode
[  386.986045][T17331] veth1_vlan: left promiscuous mode
[  387.271217][   T10] tipc: Node number set to 2307512363
[  387.720509][ T7026] smc: removing ib device syz2
[  387.833224][T17461] tipc: Disabling bearer <eth:syzkaller0>
[  387.868626][T17496] syzkaller0: entered promiscuous mode
[  387.874143][T17496] syzkaller0: entered allmulticast mode
[  387.927196][ T5841] Bluetooth: hci5: command tx timeout
[  387.959336][ T5952] vxcan1 speed is unknown, defaulting to 1000
[  387.992393][ T5952] syz2: Port: 1 Link DOWN
[  388.465495][T17311] hsr_slave_0: entered promiscuous mode
[  388.538235][T17311] hsr_slave_1: entered promiscuous mode
[  388.544744][T17311] debugfs: 'hsr0' already exists in 'hsr'
[  388.554972][T17311] Cannot create hsr debugfs directory
[  388.757404][T17533] syz.0.3243: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  388.808042][T17533] CPU: 1 UID: 0 PID: 17533 Comm: syz.0.3243 Not tainted syzkaller #0 PREEMPT(full) 
[  388.808068][T17533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  388.808086][T17533] Call Trace:
[  388.808093][T17533]  <TASK>
[  388.808101][T17533]  dump_stack_lvl+0x189/0x250
[  388.808133][T17533]  ? __pfx_dump_stack_lvl+0x10/0x10
[  388.808156][T17533]  ? __pfx__printk+0x10/0x10
[  388.808174][T17533]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  388.808198][T17533]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  388.808231][T17533]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  388.808256][T17533]  warn_alloc+0x214/0x310
[  388.808280][T17533]  ? stack_depot_save_flags+0x40/0x860
[  388.808308][T17533]  ? __pfx_warn_alloc+0x10/0x10
[  388.808333][T17533]  ? kasan_save_track+0x3e/0x80
[  388.808353][T17533]  ? __kasan_kmalloc+0x93/0xb0
[  388.808377][T17533]  ? xsk_setsockopt+0x4dc/0x8d0
[  388.808396][T17533]  ? do_sock_setsockopt+0x17c/0x1b0
[  388.808412][T17533]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  388.808427][T17533]  ? do_syscall_64+0xfa/0xfa0
[  388.808448][T17533]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.808475][T17533]  __vmalloc_node_range_noprof+0x125/0x12d0
[  388.808530][T17533]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  388.808557][T17533]  ? __kasan_kmalloc+0x93/0xb0
[  388.808586][T17533]  vmalloc_user_noprof+0xad/0xf0
[  388.808609][T17533]  ? xskq_create+0xbf/0x170
[  388.808631][T17533]  xskq_create+0xbf/0x170
[  388.808655][T17533]  xsk_init_queue+0xb0/0x110
[  388.808679][T17533]  xsk_setsockopt+0x4dc/0x8d0
[  388.808702][T17533]  ? __pfx_xsk_setsockopt+0x10/0x10
[  388.808726][T17533]  ? __pfx_aa_sk_perm+0x10/0x10
[  388.808751][T17533]  ? aa_sock_opt_perm+0xff/0x1b0
[  388.808778][T17533]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  388.808794][T17533]  ? __pfx_xsk_setsockopt+0x10/0x10
[  388.808816][T17533]  do_sock_setsockopt+0x17c/0x1b0
[  388.808839][T17533]  __x64_sys_setsockopt+0x13f/0x1b0
[  388.808863][T17533]  do_syscall_64+0xfa/0xfa0
[  388.808883][T17533]  ? lockdep_hardirqs_on+0x9c/0x150
[  388.808906][T17533]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.808923][T17533]  ? clear_bhb_loop+0x60/0xb0
[  388.808943][T17533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.808964][T17533] RIP: 0033:0x7fd88bd8f6c9
[  388.808985][T17533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  388.809000][T17533] RSP: 002b:00007fd88cb64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  388.809019][T17533] RAX: ffffffffffffffda RBX: 00007fd88bfe5fa0 RCX: 00007fd88bd8f6c9
[  388.809032][T17533] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  388.809043][T17533] RBP: 00007fd88be11f91 R08: 0000000000000004 R09: 0000000000000000
[  388.809054][T17533] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  388.809065][T17533] R13: 00007fd88bfe6038 R14: 00007fd88bfe5fa0 R15: 00007ffdb878d928
[  388.809096][T17533]  </TASK>
[  388.809106][T17533] Mem-Info:
[  388.939194][T17537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3242'.
[  389.002450][T17533] active_anon:5321 inactive_anon:0 isolated_anon:0
[  389.002450][T17533]  active_file:2756 inactive_file:40005 isolated_file:0
[  389.002450][T17533]  unevictable:768 dirty:104 writeback:0
[  389.002450][T17533]  slab_reclaimable:12600 slab_unreclaimable:119233
[  389.002450][T17533]  mapped:29238 shmem:1372 pagetables:1060
[  389.002450][T17533]  sec_pagetables:0 bounce:0
[  389.002450][T17533]  kernel_misc_reclaimable:0
[  389.002450][T17533]  free:1306600 free_pcp:12458 free_cma:0
[  389.175688][T17533] Node 0 active_anon:21216kB inactive_anon:0kB active_file:11024kB inactive_file:159816kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120932kB dirty:412kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16056kB pagetables:3964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  389.208415][T17533] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  389.247426][T17544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3242'.
[  389.268119][T17533] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  389.400756][T17533] lowmem_reserve[]: 0 2505 2505 2505 2505
[  389.414593][T17533] Node 0 DMA32 free:1307976kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21316kB inactive_anon:0kB active_file:11024kB inactive_file:159816kB unevictable:1536kB writepending:412kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:37620kB local_pcp:20248kB free_cma:0kB
[  389.522484][T17533] lowmem_reserve[]: 0 0 0 0 0
[  389.546800][T17533] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  389.646102][T17533] lowmem_reserve[]: 0 0 0 0 0
[  389.653379][T17533] Node 1 Normal free:3903524kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12888kB local_pcp:3960kB free_cma:0kB
[  389.723323][T17533] lowmem_reserve[]: 0 0 0 0 0
[  389.731813][T17533] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  389.749079][T17533] Node 0 DMA32: 920*4kB (ME) 297*8kB (ME) 100*16kB (M) 319*32kB (UME) 88*64kB (UME) 65*128kB (UM) 42*256kB (UME) 34*512kB (UM) 34*1024kB (UME) 4*2048kB (UM) 294*4096kB (UM) = 1307208kB
[  389.781904][T17533] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  389.802177][T17533] Node 1 Normal: 148*4kB (UME) 61*8kB (UME) 46*16kB (UME) 142*32kB (UME) 42*64kB (UME) 10*128kB (UME) 4*256kB (UME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 949*4096kB (M) = 3903576kB
[  389.826232][T17533] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  389.836100][T17533] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  389.865105][T17533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  389.895422][T17533] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  389.936615][T17533] 44122 total pagecache pages
[  389.941797][T17533] 0 pages in swap cache
[  389.993931][T17533] Free swap  = 124996kB
[  389.998740][T17533] Total swap = 124996kB
[  390.002907][T17533] 2097051 pages RAM
[  390.016947][T17533] 0 pages HighMem/MovableOnly
[  390.021670][T17533] 424119 pages reserved
[  390.021920][ T5841] Bluetooth: hci5: command tx timeout
[  390.025833][T17533] 0 pages cma reserved
[  390.384332][T17557] team0 (unregistering): Port device team_slave_0 removed
[  390.406236][T17557] team0 (unregistering): Port device team_slave_1 removed
[  390.406600][T17569] x_tables: duplicate underflow at hook 3
[  390.657628][T17331] IPVS: stop unused estimator thread 0...
[  390.753873][T17580] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3256'.
[  390.867817][T17586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3258'.
[  390.912447][T17588] bond0: entered allmulticast mode
[  390.932389][T17591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  390.937627][T17588] bond_slave_0: entered allmulticast mode
[  390.956600][T17588] bond_slave_1: entered allmulticast mode
[  391.121487][T17311] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  391.141967][T17311] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  391.155579][T17311] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  391.172362][T17311] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  391.206203][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807aa7e000: rx timeout, send abort
[  391.301308][T17311] 8021q: adding VLAN 0 to HW filter on device bond0
[  391.329791][T17311] 8021q: adding VLAN 0 to HW filter on device team0
[  391.344130][T17327] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.351308][T17327] bridge0: port 1(bridge_slave_0) entered forwarding state
[  391.367544][T17327] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.374666][T17327] bridge0: port 2(bridge_slave_1) entered forwarding state
[  391.541131][T17311] 8021q: adding VLAN 0 to HW filter on device batadv0
[  391.589599][T17311] veth0_vlan: entered promiscuous mode
[  391.601648][T17311] veth1_vlan: entered promiscuous mode
[  391.633687][T17311] veth0_macvtap: entered promiscuous mode
[  391.643883][T17311] veth1_macvtap: entered promiscuous mode
[  391.677151][T17311] batman_adv: batadv0: Interface activated: batadv_slave_0
[  391.696196][T17311] batman_adv: batadv0: Interface activated: batadv_slave_1
[  391.706347][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807aa7cc00: rx timeout, send abort
[  391.715841][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807aa7e000: abort rx timeout. Force session deactivation
[  391.734828][T17328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  391.753139][T17328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  391.763886][T17328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  391.778071][T17328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  391.877275][ T7026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  391.905078][ T7026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.990203][T17327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  392.006445][T17327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  392.116310][T17625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3266'.
[  392.214799][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807aa7cc00: abort rx timeout. Force session deactivation
[  392.225486][T17632] 
: renamed from bridge_slave_0 (while UP)
[  392.511097][T17643] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3272'.
[  392.567107][T17645] tipc: Started in network mode
[  392.572021][T17645] tipc: Node identity caab2358bd13, cluster identity 4711
[  392.611930][T17645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  392.653712][T17645] syzkaller0: entered promiscuous mode
[  392.668265][T17645] syzkaller0: entered allmulticast mode
[  392.730281][T17645] tipc: Resetting bearer <eth:syzkaller0>
[  392.749174][T17647] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3274'.
[  392.769168][T17644] tipc: Resetting bearer <eth:syzkaller0>
[  392.828623][T17656] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3277'.
[  392.857916][T17644] tipc: Disabling bearer <eth:syzkaller0>
[  392.913915][T17656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3277'.
[  392.941239][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  392.953795][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  392.962613][T17656] netlink: 'syz.3.3277': attribute type 1 has an invalid length.
[  392.962709][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  392.979879][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  392.987878][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  393.038054][T17660] hsr0 speed is unknown, defaulting to 1000
[  393.230310][T17673] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3282'.
[  393.369170][    C1] Dead loop on virtual device ip6_vti0, fix it urgently!
[  393.590999][T17688] syzkaller0: entered promiscuous mode
[  393.596518][T17688] syzkaller0: entered allmulticast mode
[  393.892648][T17709] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  393.900345][ T8936] IPVS: starting estimator thread 0...
[  393.901980][    C0] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  393.987005][T17714] IPVS: using max 32 ests per chain, 76800 per kthread
[  394.148835][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3296'.
[  395.058254][ T5828] Bluetooth: hci4: command tx timeout
[  395.291822][   T56] block nbd0: Possible stuck request ffff888024cee000: control (read@0,1024B). Runtime 300 seconds
[  395.302766][   T56] block nbd0: Possible stuck request ffff888024cee1c0: control (read@1024,1024B). Runtime 300 seconds
[  395.314151][   T56] block nbd0: Possible stuck request ffff888024cee380: control (read@2048,1024B). Runtime 300 seconds
[  395.325397][   T56] block nbd0: Possible stuck request ffff888024cee540: control (read@3072,1024B). Runtime 300 seconds
[  395.557955][T17660] chnl_net:caif_netlink_parms(): no params data found
[  395.658719][T17743] netlink: 'syz.0.3299': attribute type 1 has an invalid length.
[  395.703751][T17743] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  395.754861][T17750] tipc: New replicast peer: 255.255.255.255
[  395.788653][T17750] tipc: Enabled bearer <udp:syz2>, priority 10
[  395.794959][T17752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3300'.
[  395.875185][T17756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3301'.
[  395.911396][T17763] netlink: 'syz.3.3304': attribute type 1 has an invalid length.
[  396.161605][T17328] bond4 (unregistering): (slave gretap1): Releasing active interface
[  396.183694][T17328] bond5 (unregistering): (slave gretap2): Releasing active interface
[  396.222813][T17328] bond14 (unregistering): (slave gre2): Releasing backup interface
[  396.231054][T17328] gre2 (unregistering): left promiscuous mode
[  396.264703][T17328] dvmrp0 (unregistering): left allmulticast mode
[  396.292367][T17328] bond11 (unregistering): (slave geneve3): Releasing active interface
[  396.517644][T17328] bond3 (unregistering): (slave bridge4): Releasing backup interface
[  396.760057][T17328] bond13 (unregistering): (slave bridge8): Releasing backup interface
[  396.858352][T17328] bond0 (unregistering): Released all slaves
[  396.875904][T17328] bond1 (unregistering): Released all slaves
[  396.890095][T17328] bond2 (unregistering): Released all slaves
[  396.986246][T17328] bond3 (unregistering): Released all slaves
[  396.999029][T17328] bond4 (unregistering): Released all slaves
[  397.099727][T17328] bond5 (unregistering): Released all slaves
[  397.112301][T17328] bond6 (unregistering): Released all slaves
[  397.127567][ T5828] Bluetooth: hci4: command tx timeout
[  397.214916][T17328] bond7 (unregistering): (slave veth7): Releasing active interface
[  397.224781][T17328] bond7 (unregistering): Released all slaves
[  397.238556][T17328] bond8 (unregistering): (slave bond9): Releasing backup interface
[  397.247463][T17328] bond8 (unregistering): Released all slaves
[  397.340414][T17328] bond9 (unregistering): Released all slaves
[  397.437797][T17328] bond10 (unregistering): Released all slaves
[  397.450889][T17328] bond11 (unregistering): Released all slaves
[  397.545390][T17328] bond12 (unregistering): Released all slaves
[  397.636616][T17328] bond13 (unregistering): Released all slaves
[  397.731575][T17328] bond14 (unregistering): Released all slaves
[  397.743822][T17328] bond15 (unregistering): Released all slaves
[  397.841511][T17328] bond16 (unregistering): Released all slaves
[  397.882152][T17660] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.890144][T17660] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.907025][T17660] bridge_slave_0: entered allmulticast mode
[  397.915157][T17660] bridge_slave_0: entered promiscuous mode
[  397.943704][T17769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3306'.
[  398.037995][T17660] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.064548][T17660] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.083814][T17660] bridge_slave_1: entered allmulticast mode
[  398.108557][T17660] bridge_slave_1: entered promiscuous mode
[  398.140596][T17328] : left promiscuous mode
[  398.237255][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3310'.
[  398.246593][T17791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3310'.
[  398.286611][T17328] tipc: Disabling bearer <udp:syz0>
[  398.294563][T17796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3310'.
[  398.297212][T17328] tipc: Disabling bearer <udp:s�>
[  398.417606][T17328] tipc: Left network mode
[  398.528418][T17796] 8021q: adding VLAN 0 to HW filter on device bond3
[  398.544877][T17660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  398.564117][T17660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  398.616773][T17660] team0: Port device team_slave_0 added
[  398.626209][T17660] team0: Port device team_slave_1 added
[  398.716399][T17660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  398.725729][T17660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  398.757647][T17660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  398.784816][T17660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  398.800403][T17660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  398.838422][T17660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  399.064635][T17660] hsr_slave_0: entered promiscuous mode
[  399.082313][T17660] hsr_slave_1: entered promiscuous mode
[  399.093841][T17660] debugfs: 'hsr0' already exists in 'hsr'
[  399.101146][T17660] Cannot create hsr debugfs directory
[  399.212268][T17830] ip6t_srh: unknown srh invflags 4000
[  399.219640][ T5828] Bluetooth: hci4: command tx timeout
[  399.439878][T17328] hsr_slave_0: left promiscuous mode
[  399.461889][T17328] hsr_slave_1: left promiscuous mode
[  399.561150][T17328] pimreg (unregistering): left allmulticast mode
[  400.154867][T17860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3327'.
[  400.665154][T17891] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3335'.
[  400.817535][T17328] IPVS: stop unused estimator thread 0...
[  401.015157][T17912] lo: entered allmulticast mode
[  401.174250][T17926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3346'.
[  401.287243][ T5828] Bluetooth: hci4: command tx timeout
[  401.326904][T17660] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  401.373474][T17660] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  401.388299][T17937] netlink: 'syz.3.3348': attribute type 4 has an invalid length.
[  401.398424][T17660] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  401.429951][T17660] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  401.464616][T17942] Dead loop on virtual device ip6_vti0, fix it urgently!
[  401.479850][T17942] Dead loop on virtual device ip6_vti0, fix it urgently!
[  401.622598][T17959] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  401.630456][T17959] syzkaller0: entered promiscuous mode
[  401.635957][T17959] syzkaller0: entered allmulticast mode
[  401.673404][T17959] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  401.738051][T17949] tipc: Resetting bearer <eth:syzkaller0>
[  401.762022][T17949] tipc: Disabling bearer <eth:syzkaller0>
[  401.824864][T17970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3356'.
[  401.831257][T17973] tipc: Started in network mode
[  401.844564][T17973] tipc: Node identity c62d58f7a1d1, cluster identity 4711
[  401.855208][T17973] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  401.888530][T17973] syzkaller0: entered promiscuous mode
[  401.894728][T17973] syzkaller0: entered allmulticast mode
[  401.944406][T17973] tipc: Resetting bearer <eth:syzkaller0>
[  401.989602][T17660] 8021q: adding VLAN 0 to HW filter on device bond0
[  402.008284][T17971] tipc: Resetting bearer <eth:syzkaller0>
[  402.042998][T17971] tipc: Disabling bearer <eth:syzkaller0>
[  402.089982][T17660] 8021q: adding VLAN 0 to HW filter on device team0
[  402.138783][T17327] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.146012][T17327] bridge0: port 1(bridge_slave_0) entered forwarding state
[  402.192333][ T7026] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.199563][ T7026] bridge0: port 2(bridge_slave_1) entered forwarding state
[  402.381252][T17999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3364'.
[  402.530763][T18017] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3367'.
[  402.942200][T17660] 8021q: adding VLAN 0 to HW filter on device batadv0
[  403.042410][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3372'.
[  403.111648][T17660] veth0_vlan: entered promiscuous mode
[  403.142830][T17660] veth1_vlan: entered promiscuous mode
[  403.213704][T17660] veth0_macvtap: entered promiscuous mode
[  403.246184][T17660] veth1_macvtap: entered promiscuous mode
[  403.326339][T17660] batman_adv: batadv0: Interface activated: batadv_slave_0
[  403.479804][T17660] batman_adv: batadv0: Interface activated: batadv_slave_1
[  403.526274][ T7026] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  403.557988][T17327] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  403.603326][T17327] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  403.638743][T17327] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  403.767650][T18067] syzkaller0: entered promiscuous mode
[  403.775910][T18067] syzkaller0: entered allmulticast mode
[  404.125672][ T7018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.155114][ T7018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.320507][ T7026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.378244][ T7026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.551162][T18115] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3393'.
[  404.762287][T18132] Dead loop on virtual device ip6_vti0, fix it urgently!
[  404.765054][T18133] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3397'.
[  404.795386][T18132] Dead loop on virtual device ip6_vti0, fix it urgently!
[  405.010449][T18150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  405.204477][T18164] Dead loop on virtual device ip6_vti0, fix it urgently!
[  405.215015][T18165] Dead loop on virtual device ip6_vti0, fix it urgently!
[  405.224313][T18167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3409'.
[  405.415514][T18182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3413'.
[  405.734330][T18199] netlink: 'syz.0.3420': attribute type 4 has an invalid length.
[  405.872264][T18207] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3421'.
[  405.955788][T18204] can: request_module (can-proto-0) failed.
[  406.233088][T18196] Set syz1 is full, maxelem 6117 reached
[  406.455438][T18236] IPv6: NLM_F_CREATE should be specified when creating new route
[  406.470906][T18236] __nla_validate_parse: 5 callbacks suppressed
[  406.470925][T18236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3430'.
[  406.550024][T18241] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  406.754953][T18257] netlink: 'syz.2.3438': attribute type 1 has an invalid length.
[  406.779832][T18257] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  406.815691][T18257] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  406.824658][T18264] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3440'.
[  406.837892][T18257] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  406.852191][T18257] gretap1: entered promiscuous mode
[  406.858486][T18257] gretap1: entered allmulticast mode
[  406.909134][T18271] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3441'.
[  406.919117][T18271] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3441'.
[  406.981992][T18278] netlink: 'syz.2.3443': attribute type 1 has an invalid length.
[  407.054562][T18278] bond1 (unregistering): Released all slaves
[  407.081697][T18279] ip6tnl1: entered promiscuous mode
[  407.092086][T18279] ip6tnl1: entered allmulticast mode
[  407.120093][T18278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3443'.
[  407.131827][T18284] ip6tnl1: entered promiscuous mode
[  407.134521][T18278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3443'.
[  407.157449][T18284] ip6tnl1: entered allmulticast mode
[  407.425463][T18297] tipc: Started in network mode
[  407.430712][T18297] tipc: Node identity 5280d8d3dd4d, cluster identity 4711
[  407.438730][T18297] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  407.454152][T18297] syzkaller0: entered promiscuous mode
[  407.464735][T18297] syzkaller0: entered allmulticast mode
[  407.477820][T18294] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  407.507343][T18298] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  407.514602][T18298] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.529896][T18294] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.541550][T18300] tipc: Resetting bearer <eth:syzkaller0>
[  407.550640][T18296] tipc: Resetting bearer <eth:syzkaller0>
[  407.719143][T18306] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.757382][T18296] tipc: Disabling bearer <eth:syzkaller0>
[  407.947134][T18314] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  408.065548][T18318] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3454'.
[  408.378510][T18333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3457'.
[  408.392649][T18334] netlink: 'syz.3.3458': attribute type 83 has an invalid length.
[  408.477871][T18336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3460'.
[  408.493162][T18336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3460'.
[  408.936211][T18362] C: renamed from lo
[  409.664732][T18399] syzkaller0: entered allmulticast mode
[  411.540732][T18444] __nla_validate_parse: 2 callbacks suppressed
[  411.540749][T18444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3487'.
[  411.563078][T18447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3487'.
[  411.575329][T18444] openvswitch: netlink: Flow actions attr not present in new flow.
[  411.583584][T18447] openvswitch: netlink: Flow actions attr not present in new flow.
[  411.623728][T18453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3490'.
[  411.677436][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3488'.
[  411.744992][T18467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3494'.
[  411.759853][T18467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3494'.
[  411.779863][T18467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3494'.
[  411.790063][T18462] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  411.798354][ T8936] IPVS: starting estimator thread 0...
[  411.841049][T18469] pimreg: entered allmulticast mode
[  411.871571][T18472] ip6gre1: entered promiscuous mode
[  411.876977][T18472] ip6gre1: entered allmulticast mode
[  411.887616][T18470] IPVS: using max 30 ests per chain, 72000 per kthread
[  411.993940][T18480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3498'.
[  412.003243][T18480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3498'.
[  412.036452][T18484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3499'.
[  412.053727][T18487] nbd: socks must be embedded in a SOCK_ITEM attr
[  412.075226][T18487] block nbd2: NBD_DISCONNECT
[  412.080330][T18487] block nbd2: Send disconnect failed -32
[  412.149831][T18487] bridge1: entered promiscuous mode
[  412.155314][T18487] bridge1: entered allmulticast mode
[  412.163536][T17329] bridge_slave_1: left allmulticast mode
[  412.172236][T17329] bridge_slave_1: left promiscuous mode
[  412.189300][T17329] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.202389][T18496] x_tables: duplicate underflow at hook 3
[  412.229826][T17329] bridge_slave_0: left allmulticast mode
[  412.246602][T17329] bridge_slave_0: left promiscuous mode
[  412.260601][T17329] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.422567][T17329] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  412.432382][T17329] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  412.634896][T17329] dvmrp0 (unregistering): left allmulticast mode
[  412.726144][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030f6d000: rx timeout, send abort
[  413.052786][T17329] bond0 (unregistering): (slave veth3): Releasing active interface
[  413.062235][T17329] bond0 (unregistering): Released all slaves
[  413.166642][T17329] bond1 (unregistering): Released all slaves
[  413.179677][T17329] bond2 (unregistering): Released all slaves
[  413.194733][T17329] bond3 (unregistering): Released all slaves
[  413.229521][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030f6c800: rx timeout, send abort
[  413.239581][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030f6d000: abort rx timeout. Force session deactivation
[  413.310994][T17329] bond4 (unregistering): (slave veth11): Releasing active interface
[  413.320541][T17329] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface
[  413.331065][T17329] bond4 (unregistering): (slave veth13): Releasing active interface
[  413.340691][T17329] bond4 (unregistering): Released all slaves
[  413.353626][T17329] bond5 (unregistering): Released all slaves
[  413.365796][T18496] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  413.366627][T18498] tipc: Enabling <eth:lo> not permitted
[  413.381416][T18498] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  413.390373][T18509] netlink: 'syz.1.3503': attribute type 1 has an invalid length.
[  413.401480][T18509] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR
[  413.522417][T17329] : left promiscuous mode
[  413.548020][T18524] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  413.622904][T17327] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  413.676518][T18533] ipvlan2: entered promiscuous mode
[  413.685322][T17329] tipc: Disabling bearer <eth:syzkaller0>
[  413.697608][T17329] tipc: Left network mode
[  413.702989][T17327] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  413.713575][T17327] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  413.737786][    C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888030f6c800: abort rx timeout. Force session deactivation
[  413.752333][T18538] syzkaller0: entered promiscuous mode
[  413.758007][T18538] syzkaller0: entered allmulticast mode
[  413.774328][T17327] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  414.249662][T18564] x_tables: duplicate entry at hook 2
[  414.426134][T18573] 8021q: adding VLAN 0 to HW filter on device bond1
[  414.477523][T17329] hsr_slave_1: left promiscuous mode
[  414.486555][T17329] batman_adv: batadv0: Removing interface: batadv_slave_0
[  414.510264][T17329] batman_adv: batadv0: Removing interface: batadv_slave_1
[  414.694551][T17329] pimreg3 (unregistering): left allmulticast mode
[  415.173470][T17329] team0 (unregistering): Port device team_slave_1 removed
[  415.212100][T17329] team0 (unregistering): Port device team_slave_0 removed
[  415.445578][T17329] team0 (unregistering): Port device dummy0 removed
[  415.554086][T18589] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  415.585827][T18605] �
: renamed from veth1_vlan (while UP)
[  415.615337][T18609] netlink: 'syz.0.3530': attribute type 11 has an invalid length.
[  415.652058][T18609] netlink: 'syz.0.3530': attribute type 2 has an invalid length.
[  415.671321][T18611] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0
[  415.680883][T18611] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  415.936356][T18624] gretap0: entered promiscuous mode
[  415.962131][T18624] 0��{X��: renamed from gretap0
[  415.976462][T18624] 0��{X��: left promiscuous mode
[  415.984996][T18624] 0��{X��: entered allmulticast mode
[  415.993955][T18624] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  416.063046][T17329] IPVS: stop unused estimator thread 0...
[  416.132323][T18636] netlink: 'syz.2.3540': attribute type 10 has an invalid length.
[  416.150020][T18636] veth1_macvtap: left promiscuous mode
[  416.191705][T18638] vxcan1: tx address claim with different name
[  416.199027][T18637] vxcan1: tx address claim with different name
[  416.390137][T17329] bond6 (unregistering): (slave ip6gretap1): Releasing active interface
[  416.592308][T17329] bond5 (unregistering): (slave gre1): Releasing backup interface
[  416.601130][T17329] gre1 (unregistering): left promiscuous mode
[  416.629081][T17329] dvmrp6 (unregistering): left allmulticast mode
[  416.646325][T17329] bond7 (unregistering): (slave geneve3): Releasing active interface
[  416.918481][T17329] team0: Port device bridge4 removed
[  417.390675][T17329] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  417.403110][T17329] bond0 (unregistering): Released all slaves
[  417.416374][T17329] bond1 (unregistering): Released all slaves
[  417.430408][T17329] bond2 (unregistering): Released all slaves
[  417.523988][T17329] bond3 (unregistering): Released all slaves
[  417.537084][T17329] bond4 (unregistering): Released all slaves
[  417.631606][T17329] bond5 (unregistering): Released all slaves
[  417.729562][T17329] bond6 (unregistering): Released all slaves
[  417.745045][T17329] bond7 (unregistering): Released all slaves
[  417.893693][T17329] bond8 (unregistering): (slave veth7): Releasing backup interface
[  417.905469][T17329] bond8 (unregistering): Released all slaves
[  418.084067][T17329] : left promiscuous mode
[  418.199948][T18683] __nla_validate_parse: 22 callbacks suppressed
[  418.199964][T18683] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3551'.
[  418.268269][T18686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3553'.
[  418.282323][T17329] tipc: Disabling bearer <udp:s>
[  418.297024][T17329] tipc: Left network mode
[  418.318894][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3551'.
[  418.653511][T18683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  418.662732][T18683] bond_slave_0: left allmulticast mode
[  418.671275][T18683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  418.680557][T18683] bond_slave_1: left allmulticast mode
[  418.689961][T18683] bond0 (unregistering): Released all slaves
[  418.973737][T17327] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  418.992350][T17327] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  419.035800][T17327] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  419.037743][T18726] netlink: 'syz.1.3564': attribute type 12 has an invalid length.
[  419.064336][T17327] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  419.072555][T18726] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.3564'.
[  419.087452][T18735] xt_bpf: check failed: parse error
[  419.117689][T18730] syzkaller0: entered promiscuous mode
[  419.126665][T18730] syzkaller0: entered allmulticast mode
[  419.301418][T17329] hsr_slave_0: left promiscuous mode
[  419.309716][T17329] hsr_slave_1: left promiscuous mode
[  419.340195][T17329] veth1_macvtap: left promiscuous mode
[  419.345779][T17329] veth0_macvtap: left promiscuous mode
[  419.552613][T17329] pim6reg (unregistering): left allmulticast mode
[  420.160107][T18766] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  420.181287][T18766] bond4 (unregistering): Released all slaves
[  420.267685][T18775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3577'.
[  420.300573][T18775] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.411484][T18775] bridge_slave_1 (unregistering): left allmulticast mode
[  420.429246][T18775] bridge_slave_1 (unregistering): left promiscuous mode
[  420.437111][ T8937] IPVS: starting estimator thread 0...
[  420.443885][T18775] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.547105][T18790] IPVS: using max 37 ests per chain, 88800 per kthread
[  420.569998][T18792] tipc: Started in network mode
[  420.589875][T18792] tipc: Node identity 7641dd77097e, cluster identity 4711
[  420.615008][T18792] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  420.712327][T18798] syzkaller0: entered promiscuous mode
[  420.749115][T18798] syzkaller0: entered allmulticast mode
[  420.812439][T18792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3580'.
[  420.864858][T17329] IPVS: stop unused estimator thread 0...
[  420.883362][T18792] tipc: Resetting bearer <eth:syzkaller0>
[  420.929221][T18789] tipc: Resetting bearer <eth:syzkaller0>
[  420.974500][T18789] tipc: Disabling bearer <eth:syzkaller0>
[  421.409700][T18851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3591'.
[  421.419118][T18851] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  421.446164][T18851] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.731685][T18871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3593'.
[  421.879190][T18869] netlink: 'syz.2.3596': attribute type 21 has an invalid length.
[  421.892061][T18869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3596'.
[  421.914699][T18869] netlink: 'syz.2.3596': attribute type 21 has an invalid length.
[  421.916918][T17328] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  421.922807][T18869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3596'.
[  421.952874][T17328] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  421.983340][T17328] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  421.994855][T17328] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  422.247840][   T10] IPVS: starting estimator thread 0...
[  422.301169][T18907] netlink: 'syz.3.3608': attribute type 39 has an invalid length.
[  422.348234][T18905] IPVS: using max 26 ests per chain, 62400 per kthread
[  422.615235][T18924] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  422.934036][T18940] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  422.947623][T18940] syzkaller0: entered promiscuous mode
[  422.955762][T18940] syzkaller0: entered allmulticast mode
[  422.996041][T18940] tipc: Resetting bearer <eth:syzkaller0>
[  423.008798][T18940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.017342][T18940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.030827][T18939] tipc: Resetting bearer <eth:syzkaller0>
[  423.066116][T18939] tipc: Disabling bearer <eth:syzkaller0>
[  423.290797][T18958] pimreg: entered allmulticast mode
[  423.323297][T18964] syzkaller0: entered promiscuous mode
[  423.338996][T18964] syzkaller0: entered allmulticast mode
[  423.400100][T18963] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  423.417349][T18961] tipc: Resetting bearer <eth:syzkaller0>
[  423.503090][T18961] tipc: Disabling bearer <eth:syzkaller0>
[  423.579834][T18983] __nla_validate_parse: 6 callbacks suppressed
[  423.579852][T18983] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3633'.
[  423.628242][T18990] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  423.751890][T19000] 0: reclassify loop, rule prio 0, protocol 800
[  423.853627][T19009] syzkaller1: entered promiscuous mode
[  423.881834][T19009] syzkaller1: entered allmulticast mode
[  424.002339][   T30] audit: type=1107 audit(1762691469.260:6): pid=19016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  424.045052][T19014] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3640'.
[  424.292964][T19037] erspan0: entered promiscuous mode
[  424.342011][T19037] erspan0: entered allmulticast mode
[  424.600671][T19055] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3650'.
[  424.860116][T19068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3653'.
[  425.062190][T19075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3655'.
[  425.086142][T19080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3657'.
[  425.368653][   T56] block nbd0: Possible stuck request ffff888024cee000: control (read@0,1024B). Runtime 330 seconds
[  425.380848][   T56] block nbd0: Possible stuck request ffff888024cee1c0: control (read@1024,1024B). Runtime 330 seconds
[  425.392669][   T56] block nbd0: Possible stuck request ffff888024cee380: control (read@2048,1024B). Runtime 330 seconds
[  425.403842][   T56] block nbd0: Possible stuck request ffff888024cee540: control (read@3072,1024B). Runtime 330 seconds
[  425.838204][T19122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3666'.
[  425.994711][T19135] netdevsim netdevsim1: Direct firmware load for /.� failed with error -2
[  426.015343][T19133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3676'.
[  426.033706][T19135] netdevsim netdevsim1: Falling back to sysfs fallback for: /.�
[  426.044432][T19140] netlink: 'syz.3.3674': attribute type 1 has an invalid length.
[  426.065376][T19133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3676'.
[  426.121194][T19140] 8021q: adding VLAN 0 to HW filter on device bond2
[  426.131486][T19140] bond0: (slave bond2): making interface the new active one
[  426.141082][T19140] bond0: (slave bond2): Enslaving as an active interface with an up link
[  426.148680][T19151] netlink: 'syz.2.3678': attribute type 4 has an invalid length.
[  426.154856][T19150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3674'.
[  426.170807][T19150] 8021q: adding VLAN 0 to HW filter on device bond0
[  426.679111][   T30] audit: type=1800 audit(1762691471.940:7): pid=19163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3683" name="memory.events" dev="tmpfs" ino=711 res=0 errno=0
[  426.755528][T19191] netlink: 'syz.3.3692': attribute type 9 has an invalid length.
[  426.833225][T19191] 8021q: adding VLAN 0 to HW filter on device bond3
[  426.915781][T19201] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  427.542796][T19242] tipc: Can't bind to reserved service type 2
[  427.564227][T19236] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  427.582153][T19236] bond2 (unregistering): Released all slaves
[  427.662642][T19245] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  427.690960][T19245] batman_adv: batadv0: Removing interface: batadv_slave_0
[  427.743632][T19245] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  427.776884][T19245] batman_adv: batadv0: Removing interface: batadv_slave_1
[  427.801977][T19249] netlink: 'syz.1.3712': attribute type 5 has an invalid length.
[  427.815882][T19249] netlink: 'syz.1.3712': attribute type 6 has an invalid length.
[  428.674526][T19316] __nla_validate_parse: 11 callbacks suppressed
[  428.674538][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3727'.
[  429.026242][T19319] netdevsim netdevsim2: Direct firmware load for /.� failed with error -2
[  429.036588][T19319] netdevsim netdevsim2: Falling back to sysfs fallback for: /.�
[  429.092632][T19323] ip6gre1: entered promiscuous mode
[  429.098018][T19323] ip6gre1: entered allmulticast mode
[  429.240688][T19332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  429.273808][T19332] syzkaller0: entered promiscuous mode
[  429.279556][T19332] syzkaller0: entered allmulticast mode
[  429.285735][T19332] tipc: Resetting bearer <eth:syzkaller0>
[  429.295619][T19332] tipc: Resetting bearer <eth:syzkaller0>
[  429.397194][T19336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  429.490880][T19340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3734'.
[  429.518229][T19343] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3735'.
[  430.276996][ T5952] tipc: Node number set to 2008556376
[  430.576876][ T5841] Bluetooth: hci4: command 0x0405 tx timeout
[  430.894928][T19332] tipc: Disabling bearer <eth:syzkaller0>
[  431.116360][T19389] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3745'.
[  431.130767][T19386] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3746'.
[  431.320656][T19399] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  431.359906][T19405] netlink: 'syz.2.3749': attribute type 11 has an invalid length.
[  431.465760][T19417] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 2, id = 0
[  431.734017][T19428] netlink: 'syz.2.3753': attribute type 15 has an invalid length.
[  431.744631][T19428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3753'.
[  431.875061][T19440] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  431.885421][T19440] IPVS: set_ctl: invalid protocol: 65465 96.68.35.140:47262
[  432.024673][T19447] netlink: 'syz.1.3761': attribute type 5 has an invalid length.
[  432.155514][T19454] x_tables: duplicate underflow at hook 1
[  432.193834][T19463] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3765'.
[  432.252988][T19465] bond5: entered promiscuous mode
[  432.258531][T19465] bond5: entered allmulticast mode
[  432.264365][T19465] 8021q: adding VLAN 0 to HW filter on device bond5
[  432.587975][T19490] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  432.600075][T19489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3775'.
[  432.706597][T19500] delete_channel: no stack
[  432.848429][T19506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3779'.
[  432.901767][T19508] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  432.909954][T19508] syzkaller0: entered promiscuous mode
[  432.915454][T19508] syzkaller0: entered allmulticast mode
[  432.927016][T19508] tipc: Resetting bearer <eth:syzkaller0>
[  432.945194][T19507] tipc: Resetting bearer <eth:syzkaller0>
[  432.963341][T19507] tipc: Disabling bearer <eth:syzkaller0>
[  433.080005][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3784'.
[  433.243168][T19523] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  433.670519][T19564] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  433.736983][T19566] erspan0: entered allmulticast mode
[  433.825788][T19572] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  433.942304][T19582] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3807'.
[  434.101648][T19600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3811'.
[  434.200510][T19607] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  434.212041][T19607] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  434.334684][T19612] macvlan2: entered promiscuous mode
[  434.358071][T19612] macvlan2: entered allmulticast mode
[  434.369717][T19612] bond2: (slave macvlan2): Error -98 calling set_mac_address
[  434.559857][T19627] netlink: 'syz.4.3819': attribute type 1 has an invalid length.
[  434.667536][T19635] netlink: 'syz.1.3824': attribute type 2 has an invalid length.
[  435.207496][T19668] xt_recent: Unsupported userspace flags (000000b1)
[  435.315671][T19675] netlink: 1024 bytes leftover after parsing attributes in process `syz.0.3839'.
[  435.334160][T19678] veth1_macvtap: left promiscuous mode
[  435.344890][T19678] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  435.718434][T19711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3848'.
[  435.792559][T19716] netlink: 'syz.1.3847': attribute type 21 has an invalid length.
[  435.803050][T19711] netlink: 5172 bytes leftover after parsing attributes in process `syz.0.3848'.
[  435.817030][T19716] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3847'.
[  435.832653][T19721] netlink: 'syz.1.3847': attribute type 21 has an invalid length.
[  435.843105][T19721] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3847'.
[  435.865776][T19722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3850'.
[  436.081518][T19737] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3853'.
[  436.405954][T19747] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  436.422355][T19748] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3856'.
[  436.439349][T19747] bond4 (unregistering): Released all slaves
[  436.973661][T19771] bond6: option mode: invalid value (133)
[  437.015626][T19771] bond6 (unregistering): Released all slaves
[  437.540302][T19819] can: request_module (can-proto-5) failed.
[  437.651306][T19836] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  437.668936][T19836] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  437.687335][T19836] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  437.763156][T19846] netlink: 'syz.2.3884': attribute type 83 has an invalid length.
[  437.863536][T19854] netlink: 'syz.2.3887': attribute type 24 has an invalid length.
[  437.916681][T19858] openvswitch: netlink: Missing key (keys=40, expected=80)
[  438.367245][T19877] netlink: 'syz.2.3896': attribute type 1 has an invalid length.
[  438.379292][T19877] nbd: error processing sock list
[  438.385111][T19877] block nbd1: shutting down sockets
[  438.734757][T19916] FAULT_INJECTION: forcing a failure.
[  438.734757][T19916] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  438.785873][T19916] CPU: 0 UID: 0 PID: 19916 Comm: syz.4.3903 Not tainted syzkaller #0 PREEMPT(full) 
[  438.785900][T19916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  438.785911][T19916] Call Trace:
[  438.785918][T19916]  <TASK>
[  438.785926][T19916]  dump_stack_lvl+0x189/0x250
[  438.785951][T19916]  ? __pfx____ratelimit+0x10/0x10
[  438.785974][T19916]  ? __pfx_dump_stack_lvl+0x10/0x10
[  438.785996][T19916]  ? __pfx__printk+0x10/0x10
[  438.786014][T19916]  ? __might_fault+0xb0/0x130
[  438.786047][T19916]  should_fail_ex+0x414/0x560
[  438.786078][T19916]  _copy_from_iter+0x1de/0x1790
[  438.786109][T19916]  ? __lock_acquire+0xab9/0xd20
[  438.786128][T19916]  ? __pfx__copy_from_iter+0x10/0x10
[  438.786157][T19916]  ? page_copy_sane+0x4e/0x280
[  438.786179][T19916]  copy_page_from_iter+0xdd/0x170
[  438.786203][T19916]  tun_get_user+0x1d7b/0x3e90
[  438.786231][T19916]  ? tun_get_user+0x6f6/0x3e90
[  438.786259][T19916]  ? aa_file_perm+0x44d/0x1550
[  438.786276][T19916]  ? __pfx_tun_get_user+0x10/0x10
[  438.786293][T19916]  ? _parse_integer_limit+0x1ae/0x1f0
[  438.786317][T19916]  ? __lock_acquire+0xab9/0xd20
[  438.786337][T19916]  ? ref_tracker_alloc+0x318/0x460
[  438.786350][T19916]  ? __lock_acquire+0xab9/0xd20
[  438.786367][T19916]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  438.786386][T19916]  ? tun_get+0x1c/0x2f0
[  438.786408][T19916]  ? tun_get+0x1c/0x2f0
[  438.786424][T19916]  ? tun_get+0x1c/0x2f0
[  438.786447][T19916]  tun_chr_write_iter+0x113/0x200
[  438.786470][T19916]  vfs_write+0x5c9/0xb30
[  438.786495][T19916]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  438.786522][T19916]  ? __pfx_vfs_write+0x10/0x10
[  438.786553][T19916]  ? __fget_files+0x2a/0x420
[  438.786576][T19916]  ksys_write+0x145/0x250
[  438.786600][T19916]  ? __pfx_ksys_write+0x10/0x10
[  438.786625][T19916]  ? do_syscall_64+0xbe/0xfa0
[  438.786650][T19916]  do_syscall_64+0xfa/0xfa0
[  438.786669][T19916]  ? lockdep_hardirqs_on+0x9c/0x150
[  438.786693][T19916]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.786708][T19916]  ? clear_bhb_loop+0x60/0xb0
[  438.786727][T19916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.786743][T19916] RIP: 0033:0x7fa31db8e17f
[  438.786759][T19916] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  438.786773][T19916] RSP: 002b:00007fa31bdf6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  438.786793][T19916] RAX: ffffffffffffffda RBX: 00007fa31dde5fa0 RCX: 00007fa31db8e17f
[  438.786806][T19916] RDX: 00000000000000f1 RSI: 0000200000000600 RDI: 00000000000000c8
[  438.786817][T19916] RBP: 00007fa31bdf6090 R08: 0000000000000000 R09: 0000000000000000
[  438.786829][T19916] R10: 00000000000000f1 R11: 0000000000000293 R12: 0000000000000001
[  438.786839][T19916] R13: 00007fa31dde6038 R14: 00007fa31dde5fa0 R15: 00007fff0158e478
[  438.786869][T19916]  </TASK>
[  439.421107][T19945] __nla_validate_parse: 10 callbacks suppressed
[  439.421128][T19945] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3913'.
[  439.447815][   T31] INFO: task udevd:5890 blocked for more than 143 seconds.
[  439.455122][   T31]       Not tainted syzkaller #0
[  439.473660][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  439.483057][   T31] task:udevd           state:D stack:20936 pid:5890  tgid:5890  ppid:5198   task_flags:0x400140 flags:0x00080003
[  439.495176][   T31] Call Trace:
[  439.498673][   T31]  <TASK>
[  439.501629][   T31]  __schedule+0x1798/0x4cc0
[  439.507325][   T31]  ? __pfx___schedule+0x10/0x10
[  439.512236][   T31]  ? schedule+0x91/0x360
[  439.516503][   T31]  schedule+0x165/0x360
[  439.520862][   T31]  io_schedule+0x80/0xd0
[  439.525133][   T31]  folio_wait_bit_common+0x6b0/0xb80
[  439.530825][   T31]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  439.556808][   T31]  ? __pfx_wake_page_function+0x10/0x10
[  439.562430][   T31]  ? __filemap_get_folio+0x6c0/0xaf0
[  439.577253][   T31]  ? do_read_cache_folio+0x4e9/0x590
[  439.582722][   T31]  do_read_cache_folio+0x1aa/0x590
[  439.590899][   T31]  ? __pfx_blkdev_read_folio+0x10/0x10
[  439.621777][   T31]  read_part_sector+0xb6/0x2b0
[  439.633487][   T31]  adfspart_check_POWERTEC+0x8c/0xf30
[  439.639097][   T31]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  439.644683][   T31]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  439.650889][   T31]  bdev_disk_changed+0x75f/0x14b0
[  439.655964][   T31]  ? __pfx_bdev_disk_changed+0x10/0x10
[  439.661508][   T31]  ? wait_on_inode+0xc0/0x230
[  439.666206][   T31]  blkdev_get_whole+0x380/0x510
[  439.671192][   T31]  bdev_open+0x31e/0xd30
[  439.675473][   T31]  blkdev_open+0x457/0x600
[  439.679988][   T31]  ? __pfx_blkdev_open+0x10/0x10
[  439.684941][   T31]  do_dentry_open+0x953/0x13f0
[  439.690158][   T31]  vfs_open+0x3b/0x340
[  439.694256][   T31]  ? path_openat+0x2ecd/0x3830
[  439.699104][   T31]  path_openat+0x2ee5/0x3830
[  439.703841][   T31]  ? __pfx_path_openat+0x10/0x10
[  439.709005][   T31]  do_filp_open+0x1fa/0x410
[  439.715355][   T31]  ? __lock_acquire+0xab9/0xd20
[  439.720342][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  439.725415][   T31]  ? _raw_spin_unlock+0x28/0x50
[  439.730453][   T31]  ? alloc_fd+0x64c/0x6c0
[  439.734820][   T31]  do_sys_openat2+0x121/0x1c0
[  439.742561][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  439.748021][   T31]  __x64_sys_openat+0x138/0x170
[  439.752902][   T31]  do_syscall_64+0xfa/0xfa0
[  439.759194][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.765286][   T31]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  439.771640][   T31]  ? clear_bhb_loop+0x60/0xb0
[  439.776340][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.782723][   T31] RIP: 0033:0x7ff0e8ca7407
[  439.787454][   T31] RSP: 002b:00007fff203a5900 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  439.795893][   T31] RAX: ffffffffffffffda RBX: 00007ff0e93eb880 RCX: 00007ff0e8ca7407
[  439.803921][   T31] RDX: 00000000000a0800 RSI: 00005614e15a28a0 RDI: ffffffffffffff9c
[  439.812016][   T31] RBP: 00005614e1591910 R08: 0000000000000000 R09: 0000000000000000
[  439.820985][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005614e15aef10
[  439.829054][   T31] R13: 00005614e159f190 R14: 0000000000000000 R15: 00005614e15aef10
[  439.837114][   T31]  </TASK>
[  439.840229][   T31] 
[  439.840229][   T31] Showing all locks held in the system:
[  439.848404][   T31] 2 locks held by ksoftirqd/1/23:
[  439.853439][   T31]  #0: ffff8880b893a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  439.863508][   T31]  #1: ffff8880b8924048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  439.873134][   T31] 1 lock held by khungtaskd/31:
[  439.878055][   T31]  #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  439.888058][   T31] 2 locks held by getty/5589:
[  439.892750][   T31]  #0: ffff88814d5660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  439.902569][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  439.912761][   T31] 1 lock held by udevd/5890:
[  439.918245][   T31]  #0: ffff888024c49358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  439.927790][   T31] 2 locks held by kworker/1:7/8936:
[  439.933134][   T31]  #0: ffff8880b893a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  439.943201][   T31]  #1: ffff8880b8924048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  439.952181][   T31] 
[  439.954513][   T31] =============================================
[  439.954513][   T31] 
[  439.963423][   T31] NMI backtrace for cpu 1
[  439.963441][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  439.963461][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  439.963471][   T31] Call Trace:
[  439.963477][   T31]  <TASK>
[  439.963485][   T31]  dump_stack_lvl+0x189/0x250
[  439.963515][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  439.963537][   T31]  ? __pfx__printk+0x10/0x10
[  439.963567][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  439.963590][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  439.963612][   T31]  ? __pfx__printk+0x10/0x10
[  439.963633][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  439.963660][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  439.963681][   T31]  watchdog+0xf60/0xfa0
[  439.963701][   T31]  ? watchdog+0x1e2/0xfa0
[  439.963723][   T31]  kthread+0x711/0x8a0
[  439.963748][   T31]  ? __pfx_watchdog+0x10/0x10
[  439.963764][   T31]  ? __pfx_kthread+0x10/0x10
[  439.963787][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  439.963809][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  439.963829][   T31]  ? __pfx_kthread+0x10/0x10
[  439.963850][   T31]  ret_from_fork+0x4bc/0x870
[  439.963870][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  439.963895][   T31]  ? __switch_to_asm+0x39/0x70
[  439.963908][   T31]  ? __switch_to_asm+0x33/0x70
[  439.963920][   T31]  ? __pfx_kthread+0x10/0x10
[  439.963942][   T31]  ret_from_fork_asm+0x1a/0x30
[  439.963973][   T31]  </TASK>
[  439.963980][   T31] Sending NMI from CPU 1 to CPUs 0:
[  440.110868][    C0] NMI backtrace for cpu 0
[  440.110885][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  440.110903][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  440.110913][    C0] RIP: 0010:tick_irq_enter+0x62/0x2c0
[  440.110939][    C0] Code: 8a b5 41 48 c7 44 24 08 e3 52 81 8d 48 c7 44 24 10 80 e0 b1 81 49 89 e4 49 c1 ec 03 48 b8 f1 f1 f1 f1 00 f2 f2 f2 4b 89 04 3c <66> 43 c7 44 3c 09 f3 f3 43 c6 44 3c 0b f3 e8 9b 25 0e 00 e8 36 a6
[  440.110951][    C0] RSP: 0018:ffffc90000007f20 EFLAGS: 00000806
[  440.110966][    C0] RAX: f2f2f200f1f1f1f1 RBX: ffffffff8dc95200 RCX: 1d1adc36098c4d00
[  440.110978][    C0] RDX: 0000000000000000 RSI: ffffffff8bbf0740 RDI: ffffffff8dc95200
[  440.110989][    C0] RBP: ffffc90000007fd0 R08: ffffffff8f7ce277 R09: 1ffffffff1ef9c4e
[  440.111001][    C0] R10: dffffc0000000000 R11: ffffc90000007ff8 R12: 1ffff92000000fe4
[  440.111012][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: dffffc0000000000
[  440.111023][    C0] FS:  0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000
[  440.111036][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  440.111047][    C0] CR2: 00007f684a7b12f8 CR3: 000000003202c000 CR4: 00000000003526f0
[  440.111062][    C0] Call Trace:
[  440.111068][    C0]  <IRQ>
[  440.111075][    C0]  ? __pfx_tick_irq_enter+0x10/0x10
[  440.111094][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  440.111111][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  440.111130][    C0]  irq_enter_rcu+0xa0/0xf0
[  440.111145][    C0]  sysvec_call_function_single+0x96/0xc0
[  440.111164][    C0]  </IRQ>
[  440.111169][    C0]  <TASK>
[  440.111175][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[  440.111191][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  440.111210][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 d1 21 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  440.111222][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6
[  440.111235][    C0] RAX: 1d1adc36098c4d00 RBX: ffffffff81967bf7 RCX: 1d1adc36098c4d00
[  440.111246][    C0] RDX: 0000000000000001 RSI: ffffffff8d70dbaf RDI: ffffffff8bbf0760
[  440.111257][    C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb
[  440.111268][    C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce270
[  440.111279][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40
[  440.111291][    C0]  ? do_idle+0x1e7/0x510
[  440.111323][    C0]  default_idle+0x13/0x20
[  440.111336][    C0]  default_idle_call+0x73/0xb0
[  440.111351][    C0]  do_idle+0x1e7/0x510
[  440.111365][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  440.111381][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  440.111401][    C0]  ? __pfx_do_idle+0x10/0x10
[  440.111421][    C0]  ? do_idle+0xa/0x510
[  440.111436][    C0]  cpu_startup_entry+0x44/0x60
[  440.111451][    C0]  rest_init+0x2de/0x300
[  440.111468][    C0]  start_kernel+0x3ae/0x410
[  440.111485][    C0]  x86_64_start_reservations+0x24/0x30
[  440.111504][    C0]  x86_64_start_kernel+0x143/0x1c0
[  440.111522][    C0]  common_startup_64+0x13e/0x147
[  440.111549][    C0]  </TASK>