last executing test programs:

13.258284575s ago: executing program 0 (id=4956):
syz_emit_ethernet(0x4e, &(0x7f0000002100)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, [{0x5, 0x0, "9dc8"}]}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f00000000c0), 0x4, 0x7)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
r1 = socket$kcm(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x28, &(0x7f0000000040), 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0)
syz_80211_inject_frame(0x0, &(0x7f00000004c0)=ANY=[], 0x2b)
socket(0xf, 0x1, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000002100)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, [{0x5, 0x0, "9dc8"}]}}}}}}, 0x0) (async)
syz_extract_tcp_res(&(0x7f00000000c0), 0x4, 0x7) (async)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async)
socket$kcm(0x11, 0x3, 0x300) (async)
setsockopt$sock_attach_bpf(r1, 0x1, 0x28, &(0x7f0000000040), 0x4) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) (async)
syz_80211_inject_frame(0x0, &(0x7f00000004c0)=ANY=[], 0x2b) (async)
socket(0xf, 0x1, 0x2) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)

13.167277499s ago: executing program 0 (id=4957):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f00000003c0)=0x8002, 0x4)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0xe5}], 0x1, 0x40000002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}]}}]}, 0x45c}}, 0x0)

11.485105855s ago: executing program 0 (id=4970):
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
unshare(0x22020600)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1}, 0x50)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000180), 0x1000000}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, r3, 0x0, 0x12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x1b}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0)
unshare(0x30050600)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x12, 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000))
ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000100)={0x1fffffffffffffa8, &(0x7f0000000080)=[{}, {}]})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2})
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)

10.954773886s ago: executing program 0 (id=4978):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000022c0)={{0x14}, [@NFT_MSG_NEWSET={0xf8, 0x9, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_EXPRESSIONS={0x68, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x21}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x30, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_SET_EXPR={0x50, 0x11, 0x0, 0x1, @byteorder={{0xe}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x9a}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xbb}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x70}]}}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x5f4, 0x9, 0xa, 0xc01, 0x0, 0x0, {0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x564, 0x12, 0x0, 0x1, [{0x560, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x550, 0x2, 0x0, 0x1, [@NFTA_BITWISE_MASK={0x290, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe5, 0x1, "9b27fdc176a9ac958bead425bbe31998b3c932b875a81c4556932273c8098cd71380520669ebc18acd16a1d578375402a76a48ac5f3d9ed5c2174b933d3352bf0078406c213fc71f865e96876a068f3cbdc91a362c6351187388f9c8d5d272e4049a0552ed6f640f17f960015f0882f8941dab28074d538a647a8b843832956ee77ad4403882a6007e20b23397a2bf1a30f4d1e7fd8152641647c0ea5da7622d7ee46463c1da640d2667dcc597a8057b85f7f30cbaa86f2fb3a5285d145e0a2e60d2a6dfbc34ac61a30c2ca934879a6e774b6ad2b37bf5426a7206b200c570a181"}, @NFTA_DATA_VALUE={0x4f, 0x1, "820662732932b5d9687b0d78095343bf88ce8f0f42778f49b719d772cdfa755fd2d0ce8c628d83dccbefb5f7cc45f3c4ee5123d980e53fe1f8cfcdf0d99d424eb26cfcfaa1fa4c7e59e2c1"}, @NFTA_DATA_VALUE={0x9, 0x1, "0b6267e9fe"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xdc, 0x1, "51d2eb1b510c4d8fb46074352299f03d4b3de87c458375a1048c51f16e56c96a8eea2b915efb40b80c6daf362faeffce52fd0031801afc7822d18ca0ca4de407b6d1e12da18279dbab2c72b486a4481b4f7b48ee2f48bc77f5bcbfad30c16801a308a2394288ff30a14153a7d4e595a7a45e608e935fa2b635cefec4d4cfe54fee1b29e903a45559606c5f36338a992d99194eb46d33e45fc433c3c872f043360a566eb079f11b86b2ae85cfae15a9b6ed19f8dbd6a416d393620c91368d566aac4806947a529b06ba2bac7bca52be90e78aa4278c39bfd4"}, @NFTA_DATA_VALUE={0x5e, 0x1, "5cc0d41e9a433f8793eeb84163077114133e21c8d70879457c738d78d62ae1cb09abcd91acaa58db200d0c005ea376898a46fcd6473774c999a5bb2e2de72d8b5ea1ea7e9d76566980b5bf2966af7a1783d2023de0aa19e9d484"}]}, @NFTA_BITWISE_XOR={0x1d0, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9d, 0x1, "282f4290a624b85d7774f008c8214e84ab605af821f7f18306d6fa6d52a8278ec84136b2a7397f89d54f0639a055a5af0d81eee73ccf77036af36823c9f9645fd9ceff80e27d55555c5a5c3aecde2ad8f3033ad0b9aa79dfe730fb5f6c9f7e1de8b9bf2054c4d44abc2873504cb903eb8c5ba1f868da3c12ff5a334ddc4c5b0173b016dd997994e12c446a24f829c778fb6561501c581e42f3"}, @NFTA_DATA_VALUE={0x19, 0x1, "08898cf0fa9a3846d8d23d96f105c64fa492374c41"}, @NFTA_DATA_VALUE={0x33, 0x1, "cf2871485028aaaf5902b020ee1be2578a0090463b09f8152b8e9b034e6bd0aa298a4fb79d5832fa94d3c567cf296d"}, @NFTA_DATA_VALUE={0xdb, 0x1, "085488ff1484e72adfad0eea2fb505abebe01c8befdfe7ef65cf2e7cbb62e23a75319f0fce00fd6e4c82fbfbc95a9a0c69d6b8ade9ac826b27a5a0c637b89090a3d44cb6d8b7338b71f82b1870c88a80370e09c2a7f4aa7ead3319f23676c7fa96dff3cb78a3b30af520a93e63f0bdc05879767c157ce51d2d668c7917afe7e76d4d317636151083827b7d9175f3555c3c2d155bd29aa92de3e7e5f0daf23aadea95d252cd13687858b5fc2ab9121453b07c9fbbbab189b855757ed6e2497f41c975bd7150bfcdfb0e4bc380cdfb5b34001d8352d3f3ea"}]}, @NFTA_BITWISE_DATA={0xec, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}}}]}, @NFTA_SET_EXPR={0x4c, 0x11, 0x0, 0x1, @tproxy={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0xc4, 0x9, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3b}, @NFTA_SET_USERDATA={0x6c, 0xd, 0x1, 0x0, "3f737317ba73051d8ef9c41418f93f818ff9515253c2c04749d64064f01ef04b48dde7bd2e1ed54cbedcf0ab8ca71f91c3d5f0846f0ba7937c65d90ca192a9182365bd1b2078950ec4ca97b15b507a4afc645c9b51fb069385eaf280bb4bd1127280c4f04220bee1"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x8c, 0x8, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f7}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x114, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xb}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x158}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_vlan\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b97c4b3}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3a89e66f}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6ffaaa8d}]}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3ff}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa54}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async, rerun: 32)
r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) (rerun: 32)
sendto$inet(r2, &(0x7f0000000300)="818a44603e316692d8f31d", 0xb, 0x4, &(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x3}]}) (async, rerun: 64)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x34, r7, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x5, 0xfffffffd, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xb5fa09ac1132a7e6) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0)
close(r8) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

10.648740119s ago: executing program 0 (id=4986):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x80000000, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x80000000, 0x4)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup, 0x37, 0x0, 0x1000, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0]}, 0x40) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup, 0x37, 0x0, 0x1000, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], <r2=>0x0}, 0x40)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x1, @default, @rose={'rose', 0x0}, 0x9, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default]}) (async)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x1, @default, @rose={'rose', 0x0}, 0x9, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default]})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x201, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffd, {0x0, 0x0, 0x0, r12, {0x0, 0xc}, {0xb, 0xb}, {0xe, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2001c065}, 0x4008000)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r3, r1, 0x29, 0x0, 0x0, @void, @value=r4, @void, @void, r2}, 0x20) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r3, r1, 0x29, 0x0, 0x0, @void, @value=r4, @void, @void, r2}, 0x20)

9.856627906s ago: executing program 0 (id=4998):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
r1 = socket(0x15, 0x5, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) (async)
getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x400448e1, &(0x7f0000000000)={0x0, 0x0, "957008"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1b, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@map_fd={0x18, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @tail_call, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x3, 0x6, 0x8, 0xfffffffffffffe84, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x5, 0x84a, 0xfffffffc}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x4, 0x3, 0xf, 0x6}, {0x4, 0x1, 0x6, 0x3}, {0x4, 0x2, 0xfb000000, 0x4}], 0x10, 0xfff}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000380)=r4) (async)
ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000380)=r4)

6.539636275s ago: executing program 2 (id=5042):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
read(r0, &(0x7f00000003c0)=""/52, 0x34)
r1 = accept4$alg(r0, 0x0, 0x0, 0xd53b61c99342b397)
vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1)

5.619330586s ago: executing program 2 (id=5053):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x9, 0x2, 0xc, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x8, 0x700, 0x3ff, 0x6}})

4.079262788s ago: executing program 2 (id=5059):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x2db3, @remote, 0x8}, 0x1c)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040)

3.946275419s ago: executing program 2 (id=5063):
r0 = socket(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r1, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r0}, 0x20)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
setsockopt$inet6_int(r2, 0x29, 0x2b, 0x0, 0xfff3)

3.055185936s ago: executing program 2 (id=5085):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000240)=""/21, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00'})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}], 0x1, 0x44191)
listen(r2, 0x100)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000540)={0x29}, 0x8)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x12)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, ';o\'.'}, &(0x7f0000000040)=0x2c)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xfce)

661.720089ms ago: executing program 4 (id=5108):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket(0x1, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000600), &(0x7f0000001380)=@udp=r1}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0})
recvmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0)
sendmmsg$unix(r1, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x1)
bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="23000300010006", 0x7)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000225d5df0fefb67f01763022e153a7657eda22a623330873bf886b0fba731b0ec58f7b9833280920c57bdd788b79eef3519115ec71c4cbc79b0932f10e916d1de146e98f5812e072049729b1dfb44e1a6967b229f82f2a8be5aef6320ed", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c280000800050091f6ffff08000500", @ANYRES32=r6, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x8090}, 0x0)

659.917383ms ago: executing program 1 (id=5109):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x44}, 0x10011, 0x2, 0x2, 0x5, 0xc}, 0x20)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)={<r6=>0x0, 0x8001, 0x8, [0x8, 0xf, 0x401, 0x4, 0x7, 0x401, 0x8, 0x7]}, &(0x7f0000000380)=0x18)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000980)={r6, 0x1}, 0x8)
recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x1)
ioctl(r3, 0x8b32, &(0x7f0000000040))
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=<r8=>0x0)
bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r8, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r9, &(0x7f00000000c0)={0x27, r8, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60)
close(r7)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008035"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r11 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x41}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x401, 0x8, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x840}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x5, 0x0, 0x7, 0x3ff}}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x4, 0xa, 0x8, 'syz0\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a090400000000000000000200000060000480300001800e00020000006d6564696174650000001c000280100002800c000280080001800000000008000140000000072c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000408000240000000940900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000af83430082eb5b65b"], 0xb4}}, 0x0)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0xeff}, 0x10}, 0x1, 0x7}, 0x0)
close(0x3)

615.560637ms ago: executing program 2 (id=5110):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100003f7000001012000000063000000", @ANYRES32=0x0, @ANYBLOB="00000000100004001c00128009000100626f6e64000000000c0002800800090001"], 0x3c}, 0x1, 0xba01}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110be000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90)
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25ADDFWD(r4, 0x8940, &(0x7f0000000080)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}})
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r6, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
listen(r6, 0x8)
ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x9)
ppoll(&(0x7f0000000280)=[{r4, 0x3206}, {r5, 0x2282}], 0xe4, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x101a200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7cd}]}, 0x24}, 0x1, 0x0, 0x0, 0x7a4ec5db33a73616}, 0x8011)
sendto$inet(r2, &(0x7f0000000380)='y', 0x1, 0x20008001, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
listen(0xffffffffffffffff, 0x2)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x2, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x80000000, @empty, 0x2}}]}, 0x40}, 0x1, 0x7}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/6, 0x6, 0x10002, 0x0, 0x0)

614.418939ms ago: executing program 3 (id=5111):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r0) (async)
syz_emit_ethernet(0x66, &(0x7f0000001340)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x30, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@dstopts={0x1, 0x4, '\x00', [@hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}}}}}, 0x0)
sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08004500005800000000002f9078ac141400ac1414ff0420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb010000002000000002000000000000000000000800655800000900"], 0x0)

504.164048ms ago: executing program 3 (id=5112):
syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd603000bb00082b000f030000000000000000000000000000fe800000000000000000000000aa00000000000890780000babca5d7a9a513267c4a401cada94568a524fbe6fbbab5b83b220b7d21a83ae14cd6bd892158d0514754e011be18a40fb71e843a77cddb914084bbe5a742c436f87a46bfe2078acb8244ccfa2eb866ce5db444"], 0x0)

454.171746ms ago: executing program 4 (id=5113):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa0833}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31}]}}}]}, 0x3c}}, 0x80) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
unshare(0x6020480) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000340)='syzkaller\x00', 0x3}, 0x90) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0xe) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0xfffffffe}, @NL80211_ATTR_DFS_CAC_TIME={0xffffffffffffff4f}]}]}]}, 0x30}}, 0x4000890)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x65b1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x20000030) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r8=>0x0}) (async, rerun: 64)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r9}, 0x10)
r10 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r10, 0x0) (async)
recvmmsg(r10, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) (async, rerun: 64)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x809b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x4c801) (rerun: 64)

412.252374ms ago: executing program 3 (id=5114):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x80c4}, 0x45)

381.678771ms ago: executing program 1 (id=5115):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000140)='\x00uC\x00\x00\x00', 0x6)

318.377023ms ago: executing program 3 (id=5116):
r0 = socket$inet6(0xa, 0x80001, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r2, 0x0, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @private=0xa010102}}}], 0x20}, 0x0)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x190)

317.899127ms ago: executing program 4 (id=5117):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'pids'}, {0x0, 'net_cls'}, {0x2b, 'hugetlb'}, {0x2d, 'cpuset'}, {0x2d, 'rdma'}, {0x2d, 'rdma'}, {0x2d, 'blkio'}]}, 0x33)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="300000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="800404000000000008001300", @ANYRES32=0x0, @ANYBLOB="08002e0004000000"], 0x30}}, 0x88890)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="baa64b7c1acaf060764bc8f1ee48c32d2a347f0422cd3ee946d1abce088602c4710f3ce860bfc454e3d836871da9e2ea449f4e863cadb3494d76a853020c562bae1182a48b9b24c1149c2787c5c62b33ca1bdd4ab6e0", 0x56}, {&(0x7f0000000100)="bd0993c251fa7eadcec9cb1c4b3295f3ee96439e210ffd007b63c803e91b9e63d3383d669895", 0x26}, {&(0x7f0000000140)="491a464aa7413182c4e0d9d5eefd17b88939b629c59388690e8ad1377b3be14a7ffedf4b62d1b6ae30cb03c76e6cec47a2526feb6f88481553806254ba14779cdb746d02258ac1faadf00acc631a4b341159fc3436d638aca95fcb4b28e7496002853599770f3c863ad05e68f331f26d2dca961e06e32796463211c72d1a36040a53ff17098fe98c2a818f0922cc5e62c01bd2adc81b7c4310edb062d9e7458bf6cb21fdd12e7a1d623b5660c9df551cd26446aada8bb30b493041b0", 0xbc}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0)

289.279226ms ago: executing program 3 (id=5118):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$inet6(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
syz_emit_ethernet(0x2e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2f83bef15e97f4b4c00080045000020264867967aaed9782cd3b32135a4e7c7000400001190788000c958619314aa000037c1000000"], 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8000}}}]}, 0x38}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
r8 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) (async)
sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xe4}}, 0x0)
connect$llc(r8, &(0x7f0000000300)={0x1a, 0x326, 0x2, 0x40, 0x3, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14}]}}]}, 0x44}}, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r10) (async)
close(r10)
socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
socket$unix(0x1, 0x2, 0x0) (async)
r11 = socket$unix(0x1, 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x2)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYRESDEC=r10, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYRESDEC=r10, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r12}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r12}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8af8ff00000000b6080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70500000800000085df00005b0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

280.825092ms ago: executing program 1 (id=5119):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0)

226.138275ms ago: executing program 4 (id=5120):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x10, 0xc, 0xfff, 0x8, 0x0, 0x8, 0x3]}}]}]}]}, 0x38}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1019208}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x74, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcacb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8c}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8e17}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x34d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x4000000)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000400)="91e5213a9eed445d6c2d4f81b72862ee1151e5b610bc5bf0efc80053770ddcf95a7b79ce6f1d204d981a098d57a37bb63254609fc97bc20092834e136ab44d509c2be55a53b446c6a0c55cd2e21073b2640ef273d80305eeee183f4a07a8c022f8a64aa080254f8d4d3639ee1f733b1076a1434b15a8b7fea608921ae889790f81", 0x81)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r8=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000040)={r8, 0x8, 0x9, 0x0, 0x12, 0x1}, &(0x7f0000000100)=0x14)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100040000000000000003000000580001800d0001007564703a73797a31000000004400040020000127f59508ee8c898e44fe8000000000010000000000e1ffff13f80f0000200002000a000000fffffffcff02000000000000000000000000000100000000"], 0x6c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x10, 0xc, 0xfff, 0x8, 0x0, 0x8, 0x3]}}]}]}]}, 0x38}}, 0x0) (async)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1019208}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x74, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcacb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8c}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8e17}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x34d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x4000000) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r6, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000400)="91e5213a9eed445d6c2d4f81b72862ee1151e5b610bc5bf0efc80053770ddcf95a7b79ce6f1d204d981a098d57a37bb63254609fc97bc20092834e136ab44d509c2be55a53b446c6a0c55cd2e21073b2640ef273d80305eeee183f4a07a8c022f8a64aa080254f8d4d3639ee1f733b1076a1434b15a8b7fea608921ae889790f81", 0x81) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000040)={r8, 0x8, 0x9, 0x0, 0x12, 0x1}, &(0x7f0000000100)=0x14) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100040000000000000003000000580001800d0001007564703a73797a31000000004400040020000127f59508ee8c898e44fe8000000000010000000000e1ffff13f80f0000200002000a000000fffffffcff02000000000000000000000000000100000000"], 0x6c}}, 0x0) (async)

209.414348ms ago: executing program 1 (id=5121):
r0 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, r1, 0x1b021000)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)

130.687358ms ago: executing program 1 (id=5122):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d000000951d80f1547edddd0e32d9c3403d2a7971ee5d6ab794eba6dfc40eaa3a5600000000000000f36f342f75c49732ec532d7de415212c7c24e7ba27305f324d29b5be1fa7e7445163bb0d004a17a794fcdc7170cc33189638a959ae8cabaf3fd01b96358424e4e1e0dee05fcf69913c991002ac066a5d241b88ba173d324c71c4c829dd07c0000230e8c20a66ccc96951e342e5432fc8edc34b71145870ff6e91c95d10e4577a1247347f7582466642f960cb33769b66515e70156dde681181a6d548f5067c3db1a2efe718db401f2365bd636f9081be1bae97e46fea9fc6dd9efa8a602b13fa86057d3c32bd0ed77bf58891943c5f0ac1be60bc9f390aca76000000000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x9, 0x400, 0x8001, 0x1, 0x3, 0x1c, 0x4}}]}}]}, 0x148}}, 0x0)

126.623861ms ago: executing program 4 (id=5123):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10)
close(r2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x790, 0x2d0, 0x3a0, 0x0, 0x0, 0x490, 0x6c0, 0x6c0, 0x6c0, 0x6c0, 0x6c0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x1c8, 0x1f0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2, [], [], [], 0x0, 0x4000}}, @common=@srh1={{0x90}, {0x6, 0x9, 0x3, 0x6, 0x4a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @mcast2, [0xff, 0x0, 0xffffffff], [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0x0, 0xffffffff, 0x0, 0xffffff00], 0x81, 0x3220}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xf}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='rxrpc_retransmit\x00', r1, 0x0, 0x7}, 0x18)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000900)={r2, &(0x7f0000000880)="c3903da21dd66328169da03ca9aac2375ac444cdf072f6dddfc53c3b2f81a9adc8b4", &(0x7f00000008c0)=@udp, 0x1}, 0x20)

2.094403ms ago: executing program 4 (id=5124):
r0 = socket(0x23, 0x5, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000000000)="89d3c05e2f60dd8c0682db12", 0xc}, {&(0x7f0000001940)="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", 0xfec}], 0x3}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=<r4=>0x0)
connect$nfc_llcp(r3, &(0x7f0000000180)={0x27, r4, 0x1, 0x5, 0x0, 0x6, "68054533f7d7290829527fcf778996ec8f8b2d04f200d6790b42e95c50247620f24aae011faf9ad83f0ff3634185789a2ad054f900044298cc0bc332a01ce9", 0x5}, 0x60)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r5, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

1.699402ms ago: executing program 3 (id=5125):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x20, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x4, 0x1}, @typed={0x4, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
sendto$inet6(r0, &(0x7f0000000180)="e7", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000140)=0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000380)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000d100007910480000000000630000000000000095007400000000003942c5d3"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)

0s ago: executing program 1 (id=5126):
r0 = socket$inet(0x2, 0x6, 0x6)
setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000080)="cb0fcc910df9220fc6bd73432df9b66e05c26dd84c8afe3a4570cb46605169894bdd20ae5f44452130d187ec575d0fb434248e65aa113ec4e8ab", 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r2)
r4 = socket(0x10, 0x80003, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'wlan0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x7, 0x7}})
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0)
sendmsg$FOU_CMD_GET(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000000)=ANY=[@ANYBLOB="ffff9500", @ANYRES16=r3, @ANYBLOB="0508000000000000000003000000050002000a00000014000700fc00000000000000000000000000000114000900fe8000"/62], 0x44}}, 0x0)

kernel console output (not intermixed with test programs):

sabled state
[  356.097915][T17435] bridge_slave_0: entered allmulticast mode
[  356.106088][T17435] bridge_slave_0: entered promiscuous mode
[  356.114725][T17435] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.132687][T17435] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.139979][T17435] bridge_slave_1: entered allmulticast mode
[  356.148395][T17435] bridge_slave_1: entered promiscuous mode
[  356.273904][T17435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  356.304544][T17435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  356.340241][T17466] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  356.507667][T17435] team0: Port device team_slave_0 added
[  356.511014][T17485] netlink: 'syz.1.3230': attribute type 2 has an invalid length.
[  356.567598][T17485] �9: entered promiscuous mode
[  356.576243][T17435] team0: Port device team_slave_1 added
[  356.615983][T17488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3231'.
[  356.691876][T17435] batman_adv: batadv0: Adding interface: batadv_slave_0
[  356.698861][T17435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  356.727166][T17435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  356.745610][T17435] batman_adv: batadv0: Adding interface: batadv_slave_1
[  356.753355][T17435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  356.780589][T17435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  356.806580][T17490] syzkaller0: entered promiscuous mode
[  356.829837][T17490] syzkaller0: entered allmulticast mode
[  356.862318][T17497] syzkaller1: entered promiscuous mode
[  356.867828][T17497] syzkaller1: entered allmulticast mode
[  356.968945][T17509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3236'.
[  356.996893][T17435] hsr_slave_0: entered promiscuous mode
[  357.012882][T17435] hsr_slave_1: entered promiscuous mode
[  357.033294][T17435] debugfs: 'hsr0' already exists in 'hsr'
[  357.037836][T17513] ip6t_rpfilter: unknown options
[  357.039344][T17435] Cannot create hsr debugfs directory
[  357.231932][T17527] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3240'.
[  357.259721][T17516] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3239'.
[  357.473705][T17435] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.520934][T17541] tipc: Started in network mode
[  357.528007][T17541] tipc: Node identity 9ee6621869d7, cluster identity 4711
[  357.538457][T17541] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  357.560696][T17543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3247'.
[  357.564238][T17435] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.591021][T17541] syzkaller0: entered promiscuous mode
[  357.598770][T17541] syzkaller0: entered allmulticast mode
[  357.612458][   T52] Bluetooth: hci5: command tx timeout
[  357.624531][T17546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3247'.
[  357.660047][T17435] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.694552][T17541] syzkaller0: mtu less than device minimum
[  357.708786][T17540] tipc: Resetting bearer <eth:syzkaller0>
[  357.733105][T17540] tipc: Disabling bearer <eth:syzkaller0>
[  357.755118][T17435] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.944058][T17557] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3251'.
[  357.953827][T17557] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3251'.
[  357.966793][T17557] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3251'.
[  357.978720][T17435] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  358.042055][T17435] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  358.099551][T17435] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  358.128233][T17435] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  358.136553][T17565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3254'.
[  358.163892][T17564] gtp0: entered promiscuous mode
[  358.169624][T17564] gtp0: entered allmulticast mode
[  358.203248][T17574] pim6reg: entered allmulticast mode
[  358.380636][T17435] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.426752][T17584] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  358.436878][T17435] 8021q: adding VLAN 0 to HW filter on device team0
[  358.470074][ T7264] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.477551][ T7264] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.517234][ T7264] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.524550][ T7264] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.536872][T17589] netlink: 'syz.4.3261': attribute type 11 has an invalid length.
[  358.612795][T17593] netlink: 'syz.3.3260': attribute type 12 has an invalid length.
[  358.922145][T17609] netlink: 'syz.4.3266': attribute type 1 has an invalid length.
[  358.948707][T17609] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  358.966714][T17435] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.128620][T17435] veth0_vlan: entered promiscuous mode
[  359.150772][T17621] 8021q: VLANs not supported on ip_vti0
[  359.170439][T17435] veth1_vlan: entered promiscuous mode
[  359.215046][T17626] netlink: 'syz.4.3271': attribute type 3 has an invalid length.
[  359.363616][T17435] veth0_macvtap: entered promiscuous mode
[  359.390778][T17435] veth1_macvtap: entered promiscuous mode
[  359.447671][T17435] batman_adv: batadv0: Interface activated: batadv_slave_0
[  359.490995][T17435] batman_adv: batadv0: Interface activated: batadv_slave_1
[  359.566372][ T1166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  359.604696][ T1166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  359.642207][ T1166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  359.668872][ T1166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  359.704345][   T52] Bluetooth: hci5: command tx timeout
[  359.869018][ T7269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.899425][ T7269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.981917][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.989778][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  360.080610][T17675] team_slave_0: entered promiscuous mode
[  360.086471][T17675] team_slave_1: entered promiscuous mode
[  360.104385][T17675] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  360.112374][T17675] team0: Device macvtap1 is already an upper device of the team interface
[  360.125418][T17675] team_slave_0: left promiscuous mode
[  360.130953][T17675] team_slave_1: left promiscuous mode
[  360.403262][T17697] gretap1: entered promiscuous mode
[  360.662813][T17711] netlink: 'syz.0.3296': attribute type 29 has an invalid length.
[  360.698520][T17711] netlink: 'syz.0.3296': attribute type 29 has an invalid length.
[  360.706935][T17713] netlink: 'syz.3.3297': attribute type 20 has an invalid length.
[  360.778114][T17723] netlink: 'syz.3.3297': attribute type 20 has an invalid length.
[  361.003466][T17744] macvtap1: entered promiscuous mode
[  361.008921][T17744] vlan0: entered promiscuous mode
[  361.015655][T17744] macvtap1: entered allmulticast mode
[  361.021194][T17744] vlan0: entered allmulticast mode
[  361.028387][T17744] veth0_vlan: entered allmulticast mode
[  361.042046][T17723] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  361.144820][T17744] macvtap2: entered promiscuous mode
[  361.173112][T17744] macvtap2: entered allmulticast mode
[  361.747411][T17834] siw: device registration error -23
[  361.772217][   T52] Bluetooth: hci5: command tx timeout
[  361.806223][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  361.815649][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  361.824190][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  361.832804][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  361.840505][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  362.415803][ T7269] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  362.542096][ T7269] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  362.592341][ T7269] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.653393][ T7269] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  363.058248][ T7269] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  363.085922][ T7269] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  363.115174][ T7269] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.128446][ T7269] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  363.193739][T17884] xt_time: unknown flags 0xf4
[  363.232452][T17829] lo speed is unknown, defaulting to 1000
[  363.370468][T17891] __nla_validate_parse: 17 callbacks suppressed
[  363.370487][T17891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3322'.
[  363.390653][ T7269] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  363.417094][ T7269] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  363.436348][ T7269] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.455872][ T7269] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  363.765917][ T7269] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  363.782392][ T7269] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  363.803839][ T7269] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.836377][ T7269] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  363.851602][ T5844] Bluetooth: hci5: command tx timeout
[  363.936007][ T5844] Bluetooth: hci0: command tx timeout
[  363.948170][T17901] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3323'.
[  364.022204][T17911] tipc: Can't bind to reserved service type 0
[  364.374284][T17918] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  364.571103][T17829] chnl_net:caif_netlink_parms(): no params data found
[  364.775239][T17936] syzkaller1: entered promiscuous mode
[  364.780868][T17936] syzkaller1: entered allmulticast mode
[  364.813827][ T7269] bridge_slave_1: left allmulticast mode
[  364.819549][ T7269] bridge_slave_1: left promiscuous mode
[  364.826092][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.854074][ T7269] bridge_slave_0: left allmulticast mode
[  364.860026][ T7269] bridge_slave_0: left promiscuous mode
[  364.866472][ T7269] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.398476][ T7269] bond1 (unregistering): (slave gretap2): Releasing active interface
[  365.418084][ T7269] bond4 (unregistering): (slave gretap3): Releasing active interface
[  365.426736][ T7269] gretap3 (unregistering): left promiscuous mode
[  365.433364][ T7269] gretap3 (unregistering): left allmulticast mode
[  365.465159][ T7269] bond5 (unregistering): (slave gre1): Releasing backup interface
[  365.473186][ T7269] gre1 (unregistering): left promiscuous mode
[  365.523920][ T7269] bond9 (unregistering): (slave geneve2): Releasing active interface
[  365.932050][ T7269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  365.941164][ T7269] bond_slave_0: left promiscuous mode
[  365.949193][ T7269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  365.961562][ T7269] bond_slave_1: left promiscuous mode
[  365.968786][ T7269] bond0 (unregistering): (slave team0): Releasing backup interface
[  365.977599][ T7269] team0: left promiscuous mode
[  365.982666][ T7269] team_slave_0: left promiscuous mode
[  365.988164][ T7269] team_slave_1: left promiscuous mode
[  365.996489][ T7269] bond0 (unregistering): Released all slaves
[  366.021765][ T5844] Bluetooth: hci0: command tx timeout
[  366.126758][ T7269] bond1 (unregistering): Released all slaves
[  366.261613][ T7269] bond2 (unregistering): Released all slaves
[  366.363243][ T7269] bond3 (unregistering): Released all slaves
[  366.465866][ T7269] bond4 (unregistering): Released all slaves
[  366.567093][ T7269] bond5 (unregistering): Released all slaves
[  366.657882][ T7269] bond6 (unregistering): Released all slaves
[  366.752766][ T7269] bond7 (unregistering): Released all slaves
[  366.843904][ T7269] bond8 (unregistering): (slave veth1): Releasing active interface
[  366.852107][ T7269] veth1: left allmulticast mode
[  366.859298][ T7269] bond8 (unregistering): (slave veth7): Releasing active interface
[  366.869143][ T7269] bond8 (unregistering): Released all slaves
[  366.958787][ T7269] bond9 (unregistering): Released all slaves
[  367.048559][ T7269] bond10 (unregistering): Released all slaves
[  367.062905][ T7269] bond11 (unregistering): Released all slaves
[  367.114351][T17969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  367.216386][ T7269] bond12 (unregistering): Released all slaves
[  367.334884][T17946] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3333'.
[  367.572964][ T7269] tipc: Left network mode
[  367.613512][ T7269] IPVS: stopping backup sync thread 11831 ...
[  367.636420][T17829] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.651499][T17829] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.679406][T17829] bridge_slave_0: entered allmulticast mode
[  367.703172][T17829] bridge_slave_0: entered promiscuous mode
[  367.714710][T17988] syz_tun: entered allmulticast mode
[  367.768788][T17829] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.781577][T17829] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.799073][T17829] bridge_slave_1: entered allmulticast mode
[  367.813226][T17829] bridge_slave_1: entered promiscuous mode
[  367.832748][T17982] syz_tun: left allmulticast mode
[  367.923734][T17990] sctp: [Deprecated]: syz.3.3341 (pid 17990) Use of struct sctp_assoc_value in delayed_ack socket option.
[  367.923734][T17990] Use struct sctp_sack_info instead
[  367.951532][T18008] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  368.000100][T17990] sctp: [Deprecated]: syz.3.3341 (pid 17990) Use of struct sctp_assoc_value in delayed_ack socket option.
[  368.000100][T17990] Use struct sctp_sack_info instead
[  368.093367][ T5844] Bluetooth: hci0: command tx timeout
[  368.226733][T17829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  368.266082][T18016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  368.273840][T18017] syzkaller0: entered promiscuous mode
[  368.285925][T18017] syzkaller0: entered allmulticast mode
[  368.317738][T17829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.453584][T17829] team0: Port device team_slave_0 added
[  368.523205][T17829] team0: Port device team_slave_1 added
[  368.739355][T18011] tipc: Resetting bearer <eth:syzkaller0>
[  368.768839][T18011] tipc: Disabling bearer <eth:syzkaller0>
[  368.847804][T17829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  368.864151][T17829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  368.895707][T17829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.923899][T18052] bond0: entered promiscuous mode
[  368.930368][T18052] bond_slave_0: entered promiscuous mode
[  368.938548][T18052] bond_slave_1: entered promiscuous mode
[  368.949036][T17829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.976431][T17829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  369.003708][T18056] netlink: 'syz.1.3357': attribute type 1 has an invalid length.
[  369.020767][T17829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  369.029793][T18056] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3357'.
[  369.051897][   T56] block nbd0: Possible stuck request ffff888025470000: control (read@0,1024B). Runtime 270 seconds
[  369.074248][   T56] block nbd0: Possible stuck request ffff8880254701c0: control (read@1024,1024B). Runtime 270 seconds
[  369.085696][T18055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3357'.
[  369.085968][   T56] block nbd0: Possible stuck request ffff888025470380: control (read@2048,1024B). Runtime 270 seconds
[  369.106246][   T56] block nbd0: Possible stuck request ffff888025470540: control (read@3072,1024B). Runtime 270 seconds
[  369.112356][T18056] NCSI netlink: No device for ifindex 0
[  369.478593][ T5961] IPVS: starting estimator thread 0...
[  369.501917][T18087] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20001
[  369.509167][T18083] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20001
[  369.517763][T18087] IPVS: rr: FWM 3 0x00000003 - no destination available
[  369.536463][T17829] hsr_slave_0: entered promiscuous mode
[  369.544953][T17829] hsr_slave_1: entered promiscuous mode
[  369.554268][T17829] debugfs: 'hsr0' already exists in 'hsr'
[  369.572266][T18088] IPVS: using max 28 ests per chain, 67200 per kthread
[  369.580763][T17829] Cannot create hsr debugfs directory
[  369.757547][ T7269] hsr_slave_0: left promiscuous mode
[  369.769758][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.778923][ T7269] batman_adv: batadv0: Removing interface: batadv_slave_0
[  369.788288][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  369.796714][ T7269] batman_adv: batadv0: Removing interface: batadv_slave_1
[  369.837039][ T7269] veth0_macvtap: left promiscuous mode
[  369.843182][ T7269] �
: left promiscuous mode
[  369.847839][ T7269] veth0_vlan: left promiscuous mode
[  370.181682][ T5844] Bluetooth: hci0: command tx timeout
[  370.600202][ T7269] team0 (unregistering): Port device team_slave_1 removed
[  370.638786][ T7269] team0 (unregistering): Port device team_slave_0 removed
[  370.937797][ T7269] ������Z7nz>RA� (unregistering): left allmulticast mode
[  371.130351][T18122] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3373'.
[  371.193876][T18127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3374'.
[  371.210129][T18127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3374'.
[  371.321996][ T7269] IPVS: stop unused estimator thread 0...
[  371.427573][T18141] bridge_slave_0: invalid flags given to default FDB implementation
[  371.726178][T18157] lo: entered allmulticast mode
[  371.748266][T18157] lo: left allmulticast mode
[  372.116514][T17829] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  372.136799][T17829] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  372.225123][T18174] bond1: option min_links: invalid value (18446744073709551614)
[  372.257718][T18174] bond1: option min_links: allowed values 0 - 2147483647
[  372.274143][T18174] bond1 (unregistering): Released all slaves
[  372.321701][T17829] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  372.336911][T17829] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  372.370867][T18186] netlink: 'syz.3.3390': attribute type 30 has an invalid length.
[  372.404375][T18186] bond2: option arp_missed_max: invalid value (0)
[  372.416743][T18186] bond2: option arp_missed_max: allowed values 1 - 255
[  372.443486][T18186] bond2 (unregistering): Released all slaves
[  372.654878][T18200] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3393'.
[  372.761671][T17829] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.792568][T17829] 8021q: adding VLAN 0 to HW filter on device team0
[  372.808239][ T7269] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.815458][ T7269] bridge0: port 1(bridge_slave_0) entered forwarding state
[  372.840513][ T7269] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.847730][ T7269] bridge0: port 2(bridge_slave_1) entered forwarding state
[  373.234017][T18238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3400'.
[  373.285724][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3401'.
[  373.295899][T18236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3401'.
[  373.323126][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3400'.
[  373.340940][T17829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.495872][T17829] veth0_vlan: entered promiscuous mode
[  373.573134][T17829] veth1_vlan: entered promiscuous mode
[  373.686770][T18258] xt_hashlimit: overflow, rate too high: 0
[  373.689423][T17829] veth0_macvtap: entered promiscuous mode
[  373.721941][T17829] veth1_macvtap: entered promiscuous mode
[  373.892650][T18268] netlink: 'syz.1.3411': attribute type 10 has an invalid length.
[  373.974327][T18268] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.992242][T18268] bridge_slave_1: left allmulticast mode
[  374.013881][T18268] bridge_slave_1: left promiscuous mode
[  374.021951][T18268] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.046117][T18268] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  374.090236][T18276] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  374.161163][T18278] __nla_validate_parse: 2 callbacks suppressed
[  374.161179][T18278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3415'.
[  374.318732][T18281] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.3416'.
[  374.775353][T18284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3417'.
[  374.827226][T18285] Bluetooth: MGMT ver 1.23
[  375.843418][T17829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  375.856639][T17829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  375.905455][ T7269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.932542][ T7269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.953518][ T7269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.988925][ T7269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.020155][T18291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3420'.
[  376.052604][T18291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3420'.
[  376.108719][T18297] netlink: 'syz.0.3421': attribute type 33 has an invalid length.
[  376.117406][T18297] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3421'.
[  376.179251][T18288] vlan0 (unregistering): left allmulticast mode
[  376.186220][T18288] veth0_vlan (unregistering): left allmulticast mode
[  376.193345][T18288] vlan0 (unregistering): left promiscuous mode
[  376.449586][T17858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  376.470555][T17858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  376.649136][ T7269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  376.668499][ T7269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  376.727611][T18317] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3426'.
[  376.826225][T18326] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3428'.
[  377.072619][T18340] netlink: 'syz.3.3433': attribute type 5 has an invalid length.
[  377.087263][T18345] netlink: 'syz.4.3431': attribute type 10 has an invalid length.
[  377.096024][T18345] batadv0: entered allmulticast mode
[  377.106204][T18345] 8021q: adding VLAN 0 to HW filter on device batadv0
[  377.122130][T18345] batadv0: entered promiscuous mode
[  377.129641][T18345] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  377.192974][T18345] netlink: 'syz.4.3431': attribute type 10 has an invalid length.
[  377.231328][T18345] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3431'.
[  377.250594][T18345] bond0: (slave batadv0): Releasing backup interface
[  377.284934][T18345] bridge0: port 3(batadv0) entered blocking state
[  377.295555][T18345] bridge0: port 3(batadv0) entered disabled state
[  377.328851][T18355] tipc: Started in network mode
[  377.345098][T18355] tipc: Node identity 1a149cbae45, cluster identity 4711
[  377.369893][T18355] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  377.415840][T18356] syzkaller0: entered promiscuous mode
[  377.422365][T18356] syzkaller0: entered allmulticast mode
[  377.491515][ T7280] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  377.500859][ T7280] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  377.528744][T18356] tipc: Resetting bearer <eth:syzkaller0>
[  377.573231][T18370] sctp: [Deprecated]: syz.1.3439 (pid 18370) Use of struct sctp_assoc_value in delayed_ack socket option.
[  377.573231][T18370] Use struct sctp_sack_info instead
[  377.596719][T18369] sctp: [Deprecated]: syz.1.3439 (pid 18369) Use of struct sctp_assoc_value in delayed_ack socket option.
[  377.596719][T18369] Use struct sctp_sack_info instead
[  377.624596][T18356] tipc: Disabling bearer <eth:syzkaller0>
[  377.817957][T18381] bridge3: entered promiscuous mode
[  377.843925][T18388] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  377.851063][T18381] bridge3: entered allmulticast mode
[  377.989058][T18396] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  378.041132][T18396] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  378.103473][T18396] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  378.259436][T18416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3451'.
[  378.663497][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  378.758054][T18449] xt_hashlimit: size too large, truncated to 1048576
[  378.778201][T18448] xt_hashlimit: size too large, truncated to 1048576
[  378.824196][T18407] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  378.854624][T18407] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  378.870891][T18407] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  378.925462][T18448] syz.2.3460: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  378.986132][T18448] CPU: 0 UID: 0 PID: 18448 Comm: syz.2.3460 Not tainted syzkaller #0 PREEMPT(full) 
[  378.986157][T18448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  378.986176][T18448] Call Trace:
[  378.986183][T18448]  <TASK>
[  378.986191][T18448]  dump_stack_lvl+0x189/0x250
[  378.986219][T18448]  ? __pfx_dump_stack_lvl+0x10/0x10
[  378.986240][T18448]  ? __pfx__printk+0x10/0x10
[  378.986259][T18448]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  378.986287][T18448]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  378.986310][T18448]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  378.986333][T18448]  warn_alloc+0x214/0x310
[  378.986363][T18448]  ? __pfx_warn_alloc+0x10/0x10
[  378.986394][T18448]  ? __get_vm_area_node+0x28f/0x300
[  378.986422][T18448]  ? htable_create+0x101/0x7a0
[  378.986447][T18448]  __vmalloc_node_range_noprof+0x690/0x12d0
[  378.986497][T18448]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  378.986523][T18448]  ? rcu_is_watching+0x15/0xb0
[  378.986543][T18448]  ? htable_create+0x101/0x7a0
[  378.986577][T18448]  __kvmalloc_node_noprof+0x674/0x910
[  378.986601][T18448]  ? htable_create+0x101/0x7a0
[  378.986618][T18448]  ? hashlimit_pernet+0x23/0x240
[  378.986637][T18448]  ? hashlimit_pernet+0x23/0x240
[  378.986655][T18448]  ? hashlimit_pernet+0x23/0x240
[  378.986681][T18448]  htable_create+0x101/0x7a0
[  378.986709][T18448]  hashlimit_mt_check_common+0x719/0xa10
[  378.986739][T18448]  xt_check_match+0x3d1/0xab0
[  378.986765][T18448]  ? __pfx_xt_check_match+0x10/0x10
[  378.986786][T18448]  ? pcpu_alloc_noprof+0xfdd/0x1720
[  378.986818][T18448]  ? xt_find_match+0x1f7/0x250
[  378.986844][T18448]  translate_table+0x1553/0x2040
[  378.986890][T18448]  ? __pfx_translate_table+0x10/0x10
[  378.986916][T18448]  ? __might_fault+0xb0/0x130
[  378.986957][T18448]  ? _copy_from_user+0x94/0xb0
[  378.986990][T18448]  do_ip6t_set_ctl+0x970/0xce0
[  378.987018][T18448]  ? rcu_is_watching+0x15/0xb0
[  378.987048][T18448]  ? trace_contention_end+0x39/0x120
[  378.987068][T18448]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  378.987118][T18448]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  378.987147][T18448]  ? file_init_path+0x3b/0x590
[  378.987170][T18448]  ? __lock_acquire+0xab9/0xd20
[  378.987192][T18448]  nf_setsockopt+0x26f/0x290
[  378.987218][T18448]  rawv6_setsockopt+0x23b/0x5b0
[  378.987247][T18448]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  378.987264][T18448]  ? aa_sock_opt_perm+0xff/0x1b0
[  378.987289][T18448]  ? sock_common_setsockopt+0x36/0xc0
[  378.987312][T18448]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  378.987336][T18448]  do_sock_setsockopt+0x17c/0x1b0
[  378.987362][T18448]  __x64_sys_setsockopt+0x13f/0x1b0
[  378.987390][T18448]  do_syscall_64+0xfa/0xfa0
[  378.987413][T18448]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.987435][T18448]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.987452][T18448]  ? clear_bhb_loop+0x60/0xb0
[  378.987473][T18448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.987496][T18448] RIP: 0033:0x7ff6dbb8f6c9
[  378.987520][T18448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  378.987534][T18448] RSP: 002b:00007ff6dca81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  378.987553][T18448] RAX: ffffffffffffffda RBX: 00007ff6dbde5fa0 RCX: 00007ff6dbb8f6c9
[  378.987573][T18448] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004
[  378.987584][T18448] RBP: 00007ff6dbc11f91 R08: 0000000000000588 R09: 0000000000000000
[  378.987595][T18448] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000
[  378.987606][T18448] R13: 00007ff6dbde6038 R14: 00007ff6dbde5fa0 R15: 00007ffd7ea93f48
[  378.987636][T18448]  </TASK>
[  378.987992][T18448] Mem-Info:
[  379.150769][T18460] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  379.161326][T18448] active_anon:5169 inactive_anon:0 isolated_anon:0
[  379.161326][T18448]  active_file:2824 inactive_file:39989 isolated_file:0
[  379.161326][T18448]  unevictable:768 dirty:73 writeback:0
[  379.161326][T18448]  slab_reclaimable:11901 slab_unreclaimable:115716
[  379.161326][T18448]  mapped:29097 shmem:1362 pagetables:1051
[  379.161326][T18448]  sec_pagetables:0 bounce:0
[  379.161326][T18448]  kernel_misc_reclaimable:0
[  379.161326][T18448]  free:1306930 free_pcp:12636 free_cma:0
[  379.417610][T18448] Node 0 active_anon:20676kB inactive_anon:0kB active_file:11296kB inactive_file:159752kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116388kB dirty:288kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13620kB pagetables:4052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  379.459098][T18460] bond1 (unregistering): Released all slaves
[  379.463633][T18448] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  379.523998][T18448] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  379.574286][T18448] lowmem_reserve[]: 0 2505 2505 2505 2505
[  379.584252][T18467] dvmrp6: entered allmulticast mode
[  379.589579][T18448] Node 0 DMA32 free:1332416kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20576kB inactive_anon:0kB active_file:11296kB inactive_file:159752kB unevictable:1536kB writepending:288kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:28216kB local_pcp:16340kB free_cma:0kB
[  379.628654][T18448] lowmem_reserve[]: 0 0 0 0 0
[  379.633911][T18448] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  379.669545][T18448] lowmem_reserve[]: 0 0 0 0 0
[  379.685908][T18448] Node 1 Normal free:3891392kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18988kB local_pcp:8804kB free_cma:0kB
[  379.766388][T18448] lowmem_reserve[]: 0 0 0 0 0
[  379.771979][T18448] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  379.787390][T18448] Node 0 DMA32: 1614*4kB (UME) 660*8kB (UM) 265*16kB (UM) 189*32kB (UM) 40*64kB (UME) 34*128kB (UME) 38*256kB (UME) 48*512kB (UME) 27*1024kB (UM) 8*2048kB (UME) 299*4096kB (UM) = 1331976kB
[  379.854587][T18448] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  379.917610][T18448] Node 1 Normal: 188*4kB (UME) 52*8kB (UME) 43*16kB (UME) 166*32kB (UME) 41*64kB (UME) 5*128kB (UME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3891392kB
[  379.973299][T18500] netlink: 'syz.1.3474': attribute type 10 has an invalid length.
[  379.974783][T18498] IPVS: Error connecting to the multicast addr
[  379.981611][T18500] __nla_validate_parse: 7 callbacks suppressed
[  379.981624][T18500] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3474'.
[  380.000518][T18448] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  380.015265][T18448] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  380.024370][T18499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3473'.
[  380.035042][T18448] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  380.070691][T18448] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  380.094952][T18500] team0: Port device geneve0 added
[  380.125224][T18499] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3473'.
[  380.126234][T18448] 44172 total pagecache pages
[  380.139028][T18448] 0 pages in swap cache
[  380.181810][T18448] Free swap  = 124996kB
[  380.209793][T18448] Total swap = 124996kB
[  380.235028][T18448] 2097051 pages RAM
[  380.238873][T18448] 0 pages HighMem/MovableOnly
[  380.249412][T18513] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3478'.
[  380.264827][T18448] 424119 pages reserved
[  380.269025][T18448] 0 pages cma reserved
[  380.330160][T18505] netlink: 'syz.4.3476': attribute type 13 has an invalid length.
[  380.339058][T18505] netlink: 'syz.4.3476': attribute type 27 has an invalid length.
[  380.506754][T18528] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3482'.
[  380.560952][T18531] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3484'.
[  380.713614][T18534] Cannot find del_set index 4 as target
[  380.795161][T18538] can: request_module (can-proto-0) failed.
[  381.113201][T18571] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3495'.
[  381.221358][T18583] netlink: 'syz.4.3498': attribute type 7 has an invalid length.
[  381.257890][T18583] netlink: 'syz.4.3498': attribute type 7 has an invalid length.
[  381.291090][T18581] : entered promiscuous mode
[  381.307537][T17858] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  381.323426][T17858] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  381.333188][T17858] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  381.345065][T18587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3496'.
[  381.406798][T17858] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  381.504314][T18598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3499'.
[  381.639090][T18606] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3505'.
[  381.645127][T18611] netlink: 'syz.0.3506': attribute type 1 has an invalid length.
[  381.656590][T18612] veth0: entered promiscuous mode
[  381.793945][T18611] 8021q: adding VLAN 0 to HW filter on device bond1
[  381.875763][T18617] vlan2: entered promiscuous mode
[  381.880841][T18617] bond1: entered promiscuous mode
[  381.895877][T18617] vlan2: entered allmulticast mode
[  381.901039][T18617] bond1: entered allmulticast mode
[  381.907415][T18612] veth0: left promiscuous mode
[  381.952520][T18611] bond1: (slave gretap1): making interface the new active one
[  381.960452][T18611] gretap1: entered promiscuous mode
[  381.969344][T18611] gretap1: entered allmulticast mode
[  381.987734][T18611] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  382.041002][T18611] syz.0.3506 (18611) used greatest stack depth: 17768 bytes left
[  382.041190][T18633] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  382.057064][T18633] batman_adv: batadv0: Removing interface: batadv_slave_0
[  382.067717][T18633] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  382.077692][T18633] batman_adv: batadv0: Removing interface: batadv_slave_1
[  382.103962][T18633] bridge0: port 3(batadv0) entered disabled state
[  382.145150][T18637] Bluetooth: MGMT ver 1.23
[  382.824503][T18677] tipc: Started in network mode
[  382.837248][T18677] tipc: Node identity 7a11cf55e974, cluster identity 4711
[  382.839301][T18681] netlink: 'syz.2.3523': attribute type 1 has an invalid length.
[  382.853886][T18677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  382.876651][T18677] syzkaller0: entered promiscuous mode
[  382.883686][T18677] syzkaller0: entered allmulticast mode
[  382.946035][T18677] tipc: Resetting bearer <eth:syzkaller0>
[  382.963788][T18676] tipc: Resetting bearer <eth:syzkaller0>
[  382.992177][T18676] tipc: Disabling bearer <eth:syzkaller0>
[  383.288431][T18713] netlink: 'syz.2.3532': attribute type 10 has an invalid length.
[  383.373437][T18713] team0: Port device geneve0 added
[  383.420331][T18722] netlink: 'syz.0.3533': attribute type 1 has an invalid length.
[  383.908396][T18751] veth7: entered allmulticast mode
[  383.993950][T18748] syzkaller0: entered promiscuous mode
[  383.999538][T18748] syzkaller0: entered allmulticast mode
[  384.266899][T18770] sctp: [Deprecated]: syz.4.3548 (pid 18770) Use of int in max_burst socket option deprecated.
[  384.266899][T18770] Use struct sctp_assoc_value instead
[  384.470884][T18775] xt_hashlimit: invalid interval
[  385.574296][T18787] sctp: [Deprecated]: syz.3.3554 (pid 18787) Use of int in max_burst socket option.
[  385.574296][T18787] Use struct sctp_assoc_value instead
[  385.633695][T18785] 8021q: adding VLAN 0 to HW filter on device bond1
[  385.681056][T18791] vlan2: entered allmulticast mode
[  385.699298][T18791] bond1: entered allmulticast mode
[  385.725703][T18795] __nla_validate_parse: 11 callbacks suppressed
[  385.725722][T18795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3557'.
[  385.755379][T18798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3556'.
[  385.777719][T18785] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3553'.
[  385.817965][T18791] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  385.827215][T18785] veth1_to_hsr: entered allmulticast mode
[  385.834680][T18804] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.862063][T18804] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check.
[  385.885605][T18804] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.914667][T18807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3559'.
[  385.926143][T18784] tipc: Disabling bearer <eth:syzkaller0>
[  385.986000][T18807] 8021q: adding VLAN 0 to HW filter on device bond2
[  386.010097][T18804] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check.
[  386.119911][T18820] xt_l2tp: invalid flags combination: 0
[  386.398278][T18851] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  386.426104][T18851] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  386.668019][T18864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3570'.
[  386.773561][T18874] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3573'.
[  387.105231][T18880] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3575'.
[  387.307322][T18896] ieee802154 phy1 wpan1: encryption failed: -22
[  387.834655][T18932] sch_fq: defrate 0 ignored.
[  387.990177][T18941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3592'.
[  388.820633][T19007] �
: renamed from veth1_vlan (while UP)
[  388.851179][T19011] netlink: 'syz.3.3613': attribute type 10 has an invalid length.
[  388.875976][T19011] bond0: (slave wlan1): Opening slave failed
[  388.908055][T19011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3613'.
[  389.092346][T19009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  389.192033][T19024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3618'.
[  389.260854][T19024] syzkaller0: entered promiscuous mode
[  389.279051][T19024] syzkaller0: entered allmulticast mode
[  389.383615][T19032] netlink: 'syz.4.3621': attribute type 1 has an invalid length.
[  389.466452][T19035] IPv4: Oversized IP packet from 127.202.26.0
[  389.720864][T19046] xt_hashlimit: max too large, truncated to 1048576
[  389.757124][T19052] netlink: 'syz.1.3630': attribute type 29 has an invalid length.
[  389.766369][T19052] netlink: 'syz.1.3630': attribute type 29 has an invalid length.
[  390.106481][T18928] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6
[  390.353318][T19094] syzkaller1: entered promiscuous mode
[  390.369231][T19094] syzkaller1: entered allmulticast mode
[  390.760399][T19117] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.805158][T19117] bridge_slave_1: left allmulticast mode
[  390.823583][T19117] bridge_slave_1: left promiscuous mode
[  390.830971][T19128] xt_hashlimit: size too large, truncated to 1048576
[  390.840875][T19117] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.842636][T19131] __nla_validate_parse: 6 callbacks suppressed
[  390.842651][T19131] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3653'.
[  390.872798][T19117] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  390.950881][T19125] geneve2: entered promiscuous mode
[  390.958034][T19125] geneve2: entered allmulticast mode
[  391.127076][T19149] syzkaller0: entered promiscuous mode
[  391.142180][T19149] syzkaller0: entered allmulticast mode
[  391.200737][T19153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3658'.
[  391.313520][T19157] netlink: 'syz.1.3660': attribute type 10 has an invalid length.
[  391.319416][T19158] pim6reg: entered allmulticast mode
[  391.335702][T19159] pim6reg: left allmulticast mode
[  391.366106][T19165] netlink: 404 bytes leftover after parsing attributes in process `syz.4.3662'.
[  391.375662][T19165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3662'.
[  391.386183][T19165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3662'.
[  391.396378][T19165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3662'.
[  391.497192][T19171] syzkaller0: entered promiscuous mode
[  391.501515][T19173] netlink: 'syz.3.3664': attribute type 1 has an invalid length.
[  391.504237][T19171] syzkaller0: entered allmulticast mode
[  391.547715][T19173] 8021q: adding VLAN 0 to HW filter on device bond2
[  391.583816][T19175] bond2: (slave veth5): Enslaving as an active interface with a down link
[  391.622441][T19173] bond2: (slave veth0_to_bond): making interface the new active one
[  391.631980][T19173] veth0_to_bond: entered promiscuous mode
[  391.638116][T19173] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  391.863731][T19199] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  391.955344][T19202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3671'.
[  392.034153][  T981] IPVS: starting estimator thread 0...
[  392.121418][T19211] IPVS: using max 29 ests per chain, 69600 per kthread
[  392.250067][T19224] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20000
[  392.269598][T19224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3675'.
[  392.324181][T19228] netlink: 288 bytes leftover after parsing attributes in process `syz.0.3677'.
[  392.350571][T19226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3676'.
[  393.183281][T19277] vlan2: entered allmulticast mode
[  393.230695][T19282] batadv1: entered allmulticast mode
[  393.235025][T19289] netlink: 'syz.1.3695': attribute type 39 has an invalid length.
[  393.293961][T19292] netlink: 'syz.1.3695': attribute type 39 has an invalid length.
[  393.497684][T19304] 0: reclassify loop, rule prio 0, protocol 800
[  393.560791][T19308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  393.576805][  T897] lo speed is unknown, defaulting to 1000
[  393.786162][T19325] 8021q: VLANs not supported on ip_vti0
[  394.030653][T19339] netlink: 'syz.0.3713': attribute type 5 has an invalid length.
[  394.150810][T19342] netlink: 'syz.4.3712': attribute type 4 has an invalid length.
[  394.163443][T19344] xt_hashlimit: overflow, try lower: 3/0
[  394.180130][T19336] netlink: 'syz.4.3712': attribute type 4 has an invalid length.
[  394.209745][T19344] netlink: 'syz.1.3715': attribute type 9 has an invalid length.
[  394.223624][T19346] Cannot find add_set index 65532 as target
[  394.483986][T19364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  394.576625][T19375] bridge4: the hash_elasticity option has been deprecated and is always 16
[  395.028405][T19403] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  395.897604][T19470] __nla_validate_parse: 22 callbacks suppressed
[  395.897621][T19470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3750'.
[  396.143202][T19490] SET target dimension over the limit!
[  396.359412][T19503] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3761'.
[  396.479652][T19496] bond2 (unregistering): Released all slaves
[  396.490878][T19516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3763'.
[  396.637151][T19521] netlink: 'syz.4.3766': attribute type 1 has an invalid length.
[  396.827100][T19537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3766'.
[  398.033616][T19521] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  398.076701][T19535] veth9: entered promiscuous mode
[  398.140275][T19542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3772'.
[  398.189973][T19547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3773'.
[  398.199260][T19547] netlink: 'syz.0.3773': attribute type 11 has an invalid length.
[  398.202055][T19549] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3774'.
[  398.242817][T19547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3773'.
[  398.252165][T18928] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  398.264643][T19549] 8021q: VLANs not supported on gre0
[  398.274758][T19547] netlink: 'syz.0.3773': attribute type 11 has an invalid length.
[  398.283671][ T7280] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  398.292768][T19549] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3774'.
[  398.302742][ T7280] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  398.321949][T19549] 8021q: VLANs not supported on gre0
[  398.332647][T19549] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3774'.
[  398.343872][ T7280] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  398.359853][T19549] 8021q: VLANs not supported on gre0
[  398.388141][T19549] 8021q: VLANs not supported on gre0
[  398.403121][T19549] 8021q: VLANs not supported on gre0
[  398.618902][T19549] 8021q: VLANs not supported on gre0
[  398.628640][T19549] 8021q: VLANs not supported on gre0
[  398.636594][T19549] 8021q: VLANs not supported on gre0
[  398.644823][T19549] 8021q: VLANs not supported on gre0
[  398.652279][T19549] 8021q: VLANs not supported on gre0
[  398.735993][T19549] 8021q: VLANs not supported on gre0
[  398.743969][T19549] 8021q: VLANs not supported on gre0
[  398.750774][T19549] 8021q: VLANs not supported on gre0
[  398.761462][T19549] 8021q: VLANs not supported on gre0
[  398.773327][T19549] 8021q: VLANs not supported on gre0
[  398.792246][T19549] 8021q: VLANs not supported on gre0
[  398.798477][T19549] 8021q: VLANs not supported on gre0
[  398.804750][T19549] 8021q: VLANs not supported on gre0
[  398.824815][T19549] 8021q: VLANs not supported on gre0
[  398.856366][T19549] 8021q: VLANs not supported on gre0
[  398.873798][T19549] 8021q: VLANs not supported on gre0
[  398.898342][T19549] 8021q: VLANs not supported on gre0
[  398.935626][T19549] 8021q: VLANs not supported on gre0
[  398.942343][T19549] 8021q: VLANs not supported on gre0
[  398.948688][T19549] 8021q: VLANs not supported on gre0
[  398.956171][T19549] 8021q: VLANs not supported on gre0
[  398.962826][T19549] 8021q: VLANs not supported on gre0
[  398.969129][T19549] 8021q: VLANs not supported on gre0
[  398.982313][T19549] 8021q: VLANs not supported on gre0
[  399.016172][T19549] 8021q: VLANs not supported on gre0
[  399.107320][T19585] syzkaller0: entered allmulticast mode
[  399.127685][T19587] xt_CT: You must specify a L4 protocol and not use inversions on it
[  399.147761][   T56] block nbd0: Possible stuck request ffff888025470000: control (read@0,1024B). Runtime 300 seconds
[  399.168023][   T56] block nbd0: Possible stuck request ffff8880254701c0: control (read@1024,1024B). Runtime 300 seconds
[  399.182500][   T56] block nbd0: Possible stuck request ffff888025470380: control (read@2048,1024B). Runtime 300 seconds
[  399.193644][   T56] block nbd0: Possible stuck request ffff888025470540: control (read@3072,1024B). Runtime 300 seconds
[  399.469009][T19605] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  399.597462][T19617] Bluetooth: MGMT ver 1.23
[  399.870742][T19633] x_tables: ip_tables: icmp match: only valid for protocol 1
[  399.960318][T19640] nbd: illegal input index 2958377
[  399.978800][T19633] sctp: [Deprecated]: syz.3.3798 (pid 19633) Use of int in max_burst socket option.
[  399.978800][T19633] Use struct sctp_assoc_value instead
[  400.518941][T19670] nbd: illegal input index -8454144
[  400.610260][T19680] syz_tun: entered allmulticast mode
[  400.641666][T19677] syz_tun: left allmulticast mode
[  400.916073][T19704] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  400.923984][T19704] syzkaller0: entered promiscuous mode
[  400.929484][T19704] syzkaller0: entered allmulticast mode
[  400.971066][T19704] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  400.995170][T19710] netlink: 'syz.1.3821': attribute type 1 has an invalid length.
[  401.015204][T19711] tipc: Resetting bearer <eth:syzkaller0>
[  401.020922][T19710] __nla_validate_parse: 43 callbacks suppressed
[  401.020938][T19710] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3821'.
[  401.050512][T19699] tipc: Resetting bearer <eth:syzkaller0>
[  401.059235][T19710] netlink: 'syz.1.3821': attribute type 1 has an invalid length.
[  401.095249][T19699] tipc: Disabling bearer <eth:syzkaller0>
[  401.119726][T19713] syzkaller1: entered promiscuous mode
[  401.125425][T19713] syzkaller1: entered allmulticast mode
[  401.340787][T19724] tunl0: entered promiscuous mode
[  401.687885][T19757] �
: renamed from veth1_vlan (while UP)
[  401.714074][T19748] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  401.737019][T19759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3836'.
[  401.751876][T19748] syzkaller0: entered promiscuous mode
[  401.761302][T19748] syzkaller0: entered allmulticast mode
[  401.807735][T19748] tipc: Resetting bearer <eth:syzkaller0>
[  401.845908][T19747] tipc: Resetting bearer <eth:syzkaller0>
[  401.869390][T19768] netlink: 'syz.2.3840': attribute type 21 has an invalid length.
[  401.895474][T19747] tipc: Disabling bearer <eth:syzkaller0>
[  401.938565][T19768] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3840'.
[  402.110686][T19781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3843'.
[  402.128759][T19780] netlink: 'syz.2.3845': attribute type 2 has an invalid length.
[  402.143602][T19780] �9: entered promiscuous mode
[  402.220195][T19790] netlink: 'syz.0.3847': attribute type 1 has an invalid length.
[  402.352720][T19800] netlink: 'syz.2.3849': attribute type 83 has an invalid length.
[  402.490981][T19799] gretap2: entered promiscuous mode
[  402.511452][T19797] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  402.784218][   T50] veth0_to_bond: left promiscuous mode
[  402.982964][T19833] syzkaller0: entered promiscuous mode
[  402.988580][T19833] syzkaller0: entered allmulticast mode
[  403.030992][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3859'.
[  403.559217][T19854] netlink: 'syz.0.3864': attribute type 2 has an invalid length.
[  405.217468][T19903] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  405.230755][T19903] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  405.413214][T19910] netlink: 'syz.1.3886': attribute type 75 has an invalid length.
[  405.805662][T19935] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3894'.
[  405.967511][T19946] netlink: 'syz.2.3898': attribute type 3 has an invalid length.
[  405.982495][T19944] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  406.244432][T19967] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3903'.
[  406.730190][T19983] raw_sendmsg: syz.2.3909 forgot to set AF_INET. Fix it!
[  406.803322][T19989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3910'.
[  406.897253][T19989] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  406.980218][T20000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3915'.
[  407.380799][T20024] lo speed is unknown, defaulting to 1000
[  407.742183][T20045] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  407.750081][T20045] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.946384][T20056] syzkaller0: entered promiscuous mode
[  407.965252][T20056] syzkaller0: entered allmulticast mode
[  408.173533][T20071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3933'.
[  408.467773][T20085] netlink: 'syz.2.3938': attribute type 2 has an invalid length.
[  408.493085][T20097] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3941'.
[  408.681954][T20107] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  408.722981][T20110] netlink: 'syz.3.3944': attribute type 29 has an invalid length.
[  408.753168][T20113] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3945'.
[  408.762354][T20110] netlink: 'syz.3.3944': attribute type 29 has an invalid length.
[  408.762627][T20110] netlink: 'syz.3.3944': attribute type 29 has an invalid length.
[  408.785684][T20114] sch_tbf: burst 127 is lower than device wg1 mtu (1420) !
[  408.869450][T20113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  408.907950][T20113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  408.927649][T20113] bond0 (unregistering): Released all slaves
[  408.985869][T20120] netlink: 'syz.3.3947': attribute type 4 has an invalid length.
[  409.034547][T20120] netlink: 'syz.3.3947': attribute type 4 has an invalid length.
[  409.103785][T20120] xt_TCPMSS: Only works on TCP SYN packets
[  409.113730][T20133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3950'.
[  409.123265][T20120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.130988][T20120] syzkaller0: entered promiscuous mode
[  409.137938][T20135] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3951'.
[  409.138316][T20120] syzkaller0: entered allmulticast mode
[  409.181661][T20119] tipc: Resetting bearer <eth:syzkaller0>
[  409.266952][T20119] tipc: Disabling bearer <eth:syzkaller0>
[  409.273621][T20140] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3952'.
[  409.494108][T20156] delete_channel: no stack
[  409.499056][T20156] netlink: 'syz.1.3958': attribute type 33 has an invalid length.
[  409.639951][T20168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  409.763108][T20162] "syz.0.3959" (20162) uses obsolete ecb(arc4) skcipher
[  409.838805][T20182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3964'.
[  409.884614][T20184] netlink: 'syz.2.3966': attribute type 1 has an invalid length.
[  409.971598][T20187] bond2: (slave ip6gretap1): making interface the new active one
[  410.007442][T20187] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  410.019374][T20187] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  410.029470][T20187] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  410.079178][T20204] syzkaller0: entered promiscuous mode
[  410.087437][T20204] syzkaller0: entered allmulticast mode
[  410.097684][T20199] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) !
[  410.135056][T20206] veth0: entered promiscuous mode
[  410.247981][T20205] veth0: left promiscuous mode
[  410.470541][T20226] xt_CT: You must specify a L4 protocol and not use inversions on it
[  410.865746][T20255] netlink: 'syz.1.3989': attribute type 8 has an invalid length.
[  410.975583][T20263] warn_alloc: 2 callbacks suppressed
[  410.975600][T20263] syz.4.3992: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  411.052041][T20263] CPU: 0 UID: 0 PID: 20263 Comm: syz.4.3992 Not tainted syzkaller #0 PREEMPT(full) 
[  411.052067][T20263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  411.052078][T20263] Call Trace:
[  411.052085][T20263]  <TASK>
[  411.052093][T20263]  dump_stack_lvl+0x189/0x250
[  411.052125][T20263]  ? __pfx_dump_stack_lvl+0x10/0x10
[  411.052147][T20263]  ? __pfx__printk+0x10/0x10
[  411.052166][T20263]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  411.052186][T20263]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  411.052210][T20263]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  411.052233][T20263]  warn_alloc+0x214/0x310
[  411.052255][T20263]  ? stack_depot_save_flags+0x40/0x860
[  411.052281][T20263]  ? __pfx_warn_alloc+0x10/0x10
[  411.052304][T20263]  ? kasan_save_track+0x3e/0x80
[  411.052325][T20263]  ? __kasan_kmalloc+0x93/0xb0
[  411.052350][T20263]  ? xsk_setsockopt+0x4dc/0x8d0
[  411.052367][T20263]  ? do_sock_setsockopt+0x17c/0x1b0
[  411.052383][T20263]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  411.052397][T20263]  ? do_syscall_64+0xfa/0xfa0
[  411.052416][T20263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.052440][T20263]  __vmalloc_node_range_noprof+0x125/0x12d0
[  411.052501][T20263]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  411.052526][T20263]  ? __kasan_kmalloc+0x93/0xb0
[  411.052558][T20263]  vmalloc_user_noprof+0xad/0xf0
[  411.052581][T20263]  ? xskq_create+0xbf/0x170
[  411.052603][T20263]  xskq_create+0xbf/0x170
[  411.052628][T20263]  xsk_init_queue+0xb0/0x110
[  411.052651][T20263]  xsk_setsockopt+0x4dc/0x8d0
[  411.052675][T20263]  ? __pfx_xsk_setsockopt+0x10/0x10
[  411.052698][T20263]  ? __pfx_aa_sk_perm+0x10/0x10
[  411.052724][T20263]  ? aa_sock_opt_perm+0xff/0x1b0
[  411.052750][T20263]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  411.052767][T20263]  ? __pfx_xsk_setsockopt+0x10/0x10
[  411.052789][T20263]  do_sock_setsockopt+0x17c/0x1b0
[  411.052812][T20263]  __x64_sys_setsockopt+0x13f/0x1b0
[  411.052836][T20263]  do_syscall_64+0xfa/0xfa0
[  411.052857][T20263]  ? lockdep_hardirqs_on+0x9c/0x150
[  411.052878][T20263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.052894][T20263]  ? clear_bhb_loop+0x60/0xb0
[  411.052914][T20263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.052930][T20263] RIP: 0033:0x7f6b6838f6c9
[  411.052946][T20263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  411.052961][T20263] RSP: 002b:00007f6b69300038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  411.052980][T20263] RAX: ffffffffffffffda RBX: 00007f6b685e5fa0 RCX: 00007f6b6838f6c9
[  411.052993][T20263] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  411.053003][T20263] RBP: 00007f6b68411f91 R08: 0000000000000004 R09: 0000000000000000
[  411.053013][T20263] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  411.053024][T20263] R13: 00007f6b685e6038 R14: 00007f6b685e5fa0 R15: 00007ffffe946d98
[  411.053055][T20263]  </TASK>
[  411.053087][T20263] Mem-Info:
[  411.351933][T20263] active_anon:5163 inactive_anon:0 isolated_anon:0
[  411.351933][T20263]  active_file:2824 inactive_file:40001 isolated_file:0
[  411.351933][T20263]  unevictable:768 dirty:19 writeback:0
[  411.351933][T20263]  slab_reclaimable:11767 slab_unreclaimable:119602
[  411.351933][T20263]  mapped:29109 shmem:1366 pagetables:1174
[  411.351933][T20263]  sec_pagetables:0 bounce:0
[  411.351933][T20263]  kernel_misc_reclaimable:0
[  411.351933][T20263]  free:1302609 free_pcp:13887 free_cma:0
[  411.429484][T20263] Node 0 active_anon:20452kB inactive_anon:0kB active_file:11296kB inactive_file:159800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116436kB dirty:76kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13628kB pagetables:4544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  411.538861][T20263] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  411.621768][T20263] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  411.661465][T20263] lowmem_reserve[]: 0 2505 2505 2505 2505
[  411.693716][T20263] Node 0 DMA32 free:1302652kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20352kB inactive_anon:0kB active_file:11296kB inactive_file:159800kB unevictable:1536kB writepending:76kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:39692kB local_pcp:18204kB free_cma:0kB
[  411.760872][T20303] netlink: 'syz.2.4003': attribute type 1 has an invalid length.
[  411.785054][T20263] lowmem_reserve[]: 0 0 0 0 0
[  411.792144][T20263] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  411.844653][T20263] lowmem_reserve[]: 0 0 0 0 0
[  411.849497][T20263] Node 1 Normal free:3891912kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18504kB local_pcp:9668kB free_cma:0kB
[  411.957611][T20316] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001
[  411.963442][T20263] lowmem_reserve[]: 0 0 0 0 0
[  411.969664][T20263] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  411.970768][T20316] __nla_validate_parse: 3 callbacks suppressed
[  411.970780][T20316] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4005'.
[  411.991625][T20319] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4008'.
[  412.007596][T20263] Node 0 DMA32: 1471*4kB (UME) 657*8kB (UM) 188*16kB (UM) 211*32kB (UME) 63*64kB (UME) 20*128kB (UM) 33*256kB (UME) 16*512kB (UME) 30*1024kB (UM) 8*2048kB (UME) 296*4096kB (UM) = 1303652kB
[  412.044770][T20263] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  412.071435][T20263] Node 1 Normal: 190*4kB (UME) 52*8kB (UME) 43*16kB (UME) 176*32kB (UME) 44*64kB (UME) 5*128kB (UME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3891912kB
[  412.114319][T20263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  412.152117][T20263] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  412.164349][T20263] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  412.217118][T20328] : entered promiscuous mode
[  412.221300][T20263] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  412.260529][T20263] 44192 total pagecache pages
[  412.287675][T20263] 0 pages in swap cache
[  412.293248][T20263] Free swap  = 124996kB
[  412.297424][T20263] Total swap = 124996kB
[  412.304064][T20263] 2097051 pages RAM
[  412.311935][T20263] 0 pages HighMem/MovableOnly
[  412.316702][T20263] 424119 pages reserved
[  412.323317][T20263] 0 pages cma reserved
[  412.353490][T20339] xt_HMARK: proto mask must be zero with L3 mode
[  412.389674][T20341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4016'.
[  412.713760][T20358] syzkaller1: tun_chr_ioctl cmd 1074025677
[  412.728043][T20358] syzkaller1: Refused to change device type
[  412.764311][T20366] tipc: Enabled bearer <eth:ipvlan1>, priority 2
[  413.091082][T20390] veth0: entered promiscuous mode
[  413.137735][T20397] xt_l2tp: missing protocol rule (udp|l2tpip)
[  413.273806][T20389] veth0: left promiscuous mode
[  413.383452][T20419] veth1_macvtap: left promiscuous mode
[  413.406943][T20419] macsec0: entered promiscuous mode
[  413.429686][T20419] macsec0: entered allmulticast mode
[  413.489591][T20419] veth1_macvtap: entered promiscuous mode
[  413.506765][T20419] veth1_macvtap: entered allmulticast mode
[  413.541431][T20419] macsec0: left promiscuous mode
[  413.565203][T20419] macsec0: left allmulticast mode
[  413.580547][T20419] veth1_macvtap: left allmulticast mode
[  413.809136][T20447] validate_nla: 3 callbacks suppressed
[  413.809155][T20447] netlink: 'syz.4.4050': attribute type 10 has an invalid length.
[  413.856715][T20447] 8021q: adding VLAN 0 to HW filter on device team0
[  413.879427][T20447] team0: entered promiscuous mode
[  413.893672][   T10] tipc: Node number set to 4265909434
[  413.895619][T20447] team_slave_0: entered promiscuous mode
[  413.942044][T20447] team_slave_1: entered promiscuous mode
[  413.948514][T20447] bond0: (slave team0): Enslaving as an active interface with an up link
[  413.986618][T20462] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4055'.
[  414.029516][T20463] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4056'.
[  414.069126][T20462] erspan0: entered promiscuous mode
[  414.096525][T20465] delete_channel: no stack
[  414.236096][T20480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4063'.
[  414.239839][T20479] xt_ecn: cannot match TCP bits for non-tcp packets
[  414.246518][T20480] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4063'.
[  414.283786][T20479] xt_hashlimit: size too large, truncated to 1048576
[  414.404486][T20492] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4064'.
[  414.417681][T20496] ieee802154 phy1 wpan1: encryption failed: -22
[  414.522103][T20498] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4068'.
[  414.578904][T20506] netlink: 'syz.1.4072': attribute type 10 has an invalid length.
[  414.872647][T20530] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  414.918281][T20536] netem: change failed
[  414.999161][T20545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4081'.
[  415.026305][T20548] netlink: 'syz.4.4083': attribute type 15 has an invalid length.
[  415.242414][T20553] batadv_slave_1: entered promiscuous mode
[  415.271546][T20552] batadv_slave_1: left promiscuous mode
[  416.173139][T20618] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  416.198858][T20629] IPVS: set_ctl: invalid protocol: 41 172.30.0.4:20001
[  416.296236][T20634] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20002
[  416.639522][T20648] netlink: 'syz.2.4115': attribute type 13 has an invalid length.
[  416.973160][T20685] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  416.982168][T20685] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  416.992482][T20685] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  417.299241][T20704] __nla_validate_parse: 7 callbacks suppressed
[  417.299260][T20704] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4129'.
[  417.357940][T20709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4131'.
[  417.396433][T20710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4130'.
[  417.498116][T20718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4134'.
[  417.502965][T20719] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4135'.
[  417.724531][T20731] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4142'.
[  417.748794][T20731] tipc: Started in network mode
[  417.758843][T20731] tipc: Node identity ac14140f, cluster identity 4711
[  417.768514][T20735] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.4140'.
[  417.769124][T20731] tipc: New replicast peer: 255.255.255.255
[  417.787464][T20731] tipc: Enabled bearer <udp:syz0>, priority 10
[  417.982614][T20749] netlink: 'syz.2.4146': attribute type 1 has an invalid length.
[  418.042520][T20749] 8021q: adding VLAN 0 to HW filter on device bond3
[  418.057812][T20754] vlan2: entered promiscuous mode
[  418.063927][T20754] geneve1: entered promiscuous mode
[  418.069356][T20754] vlan2: entered allmulticast mode
[  418.075561][T20754] geneve1: entered allmulticast mode
[  418.090726][T20756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4146'.
[  418.100058][T20756] netlink: 'syz.2.4146': attribute type 22 has an invalid length.
[  418.101456][T20755] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  418.112137][T20756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4146'.
[  418.148826][T20753] tipc: Disabling bearer <eth:syzkaller0>
[  418.196984][ T1093] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  418.207045][ T1093] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  418.221678][ T1093] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  418.230709][ T1093] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  418.345471][T20767] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4150'.
[  418.366748][T20767] netlink: 'syz.4.4150': attribute type 1 has an invalid length.
[  418.392940][T20767] 8021q: adding VLAN 0 to HW filter on device bond3
[  418.406071][T20769] team0: Caught tx_queue_len zero misconfig
[  418.537355][T20775] lo: Caught tx_queue_len zero misconfig
[  418.681911][T20777] netlink: 'syz.0.4154': attribute type 6 has an invalid length.
[  418.701713][T20778] netlink: 'syz.0.4154': attribute type 10 has an invalid length.
[  418.711170][T20778] veth1_macvtap: left promiscuous mode
[  418.887266][T20791] netlink: 'syz.1.4158': attribute type 30 has an invalid length.
[  418.901323][ T5923] tipc: Node number set to 2886997007
[  419.334800][T20817] netlink: 'syz.4.4163': attribute type 3 has an invalid length.
[  419.391507][T20816] netlink: 'syz.4.4163': attribute type 3 has an invalid length.
[  419.597070][T20832] 8021q: adding VLAN 0 to HW filter on device bond4
[  419.644249][T20841] bridge0: entered promiscuous mode
[  419.651437][T20841] macsec1: entered promiscuous mode
[  419.656831][T20841] macsec1: entered allmulticast mode
[  419.672471][T20841] bridge0: entered allmulticast mode
[  419.698096][T20841] bridge0: port 2(macsec1) entered blocking state
[  419.717300][T20841] bridge0: port 2(macsec1) entered disabled state
[  419.738019][T20841] bridge0: left allmulticast mode
[  419.749108][T20841] bridge0: left promiscuous mode
[  419.918923][T20858] netlink: 'syz.0.4177': attribute type 1 has an invalid length.
[  419.964141][T20862] smc: net device vcan0 applied user defined pnetid SYZ1
[  420.146320][T20877] netlink: 'syz.0.4181': attribute type 1 has an invalid length.
[  420.154543][T20877] netlink: 'syz.0.4181': attribute type 3 has an invalid length.
[  420.165754][T20877] netlink: 'syz.0.4181': attribute type 7 has an invalid length.
[  420.174079][T20877] netlink: 'syz.0.4181': attribute type 8 has an invalid length.
[  420.203443][T20879] tc_dump_action: action bad kind
[  420.693419][T20905] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  420.721958][T20905] syzkaller0: entered promiscuous mode
[  420.727487][T20905] syzkaller0: entered allmulticast mode
[  420.775498][T20909] nbd: must specify an index to disconnect
[  420.792814][T20905] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  420.813258][T20909] nbd: illegal input index -8454144
[  420.853888][T20905] sch_tbf: burst 1491 is lower than device syzkaller0 mtu (1514) !
[  420.865334][T20905] tipc: Resetting bearer <eth:syzkaller0>
[  420.890316][T20904] tipc: Resetting bearer <eth:syzkaller0>
[  420.925869][T20904] tipc: Disabling bearer <eth:syzkaller0>
[  420.970193][T20923] netlink: 'syz.3.4197': attribute type 15 has an invalid length.
[  421.243058][T20945] netlink: 'syz.3.4205': attribute type 25 has an invalid length.
[  421.429693][T20961] openvswitch: netlink: Missing valid actions attribute.
[  421.472044][T20961] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  421.992200][T20997] bond0: entered allmulticast mode
[  422.001862][T20997] 8021q: adding VLAN 0 to HW filter on device bond0
[  422.010227][T20997] bridge0: port 3(bond0) entered blocking state
[  422.017699][T20997] bridge0: port 3(bond0) entered disabled state
[  422.027222][T20997] bond0: entered promiscuous mode
[  422.033682][T20997] bridge0: port 3(bond0) entered blocking state
[  422.040148][T20997] bridge0: port 3(bond0) entered forwarding state
[  422.067352][T21003] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  422.218124][  T897] IPVS: starting estimator thread 0...
[  422.225006][T21015] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  422.311787][T21016] IPVS: using max 31 ests per chain, 74400 per kthread
[  422.424325][ T1093] bridge0: port 3(bond0) entered disabled state
[  422.460530][T21025] syzkaller0: entered promiscuous mode
[  422.479858][T21025] syzkaller0: entered allmulticast mode
[  422.494058][T21025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  422.583081][T21038] Cannot find set identified by id 1 to match
[  422.613367][T21040] __nla_validate_parse: 16 callbacks suppressed
[  422.613381][T21040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4234'.
[  422.642819][T21043] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4235'.
[  422.676777][T21043] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4235'.
[  422.948361][T21064] : entered promiscuous mode
[  423.004760][T21069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4243'.
[  423.114162][T21074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4244'.
[  423.144721][T21074] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4244'.
[  423.154437][T21074] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4244'.
[  423.167222][T21074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4244'.
[  423.176738][T21074] bridge_slave_1: left allmulticast mode
[  423.182858][T21074] bridge_slave_1: left promiscuous mode
[  423.188963][T21074] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.212325][T21074] bridge_slave_0: left allmulticast mode
[  423.227478][T21074] bridge_slave_0: left promiscuous mode
[  423.263637][T21074] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.537858][T21105] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4254'.
[  423.581467][T21105] syzkaller1: entered promiscuous mode
[  423.601801][T21105] syzkaller1: entered allmulticast mode
[  423.844576][T21126] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.4260'.
[  423.879465][T21126] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  424.303753][T21148] validate_nla: 11 callbacks suppressed
[  424.303771][T21148] netlink: 'syz.0.4268': attribute type 4 has an invalid length.
[  424.355828][T21151] netlink: 'syz.0.4268': attribute type 4 has an invalid length.
[  424.490284][T21157] netlink: 'syz.1.4272': attribute type 1 has an invalid length.
[  424.810841][T21184] veth9: entered promiscuous mode
[  424.849681][T21185] veth9: entered promiscuous mode
[  424.904265][T21184] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  424.916356][T21184] bond4 (unregistering): Released all slaves
[  424.979244][T21195] sctp: Trying to GSO but underlying device doesn't support it.
[  425.061964][T21197] "syz.2.4286" (21197) uses obsolete ecb(arc4) skcipher
[  425.365571][T21222] netlink: 'syz.2.4292': attribute type 1 has an invalid length.
[  425.409336][T21224] bond5 (unregistering): Released all slaves
[  425.497627][T21228] ip6tnl1: entered promiscuous mode
[  425.504777][T21228] ip6tnl1: entered allmulticast mode
[  425.532706][   T52] Bluetooth: hci0: command 0x0405 tx timeout
[  425.578394][T21241] netlink: 'syz.3.4294': attribute type 5 has an invalid length.
[  425.589131][T21224] bond5 (unregistering): Released all slaves
[  425.727918][T21224] bond5 (unregistering): Released all slaves
[  425.845759][T21224] bond5 (unregistering): Released all slaves
[  425.979932][T21224] bond5 (unregistering): Released all slaves
[  426.164257][T21224] bond5 (unregistering): Released all slaves
[  426.434786][T21299] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0
[  426.536595][T21297] bond5: ARP target 1.0.0.0 is already present
[  426.575979][T21297] bond5: option arp_ip_target: invalid value (1)
[  426.585097][T21297] bond5 (unregistering): Released all slaves
[  426.766979][T21314] tipc: New replicast peer: 255.255.255.255
[  426.789108][T21314] tipc: Enabled bearer <udp:s>, priority 10
[  427.618381][   T52] Bluetooth: hci0: command 0x0405 tx timeout
[  427.736463][T21389] __nla_validate_parse: 19 callbacks suppressed
[  427.736481][T21389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4329'.
[  427.845270][T21401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4334'.
[  427.877120][T21399] tipc: Started in network mode
[  427.884040][T21399] tipc: Node identity 963c0a07d375, cluster identity 4711
[  427.902692][T21399] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  427.910512][T21399] syzkaller0: entered promiscuous mode
[  427.956984][T21399] syzkaller0: entered allmulticast mode
[  428.034019][T21399] tipc: Resetting bearer <eth:syzkaller0>
[  428.107454][T21408] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  428.137192][T21408] bond4 (unregistering): Released all slaves
[  428.188593][T21398] tipc: Resetting bearer <eth:syzkaller0>
[  428.276076][T21398] tipc: Disabling bearer <eth:syzkaller0>
[  428.433791][T21428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4342'.
[  428.538971][T21428] netlink: 'syz.2.4342': attribute type 1 has an invalid length.
[  428.585146][T21428] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4342'.
[  428.774545][T21452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4350'.
[  429.015832][T21473] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4355'.
[  429.037565][T21471] atomic_op ffff88807b0ea198 conn xmit_atomic 0000000000000000
[  429.047604][T21473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4355'.
[  429.060508][T21473] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4355'.
[  429.070840][T21473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4355'.
[  429.080288][T21473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4355'.
[  429.176428][T21477] netlink: 'syz.3.4357': attribute type 1 has an invalid length.
[  429.215491][   T56] block nbd0: Possible stuck request ffff888025470000: control (read@0,1024B). Runtime 330 seconds
[  429.226375][   T56] block nbd0: Possible stuck request ffff8880254701c0: control (read@1024,1024B). Runtime 330 seconds
[  429.237442][   T56] block nbd0: Possible stuck request ffff888025470380: control (read@2048,1024B). Runtime 330 seconds
[  429.248716][   T56] block nbd0: Possible stuck request ffff888025470540: control (read@3072,1024B). Runtime 330 seconds
[  429.268515][T21481] bond3: (slave gre0): Device is not bonding slave
[  429.275603][T21481] bond3: option active_slave: invalid value (gre0)
[  429.311170][T21481] bond3 (unregistering): Released all slaves
[  429.755611][T21514] netlink: 'syz.4.4369': attribute type 2 has an invalid length.
[  430.016684][T21536] netlink: 'syz.3.4376': attribute type 10 has an invalid length.
[  430.029986][T21536] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  430.218111][T21548] sctp: [Deprecated]: syz.3.4380 (pid 21548) Use of struct sctp_assoc_value in delayed_ack socket option.
[  430.218111][T21548] Use struct sctp_sack_info instead
[  430.243369][T21548] sctp: [Deprecated]: syz.3.4380 (pid 21548) Use of struct sctp_assoc_value in delayed_ack socket option.
[  430.243369][T21548] Use struct sctp_sack_info instead
[  430.456073][T21565] SET target dimension over the limit!
[  430.465781][T21564] netlink: 'syz.2.4386': attribute type 1 has an invalid length.
[  430.605333][T21557] pim6reg: entered allmulticast mode
[  430.826163][T21581] tunl0: left promiscuous mode
[  430.987001][T21581] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.006289][T21581] bond0: left promiscuous mode
[  431.011099][T21581] bond_slave_0: left promiscuous mode
[  431.041927][T21604] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  431.081541][T21581] bond_slave_1: left promiscuous mode
[  431.091594][T21581] team0: left promiscuous mode
[  431.096396][T21581] team_slave_0: left promiscuous mode
[  431.108944][T21581] team_slave_1: left promiscuous mode
[  431.235805][T21581] veth1_to_hsr: left allmulticast mode
[  431.340356][T21581] xfrm1: left promiscuous mode
[  431.345889][T21581] xfrm1: left allmulticast mode
[  431.352309][T21581] gretap1: left promiscuous mode
[  431.362671][T21581] veth7: left allmulticast mode
[  431.369653][T21581] vlan2: left allmulticast mode
[  431.376090][T21581] bond1: left allmulticast mode
[  431.388609][T21581] geneve2: left promiscuous mode
[  431.394251][T21581] geneve2: left allmulticast mode
[  431.459898][   T50] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  431.482715][   T50] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  431.508749][T21625] ip6tnl0: Caught tx_queue_len zero misconfig
[  431.543406][   T50] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  431.583873][   T50] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  431.626863][   T50] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  431.643010][   T50] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  431.662449][   T50] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  431.680818][   T50] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  431.729773][T21642] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  431.812659][T21648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  431.959986][T21652] syzkaller0: entered promiscuous mode
[  431.977095][T21652] syzkaller0: entered allmulticast mode
[  432.000442][T21652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  432.693619][T21650] tipc: Resetting bearer <eth:syzkaller0>
[  432.751390][T21680] __nla_validate_parse: 18 callbacks suppressed
[  432.751407][T21680] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4420'.
[  433.122839][ T5908] tipc: Node number set to 1162414599
[  433.158267][T21690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4423'.
[  434.258752][T21650] tipc: Disabling bearer <eth:syzkaller0>
[  434.439099][T21706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4426'.
[  434.458459][T18928] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  434.468612][T21706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4426'.
[  434.478941][T18928] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  434.498988][T18928] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  434.531310][T18928] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  434.565215][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4427'.
[  436.312840][T21718] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  436.320440][T21718] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  436.328062][T21718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4427'.
[  436.337592][T21718] tipc: Invalid UDP bearer configuration
[  436.337642][T21718] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  436.490202][T21756] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  436.507571][T21756] netlink: 'syz.0.4436': attribute type 21 has an invalid length.
[  436.523384][T21756] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4436'.
[  436.652517][T21761] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20003
[  436.677979][T21769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4438'.
[  436.723009][T21773] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4441'.
[  436.724345][T21769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4438'.
[  436.746376][T21773] IPv4: Oversized IP packet from 127.202.26.0
[  436.961123][T21790] team1: entered promiscuous mode
[  436.966878][T21790] team1: entered allmulticast mode
[  437.051993][   T52] Bluetooth: hci4: command 0x040f tx timeout
[  437.529496][T21824] netlink: zone id is out of range
[  437.543074][T21822] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  437.553435][T21824] netlink: zone id is out of range
[  437.564536][T21823] syzkaller0: entered promiscuous mode
[  437.570040][T21823] syzkaller0: entered allmulticast mode
[  437.582723][T21824] netlink: zone id is out of range
[  437.605895][T21824] netlink: zone id is out of range
[  437.611101][T21824] netlink: zone id is out of range
[  437.621507][T21824] netlink: zone id is out of range
[  437.626687][T21824] netlink: zone id is out of range
[  437.648568][T21824] netlink: zone id is out of range
[  437.654634][T21824] netlink: zone id is out of range
[  437.702744][T21823] tipc: Resetting bearer <eth:syzkaller0>
[  437.729735][T21821] tipc: Resetting bearer <eth:syzkaller0>
[  437.799238][T21821] tipc: Disabling bearer <eth:syzkaller0>
[  437.846802][T21848] __nla_validate_parse: 17 callbacks suppressed
[  437.846821][T21848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4461'.
[  437.914149][T21851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4465'.
[  437.985769][T21853] xt_l2tp: missing protocol rule (udp|l2tpip)
[  438.287879][T21877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4476'.
[  438.304820][T21877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4476'.
[  438.344122][T21877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4476'.
[  438.518906][T21891] ieee802154 phy1 wpan1: encryption failed: -22
[  438.758663][T21912] syzkaller0: entered promiscuous mode
[  438.764540][T21912] syzkaller0: entered allmulticast mode
[  438.901066][T21918] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4484'.
[  438.951577][T21918] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4484'.
[  438.965763][T21918] ip6gre0: Caught tx_queue_len zero misconfig
[  438.967638][T21924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4486'.
[  438.985448][T21919] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  438.996343][T21926] netlink: 'syz.2.4484': attribute type 61 has an invalid length.
[  439.004851][T21923] syzkaller0: entered promiscuous mode
[  439.022247][T21923] syzkaller0: entered allmulticast mode
[  439.030580][T21924] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  439.111934][T21924] batman_adv: batadv0: Removing interface: batadv_slave_1
[  439.142588][T21919] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  439.185002][T21923] tipc: Resetting bearer <eth:syzkaller0>
[  439.215945][T21923] tipc: Disabling bearer <eth:syzkaller0>
[  439.229518][T21934] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4488'.
[  439.247106][T21934] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  439.280439][T21937] lo speed is unknown, defaulting to 1000
[  439.312201][ T5923] IPVS: starting estimator thread 0...
[  439.421680][T21941] IPVS: using max 31 ests per chain, 74400 per kthread
[  439.784883][T21970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4495'.
[  440.096955][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  440.350556][T22001] netlink: 'syz.4.4502': attribute type 13 has an invalid length.
[  440.360721][T22001] erspan0: refused to change device tx_queue_len
[  442.180979][   T52] Bluetooth: hci3: command 0x0406 tx timeout
[  442.280474][T22047] bond0: (slave team0): Releasing backup interface
[  442.291001][T22061] net_ratelimit: 9 callbacks suppressed
[  442.291018][T22061] openvswitch: netlink: EtherType 50a is less than min 600
[  442.310336][T22047] team0 (unregistering): Port device team_slave_0 removed
[  442.322529][T22047] team0 (unregistering): Port device team_slave_1 removed
[  442.552193][T22072] 8021q: adding VLAN 0 to HW filter on device bond4
[  442.607233][T22077] !���x����
: renamed from bond_slave_0
[  442.727577][T22086] sctp: [Deprecated]: syz.1.4527 (pid 22086) Use of int in maxseg socket option.
[  442.727577][T22086] Use struct sctp_assoc_value instead
[  442.805189][T22091] C: renamed from lo
[  442.902822][T22099] __nla_validate_parse: 9 callbacks suppressed
[  442.902838][T22099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4532'.
[  443.062934][T22104] netlink: 'syz.1.4533': attribute type 12 has an invalid length.
[  443.078227][T22104] veth1_to_bond: entered allmulticast mode
[  443.087997][T22104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4533'.
[  443.094883][T22108] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000
[  443.170130][T22104] bond0: (slave bond_slave_1): Releasing backup interface
[  443.187617][T22112] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4534'.
[  443.205033][T22115] IPv6: Can't replace route, no match found
[  443.225019][T22104] veth1_to_bond (unregistering): left allmulticast mode
[  443.647002][T22133] syz_tun: entered allmulticast mode
[  443.693492][T22133] syz_tun: left allmulticast mode
[  443.740746][T22140] syzkaller0: entered promiscuous mode
[  443.747472][T22140] syzkaller0: entered allmulticast mode
[  443.968410][T22164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4550'.
[  443.968410][T22163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4550'.
[  444.000065][T22164] smc: removing net device vcan0 with user defined pnetid SYZ1
[  444.248129][T22177] netlink: 'syz.2.4555': attribute type 9 has an invalid length.
[  444.395680][T22186] syzkaller0: entered promiscuous mode
[  444.404222][T22186] syzkaller0: entered allmulticast mode
[  444.413735][T22185] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  444.445421][T22185] tipc: Resetting bearer <eth:syzkaller0>
[  444.475113][T22185] tipc: Disabling bearer <eth:syzkaller0>
[  444.619851][T22201] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  444.890423][T22215] netlink: 'syz.2.4566': attribute type 10 has an invalid length.
[  444.908500][T22218] netlink: 'syz.2.4566': attribute type 10 has an invalid length.
[  445.157548][T22215] team0: Device veth1_macvtap failed to register rx_handler
[  445.207608][T22218] team0: Device veth1_macvtap failed to register rx_handler
[  445.455002][T22238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4573'.
[  445.591037][T22247] netlink: 'syz.2.4578': attribute type 1 has an invalid length.
[  445.699948][T22247] bond5: (slave gretap1): making interface the new active one
[  445.729601][T22247] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  445.798118][T22259] xfrm2: entered allmulticast mode
[  445.905226][T22269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4585'.
[  445.967169][T22265] syzkaller0: entered allmulticast mode
[  445.974719][T22269] bridge0: port 1(veth0_to_bridge) entered blocking state
[  445.986712][T22265] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4583'.
[  445.993282][T22269] bridge0: port 1(veth0_to_bridge) entered disabled state
[  446.008860][T22269] veth0_to_bridge: entered allmulticast mode
[  446.018622][T22269] veth0_to_bridge: entered promiscuous mode
[  446.028228][T22269] bridge0: port 1(veth0_to_bridge) entered blocking state
[  446.035685][T22269] bridge0: port 1(veth0_to_bridge) entered forwarding state
[  446.066637][T22265] ip6gre1: entered promiscuous mode
[  446.073610][T22265] ip6gre1: entered allmulticast mode
[  446.169594][T22284] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4589'.
[  446.183188][T22284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4589'.
[  446.192433][T22284] netlink: 'syz.2.4589': attribute type 3 has an invalid length.
[  446.200180][T22284] netlink: 'syz.2.4589': attribute type 2 has an invalid length.
[  447.570839][T22290] netlink: 'syz.2.4590': attribute type 5 has an invalid length.
[  447.853883][T22308] IPv6: sit2: Disabled Multicast RS
[  447.854903][T22312] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  447.860185][T22308] sit2: entered allmulticast mode
[  447.926103][T22315] __nla_validate_parse: 3 callbacks suppressed
[  447.926120][T22315] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4597'.
[  448.080095][T22322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4602'.
[  448.100984][T22322] netlink: 'syz.0.4602': attribute type 30 has an invalid length.
[  448.224478][T22335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4608'.
[  448.365445][T22348] x_tables: duplicate underflow at hook 3
[  448.473121][T22357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4614'.
[  448.672431][T22369] openvswitch: netlink: Missing valid actions attribute.
[  448.679528][T22369] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  448.753780][T22369] C: entered promiscuous mode
[  448.758747][T22369] netlink: 'syz.4.4617': attribute type 2 has an invalid length.
[  448.767419][T22369] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  448.785233][T22378] netlink: 'syz.1.4620': attribute type 14 has an invalid length.
[  448.843863][T22378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4620'.
[  448.951415][T22388] openvswitch: netlink: IP tunnel dst address not specified
[  449.010588][T22388] tipc: MTU too low for tipc bearer
[  449.035763][T22388] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4623'.
[  449.241570][T22403] tipc: Bearer <eth:vlan0>: already 2 bearers with priority 10
[  449.259430][T22403] tipc: Bearer <eth:vlan0>: trying with adjusted priority
[  449.275039][T22403] tipc: Enabled bearer <eth:vlan0>, priority 9
[  449.344520][T22403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  449.369458][T22414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4633'.
[  449.411560][T22414] netlink: 'syz.2.4633': attribute type 15 has an invalid length.
[  449.501128][T22418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4631'.
[  450.002354][T22440] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  450.980221][T22469] netlink: 'syz.2.4647': attribute type 13 has an invalid length.
[  451.979088][T22450] geneve2: entered promiscuous mode
[  451.984459][T22450] geneve2: entered allmulticast mode
[  452.004957][T22469] gretap0: refused to change device tx_queue_len
[  452.022992][T22469] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  452.040339][   T60] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  452.063911][   T60] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  452.135186][   T60] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  452.174307][T22479] netlink: 'syz.0.4650': attribute type 10 has an invalid length.
[  452.183716][T22474] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4648'.
[  452.184061][T22479] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4650'.
[  452.238950][T22474] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  452.295214][T22474] bond5 (unregistering): Released all slaves
[  452.337672][   T60] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  452.349415][T22492] netlink: 'syz.2.4654': attribute type 1 has an invalid length.
[  452.363249][T22479] dummy0: entered promiscuous mode
[  452.370625][T22479] bridge0: port 4(dummy0) entered blocking state
[  452.391389][T22479] bridge0: port 4(dummy0) entered disabled state
[  452.405017][T22479] dummy0: entered allmulticast mode
[  452.426521][T22479] bridge0: port 4(dummy0) entered blocking state
[  452.433044][T22479] bridge0: port 4(dummy0) entered forwarding state
[  452.523645][T22504] netlink: 'syz.4.4658': attribute type 23 has an invalid length.
[  452.539013][T22496] bond6: (slave bridge4): making interface the new active one
[  452.549559][T22496] bond6: (slave bridge4): Enslaving as an active interface with an up link
[  452.565432][T22498] batadv_slave_1: entered promiscuous mode
[  452.594287][T22497] batadv_slave_1: left promiscuous mode
[  452.624140][T22512] netlink: 'syz.4.4658': attribute type 23 has an invalid length.
[  452.843375][T22526] netlink: 'syz.0.4663': attribute type 1 has an invalid length.
[  452.986141][T22529] __nla_validate_parse: 1 callbacks suppressed
[  452.986170][T22529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4666'.
[  453.268851][T22545] netlink: 'syz.3.4673': attribute type 6 has an invalid length.
[  453.292958][T22548] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4672'.
[  453.748503][T22583] delete_channel: no stack
[  453.754237][T22583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4686'.
[  453.766119][T22582] netlink: 216 bytes leftover after parsing attributes in process `syz.2.4685'.
[  453.778627][T22582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4685'.
[  453.931651][T22596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4691'.
[  453.940831][T22596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4691'.
[  453.950521][T22596] netlink: 'syz.0.4691': attribute type 15 has an invalid length.
[  453.959682][T22537] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  454.291674][T22626] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4700'.
[  454.458208][T22639] netlink: 'syz.4.4703': attribute type 1 has an invalid length.
[  454.517413][T22644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4705'.
[  454.535910][T22639] bond4: (slave bridge2): making interface the new active one
[  454.549095][T22639] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  454.575998][T22646] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  454.587660][T22646] syzkaller0: entered promiscuous mode
[  454.598466][T22646] syzkaller0: entered allmulticast mode
[  454.630271][T22646] tipc: Resetting bearer <eth:syzkaller0>
[  454.643820][T22645] tipc: Resetting bearer <eth:syzkaller0>
[  454.678282][T22645] tipc: Disabling bearer <eth:syzkaller0>
[  454.686789][T22650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4709'.
[  454.705683][T22652] netlink: 'syz.4.4707': attribute type 10 has an invalid length.
[  454.724983][T22652] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  454.835989][T22657] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  454.846232][T22657] syzkaller0: entered promiscuous mode
[  454.852474][T22657] syzkaller0: entered allmulticast mode
[  454.900074][T22660] ieee802154 phy1 wpan1: encryption failed: -22
[  454.943977][T22663] delete_channel: no stack
[  455.120776][T22672] netlink: 'syz.0.4715': attribute type 16 has an invalid length.
[  455.310955][T22686] netlink: zone id is out of range
[  455.341419][T22686] netlink: zone id is out of range
[  455.346566][T22686] netlink: zone id is out of range
[  455.352515][T22686] netlink: zone id is out of range
[  455.358401][T22686] netlink: zone id is out of range
[  455.368012][T22686] netlink: zone id is out of range
[  455.374218][T22686] netlink: zone id is out of range
[  455.379375][T22686] netlink: zone id is out of range
[  455.387283][T22686] netlink: zone id is out of range
[  455.486977][T22688] batadv_slave_1: entered promiscuous mode
[  455.762631][T22719] netlink: 'syz.2.4728': attribute type 1 has an invalid length.
[  455.770776][T22719] netlink: 'syz.2.4728': attribute type 11 has an invalid length.
[  455.847476][T22726] Cannot find set identified by id 3 to match
[  455.855695][T22726] netlink: 'syz.2.4728': attribute type 10 has an invalid length.
[  455.865881][T22726] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  455.873163][T22726] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  456.015922][T22728] xt_cgroup: xt_cgroup: no path or classid specified
[  456.111698][T22687] batadv_slave_1: left promiscuous mode
[  456.897324][T22772] syzkaller1: entered promiscuous mode
[  456.911354][T22772] syzkaller1: entered allmulticast mode
[  456.928556][T22779] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  457.449222][T22815] syzkaller0: entered promiscuous mode
[  457.456072][T22815] syzkaller0: entered allmulticast mode
[  457.465015][T22821] syz_tun: entered allmulticast mode
[  458.915758][T22821] syz_tun: left allmulticast mode
[  459.048907][T22832] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.056648][T22832] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.135821][T22832] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  459.153192][T22832] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  459.217607][T22832] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  459.243679][T22832] gtp0: left promiscuous mode
[  459.248397][T22832] gtp0: left allmulticast mode
[  459.269966][T22832] bridge3: left promiscuous mode
[  459.275565][T22832] bridge3: left allmulticast mode
[  459.288795][T22832] vlan2: left promiscuous mode
[  459.293730][T22832] geneve1: left promiscuous mode
[  459.298844][T22832] vlan2: left allmulticast mode
[  459.304275][T22832] geneve1: left allmulticast mode
[  459.304911][   T56] block nbd0: Possible stuck request ffff888025470000: control (read@0,1024B). Runtime 360 seconds
[  459.320726][   T56] block nbd0: Possible stuck request ffff8880254701c0: control (read@1024,1024B). Runtime 360 seconds
[  459.332994][   T56] block nbd0: Possible stuck request ffff888025470380: control (read@2048,1024B). Runtime 360 seconds
[  459.344317][   T56] block nbd0: Possible stuck request ffff888025470540: control (read@3072,1024B). Runtime 360 seconds
[  459.379213][   T60] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  459.388339][   T60] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.397714][   T60] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  459.408086][T18928] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  459.427512][T18928] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.446679][T18928] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  459.465608][T18928] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  459.475074][T18928] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.487495][T18928] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  459.496776][T18928] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  459.510731][T18928] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.528625][T18928] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  459.774039][T22869] __nla_validate_parse: 23 callbacks suppressed
[  459.774056][T22869] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4772'.
[  459.823703][T22869] ipvlan2: entered promiscuous mode
[  459.847509][T22871] syzkaller0: entered promiscuous mode
[  459.853681][T22871] syzkaller0: entered allmulticast mode
[  459.887613][T22872] IPv6: NLM_F_CREATE should be specified when creating new route
[  460.545160][T22880] netlink: 'syz.2.4777': attribute type 29 has an invalid length.
[  460.563612][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4777'.
[  460.574872][T22880] netlink: 'syz.2.4777': attribute type 29 has an invalid length.
[  460.601405][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4777'.
[  460.617955][T22882] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4774'.
[  460.662390][T22882] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4774'.
[  460.672523][T22884] net_ratelimit: 10 callbacks suppressed
[  460.672538][T22884] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  460.867082][T22904] netlink: 'syz.0.4782': attribute type 4 has an invalid length.
[  461.542423][T22955] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  461.724463][T22975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4804'.
[  461.733936][T22975] openvswitch: netlink: Flow key attr not present in new flow.
[  461.957886][T22990] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  462.059397][T22988] syzkaller0: entered promiscuous mode
[  462.066284][T22988] syzkaller0: entered allmulticast mode
[  462.095518][T23001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4810'.
[  462.105731][T23000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4810'.
[  462.206511][T23010] : left promiscuous mode
[  462.255549][T23014] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4815'.
[  462.418574][T23015] can: request_module (can-proto-0) failed.
[  464.265484][T23054] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  464.289627][T23083] netlink: 'syz.2.4831': attribute type 7 has an invalid length.
[  464.466079][T23103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4834'.
[  464.649609][T23114] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  464.657492][T23114] syzkaller0: entered promiscuous mode
[  464.667139][T23114] syzkaller0: entered allmulticast mode
[  464.747079][T23114] tipc: Resetting bearer <eth:syzkaller0>
[  464.789711][T23113] tipc: Resetting bearer <eth:syzkaller0>
[  464.825256][T23113] tipc: Disabling bearer <eth:syzkaller0>
[  464.845700][T23125] __nla_validate_parse: 1 callbacks suppressed
[  464.845715][T23125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4843'.
[  464.945549][T23140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4847'.
[  464.962443][T23140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4847'.
[  465.140444][T23154] netlink: 'syz.0.4853': attribute type 1 has an invalid length.
[  465.157594][T23153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  465.201785][T23159] syzkaller0: entered promiscuous mode
[  465.207660][T23159] syzkaller0: entered allmulticast mode
[  465.224986][T23159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4854'.
[  465.236388][T23159] C: renamed from lo (while UP)
[  465.294777][T23159] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  465.430098][T23172] netlink: 'syz.1.4857': attribute type 1 has an invalid length.
[  465.475015][T23172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4857'.
[  465.526681][T23169] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4856'.
[  465.535301][T23172] 8021q: adding VLAN 0 to HW filter on device bond4
[  465.544616][T23172] bond3: (slave bond4): making interface the new active one
[  465.552597][T23172] bond3: (slave bond4): Enslaving as an active interface with an up link
[  465.672396][T23184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4860'.
[  465.734294][T23184] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4860'.
[  465.944132][T23198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4864'.
[  466.135063][T23211] netlink: 'syz.1.4866': attribute type 1 has an invalid length.
[  466.216941][T23216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4869'.
[  466.660581][T23235] netlink: 'syz.4.4878': attribute type 11 has an invalid length.
[  466.995126][T23257] team0: entered promiscuous mode
[  467.000891][T23257] team0: entered allmulticast mode
[  467.307674][T23285] netlink: 'syz.4.4895': attribute type 1 has an invalid length.
[  467.399791][T23293] x_tables: duplicate underflow at hook 3
[  467.412001][T23285] bond6: (slave bridge3): making interface the new active one
[  467.420407][T23285] bond6: (slave bridge3): Enslaving as an active interface with an up link
[  467.558494][T23280] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  467.776401][T23309] 8021q: adding VLAN 0 to HW filter on device bond8
[  467.789348][T23279] tipc: Disabling bearer <eth:syzkaller0>
[  467.808880][T23309] vlan2: entered allmulticast mode
[  467.815418][T23309] bond8: entered allmulticast mode
[  468.681564][T23364] netlink: 'syz.2.4916': attribute type 1 has an invalid length.
[  468.718884][T23364] 8021q: adding VLAN 0 to HW filter on device bond9
[  468.762236][T23364] bond9: (slave gretap2): making interface the new active one
[  468.772095][T23364] bond9: (slave gretap2): Enslaving as an active interface with an up link
[  468.863688][T23368] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  468.871954][T23368] syzkaller0: entered promiscuous mode
[  468.877649][T23368] syzkaller0: entered allmulticast mode
[  469.184340][T23368] tipc: Resetting bearer <eth:syzkaller0>
[  469.196747][T23367] tipc: Resetting bearer <eth:syzkaller0>
[  469.243132][T23367] tipc: Disabling bearer <eth:syzkaller0>
[  469.297550][T23400] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  470.002652][T23452] netlink: 'syz.1.4938': attribute type 1 has an invalid length.
[  470.060502][T23452] 8021q: adding VLAN 0 to HW filter on device bond6
[  470.068741][T23454] __nla_validate_parse: 18 callbacks suppressed
[  470.068758][T23454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4939'.
[  470.108425][T23452] bond6: (slave veth5): Enslaving as an active interface with a down link
[  470.123781][T23454] gtp0: entered promiscuous mode
[  470.128766][T23454] gtp0: entered allmulticast mode
[  470.154301][T23452] bond6: (slave veth0_to_bond): making interface the new active one
[  470.174055][T23452] veth0_to_bond: entered promiscuous mode
[  470.180508][T23452] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  470.214881][T23460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  470.292505][T23466] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4942'.
[  470.375523][T23476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4945'.
[  470.436847][T23472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4944'.
[  470.448821][T23482] dvmrp0: entered allmulticast mode
[  470.457649][T23482] dvmrp0: left allmulticast mode
[  470.570730][T23490] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4949'.
[  470.583626][T23490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4949'.
[  470.675279][T23494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4951'.
[  470.712625][T23499] netlink: 'syz.2.4952': attribute type 12 has an invalid length.
[  470.746894][T23499] bond10: option primary_reselect: invalid value (255)
[  470.753679][T23503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4954'.
[  470.768885][T23499] bond10 (unregistering): Released all slaves
[  470.775703][T23507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4954'.
[  470.798314][T23507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4954'.
[  471.002998][T23511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  471.472320][ T7280] bond5 (unregistering): (slave gretap1): Releasing active interface
[  471.553414][ T7280] dvmrp6 (unregistering): left allmulticast mode
[  471.723580][T23557] xt_CT: No such helper "syz1"
[  471.728133][T23561] xt_CT: No such helper "syz1"
[  471.982022][ T7280] bond10 (unregistering): (slave bridge4): Releasing backup interface
[  471.990226][ T7280] bridge4 (unregistering): left promiscuous mode
[  472.199298][ T7280] bond0 (unregistering): Released all slaves
[  472.212403][ T7280] bond1 (unregistering): Released all slaves
[  472.310663][ T7280] bond2 (unregistering): Released all slaves
[  472.413852][ T7280] bond3 (unregistering): Released all slaves
[  472.510194][ T7280] bond4 (unregistering): Released all slaves
[  472.523113][ T7280] bond5 (unregistering): Released all slaves
[  472.536111][ T7280] bond6 (unregistering): Released all slaves
[  472.548862][ T7280] bond7 (unregistering): Released all slaves
[  472.566356][ T7280] bond8 (unregistering): Released all slaves
[  472.584044][ T7280] bond9 (unregistering): Released all slaves
[  472.677098][ T7280] bond10 (unregistering): Released all slaves
[  472.689929][T23519] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  472.794840][T23570] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  472.869377][T23573] bridge0: port 4(dummy0) entered disabled state
[  472.896357][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[  472.914777][T23573] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.935157][T23573] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.973123][T23573] tipc: Resetting bearer <eth:vlan0>
[  472.980430][T23573] tipc: Resetting bearer <eth:vlan0>
[  473.008071][ T1093] tipc: Resetting bearer <eth:vlan0>
[  473.019919][ T7280] : left promiscuous mode
[  473.191366][ T7280] : left promiscuous mode
[  473.272525][ T7280] : left promiscuous mode
[  473.385306][ T7280] �9: left promiscuous mode
[  473.481356][ T7280] tipc: Left network mode
[  473.486364][T23620] netlink: 'syz.1.4983': attribute type 1 has an invalid length.
[  473.589192][T23620] bond7: entered promiscuous mode
[  473.595934][T23620] 8021q: adding VLAN 0 to HW filter on device bond7
[  473.643319][T23627] batman_adv: batadv0: Removing interface: batadv_slave_1
[  473.687444][T23625] bond7: (slave bridge4): making interface the new active one
[  473.695106][T23625] bridge4: entered promiscuous mode
[  473.701338][T23625] bond7: (slave bridge4): Enslaving as an active interface with an up link
[  473.707009][T23637] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0
[  473.722862][T23637] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  473.798464][T23631] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  473.835838][T23641] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  473.848229][T23632] syzkaller0: entered promiscuous mode
[  473.850630][T23641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  473.887401][T23632] syzkaller0: entered allmulticast mode
[  474.065771][T23646] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  474.081799][T23646] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  474.109573][T23646] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  474.141526][T23663] tipc: New replicast peer: 255.255.255.255
[  474.151758][T23663] tipc: Enabled bearer <udp:syz2>, priority 10
[  474.354688][ T7280] hsr_slave_0: left promiscuous mode
[  474.383247][ T7280] hsr_slave_1: left promiscuous mode
[  474.430699][ T7280] vlan0: left allmulticast mode
[  474.445091][ T7280] veth0_vlan: left allmulticast mode
[  474.450521][ T7280] vlan0: left promiscuous mode
[  474.460713][ T7280] veth1_macvtap: left promiscuous mode
[  474.482803][ T7280] veth0_macvtap: left promiscuous mode
[  474.488531][ T7280] veth1_vlan: left promiscuous mode
[  474.510780][T23683] xt_hashlimit: invalid interval
[  475.600252][T23678] __nla_validate_parse: 7 callbacks suppressed
[  475.600264][T23678] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4997'.
[  475.615983][T23678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  475.648782][T23689] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  475.742786][T23717] netlink: 'syz.1.5003': attribute type 1 has an invalid length.
[  475.763401][T23717] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5003'.
[  475.938420][T23729] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5006'.
[  476.058446][T23739] netlink: 'syz.2.5009': attribute type 11 has an invalid length.
[  476.122044][T23739] bond10: Unable to set peer notification delay as MII monitoring is disabled
[  476.133912][T23739] bond10 (unregistering): Released all slaves
[  476.194207][ T7280] IPVS: stop unused estimator thread 0...
[  476.195648][T23751] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  476.422675][T23759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5014'.
[  476.535307][T23762] C speed is unknown, defaulting to 1000
[  476.834750][T23785] syzkaller1: entered promiscuous mode
[  476.840271][T23785] syzkaller1: entered allmulticast mode
[  476.856681][T23794] netlink: 576 bytes leftover after parsing attributes in process `syz.4.5019'.
[  476.943243][T23782] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  476.951834][T23782] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5019'.
[  476.958125][   T30] audit: type=1800 audit(1762687592.332:4): pid=23799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5023" name="memory.events" dev="tmpfs" ino=1984 res=0 errno=0
[  477.080671][T23801] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.5024'.
[  477.080958][T23803] delete_channel: no stack
[  477.164911][T23809] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5028'.
[  477.279292][T23821] tipc: New replicast peer: 255.255.255.255
[  477.302705][T23821] tipc: Enabled bearer <udp:syz0>, priority 10
[  477.364645][T23825] ipt_REJECT: TCP_RESET invalid for non-tcp
[  477.450509][T23831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5036'.
[  477.519987][T23836] netlink: 'syz.1.5036': attribute type 1 has an invalid length.
[  478.011624][   T52] Bluetooth: hci5: command 0x0406 tx timeout
[  478.387207][T23870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5047'.
[  478.421318][  T897] tipc: Node number set to 2472922965
[  478.433869][T23870] 8021q: adding VLAN 0 to HW filter on device bond8
[  478.524385][T23870] syzkaller0: entered promiscuous mode
[  478.529971][T23870] syzkaller0: entered allmulticast mode
[  478.673467][T23895] sctp: [Deprecated]: syz.3.5054 (pid 23895) Use of struct sctp_assoc_value in delayed_ack socket option.
[  478.673467][T23895] Use struct sctp_sack_info instead
[  480.101538][T23905] netlink: 'syz.4.5058': attribute type 4 has an invalid length.
[  480.495329][T23939] IPVS: length: 79 != 24
[  480.540075][T23939] sctp: [Deprecated]: syz.3.5071 (pid 23939) Use of struct sctp_assoc_value in delayed_ack socket option.
[  480.540075][T23939] Use struct sctp_sack_info instead
[  480.619194][T23948] sch_tbf: burst 0 is lower than device lo mtu (81) !
[  480.673028][T23951] __nla_validate_parse: 1 callbacks suppressed
[  480.673045][T23951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5074'.
[  480.697694][T23953] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5075'.
[  481.257246][T23996] bond6: Unable to set peer notification delay as MII monitoring is disabled
[  481.313494][T23996] bond6 (unregistering): Released all slaves
[  481.368292][T24004] dvmrp6: left allmulticast mode
[  481.420396][T24007] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  481.461705][ T1339] veth0_to_bond: left promiscuous mode
[  481.580299][T24019] bond9: entered allmulticast mode
[  481.586147][T24019] 8021q: adding VLAN 0 to HW filter on device bond9
[  481.689607][T24028] xt_ecn: cannot match TCP bits for non-tcp packets
[  481.839540][T24039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5100'.
[  481.952825][T24043] netlink: 'syz.4.5102': attribute type 7 has an invalid length.
[  483.615008][T24066] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.5109'.
[  483.636400][T24064] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5108'.
[  483.645546][T24066] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  483.725539][T24066] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  483.956763][T24096] pim6reg527: entered allmulticast mode
[  483.985903][T24101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5118'.
[  484.033638][T24105] tipc: Invalid UDP bearer configuration
[  484.033694][T24105] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  484.110041][T24111] ip6t_srh: unknown srh invflags 4000
[  484.227070][T24118] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5124'.
[  484.261663][   T31] INFO: task udevd:5887 blocked for more than 143 seconds.
[  484.269003][   T31]       Not tainted syzkaller #0
[  484.280891][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  484.310685][   T31] task:udevd           state:D stack:19800 pid:5887  tgid:5887  ppid:5200   task_flags:0x400140 flags:0x00080003
[  484.336494][   T31] Call Trace:
[  484.339966][   T31]  <TASK>
[  484.343901][   T31]  __schedule+0x1798/0x4cc0
[  484.348590][   T31]  ? __pfx___schedule+0x10/0x10
[  484.354256][   T31]  ? schedule+0x91/0x360
[  484.358691][   T31]  schedule+0x165/0x360
[  484.366023][   T31]  io_schedule+0x80/0xd0
[  484.370447][   T31]  folio_wait_bit_common+0x6b0/0xb80
[  484.376626][   T31]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  484.382969][   T31]  ? __pfx_wake_page_function+0x10/0x10
[  484.388745][   T31]  ? __filemap_get_folio+0x6c0/0xaf0
[  484.394679][   T31]  ? do_read_cache_folio+0x4e9/0x590
[  484.400326][   T31]  do_read_cache_folio+0x1aa/0x590
[  484.406023][   T31]  ? __pfx_blkdev_read_folio+0x10/0x10
[  484.413906][   T31]  read_part_sector+0xb6/0x2b0
[  484.418870][   T31]  adfspart_check_POWERTEC+0x8c/0xf30
[  484.424519][   T31]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  484.430090][   T31]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  484.436381][   T31]  bdev_disk_changed+0x75f/0x14b0
[  484.441540][   T31]  ? __pfx_bdev_disk_changed+0x10/0x10
[  484.447013][   T31]  ? wait_on_inode+0xc0/0x230
[  484.452060][   T31]  blkdev_get_whole+0x380/0x510
[  484.456938][   T31]  bdev_open+0x31e/0xd30
[  484.461326][   T31]  blkdev_open+0x457/0x600
[  484.465762][   T31]  ? __pfx_blkdev_open+0x10/0x10
[  484.470684][   T31]  do_dentry_open+0x953/0x13f0
[  484.475878][   T31]  vfs_open+0x3b/0x340
[  484.479969][   T31]  ? path_openat+0x2ecd/0x3830
[  484.484789][   T31]  path_openat+0x2ee5/0x3830
[  484.489415][   T31]  ? __pfx_path_openat+0x10/0x10
[  484.494840][   T31]  do_filp_open+0x1fa/0x410
[  484.499462][   T31]  ? __lock_acquire+0xab9/0xd20
[  484.504441][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  484.509495][   T31]  ? _raw_spin_unlock+0x28/0x50
[  484.514485][   T31]  ? alloc_fd+0x64c/0x6c0
[  484.518842][   T31]  do_sys_openat2+0x121/0x1c0
[  484.523675][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  484.528896][   T31]  __x64_sys_openat+0x138/0x170
[  484.533884][   T31]  do_syscall_64+0xfa/0xfa0
[  484.538411][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.544570][   T31]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  484.550732][   T31]  ? clear_bhb_loop+0x60/0xb0
[  484.555636][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.561754][   T31] RIP: 0033:0x7f10a9aa7407
[  484.566458][   T31] RSP: 002b:00007fff90d3d150 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  484.575555][   T31] RAX: ffffffffffffffda RBX: 00007f10aa16c880 RCX: 00007f10a9aa7407
[  484.583624][   T31] RDX: 00000000000a0800 RSI: 000055e15ba81f60 RDI: ffffffffffffff9c
[  484.591797][   T31] RBP: 000055e15ba68910 R08: 0000000000000000 R09: 0000000000000000
[  484.599788][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e15ba85f10
[  484.607845][   T31] R13: 000055e15ba76190 R14: 0000000000000000 R15: 000055e15ba85f10
[  484.616107][   T31]  </TASK>
[  484.619232][   T31] 
[  484.619232][   T31] Showing all locks held in the system:
[  484.627208][   T31] 1 lock held by khungtaskd/31:
[  484.632232][   T31]  #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  484.642234][   T31] 2 locks held by getty/5591:
[  484.646922][   T31]  #0: ffff88814de230a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  484.656842][   T31]  #1: ffffc9000362b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  484.667252][   T31] 3 locks held by kworker/u9:6/5844:
[  484.672712][   T31]  #0: ffff88804ffcd148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  484.684216][   T31]  #1: ffffc90004237ba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  484.697399][   T31]  #2: ffff888057e24dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  484.707524][   T31] 1 lock held by udevd/5887:
[  484.712390][   T31]  #0: ffff888024ff2358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  484.721858][   T31] 1 lock held by syz.0.4998/23677:
[  484.727174][   T31]  #0: ffff888057e24dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_status+0x36/0x150
[  484.737365][   T31] 
[  484.739692][   T31] =============================================
[  484.739692][   T31] 
[  484.752534][   T31] NMI backtrace for cpu 0
[  484.752547][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  484.752559][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  484.752565][   T31] Call Trace:
[  484.752569][   T31]  <TASK>
[  484.752574][   T31]  dump_stack_lvl+0x189/0x250
[  484.752593][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  484.752605][   T31]  ? __pfx__printk+0x10/0x10
[  484.752621][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  484.752634][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  484.752646][   T31]  ? __pfx__printk+0x10/0x10
[  484.752657][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  484.752672][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  484.752684][   T31]  watchdog+0xf60/0xfa0
[  484.752697][   T31]  ? watchdog+0x1e2/0xfa0
[  484.752709][   T31]  kthread+0x711/0x8a0
[  484.752724][   T31]  ? __pfx_watchdog+0x10/0x10
[  484.752733][   T31]  ? __pfx_kthread+0x10/0x10
[  484.752745][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  484.752762][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  484.752780][   T31]  ? __pfx_kthread+0x10/0x10
[  484.752801][   T31]  ret_from_fork+0x4bc/0x870
[  484.752820][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  484.752843][   T31]  ? __switch_to_asm+0x39/0x70
[  484.752852][   T31]  ? __switch_to_asm+0x33/0x70
[  484.752859][   T31]  ? __pfx_kthread+0x10/0x10
[  484.752878][   T31]  ret_from_fork_asm+0x1a/0x30
[  484.752916][   T31]  </TASK>
[  484.752923][   T31] Sending NMI from CPU 0 to CPUs 1:
[  484.899283][    C1] NMI backtrace for cpu 1
[  484.899300][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  484.899316][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  484.899326][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  484.899350][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 d1 21 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  484.899363][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6
[  484.899378][    C1] RAX: 2da6cefe42518800 RBX: ffffffff81967bf7 RCX: 2da6cefe42518800
[  484.899390][    C1] RDX: 0000000000000001 RSI: ffffffff8d70dbaf RDI: ffffffff8bbf0760
[  484.899401][    C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb
[  484.899412][    C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ce270
[  484.899423][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003952b58
[  484.899433][    C1] FS:  0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000
[  484.899446][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  484.899457][    C1] CR2: 00007ff6dbdb5c98 CR3: 0000000077f8e000 CR4: 00000000003526f0
[  484.899471][    C1] Call Trace:
[  484.899478][    C1]  <TASK>
[  484.899484][    C1]  default_idle+0x13/0x20
[  484.899499][    C1]  default_idle_call+0x73/0xb0
[  484.899514][    C1]  do_idle+0x1e7/0x510
[  484.899530][    C1]  ? asm_sysvec_call_function_single+0x1a/0x20
[  484.899546][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  484.899566][    C1]  ? __pfx_do_idle+0x10/0x10
[  484.899586][    C1]  ? do_idle+0x4ed/0x510
[  484.899602][    C1]  cpu_startup_entry+0x44/0x60
[  484.899618][    C1]  start_secondary+0x101/0x110
[  484.899638][    C1]  common_startup_64+0x13e/0x147
[  484.899666][    C1]  </TASK>
[  489.373623][   T56] block nbd0: Possible stuck request ffff888025470000: control (read@0,1024B). Runtime 390 seconds
[  489.384698][   T56] block nbd0: Possible stuck request ffff8880254701c0: control (read@1024,1024B). Runtime 390 seconds
[  489.395896][   T56] block nbd0: Possible stuck request ffff888025470380: control (read@2048,1024B). Runtime 390 seconds
[  489.407849][   T56] block nbd0: Possible stuck request ffff888025470540: control (read@3072,1024B). Runtime 390 seconds