last executing test programs:

11.42313203s ago: executing program 2 (id=3377):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x40000000, {}, [{0x54, 0x1, [@m_mpls={0x50, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xb4918}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0x4, 0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0)

11.251765113s ago: executing program 2 (id=3381):
pipe(&(0x7f0000019480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000017c0)="a2", 0x1}], 0x1, 0xc)
write(r0, &(0x7f0000000200)="0130b32b8cec37dfce15fb86cf03daebae78309df40e", 0x16)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, 0x0, 0x0)
close(r1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1c}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0)
unshare(0x6020400)
r4 = gettid()
syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/uts\x00')
unshare(0x2c060000)
close(0x3)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000180))
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180d00000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000007b030000faffffff8500000006000000943b00011000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$inet(r1, &(0x7f00000006c0)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x7)
ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000080)={'ip6gre0\x00', 0xf})
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
r7 = socket$unix(0x1, 0x1, 0x0)
getsockopt$sock_buf(r7, 0x1, 0x0, 0x0, &(0x7f0000001100))
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r6, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r6, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x7d}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

10.996266803s ago: executing program 2 (id=3387):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x107d, r0}, 0x38)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x107d}, 0x38)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10000, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x10, 0x1000000}}}}]}, 0x78}}, 0xc090)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd26}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0)

10.359964405s ago: executing program 2 (id=3392):
r0 = socket(0x1a, 0x2, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async, rerun: 64)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x0, 0x60}}]}, 0x1c}}, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0x8002}, {0x6}]}, 0x10) (async)
sendmmsg$unix(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)="9cdfa98e", 0xdf9c}], 0x1}}], 0x1, 0x0) (async)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000040)={0x6, {{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x0, 0x6, [{{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x390) (async, rerun: 32)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async, rerun: 32)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0})

10.150808991s ago: executing program 2 (id=3396):
r0 = socket(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) (async)
sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "00f6ff00", "d5a1d50399459b68"}, 0x28) (async)
read(r1, &(0x7f0000000640)=""/30, 0x1e) (async)
readv(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1) (async)
shutdown(r1, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) (async, rerun: 32)
socket$isdn_base(0x22, 0x3, 0x0) (async, rerun: 32)
recvmsg(r1, &(0x7f0000000080)={0x0, 0xffffffac, 0x0}, 0x143)
r4 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000380)={0x0, @sco, @hci, @llc={0x1a, 0x323, 0x97, 0x4, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x3, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)='wg1\x00', 0x3, 0x4, 0x3})

9.881689361s ago: executing program 2 (id=3402):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440003001000080025bd7000fcdbff4900000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003001d000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r1 = socket(0x8, 0x0, 0x8000)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x4a, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x2}, {r2, 0x180}, {r1, 0x1000}], 0x3, 0x8)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4)
bind$can_raw(r0, &(0x7f0000000180)={0x1d, r4}, 0x10)

2.149499106s ago: executing program 4 (id=3445):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, 0x0, 0x4)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x1}, 0x6)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000001c0), 0x2)

1.978651988s ago: executing program 4 (id=3447):
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, 'veth1_to_bridge\x00'}})
socket(0x18, 0x5, 0x5c)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="a3", 0x2}, 0x50)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x301, 0x70bd29, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x0)
connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'gre0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000002c0)={0x18, 0x4000000, {0x4, @remote, 'erspan0\x00'}})
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1)
socket$pppoe(0x18, 0x1, 0x0) (async)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, 'veth1_to_bridge\x00'}}) (async)
socket(0x18, 0x5, 0x5c) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="a3", 0x2}, 0x50) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1) (async)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x301, 0x70bd29, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) (async)
connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'gre0\x00'}}, 0x1e) (async)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000002c0)={0x18, 0x4000000, {0x4, @remote, 'erspan0\x00'}}) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async)

1.952409494s ago: executing program 1 (id=3449):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000400))
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x40d, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000280)={0x3a, @empty, 0x4e20, 0x0, 'sed\x00', 0x0, 0x0, 0x11}, 0x2c)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040)

1.828051318s ago: executing program 4 (id=3451):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
pipe(&(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x11, 0x0, 0x8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r7=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000200)={r7}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={r7}, 0x8)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0)
sendfile(r2, r4, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000000))
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="bc0100001900010000000000000000002001000000000000000000000000000000000000000000000000ffffe000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1bc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
pipe(&(0x7f0000000580)) (async)
socket$inet6(0xa, 0x802, 0x0) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x11, 0x0, 0x8) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket(0x2, 0x80805, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000200)={r7}, &(0x7f0000000340)=0x8) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={r7}, 0x8) (async)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) (async)
sendfile(r2, r4, 0x0, 0x0) (async)
ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="bc0100001900010000000000000000002001000000000000000000000000000000000000000000000000ffffe000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d2777fa2599144a1bafca000000000000000000000000000000004010500951414aa000000000000000000000000000000003c00000000000000ac1414000000000000000000000000000000000000000000000000000000000000e38300008000000000000000000000000000bb000000003300000000000000e00000010000000000000000000000000000000000000000000000000000000000000000e0000001000000000000000000000000000000006c00000000000000ac140100000000000000000000000000000000000000000000ff01000000000000000000000000000100000000320000000000000000000000000000000000000000000000000000000000000000000000fd35eea9d25f089f6164bb0ffab4b9b1c476258020450fc7d5af10f543daa1803331601e9b7bd305fd8d67a7b01d16b8b5d850cf8c190780c9189928a22c2697c271eeb43aea"], 0x1bc}}, 0x0) (async)

1.664053839s ago: executing program 1 (id=3454):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x150, r1, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x16, 0x4}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10000}, {0x6, 0x16, 0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x5}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xdaf}, {0x5, 0x12, 0x1}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001) (async)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000002e00)=""/4094, 0xffe}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000340)=""/113, 0x71}], 0x5}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x920, 0x2}}, @restrict={0x4, 0x0, 0x0, 0xb, 0x2}, @datasec={0xd, 0x6, 0x0, 0xf, 0x2, [{0x4, 0x7, 0x1}, {0x3, 0x2, 0x3}, {0x3, 0x5, 0x5}, {0x1, 0x0, 0x6}, {0x4, 0xfffffffb, 0xfffffff8}, {0x5, 0x7f, 0x6}], "cbc6"}]}, {0x0, [0x2e, 0x2e, 0x30, 0x0, 0x2e]}}, &(0x7f00000005c0)=""/102, 0x9b, 0x66, 0x0, 0x3}, 0x28)

1.663501753s ago: executing program 4 (id=3455):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x10}}, 0x0)
r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000400)=0x10)
setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000440)={0xc, {{0x2, 0x4e21, @local}}}, 0x88)
recvmmsg(r1, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5}}], 0x4000000000000b7, 0x2, 0x0)
read(r1, &(0x7f0000000200)=""/7, 0x7)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x10, r0}, 0x18)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b00000000000329078000000000000ffffffffffffffff90780100000004000000d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b01acae6f69001443db8d53af54944d4894a87f20c65bfb8e0c8cfb6738f5e54b3dc7c070b4d66f0f9565df74d2653a13d554fee0e7be27c873db314d"], 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
recvmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000480)=""/217, 0xd9}], 0x1}, 0x10101)
recvfrom$l2tp(r5, &(0x7f0000000780)=""/103, 0x67, 0x0, 0x0, 0x0)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
recvmmsg(r6, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000000700)=""/86, 0x56}], 0x1}, 0x7}], 0x1, 0x2, 0x0)
r7 = socket$inet(0x2, 0x5, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r7, 0x0)
recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r3, 0x2f, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x10000000, 0x80000008}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
close(r9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))

1.547945043s ago: executing program 1 (id=3457):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r2, 0x6, 0x1, 0x0, &(0x7f00000000c0)=0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001f40)=@delchain={0x6d0, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x6a0, 0x2, [@TCA_FLOW_EMATCHES={0x4}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_EMATCHES={0x680, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x134, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0x4}, {0x5, 0x1, 0x1, 0x0, 0x9, 0x2, 0x2}}}, @TCF_EM_META={0xa4, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x5ca}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0xd, 0x1}, {0xa68}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0xf9, 0x1}, {0x5, 0xf, 0x2}}}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="3f4c5f9b95769e65", @TCF_META_TYPE_VAR="718205", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="426f93748d5a"]}, @TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_VAR="d67ab55ce8", @TCF_META_TYPE_VAR="6a140b1df3", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="06d0551389683a5f", @TCF_META_TYPE_VAR="ae70f7cc3fec2e79", @TCF_META_TYPE_VAR="a4", @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x306, 0x2, 0x1}, {0x8, 0x9, 0x1}}}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_VAR="853b1a50df5e3e", @TCF_META_TYPE_VAR="14d15021c66ff412", @TCF_META_TYPE_VAR='IP', @TCF_META_TYPE_VAR="aa7130b1a653136e82"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x1, 0x1}, {0x2, 0x8, 0x2}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x81}, {{0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x48, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1f, 0x4, 0x1}, {0x3, 0x3, 0x1}}}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_VAR="120ba1dc521e92", @TCF_META_TYPE_VAR="b9", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1b, 0x2}, {0xa203, 0x4}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x1, 0x2}, {0x9, 0xce, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0xc, 0x0, 0x0, {{0x4}, {0x9, 0x80000001, 0xfff9, 0x5, 0xc, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x164, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfff9, 0x7, 0x8}, {{0x2, 0x1}, {0x2}}}}, @TCF_EM_META={0xec, 0x3, 0x0, 0x0, {{0xf, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="ce20ffdde325958b", @TCF_META_TYPE_VAR="cfd8611a014d6429f7", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x881, 0xc0, 0x1}, {0x400, 0xa, 0x2}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="a4c6f4", @TCF_META_TYPE_VAR="84dcfce8b59bbf", @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="5c7111563eb4", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x31, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="bfa6930c839ff452cbc7", @TCF_META_TYPE_VAR="3a16356a084f35477941", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="e1f62ea6", @TCF_META_TYPE_VAR="97"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="1c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xf7, 0x4}, {0xf54, 0x9, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x45}, {0x60, 0x1}}}, @TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="bb2d2cc5d1", @TCF_META_TYPE_VAR="baf0a29c2ab6c8", @TCF_META_TYPE_VAR="35b41f2288acaaaf", @TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_META={0x14, 0x1, 0x0, 0x0, {{0x6, 0x4, 0xf}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8000, 0x8, 0x8}, {0x1, 0x3, 0x3}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x3}, {0x7, 0x3, 0x3, 0x2, 0x4, 0x1, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xa40, 0x8, 0x2}, {0x3, 0x6}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x400, 0x2, 0x6}, {0x2, 0x2, 0x2, "1f6e"}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x471, 0x3, 0xd}, {0x4, 0xffffffff, 0x6, 0x7fffffff}}}]}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0x8}, {0x0, 0x3, 0x9, 0x5, 0x1, 0x0, 0x1}}}, @TCF_EM_META={0x5c, 0x2, 0x0, 0x0, {{0x3, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5ab, 0xc3, 0x2}, {0x81, 0xf8, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2b, 0x9, 0xfab65467efb6a7f2}, {0x20, 0x7, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc84, 0x1, 0x1}, {0x5, 0x6, 0x1}}}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="978c0f", @TCF_META_TYPE_VAR="2d581b", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_VAR="d1d1c8eb5dfa26e79339", @TCF_META_TYPE_VAR="9c8cd10dbb", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="81c567dc"]}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x2}, {0x7, 0x1, 0x0, '+'}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x89, 0x3, 0x2}, {0xffffffff, 0x4, 0x0, 0x3ff}}}]}, @TCA_EMATCH_TREE_LIST={0x2a8, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x500, 0x3, 0x64e}, {0x33fe, 0x0, 0x7, 0xef}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x1, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_IPT={0xc8, 0x3, 0x0, 0x0, {{0x1, 0x9, 0x9}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x7c, 0x5, "5cc1fb8ed05817e322d97f469805c7bba846e7f7f7904b6a78a38854957245259199030243296d25a2e54558bde0ecd8cc563b67025c365ff03f5b4e1760d38f2f8f84256b39489244d96e917a88260e929867464d6b84aa76cbf6a228d5fe2a0fb7c0d74e715ecb60c9dcc9e4be9a40807814493d6199d2"}]}}, @TCF_EM_META={0x98, 0x1, 0x0, 0x0, {{0x75b, 0x4, 0x7}, [@TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_VAR="65b9d186", @TCF_META_TYPE_VAR="6775c1917374268b91e0", @TCF_META_TYPE_VAR="71c2", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="cbfe56bb24e1f9"]}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_VAR='Q', @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="3638a111aec7b64250a3", @TCF_META_TYPE_VAR="af6ee86e91ce15", @TCF_META_TYPE_VAR="a84517d44d28282f", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x5}, {0x3, 0x5}}}, @TCA_EM_META_LVALUE={0x28, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="25455a0786db328646", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="28f49f", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0xfa, 0x2}, {0x8aa, 0x2, 0x2}}}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1000, 0x3, 0xb}, {0x6, 0x49, 0x8, 0x9}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x2}, {0x1, 0x0, 0xaa5, 0x6}}}, @TCF_EM_CONTAINER={0x70, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xf}, "ed167f25fd3ba5f5db463ea12c2925e277695af373c30ada1d969f6266ce3931f7946cf6d0c85c36c7dfce0ab72708298f56d67277951cfb4c60fa8f08ff093c41e794e808798fdab41b7036e1bd5e874c9c92dfed432f03e2df5f18351646dbad3d"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xc, 0x3, 0x3}, {0xa0, 0x5, 0xc, 0x6}}}, @TCF_EM_META={0x3c, 0x3, 0x0, 0x0, {{0x7, 0x4, 0xff}, [@TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR='v\"', @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="1bc946", @TCF_META_TYPE_VAR="879dde6c493646", @TCF_META_TYPE_VAR="9ce941a15f"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x7}, {{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x1}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x5, 0x1, 0x1000}, {0x7ff, 0xfffffff5, 0x7, 0x4, 0x3, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7d, 0x1, 0xa}, {0xa, 0x6, 0x4, 0x6, 0x0, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x2}, {{0x1, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1}}}}]}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}]}}]}, 0x6d0}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r6 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r6, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e)
ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000001f00))
r7 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0x7f000011}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x2)
ioctl$PPPIOCBRIDGECHAN(r8, 0x40047435, &(0x7f0000000200)=0x1)
sendmmsg(r5, &(0x7f0000000a00)=[{{&(0x7f0000000580)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000780)=[{0x0}, {&(0x7f00000006c0)="99ef73233afb34f6482efde99c9a52fcacf219feccbd3a5f5c815b93c0f255a72c9e43418a9a669ff4a1ef201af4e9c368cd2a", 0x33}], 0x2, 0x0}}], 0x1, 0x240080cb)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000010843000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2e200200000000000c1d5f1bae5e0a1bcd58002b8008000700030000"], 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014)
socket(0x12, 0x800, 0x4)
recvmmsg(r3, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400})
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000f40)={<r9=>0x0, 0x12d, "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"}, &(0x7f0000000600)=0x135)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r9, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000007910300000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0xfffffffffffffff9, 0xd, 0x1, 0x5, 0x1, 0x7, 0x0, 0x2, 0x29, 0xfffffffffffffffe, 0x700, 0x8000000000000000, 0x19c, 0x9, 0x100000000000]}, &(0x7f0000000100)=0x100)

1.303938576s ago: executing program 0 (id=3461):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}]}]}, 0x28}}, 0x20000080)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000010000104fdffffff0200000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dacb5f31a24001280110001006272696467655f736c4c7665000000000c0005800800030002000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000000)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x7c, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x7c}}, 0x20004084)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x3, 0x5, 0x8, 0x400, 0x4, 0xc0000009, r5})

1.15611834s ago: executing program 1 (id=3462):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x90}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1)

1.054497105s ago: executing program 1 (id=3464):
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@gettaction={0x14, 0x32, 0x20, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x8004)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2e, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x698472dc6a8b23b9, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x10040000)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x32c, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}}, 0x0)

972.061509ms ago: executing program 0 (id=3465):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x98, 0xa, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1a}, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6e}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0xad}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x4004490) (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0x4}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000209000b0073797a31000000000900010073797a300000000008000a4000000004"], 0x250}}, 0x0)

971.51776ms ago: executing program 3 (id=3466):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="3504000040000511d25a35400c0002000200002037153e370c04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000a40)="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"/1031, 0x407}], 0x2}, 0x10049014)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, 0x0, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
close(0xffffffffffffffff)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000001000000000000000000", @ANYRES32=0x0, @ANYBLOB="7bbf0100000000001c0012800800010067726500100002800400120097000700e000000500cd6f6f"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0)

914.133808ms ago: executing program 1 (id=3467):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={<r1=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r1, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x4e22, @multicast2}}}, 0x88)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000000500050002000000050001000600"], 0x44}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000040))
bind$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x80, 0x3, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xa}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3426}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2c}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x401}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8810}, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x1}, @TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
pipe(&(0x7f0000000680)={<r8=>0xffffffffffffffff})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2000004, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0xf, &(0x7f0000000500)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd}, @exit, @jmp={0x5, 0x1, 0x4, 0x6, 0x8, 0x10, 0x8}, @generic={0x9, 0x8, 0xb, 0x6eb5, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0x5, 0x5, 0x4, 0x8, 0xfffffffffffffff0}], &(0x7f0000000640)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f00000006c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0xf, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000880)=[r9, r10, r11], &(0x7f00000008c0)=[{0x0, 0x3, 0x6}, {0x4, 0x4, 0x3, 0x3}, {0x3, 0x1, 0x6, 0xb}], 0x10, 0xfffffff1}, 0x94)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000380)="d89aafe5dc40b86af7348577cbbeeff0460603ae9ab22cedfedef4058f8ce276e4d96d54daf9e42e33ed3ef09cd7ff617ecf6ba4d6780b871714aca48e255110d59f", 0x42)
r12 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)

849.672502ms ago: executing program 0 (id=3468):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xfffffffffffffd38}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) (async)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r1}, 0x18)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r5, &(0x7f0000000280)={0x1d, r1, 0x0, {0x0, 0xff}}, 0x18) (async)
sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}}, 0x80ea)
r6 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
r7 = socket(0x2, 0xa, 0x0) (rerun: 64)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x87}, {0x6}]}, 0x10)
r8 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async, rerun: 32)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x140002, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0x7c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xf}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_EMATCHES={0x48, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x38, 0x1, 0x0, 0x0, {{0xa, 0x4, 0x84}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x4, 0x2}, {0xe573, 0x1, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1}, {0x0, 0x1, 0x1}}}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR='b', @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004884}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x20, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4)

636.106907ms ago: executing program 4 (id=3469):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x7ff, 0x4)
recvmmsg(r1, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0xf64}], 0x1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xfc}}, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x3a, 0x0, &(0x7f00000000c0))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x14, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r3, 0x0, 0x3}, 0x18)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002580), 0x0, 0x0, 0x0, 0x20000010}, 0x0)

635.718313ms ago: executing program 3 (id=3470):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9df7cd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x55)
recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1}, 0x60)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r2, 0x20, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x0, 0x0}}, 0x10)
socket$inet6_sctp(0xa, 0x801, 0x84)

564.506035ms ago: executing program 0 (id=3471):
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffb}, 0x48) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000003c0007010000000000400000017c00000400fc800c00018006000600800a0000080002800400728014000700000100"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

544.542959ms ago: executing program 3 (id=3472):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="957bc3871f54da01138019ebbb3587e39b0af28eea1dc1c5b6b0f27c1111d0f8b71e196a9bb19b466172df083b602f37901653c0b41e9ea3218f6680923cb44fcde97805fe3eaf057d955a0de7c0d566c5549dfde8c0703c0f633cd8c5f98fc10f484ec2ab2611e94e", 0x69}, {&(0x7f0000000380)="eed4fbdbc377aaa1f97890499828239f7ce11e4611999338e6da1d1d2deca77c81b916aaaa389580ca6ed38e8d0330bc2f0cce161f489d863da5d3adc46e5c8160ccc889403f20dae567d9969efc4355fd27ba3d6e13f78bf9e57c4e3b723dd7b8540917d4c38bd6d37c70c43032fb1cae37de9f57c3bf053fa22d788b5629b444cd80b5c5257223c6d71b597d9c77a96733b2c18bf7adbe30f66959119bbed4e063dbbad441", 0xa6}, {&(0x7f0000000440)="b9c8ea7741e24130b11e66fa8118a2cda01b3f0acd758075e1c9d7949dcabe424ea007a38ff2c228d330852a68f81c6d7ce898bd7e628ae1242068c2e81985e9ee753e1d02319449f6c878bb5726dbc4eda9097bc6315fec72ff234fb9f26512af7b6470", 0x64}, {&(0x7f0000000300)}], 0x4, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x1, 0x40004)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000048510000006", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a00000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) (async)
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
r4 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001400)=@nat={'nat\x00', 0x1b, 0x5, 0xbd0, 0x100, 0x100, 0xffffffff, 0x100, 0x280, 0xb38, 0xb38, 0xffffffff, 0xb38, 0xb38, 0x5, &(0x7f0000000740), {[{{@ip={@local, @dev={0xac, 0x14, 0x14, 0x32}, 0x7fffffff, 0xffffff00, 'wg0\x00', 'veth1_to_team\x00', {}, {}, 0x6, 0x1, 0x1}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x8}}, @common=@ah={{0x30}, {[0x1]}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1e, @rand_addr=0x64010102, @multicast1, @icmp_id=0x68, @gre_key=0x1}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @private=0xa010101, @icmp_id=0x64, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x0, 0xf5, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @icmp_id=0x68, @port=0x4e23}}}}, {{@ip={@loopback, @rand_addr=0x64010102, 0xff, 0xff000000, 'sit0\x00', 'wlan0\x00', {0xff}, {0xff}, 0x62, 0x3, 0x48}, 0x0, 0x880, 0x8b8, 0x0, {}, [@common=@addrtype={{0x30}, {0x20, 0x20, 0x1}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {0x6}, {0x401}, {0x7f}, {0x4}, {0x5, 0x2}, {0x5400, 0x2}, {0x5, 0x1}, {0x7ff, 0x1}, {0x6}, {0x9, 0x2}], [{0xb, 0xfffffff7}, {0xb8, 0x1}, {0x75, 0x80000001}, {0xfffffffb, 0x9}, {0x4, 0x9}, {0x3c2, 0x3}, {0x1ff, 0x51ce}, {0x4, 0x1}, {0x200, 0x8001}, {0x78000, 0x1}, {0x4, 0x6}], 0x0, 0xb}, {[{0xa557}, {0x0, 0x2}, {0xff}, {0x10, 0x3}, {0x8480, 0x2}, {0x1ff, 0x2}, {}, {0x8, 0x2}, {0x2, 0x1}, {0x1000, 0x2}, {0x10001}], [{0x69b, 0xc}, {}, {0x1, 0xf96}, {0x38f4143f, 0x4}, {0x4, 0x5a}, {0x3, 0x8}, {0x3, 0x9}, {0xfff}, {0xb, 0x2}, {0x3, 0x13a}, {0x6, 0x2}], 0x8, 0x5}, {[{0x3}, {0x0, 0x3}, {0x800, 0x1}, {0x5, 0x2}, {0x26b0}, {0x9, 0x1}, {0xffff}, {0x10}, {0x1, 0x3}, {0x10000, 0x3}, {0x0, 0x3}], [{0xb}, {0x4, 0x80000000}, {0x5, 0x80000000}, {0x1d10, 0x1}, {0x9, 0x2}, {0x5, 0x80000001}, {0xfffffffa, 0x4}, {0x9, 0x5}, {0x9, 0x4}, {0x8, 0xd8}, {0xffff, 0x8001}], 0x4, 0x7}, {[{0x9, 0x3}, {0x3c5, 0x1}, {0x8, 0x3}, {0x9}, {0x0, 0x2}, {0x7, 0x2}, {0x8, 0x3}, {0x4a, 0x1}, {0x6, 0x2}, {0x7, 0x1}, {0x6, 0x2}], [{0x7a43, 0x5}, {0x2, 0x3}, {0x451, 0xffff}, {0x0, 0x2}, {0x9c000000, 0x7ff}, {0x4, 0xa117}, {0x7fffffff, 0x2}, {0xa, 0x3}, {0xfffffffe, 0xe}, {0x5, 0x4}, {0x9, 0x401}], 0x5, 0x3}, {[{0x9, 0x2}, {0x2ad3}, {0x8}, {0x180000, 0x2}, {0x9, 0x1}, {0x1, 0x3}, {0x6}, {0x40}, {0x0, 0x1}, {0xfb, 0x3}, {0x80000001, 0x2}], [{0x4, 0x3}, {0x2}, {0x7}, {0x9, 0xe}, {0x0, 0x5}, {0x0, 0x7}, {0x7, 0x5}, {0x38}, {0x2, 0x2}, {0x9, 0xa}, {0x857, 0x20}], 0x8, 0xa}, {[{0x794, 0x1}, {0x2, 0x2}, {0x7}, {0x200}, {0x6, 0x3}, {0x5, 0x3}, {0xaa, 0x2}, {0x1, 0x3}, {0x2800000, 0x1}, {0x8000, 0x3}, {0x5, 0x3}], [{0x1ff, 0xfffffffe}, {0xe8d1, 0x4}, {0x6ef9, 0xfffffffe}, {0x200, 0x8000}, {0x2, 0x1}, {0x4, 0x3ff}, {0x4, 0x8001}, {0x7e2b, 0x10}, {0x4, 0x1}, {0x55, 0x6}, {0x0, 0x4}], 0x9, 0x8}, {[{0x3, 0x1}, {0x9, 0x1}, {0xc6}, {0x4}, {0x7ff, 0x3}, {0x2}, {0x9c00, 0x2}, {0x4, 0x3}, {0xfffffffe, 0x3}, {0x3, 0x3}, {0xfffffff8, 0x3}], [{0x535, 0x9}, {0x90000, 0x2e9}, {0xe, 0x3}, {0x80000000, 0x4}, {0x9, 0xa}, {0x863e, 0x8}, {0x3, 0xc}, {0x10001, 0xffffff00}, {0x80000001, 0x8}, {0x7f, 0xc}, {0xfff, 0x2}], 0x7, 0x4}, {[{0x97, 0x1}, {0x5, 0x2}, {0xc, 0x1}, {0x723, 0x2}, {0xc000000, 0x3}, {0xb, 0x2}, {0x6, 0x1}, {0x2}, {0xfffffffb, 0x2}, {0xf, 0x3}, {0x2, 0x1}], [{0x1ff, 0x7}, {0x8, 0x3}, {0x10001, 0x9}, {0x1ff, 0x6}, {0x60e2d86e, 0x2}, {0xb, 0x7fffffff}, {0x200, 0x9}, {0x9, 0x3}, {0x8, 0x9}, {0x1, 0xd4f}, {0x2, 0x6}], 0x8, 0x5}, {[{0x6, 0x2}, {0xd0f, 0x1}, {0x800, 0x3}, {0x6}, {0x86c, 0x1}, {0x3, 0x2}, {0x400, 0x1}, {0x66}, {}, {}, {0x0, 0x3}], [{0x4, 0x3}, {0xe788, 0x7fff}, {0x7f, 0x41a}, {0x6, 0x5}, {0xa13b, 0xe785}, {0xd35, 0x9}, {0x7, 0x2}, {0x6a, 0x700000}, {0x6, 0xfffffffc}, {0x6, 0xc6f}, {0x6, 0x2}], 0x6, 0xb}, {[{0x6, 0x2}, {0x8, 0x1}, {0x9, 0x2}, {0x9, 0x2}, {0x2, 0x3}, {0x1, 0x2}, {0x7}, {0x8, 0x7}, {0x4}, {0x7f, 0x1}, {0x7}], [{0x557, 0xfffffff9}, {0x8, 0x2}, {0x5, 0x1}, {0x4d3, 0x8}, {0x300, 0x6}, {0x7, 0x5}, {0x8, 0x8}, {0x8, 0xb1a}, {0x4, 0x9}, {0x7, 0x1}, {0x6, 0xfffff800}], 0x7, 0x4}, {[{0x0, 0x1}, {0x0, 0x2}, {0x4}, {0x4, 0x3}, {0x7, 0x2}, {0x1, 0x2}, {0xa, 0x2}, {0x81, 0x3}, {0x6}, {0x6, 0x2}, {0x4}], [{0x40c, 0x1}, {0x8, 0x6}, {0x4, 0x9}, {0xf, 0x4}, {0x2}, {0x80, 0xfffffffd}, {0x1, 0xff}, {0xcc98, 0x6be0}, {0xa, 0x4}, {0x1a6, 0x2}, {0xd, 0x9}], 0x6, 0x3}], 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @private=0xa010101, @loopback, @port=0x4e21, @port=0x4e20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xc30) (async, rerun: 32)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (rerun: 64)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newnexthop={0x18, 0x68, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x10}}, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x800)

339.6764ms ago: executing program 4 (id=3473):
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$netlink(r2, 0x10e, 0xc, 0x0, &(0x7f0000000000))
accept4(r1, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\b'], 0x20}}, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(r0, 0x0, 0x40001)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="4b7527bd7000fbdbdf2507000000080001006a00000008000300", @ANYRES32=0x0, @ANYBLOB="000300000000000000c9b3308893fb95067066f92bf0ecd320f4145ad5f14c0bf2042e72904286b17cfa853497f870f528c8bd4638da7da9200be9c835f21dd9e55f0ea80cd41f291532cc93cd8aadd11586fb0ff10b5abf83f6e9833d83f3445846f2ac362a87a5c03179dffadb8b11d07ab3b0d963831d0843b5adf7f869a55db3fa4bcd8f16579f5dea9ed6ad882d694a282169f96d60a506d8a52a64d72918ba701e9bcd4cd7a0ae1178d0cc3e48ca8e882782876a83f628f0416e6dcd3763a6d3e1f69775fd895ec4c57e8fe7a09765a932cc1647e2"], 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x8884)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
recvmsg(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/86, 0x56}, {&(0x7f00000003c0)=""/106, 0x6a}, {&(0x7f0000000440)=""/126, 0x7e}, {&(0x7f0000000680)=""/226, 0xe2}, {&(0x7f0000000200)=""/55, 0x37}], 0x5}, 0x0)

339.282722ms ago: executing program 3 (id=3474):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10)
sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf250200000000000000060007000b0000000c000880050004000100000008000600f200000008000500", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x40, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendto$inet(r2, &(0x7f00000002c0)="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", 0x103c, 0x4000044, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000380)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x24008040)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x9}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xa5f}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x83}]}}}]}, 0x54}}, 0x4040011)
socket(0x18, 0x80000, 0x304)

339.03147ms ago: executing program 0 (id=3475):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100))
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x80002, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]})
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e20, 0x3, 'none\x00', 0x30, 0x4, 0x68}, 0x2c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a000008000a"], 0x2c}, 0x1, 0xc00000000000000}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r4)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)={0x24, r5, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '[\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}}, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r6, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r8 = accept(r6, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f00000001c0), &(0x7f00000002c0)=@tcp6=r8, 0x2}, 0x20)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000200)=0x8)

172.187085ms ago: executing program 3 (id=3476):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x83)
ioctl$sock_netdev_private(r0, 0x8924, &(0x7f0000000000))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x3}}]}}}]}, 0x40}}, 0x0)

167.803532ms ago: executing program 0 (id=3477):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
recvmsg(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x11, &(0x7f0000000080)=0x5, 0x4)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

0s ago: executing program 3 (id=3478):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$key(0xf, 0x3, 0x2) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800)
ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000000280)={0x3, &(0x7f0000000200)=[{0x3, 0x6c, &(0x7f0000000040)="30091b51dcae84d0993f36a1ce03b6ee197b7a6fd7d41565c22bc08cd0fc4b511b2d100f7687a57e893415ef13025f5954a2ad6aa83757fa4eb0c02f90a1cb93e3966e9fda95c83d62db77a62a70d42eb67d75fdce0e6b05e33cf57694213e372eaf7ffe68c45052969ab793", 0x1}, {0x7, 0xce, &(0x7f00000000c0)="f1d1b1abe864056d65ed4e19f122c62da091944a8742f203d31e14b7f3bc8c80659fc984c5c7bad5fc9b3a99fcdb560c5c242931db04a131f204f7d3ba88e8ec672772d762ef184858296bd2e8c0518806ddfc55a315a2db33d14dd1163c7feaac823932bf11c08024a3430e7f3fcc39210db73bdee9c21157124cf64dc6f49da11255a492209c45745c17b1c47705263f0be6404265484c87b8363713dee7c61ac3017ac163a19d7c290d9b9f01e949d5b3e0ec38e604da9b417d7a018cb74b77044fac1add56150e3b7034813a", 0x1, 0x1}, {0x1, 0xc, &(0x7f00000001c0)="53f6254dd3ece4d49bc2935d", 0x1}]}) (async, rerun: 64)
sendmsg$key(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x2, 0xa, 0x0, 0x7, 0x2}, 0x10}}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_police={0x34, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "9aaa"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0)

kernel console output (not intermixed with test programs):

[T13004] team0: No ports can be present during mode change
[  343.195655][T13002] tipc: Resetting bearer <eth:syzkaller0>
[  343.223051][T12998] tipc: Resetting bearer <eth:syzkaller0>
[  343.243169][T12998] tipc: Disabling bearer <eth:syzkaller0>
[  343.287243][T13013] veth1_to_team: left promiscuous mode
[  343.294060][T13013] veth1_to_team: left allmulticast mode
[  343.310997][T13013] team_slave_1: left promiscuous mode
[  343.317315][T13013] team_slave_1: left allmulticast mode
[  343.325426][T13013] veth0_to_batadv: left promiscuous mode
[  343.331640][T13013] veth0_to_batadv: left allmulticast mode
[  343.337906][T13013] batadv_slave_0: left promiscuous mode
[  343.350498][T13013] batadv_slave_0: left allmulticast mode
[  343.356492][T13013] xfrm0: left promiscuous mode
[  343.362165][T13013] xfrm0: left allmulticast mode
[  343.367698][T13013] veth0_to_hsr: left promiscuous mode
[  343.374196][T13013] veth0_to_hsr: left allmulticast mode
[  343.380611][T13013] veth1_to_hsr: left promiscuous mode
[  343.386608][T13013] veth1_to_hsr: left allmulticast mode
[  343.393619][T13013] hsr0: left promiscuous mode
[  343.399517][T13013] hsr0: left allmulticast mode
[  343.441926][T13013] hsr_slave_0: left allmulticast mode
[  343.456438][T13013] hsr_slave_1: left allmulticast mode
[  343.501001][T13013] veth1_virt_wifi: left promiscuous mode
[  343.527701][T13013] veth1_virt_wifi: left allmulticast mode
[  343.543110][T13013] veth0_virt_wifi: left promiscuous mode
[  343.548823][T13013] veth0_virt_wifi: left allmulticast mode
[  343.556872][T13013] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  343.599181][T13013] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  343.606473][T13013] veth1_macvtap: left allmulticast mode
[  343.629653][T13026] netlink: 'syz.0.1885': attribute type 1 has an invalid length.
[  343.639765][T13013] veth0_macvtap: left allmulticast mode
[  343.645628][T13013] macvtap0: left promiscuous mode
[  343.651304][T13013] macvtap0: left allmulticast mode
[  343.656659][T13013] macsec0: left promiscuous mode
[  343.663026][T13013] macsec0: left allmulticast mode
[  343.686187][T13013] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  343.701522][T13013] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  343.709727][T13013] netdevsim netdevsim2 netdevsim1: left promiscuous mode
[  343.716940][T13013] netdevsim netdevsim2 netdevsim1: left allmulticast mode
[  343.727218][T13013] netdevsim netdevsim2 netdevsim2: left promiscuous mode
[  343.735257][T13013] netdevsim netdevsim2 netdevsim2: left allmulticast mode
[  343.758637][T13013] netdevsim netdevsim2 netdevsim3: left promiscuous mode
[  343.776390][T13013] netdevsim netdevsim2 netdevsim3: left allmulticast mode
[  343.796903][T13013] mac80211_hwsim hwsim8 wlan0: left promiscuous mode
[  343.821445][T13013] mac80211_hwsim hwsim8 wlan0: left allmulticast mode
[  343.849929][T13013] gretap1: left promiscuous mode
[  343.855064][T13013] gretap1: left allmulticast mode
[  343.860710][T13013] ipip0: left promiscuous mode
[  343.865641][T13013] ipip0: left allmulticast mode
[  343.871445][T13013] vlan2: left promiscuous mode
[  343.876386][T13013] bridge0: left promiscuous mode
[  343.883219][T13013] vlan2: left allmulticast mode
[  343.888241][T13013] bridge0: left allmulticast mode
[  343.893867][T13013] gtp0: left promiscuous mode
[  343.898692][T13013] gtp0: left allmulticast mode
[  343.904287][T13013] batadv1: left promiscuous mode
[  343.909531][T13013] batadv1: left allmulticast mode
[  343.914934][T13013] veth2: left promiscuous mode
[  343.923336][T13013] veth2: left allmulticast mode
[  343.928589][T13013] veth3: left promiscuous mode
[  343.934232][T13013] veth3: left allmulticast mode
[  343.943244][T13013] bond1: left promiscuous mode
[  343.948675][T13013] bond1: left allmulticast mode
[  344.007902][T13026] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  344.075121][ T8711] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  344.101382][ T8711] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  344.256490][ T8711] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  344.277332][ T8711] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  344.301730][ T8711] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  344.350414][ T8711] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  344.399138][ T8711] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  344.428581][ T8711] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.127910][T13089] __nla_validate_parse: 15 callbacks suppressed
[  345.127932][T13089] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.1905'.
[  345.246507][T13094] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1906'.
[  345.327286][T13098] IPv6: NLM_F_CREATE should be specified when creating new route
[  346.003023][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1922'.
[  346.230540][T13165] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1926'.
[  346.252665][T13170] netlink: 'syz.4.1925': attribute type 10 has an invalid length.
[  346.285998][T13170] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.293402][T13170] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.405057][T13174] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  346.876212][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1935'.
[  346.922441][T13199] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  346.972812][T13201] IPVS: Error connecting to the multicast addr
[  347.067879][T13206] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1938'.
[  347.086536][T13209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1939'.
[  347.159637][T13209] bond0: entered promiscuous mode
[  347.179649][T13209] bond_slave_0: entered promiscuous mode
[  347.205224][T13209] bond0: left promiscuous mode
[  347.219393][T13209] bond_slave_0: left promiscuous mode
[  347.266778][T13216] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1941'.
[  347.353576][T13217] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1940'.
[  347.424152][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1944'.
[  347.460772][T13222] netlink: 'syz.3.1944': attribute type 25 has an invalid length.
[  347.487218][T13222] netlink: 'syz.3.1944': attribute type 1 has an invalid length.
[  347.501989][T13222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.656890][T13235] netlink: 'syz.0.1948': attribute type 1 has an invalid length.
[  347.679939][T13236] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  347.697561][T13235] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  348.116018][T13269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  348.141748][ T8705] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  348.176152][T13260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  348.433853][T13285] netlink: 'syz.2.1962': attribute type 7 has an invalid length.
[  348.534083][T13297] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  348.730487][T13307] tap0: tun_chr_ioctl cmd 1074025678
[  348.736141][T13307] tap0: group set to 0
[  348.945386][T13318] syzkaller1: entered promiscuous mode
[  348.962077][T13318] syzkaller1: entered allmulticast mode
[  349.210895][T13334] netlink: 'syz.3.1980': attribute type 7 has an invalid length.
[  349.496948][T13336] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  349.591686][T13338] netlink: 'syz.0.1982': attribute type 1 has an invalid length.
[  349.803757][T13340] bond8: (slave gretap3): making interface the new active one
[  349.828600][T13340] bond8: (slave gretap3): Enslaving as an active interface with an up link
[  349.879708][T13343] 8021q: adding VLAN 0 to HW filter on device bond8
[  350.567355][T13379] __nla_validate_parse: 6 callbacks suppressed
[  350.567376][T13379] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1998'.
[  350.677199][T13383] netlink: 'syz.3.2000': attribute type 11 has an invalid length.
[  350.696645][T13383] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2000'.
[  350.918729][T13392] dvmrp0: entered allmulticast mode
[  351.516004][T13421] netlink: 'syz.3.2012': attribute type 1 has an invalid length.
[  351.699038][T13427] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2013'.
[  351.712900][T13427] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2013'.
[  351.739996][T13422] lo speed is unknown, defaulting to 1000
[  351.959593][T13436] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2014'.
[  352.153849][T13446] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2017'.
[  352.379852][T13462] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2020'.
[  352.555230][T13471] netlink: 'syz.1.2023': attribute type 1 has an invalid length.
[  352.575004][T13471] netlink: 'syz.1.2023': attribute type 2 has an invalid length.
[  352.671416][T13472] syzkaller0: entered promiscuous mode
[  352.677281][T13472] syzkaller0: entered allmulticast mode
[  354.427522][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2029'.
[  354.539706][T13498] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2031'.
[  354.591657][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2031'.
[  356.166277][T13519] __nla_validate_parse: 2 callbacks suppressed
[  356.166298][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2036'.
[  356.230875][T13513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.352963][T13534] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  356.368667][T13513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.393167][T13513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.464081][T13511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.606627][T13544] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  356.631557][T13546] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  356.892866][T13560] netlink: 'syz.1.2048': attribute type 18 has an invalid length.
[  357.169631][T13580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2053'.
[  357.187583][T13579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2053'.
[  357.374046][T13588] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2055'.
[  357.415895][T13588] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2055'.
[  357.730603][T13607] netlink: 'syz.4.2060': attribute type 1 has an invalid length.
[  358.603990][T13627] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[  358.619474][T13651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2075'.
[  358.965534][T13667] netlink: 'syz.2.2080': attribute type 75 has an invalid length.
[  358.977881][T13667] netlink: 'syz.2.2080': attribute type 1 has an invalid length.
[  359.726540][T13709] IPVS: length: 8 != 1152
[  359.742565][T13704] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2091'.
[  359.872340][T13711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2094'.
[  359.934116][T13714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2096'.
[  359.948226][T13715] openvswitch: netlink: Duplicate or invalid key (type 0).
[  359.973569][T13715] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.076919][T13721] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2099'.
[  360.171022][T13725] (unnamed net_device) (uninitialized): option mode: invalid value (22)
[  361.366950][T13799] macvlan0: entered promiscuous mode
[  361.375778][T13799] macvlan0: entered allmulticast mode
[  361.386887][T13799] syz_tun: entered allmulticast mode
[  361.405040][T13799] syz_tun: entered promiscuous mode
[  361.431679][T13799] team0: Port device macvlan0 added
[  361.515404][T13805] __nla_validate_parse: 4 callbacks suppressed
[  361.515428][T13805] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2121'.
[  361.538369][T13805] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  361.623440][T13806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2119'.
[  361.664761][T13806] openvswitch: netlink: Unknown nsh attribute 0
[  361.724317][T13824] netlink: 212316 bytes leftover after parsing attributes in process `syz.2.2122'.
[  361.773395][T13806] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.102988][T13836] Bluetooth: MGMT ver 1.23
[  362.205654][T13843] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2129'.
[  362.830990][T13882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2138'.
[  363.660653][T13938] netlink: 'syz.3.2156': attribute type 3 has an invalid length.
[  363.691598][T13938] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2156'.
[  363.749503][T13942] tipc: Enabled bearer <eth:caif0>, priority 10
[  363.827411][T13945] netlink: 'syz.4.2160': attribute type 3 has an invalid length.
[  363.890453][T13952] lo speed is unknown, defaulting to 1000
[  363.915289][T13951] sctp: [Deprecated]: syz.2.2161 (pid 13951) Use of int in maxseg socket option.
[  363.915289][T13951] Use struct sctp_assoc_value instead
[  364.066053][T13955] 8021q: VLANs not supported on rose0
[  364.233902][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2165'.
[  364.258743][T13962] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  364.266520][T13962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2165'.
[  364.662067][T13994] wlan0: mtu less than device minimum
[  364.938105][T14009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2179'.
[  364.967037][T14011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2179'.
[  365.256567][T14029] netlink: 'syz.1.2184': attribute type 3 has an invalid length.
[  365.432781][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.479005][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.598479][T14101] ip6gre1: entered allmulticast mode
[  366.724876][T14113] __nla_validate_parse: 7 callbacks suppressed
[  366.724899][T14113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2214'.
[  366.751700][T14113] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2214'.
[  366.821991][T14116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2214'.
[  366.844772][T14116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2214'.
[  366.854698][T14119] netlink: 'syz.3.2215': attribute type 58 has an invalid length.
[  366.864163][T14119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2215'.
[  367.114338][T14132] syzkaller0: entered promiscuous mode
[  367.120373][T14132] syzkaller0: entered allmulticast mode
[  367.353485][   T55] block nbd1: Possible stuck request ffff888025030000: control (read@0,1024B). Runtime 210 seconds
[  367.364893][   T55] block nbd1: Possible stuck request ffff8880250301c0: control (read@1024,1024B). Runtime 210 seconds
[  367.377218][   T55] block nbd1: Possible stuck request ffff888025030380: control (read@2048,1024B). Runtime 210 seconds
[  367.388471][   T55] block nbd1: Possible stuck request ffff888025030540: control (read@3072,1024B). Runtime 210 seconds
[  367.460393][T14126] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  369.085274][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2230'.
[  369.133433][T14178] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2229'.
[  369.170682][T14178] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2229'.
[  369.322563][T14191] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  369.370161][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2233'.
[  369.380326][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2233'.
[  369.775538][T14220] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  369.793744][T14220] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  369.808254][T14220] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  369.897070][T14224] netlink: 'syz.3.2242': attribute type 83 has an invalid length.
[  370.943953][T14262] netlink: 'syz.3.2253': attribute type 1 has an invalid length.
[  371.384954][T14292] netlink: 'syz.0.2264': attribute type 3 has an invalid length.
[  371.732306][T14312] __nla_validate_parse: 9 callbacks suppressed
[  371.732329][T14312] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2270'.
[  372.955865][T14351] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2281'.
[  373.235934][T14358] syzkaller1: entered promiscuous mode
[  373.244741][T14358] syzkaller1: entered allmulticast mode
[  373.304472][T14362] netlink: 'syz.1.2287': attribute type 13 has an invalid length.
[  373.459201][T14362] bridge0: port 4(dummy0) entered blocking state
[  373.465967][T14362] bridge0: port 4(dummy0) entered listening state
[  373.472809][T14362] bridge0: port 3(batadv0) entered blocking state
[  373.479443][T14362] bridge0: port 3(batadv0) entered listening state
[  373.486289][T14362] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.493555][T14362] bridge0: port 1(bridge_slave_0) entered listening state
[  373.527376][T14362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  373.599649][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.611386][T14377] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2290'.
[  374.052559][T14397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2299'.
[  374.085278][T14401] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  374.108659][T14397] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2299'.
[  374.108715][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2300'.
[  374.144736][T14404] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2301'.
[  374.156045][T14397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2299'.
[  374.169904][T14404] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2301'.
[  374.337660][T14411] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2304'.
[  374.396756][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.549469][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.914728][T14444] netlink: 'syz.0.2312': attribute type 1 has an invalid length.
[  374.957061][T14444] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  375.002576][T14444] veth1: entered promiscuous mode
[  375.011721][T14444] bond9: (slave veth1): Enslaving as a backup interface with a down link
[  375.605301][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.626400][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.879685][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.001453][T14489] netlink: 'syz.4.2325': attribute type 30 has an invalid length.
[  376.117373][T14496] IPVS: set_ctl: invalid protocol: 44 172.30.0.1:20003
[  376.200246][T14502] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.727836][T14523] netlink: 'syz.0.2334': attribute type 7 has an invalid length.
[  376.729255][T14522] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.751111][T14523] netlink: 'syz.0.2334': attribute type 8 has an invalid length.
[  376.911816][T14530] __nla_validate_parse: 5 callbacks suppressed
[  376.911836][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2338'.
[  376.913067][T14529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2337'.
[  376.936763][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2338'.
[  376.964959][T14498] netlink: 'syz.3.2327': attribute type 2 has an invalid length.
[  377.110784][T14538] netlink: 'syz.4.2340': attribute type 14 has an invalid length.
[  377.303219][T14550] IPVS: Error connecting to the multicast addr
[  377.544130][T14569] netlink: 'syz.1.2347': attribute type 11 has an invalid length.
[  377.603974][T14569] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2347'.
[  378.005558][T14590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2353'.
[  378.330593][T14603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  378.395768][T14608] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2359'.
[  378.439569][T14608] gretap0: entered promiscuous mode
[  378.546840][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2360'.
[  378.572396][T14615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2360'.
[  378.667538][T14619] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2362'.
[  378.678284][T14619] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  379.283381][T14650] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  379.383669][T14654] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2373'.
[  379.499856][T14663] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  379.524428][T14663] IPVS: set_ctl: invalid protocol: 108 172.20.20.44:0
[  379.633139][T14670] netem: unknown loss type 0
[  379.640337][T14670] erspan0: entered allmulticast mode
[  379.749105][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.795287][T14681] geneve4: entered promiscuous mode
[  379.806711][T14681] geneve4: entered allmulticast mode
[  379.815173][ T8693] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0
[  379.846015][ T8693] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0
[  379.878411][ T8693] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0
[  379.898171][ T8693] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0
[  379.966207][T14684] netlink: 'syz.4.2386': attribute type 5 has an invalid length.
[  380.103803][T14690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  380.437032][T14708] pim6reg527: entered allmulticast mode
[  381.149590][T14744] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  381.930898][T14778] netlink: 'syz.3.2418': attribute type 25 has an invalid length.
[  382.003350][T14778] lo speed is unknown, defaulting to 1000
[  382.090222][T14783] lo: left promiscuous mode
[  382.179113][T14783] ip6gretap0: left allmulticast mode
[  382.205455][T14788] __nla_validate_parse: 13 callbacks suppressed
[  382.205477][T14788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2422'.
[  382.265092][T14788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2422'.
[  382.291050][T14783] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  382.903917][T14817] netlink: 'syz.1.2427': attribute type 12 has an invalid length.
[  382.919251][T14817] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2427'.
[  383.031806][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2428'.
[  383.045855][T14820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2428'.
[  383.778414][T14855] sctp: [Deprecated]: syz.2.2439 (pid 14855) Use of int in maxseg socket option.
[  383.778414][T14855] Use struct sctp_assoc_value instead
[  384.106162][T14874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2444'.
[  384.470141][T14893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2447'.
[  384.613210][T14890] lo speed is unknown, defaulting to 1000
[  385.106922][T14904] netlink: 'syz.1.2450': attribute type 1 has an invalid length.
[  385.149531][T14904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2450'.
[  385.170267][T14904] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2450'.
[  385.308867][T14916] openvswitch: netlink: Flow actions attr not present in new flow.
[  385.352810][T14916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2453'.
[  385.815924][T14929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  386.350611][T14957] sctp: [Deprecated]: syz.0.2466 (pid 14957) Use of int in maxseg socket option.
[  386.350611][T14957] Use struct sctp_assoc_value instead
[  386.585170][T14969] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  386.612679][T14969] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.963581][T14984] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  387.108435][T14991] netlink: 'syz.3.2477': attribute type 10 has an invalid length.
[  387.142394][T14991] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.151780][T14991] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.279617][T14995] __nla_validate_parse: 6 callbacks suppressed
[  387.279638][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2476'.
[  387.295342][T14995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2476'.
[  387.329001][T14995] netlink: 'syz.4.2476': attribute type 5 has an invalid length.
[  387.447125][T15001] netlink: 'syz.1.2479': attribute type 24 has an invalid length.
[  387.815468][T15028] dummy0: left allmulticast mode
[  387.829101][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.836037][T15028] bridge0: port 4(dummy0) entered disabled state
[  387.937874][T15028] batman_adv: batadv0: Adding interface: dummy0
[  387.952558][T15028] batman_adv: batadv0: Interface activated: dummy0
[  388.025302][T15023] batadv0: mtu less than device minimum
[  388.036155][T15023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  388.048287][T15023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  388.060670][T15023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  388.586514][T15057] netlink: 'syz.1.2498': attribute type 1 has an invalid length.
[  388.641651][T15057] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.2498'.
[  389.102725][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2507'.
[  389.114540][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  389.115244][    C0] bridge0: port 3(batadv0) entered learning state
[  389.384017][T15094] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2511'.
[  389.803549][T15125] netlink: 'syz.4.2517': attribute type 1 has an invalid length.
[  389.841330][T15125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2517'.
[  389.867644][T15131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2520'.
[  390.063347][T15134] netlink: 'syz.2.2521': attribute type 83 has an invalid length.
[  390.327501][T15158] lo: entered promiscuous mode
[  390.357007][T15158] net_ratelimit: 17 callbacks suppressed
[  390.357030][T15158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  390.411325][T15163] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  390.458327][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2530'.
[  390.475451][T15163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2530'.
[  390.573913][T15169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2533'.
[  391.838955][T15196] netlink: 'syz.4.2541': attribute type 29 has an invalid length.
[  391.884035][T15206] netlink: 'syz.0.2543': attribute type 10 has an invalid length.
[  391.900556][T15199] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  391.909934][T15196] digital: digital_start_poll: Unknown protocol
[  391.957321][T15196] netlink: 'syz.4.2541': attribute type 29 has an invalid length.
[  391.967209][T15206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  391.984614][T15204] lo speed is unknown, defaulting to 1000
[  392.366043][T15220] __nla_validate_parse: 3 callbacks suppressed
[  392.366063][T15220] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2549'.
[  392.855058][T15239] openvswitch: netlink: Flow key attr not present in new flow.
[  393.124225][T15247] delete_channel: no stack
[  393.152968][T15251] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2558'.
[  393.179388][T15251] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2558'.
[  393.201677][T15247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2556'.
[  393.518345][T15261] netlink: 'syz.4.2561': attribute type 10 has an invalid length.
[  393.522187][T15267] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2562'.
[  393.574162][T15266] netlink: 'syz.1.2564': attribute type 6 has an invalid length.
[  393.607036][T15266] netlink: 'syz.1.2564': attribute type 1 has an invalid length.
[  393.617729][T15266] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2564'.
[  393.640998][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2565'.
[  393.754495][T15271] netlink: 'syz.4.2565': attribute type 1 has an invalid length.
[  393.763528][T15271] netlink: 'syz.4.2565': attribute type 2 has an invalid length.
[  393.889888][T15285] netlink: 'syz.1.2568': attribute type 5 has an invalid length.
[  393.991184][T15289] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  395.275367][T15311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2578'.
[  395.301074][T15316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  395.319749][T15316] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  395.328495][T15316] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  395.367074][T15317] syzkaller0: entered promiscuous mode
[  395.377414][T15317] syzkaller0: entered allmulticast mode
[  395.496066][T15333] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2583'.
[  395.505970][T15316] tipc: Resetting bearer <eth:syzkaller0>
[  395.516053][T15334] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2583'.
[  395.547996][T15316] tipc: Disabling bearer <eth:syzkaller0>
[  395.563621][T15333] gretap0: entered promiscuous mode
[  395.572925][T15334] 0ªî{X¹¦: renamed from gretap0
[  395.608343][T15334] 0ªî{X¹¦: left promiscuous mode
[  395.616820][T15334] 0ªî{X¹¦: entered allmulticast mode
[  395.626651][T15334] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  395.774974][T15342] lo speed is unknown, defaulting to 1000
[  395.813571][T15344] macvlan3: entered promiscuous mode
[  395.825479][T15345] netlink: 'syz.3.2586': attribute type 13 has an invalid length.
[  395.842693][T15344] macvlan3: entered allmulticast mode
[  395.896276][T15348] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20004
[  395.918226][T15348] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20004
[  395.946349][T15345] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.953665][T15345] bridge0: port 2(bridge_slave_1) entered forwarding state
[  395.961391][T15345] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.968604][T15345] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.013423][T15345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  396.107008][ T8698] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  396.932616][T15393] tipc: Enabling of bearer <eth:vlan1> rejected, failed to enable media
[  396.983156][T15394] validate_nla: 1 callbacks suppressed
[  396.983180][T15394] netlink: 'syz.3.2597': attribute type 6 has an invalid length.
[  397.001574][T15394] netlink: 'syz.3.2597': attribute type 5 has an invalid length.
[  397.425253][T15412] __nla_validate_parse: 7 callbacks suppressed
[  397.425277][T15412] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2603'.
[  397.446657][   T55] block nbd1: Possible stuck request ffff888025030000: control (read@0,1024B). Runtime 240 seconds
[  397.458334][   T55] block nbd1: Possible stuck request ffff8880250301c0: control (read@1024,1024B). Runtime 240 seconds
[  397.470888][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2602'.
[  397.473041][   T55] block nbd1: Possible stuck request ffff888025030380: control (read@2048,1024B). Runtime 240 seconds
[  397.488648][T15412] openvswitch: netlink: Key type 10512 is out of range max 32
[  397.491298][   T55] block nbd1: Possible stuck request ffff888025030540: control (read@3072,1024B). Runtime 240 seconds
[  397.648208][T15419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2602'.
[  397.944838][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2606'.
[  398.277339][T15455] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2614'.
[  398.311465][T15455] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2614'.
[  398.360360][T15455] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2614'.
[  399.035923][T15493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2626'.
[  399.048129][T15495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2627'.
[  399.133072][T15503] netlink: 'syz.2.2628': attribute type 4 has an invalid length.
[  399.321413][T15509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2632'.
[  399.368216][T15509] netlink: 'syz.1.2632': attribute type 1 has an invalid length.
[  399.390616][T15509] netlink: 'syz.1.2632': attribute type 2 has an invalid length.
[  399.740568][T15527] pim6reg: entered allmulticast mode
[  399.772417][T15527] vlan1: left allmulticast mode
[  400.149441][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  400.322682][T15563] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.467012][T15572] netlink: 'syz.3.2653': attribute type 1 has an invalid length.
[  400.545914][T15572] 8021q: adding VLAN 0 to HW filter on device bond7
[  400.562456][T15572] bond6: (slave bond7): making interface the new active one
[  400.571225][T15572] bond6: (slave bond7): Enslaving as an active interface with an up link
[  400.667298][T15572] 8021q: adding VLAN 0 to HW filter on device bond6
[  402.411535][T15704] sctp: [Deprecated]: syz.4.2694 (pid 15704) Use of int in max_burst socket option deprecated.
[  402.411535][T15704] Use struct sctp_assoc_value instead
[  402.476062][T15705] __nla_validate_parse: 13 callbacks suppressed
[  402.476087][T15705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2692'.
[  402.539280][T15705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2692'.
[  402.580283][T15705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2692'.
[  402.621682][T15705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2692'.
[  402.661004][T15717] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2699'.
[  402.670618][T15718] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2699'.
[  402.697781][T15717] netlink: 'syz.1.2699': attribute type 1 has an invalid length.
[  402.722144][T15718] netlink: 'syz.1.2699': attribute type 1 has an invalid length.
[  403.176832][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2706'.
[  403.214059][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2706'.
[  403.234494][T15746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2706'.
[  403.613302][T15757] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  403.620241][T15757] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  404.015921][T15778] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2716'.
[  404.230775][T15785] geneve3: entered promiscuous mode
[  404.431562][T15797] ip6gre2: entered allmulticast mode
[  404.469146][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.470056][    C0] bridge0: port 3(batadv0) entered forwarding state
[  404.484281][    C0] bridge0: topology change detected, propagating
[  404.491111][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.498404][    C0] bridge0: topology change detected, propagating
[  404.540095][ T5928] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (0); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c
[  404.709472][ T8710] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (0); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c
[  404.793043][T15817] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  404.833617][T15815] tipc: Disabling bearer <eth:syzkaller0>
[  404.883085][T15822] netlink: 'syz.1.2732': attribute type 1 has an invalid length.
[  405.014019][T15829] netlink: 'syz.0.2735': attribute type 1 has an invalid length.
[  405.067811][T15834] batman_adv: batadv0: Interface deactivated: dummy0
[  405.079567][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.090120][    T9] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (0); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c
[  405.126847][T15834] batman_adv: batadv0: Removing interface: dummy0
[  405.167719][T15834] bridge0: port 3(batadv0) entered disabled state
[  405.210366][T15848] delete_channel: no stack
[  405.236964][T15834] bridge_slave_0: left allmulticast mode
[  405.259502][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.275991][T15834] bridge_slave_0: left promiscuous mode
[  405.302193][T15834] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.348681][T15834] bond0: (slave bridge_slave_1): Releasing backup interface
[  405.371762][T15834] bond0: (slave bond_slave_0): Releasing backup interface
[  405.396006][T15834] bond0: (slave bond_slave_1): Releasing backup interface
[  405.414914][T15834] team0: Port device team_slave_0 removed
[  405.426309][T15834] team0: Port device team_slave_1 removed
[  405.434559][T15834] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  405.442673][T15834] batman_adv: batadv0: Removing interface: batadv_slave_0
[  405.467033][T15834] bond1: (slave gretap2): Releasing active interface
[  405.496172][T15851] bond0: entered promiscuous mode
[  405.503847][T15851] geneve1: entered promiscuous mode
[  405.512823][T15851] bond0: left promiscuous mode
[  405.517768][T15851] geneve1: left promiscuous mode
[  405.844557][T15875] netlink: 'syz.0.2747': attribute type 21 has an invalid length.
[  405.855742][T15875] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  406.093171][T15890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  406.118363][T15890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  406.122884][T15888] 8021q: adding VLAN 0 to HW filter on device bond8
[  406.158534][T15890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  406.171624][T15890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  406.184819][T15890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  406.197074][T15890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  406.892810][T15932] netlink: 'syz.3.2765': attribute type 10 has an invalid length.
[  406.996085][T15935] 8021q: adding VLAN 0 to HW filter on device bond5
[  407.010664][T15935] bond5: entered allmulticast mode
[  407.383388][T15965] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  407.484303][T15962] xfrm1: entered promiscuous mode
[  407.955392][T15992] __nla_validate_parse: 12 callbacks suppressed
[  407.955414][T15992] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2783'.
[  408.275743][T16001] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2787'.
[  408.446376][T16011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  408.501422][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2790'.
[  408.616084][T16022] IPVS: Error connecting to the multicast addr
[  408.914408][T16035] 0ªî{X¹¦: entered promiscuous mode
[  408.932065][T16035] vlan2: entered promiscuous mode
[  408.949182][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  409.208178][T16049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2802'.
[  409.234546][T16055] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2803'.
[  409.341004][T16056] netlink: 'syz.2.2805': attribute type 1 has an invalid length.
[  409.536476][T16061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2805'.
[  409.579926][T16056] veth9: entered promiscuous mode
[  409.646778][T16056] bond9: (slave veth9): Enslaving as a backup interface with a down link
[  409.677997][T16078] 8021q: VLANs not supported on ip6gre0
[  409.692716][T16061] 8021q: adding VLAN 0 to HW filter on device bond9
[  409.848125][T16091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2816'.
[  409.866524][T16092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2814'.
[  409.928489][T16097] netlink: 'syz.1.2815': attribute type 3 has an invalid length.
[  409.967164][T16097] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2815'.
[  409.991449][T16097] netlink: 'syz.1.2815': attribute type 22 has an invalid length.
[  410.019112][T16097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2815'.
[  410.885029][T16147] netlink: 'syz.0.2826': attribute type 1 has an invalid length.
[  411.417333][T16179] netlink: 'syz.3.2834': attribute type 1 has an invalid length.
[  411.814552][T16195] netlink: 'syz.4.2840': attribute type 11 has an invalid length.
[  412.036374][T16210] netlink: 'syz.2.2846': attribute type 29 has an invalid length.
[  412.046052][T16210] netlink: 'syz.2.2846': attribute type 29 has an invalid length.
[  412.097627][T16216] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  412.118268][T16216] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1)
[  412.268121][T16227] netlink: set zone limit has 8 unknown bytes
[  412.277348][T16228] netlink: set zone limit has 8 unknown bytes
[  412.291330][T16227] netlink: 'syz.0.2852': attribute type 6 has an invalid length.
[  412.322575][T16230] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0
[  413.223655][T16258] __nla_validate_parse: 15 callbacks suppressed
[  413.223677][T16258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2863'.
[  413.367518][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  413.381737][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  413.395078][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  413.408587][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  413.420354][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  413.785816][T16270] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2866'.
[  413.940458][T16278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2864'.
[  413.949484][T16261] lo speed is unknown, defaulting to 1000
[  414.133233][T16287] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  414.239709][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2870'.
[  414.288585][T16287] netlink: 'syz.0.2870': attribute type 10 has an invalid length.
[  414.297428][T16287] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  414.312703][T16287] batman_adv: batadv0: Removing interface: 
0!

[  414.521183][T16287] bridge_slave_0: left allmulticast mode
[  414.527247][T16287] bridge_slave_0: left promiscuous mode
[  414.541503][T16287] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.573078][T16287] bridge_slave_1: left allmulticast mode
[  414.578808][T16287] bridge_slave_1: left promiscuous mode
[  414.595951][T16287] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.611742][T16287] bond0: (slave bond_slave_0): Releasing backup interface
[  414.623038][T16287] team0: Port device team_slave_0 removed
[  414.632124][T16287] team0: Port device team_slave_1 removed
[  414.639921][T16287] batman_adv: batadv0: Removing interface: batadv_slave_0
[  414.648205][T16287] batman_adv: batadv0: Removing interface: batadv_slave_1
[  414.658781][T16287] bond3: (slave veth5): Releasing active interface
[  414.677910][T16287] bond8: (slave gretap3): Releasing active interface
[  414.716376][T16287] bond9: (slave ip6gretap1): Releasing backup interface
[  414.726887][T16287] bond9: (slave ip6gretap1): the permanent HWaddr of slave - a2:e6:55:70:bf:f8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  414.773454][T16287] bond9: (slave veth1): Releasing backup interface
[  414.840680][T16302] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.920410][T16299] tipc: Resetting bearer <eth:syzkaller0>
[  414.997408][T16304] syzkaller0: entered promiscuous mode
[  415.008302][T16311] netlink: 'syz.0.2874': attribute type 13 has an invalid length.
[  415.023701][T16304] syzkaller0: entered allmulticast mode
[  415.041659][T16298] tipc: Resetting bearer <eth:syzkaller0>
[  415.143035][T16298] tipc: Disabling bearer <eth:syzkaller0>
[  415.178023][T16321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2876'.
[  415.202027][T16311] macvtap0: entered allmulticast mode
[  415.230339][T16311] macvtap0: refused to change device tx_queue_len
[  415.382176][T16328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2879'.
[  415.420790][T16328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2879'.
[  415.448509][T16328] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2879'.
[  415.509280][ T5160] Bluetooth: hci5: command tx timeout
[  415.605085][T16334] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  415.730305][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2883'.
[  415.913624][T16261] chnl_net:caif_netlink_parms(): no params data found
[  415.914637][T16345] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2883'.
[  416.296392][T16367] netlink: 'syz.0.2886': attribute type 1 has an invalid length.
[  416.336307][T16359] geneve2: entered promiscuous mode
[  416.342260][T16359] geneve2: entered allmulticast mode
[  416.349475][ T8711] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  416.377404][ T8711] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  416.462775][ T8711] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  416.473207][T16261] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.482789][T16261] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.490538][T16261] bridge_slave_0: entered allmulticast mode
[  416.498861][T16261] bridge_slave_0: entered promiscuous mode
[  416.517070][ T8711] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  416.538513][T16261] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.555360][T16261] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.566242][T16261] bridge_slave_1: entered allmulticast mode
[  416.577739][T16261] bridge_slave_1: entered promiscuous mode
[  416.711676][T16261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  416.726201][T16261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  416.806837][T16261] team0: Port device team_slave_0 added
[  416.854035][T16261] team0: Port device team_slave_1 added
[  417.006484][T16394] wg1: entered promiscuous mode
[  417.023995][T16261] batman_adv: batadv0: Adding interface: batadv_slave_0
[  417.043657][T16261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.079311][T16261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  417.105134][T16261] batman_adv: batadv0: Adding interface: batadv_slave_1
[  417.116853][T16261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.153338][T16261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  417.351907][T16261] hsr_slave_0: entered promiscuous mode
[  417.356537][T16416] IPVS: ip_vs_add_dest(): server weight less than zero
[  417.367080][T16261] hsr_slave_1: entered promiscuous mode
[  417.387426][T16261] debugfs: 'hsr0' already exists in 'hsr'
[  417.396419][T16261] Cannot create hsr debugfs directory
[  417.508727][T16430] netlink: 'syz.3.2905': attribute type 11 has an invalid length.
[  417.536650][T16430] netlink: 'syz.3.2905': attribute type 11 has an invalid length.
[  417.591814][ T5160] Bluetooth: hci5: command tx timeout
[  417.714468][T16441] netlink: 'syz.3.2909': attribute type 2 has an invalid length.
[  418.049666][T16452] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  418.058210][T16452] syzkaller0: entered promiscuous mode
[  418.076158][T16452] syzkaller0: entered allmulticast mode
[  418.155859][T16261] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  418.167918][T16261] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.178617][T16261] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  418.249620][T16459] tipc: Resetting bearer <eth:syzkaller0>
[  418.268761][T16451] tipc: Resetting bearer <eth:syzkaller0>
[  418.287607][T16451] tipc: Disabling bearer <eth:syzkaller0>
[  418.303931][T16462] __nla_validate_parse: 9 callbacks suppressed
[  418.303951][T16462] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2918'.
[  418.335708][T16261] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  418.346723][T16261] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.365098][T16261] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  418.476066][T16261] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  418.496966][T16261] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.516114][T16261] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  418.605498][T16261] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  418.624957][T16261] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.637787][T16261] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  418.640289][T16471] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2922'.
[  418.672455][T16471] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2922'.
[  418.691390][T16471] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20001
[  418.925230][T16261] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  418.960223][T16261] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  418.977705][T16261] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  418.997388][T16261] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  418.998021][T16479] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2925'.
[  419.044030][T16481] netlink: 'syz.3.2924': attribute type 1 has an invalid length.
[  419.130701][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2927'.
[  419.172190][T16481] netlink: 'syz.3.2924': attribute type 21 has an invalid length.
[  419.186518][T16494] netlink: 576 bytes leftover after parsing attributes in process `syz.2.2927'.
[  419.211206][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2924'.
[  419.220836][T16493] netlink: 576 bytes leftover after parsing attributes in process `syz.2.2927'.
[  419.271553][T16491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2924'.
[  419.328844][T16500] veth11: entered promiscuous mode
[  419.342436][T16500] bond8: (slave veth11): Enslaving as a backup interface with a down link
[  419.364117][T16491] 8021q: adding VLAN 0 to HW filter on device bond8
[  419.376726][T16506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2929'.
[  419.403369][T16261] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.464004][T16261] 8021q: adding VLAN 0 to HW filter on device team0
[  419.541350][ T8697] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.548546][ T8697] bridge0: port 1(bridge_slave_0) entered forwarding state
[  419.582831][T16512] netlink: 'syz.4.2932': attribute type 29 has an invalid length.
[  419.601257][T16512] netlink: 'syz.4.2932': attribute type 29 has an invalid length.
[  419.630737][ T8699] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.637982][ T8699] bridge0: port 2(bridge_slave_1) entered forwarding state
[  419.664519][T16517] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  419.673084][ T5160] Bluetooth: hci5: command tx timeout
[  419.680338][T16514] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  419.696823][T16517] syzkaller0: entered promiscuous mode
[  419.703292][T16517] syzkaller0: entered allmulticast mode
[  419.794633][T16514] tipc: Resetting bearer <eth:syzkaller0>
[  419.845185][T16513] tipc: Resetting bearer <eth:syzkaller0>
[  419.913555][T16513] tipc: Disabling bearer <eth:syzkaller0>
[  420.185585][T16540] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  420.304724][T16547] syzkaller0: create flow: hash 3230587051 index 1
[  420.351269][T16545] erspan0: left allmulticast mode
[  420.515077][ T8699] syzkaller0: tun_net_xmit 76
[  420.525676][ T8699] syzkaller0: tun_net_xmit 48
[  420.540108][ T5930] syzkaller0: tun_net_xmit 76
[  420.559677][    T9] syzkaller0: tun_net_xmit 76
[  420.594722][T16261] 8021q: adding VLAN 0 to HW filter on device batadv0
[  420.741100][T16261] veth0_vlan: entered promiscuous mode
[  420.772447][T16261] veth1_vlan: entered promiscuous mode
[  420.882378][T16261] veth0_macvtap: entered promiscuous mode
[  420.910736][T16261] veth1_macvtap: entered promiscuous mode
[  420.937910][T16567] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  420.957719][T16261] batman_adv: batadv0: Interface activated: batadv_slave_0
[  421.002493][T16261] batman_adv: batadv0: Interface activated: batadv_slave_1
[  421.027392][T16541] syzkaller0: delete flow: hash 3230587051 index 1
[  421.749574][ T5160] Bluetooth: hci5: command tx timeout
[  422.834115][ T8697] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  422.891385][ T8697] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  422.908539][ T8697] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  422.948396][ T8697] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.205561][ T8697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.235075][ T8697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.321294][T16605] __nla_validate_parse: 7 callbacks suppressed
[  423.321315][T16605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2958'.
[  423.327578][ T8711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.357039][ T8711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.439703][T16605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2958'.
[  423.807525][T16628] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2966'.
[  423.845123][T16627] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2964'.
[  423.859900][T16628] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2966'.
[  423.900435][T16627] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2964'.
[  424.009528][T16634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2968'.
[  424.059465][T16634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2968'.
[  424.108828][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2969'.
[  424.308461][T16649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2971'.
[  424.429841][T16651] xfrm2: entered promiscuous mode
[  424.562707][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  424.573148][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  424.581832][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  424.598042][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  424.618242][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  424.694195][T16663] netlink: 'syz.0.2975': attribute type 23 has an invalid length.
[  424.798288][T16657] lo speed is unknown, defaulting to 1000
[  425.041934][T16677] netlink: 'syz.0.2980': attribute type 3 has an invalid length.
[  425.238682][T16680] netlink: 'syz.0.2981': attribute type 4 has an invalid length.
[  425.275711][T16684] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  425.660210][T16697] 8021q: adding VLAN 0 to HW filter on device bond6
[  425.738336][T16700] vlan2: entered allmulticast mode
[  425.743834][T16700] bond6: entered allmulticast mode
[  425.929858][T16715] netlink: 'syz.0.2992': attribute type 1 has an invalid length.
[  425.937843][T16715] netlink: 'syz.0.2992': attribute type 1 has an invalid length.
[  426.000990][T16717] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20003
[  426.229167][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  426.258312][T16657] chnl_net:caif_netlink_parms(): no params data found
[  426.709451][ T5160] Bluetooth: hci3: command tx timeout
[  426.736077][T16757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  426.760934][T16754] (unnamed net_device) (uninitialized): down delay (33587546) is not a multiple of miimon (640), value rounded to 33587200 ms
[  426.822126][T16657] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.831000][T16657] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.838311][T16657] bridge_slave_0: entered allmulticast mode
[  426.847986][T16657] bridge_slave_0: entered promiscuous mode
[  426.858105][T16657] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.865920][T16657] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.875496][T16657] bridge_slave_1: entered allmulticast mode
[  426.884414][T16657] bridge_slave_1: entered promiscuous mode
[  426.953061][T16657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  426.990581][T16657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  427.074943][T16657] team0: Port device team_slave_0 added
[  427.095198][T16657] team0: Port device team_slave_1 added
[  427.170894][T16657] batman_adv: batadv0: Adding interface: batadv_slave_0
[  427.178145][T16657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  427.210975][T16657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  427.225273][T16657] batman_adv: batadv0: Adding interface: batadv_slave_1
[  427.233181][T16657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  427.260230][T16657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  427.420509][T16657] hsr_slave_0: entered promiscuous mode
[  427.442900][T16657] hsr_slave_1: entered promiscuous mode
[  427.466639][T16657] debugfs: 'hsr0' already exists in 'hsr'
[  427.476537][T16657] Cannot create hsr debugfs directory
[  427.510430][   T55] block nbd1: Possible stuck request ffff888025030000: control (read@0,1024B). Runtime 270 seconds
[  427.521481][   T55] block nbd1: Possible stuck request ffff8880250301c0: control (read@1024,1024B). Runtime 270 seconds
[  427.535841][   T55] block nbd1: Possible stuck request ffff888025030380: control (read@2048,1024B). Runtime 270 seconds
[  427.547877][   T55] block nbd1: Possible stuck request ffff888025030540: control (read@3072,1024B). Runtime 270 seconds
[  427.550390][T16785] netlink: 'syz.0.3012': attribute type 5 has an invalid length.
[  427.584596][T16788] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  427.746760][T16794] geneve2: entered promiscuous mode
[  428.356720][T16657] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.368408][T16657] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.379963][T16657] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  428.391428][T16657] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  428.485681][T16830] __nla_validate_parse: 12 callbacks suppressed
[  428.485702][T16830] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3025'.
[  428.486964][T16657] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.514674][T16657] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.526550][T16657] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  428.537753][T16657] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  428.647668][T16657] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.670477][T16657] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.683798][T16657] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  428.698187][T16657] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  428.807883][T16657] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.808433][ T5160] Bluetooth: hci3: command tx timeout
[  428.818929][T16657] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.835416][T16657] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  428.846437][T16657] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  429.186524][T16848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3032'.
[  429.243315][T16657] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  429.297095][T16657] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  429.331424][T16850] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3033'.
[  429.355791][T16657] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  429.388779][T16850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3033'.
[  429.406023][T16657] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  429.416772][T16850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3033'.
[  429.857153][T16886] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  429.884756][T16657] 8021q: adding VLAN 0 to HW filter on device bond0
[  429.904994][T16886] tipc: Resetting bearer <eth:syzkaller0>
[  429.937975][T16885] tipc: Disabling bearer <eth:syzkaller0>
[  429.975523][T16657] 8021q: adding VLAN 0 to HW filter on device team0
[  430.017734][ T8699] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.025031][ T8699] bridge0: port 1(bridge_slave_0) entered forwarding state
[  430.043804][ T8687] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.051080][ T8687] bridge0: port 2(bridge_slave_1) entered forwarding state
[  430.785690][T16657] 8021q: adding VLAN 0 to HW filter on device batadv0
[  430.870258][ T5160] Bluetooth: hci3: command tx timeout
[  431.036388][T16657] veth0_vlan: entered promiscuous mode
[  431.098042][T16657] veth1_vlan: entered promiscuous mode
[  431.211005][T16657] veth0_macvtap: entered promiscuous mode
[  431.256052][T16657] veth1_macvtap: entered promiscuous mode
[  431.297523][T16943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3053'.
[  431.314774][T16657] batman_adv: batadv0: Interface activated: batadv_slave_0
[  431.382990][T16657] batman_adv: batadv0: Interface activated: batadv_slave_1
[  431.413304][T16936] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3051'.
[  431.461367][ T8699] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  431.482402][ T8699] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  431.508406][ T8697] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  431.530361][ T8697] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  431.752960][ T8687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.772845][ T8687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.837226][ T8699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.845495][ T8699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.012298][T16959] netlink: 'syz.3.2962': attribute type 1 has an invalid length.
[  432.049295][T16959] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2962'.
[  432.058404][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2962'.
[  432.578101][T16982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3064'.
[  432.674337][T16988] netlink: 'syz.3.3066': attribute type 11 has an invalid length.
[  432.949971][ T5852] Bluetooth: hci3: command tx timeout
[  432.987534][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  433.005626][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  433.014440][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  433.025883][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  433.035465][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  433.228255][T16995] lo speed is unknown, defaulting to 1000
[  433.336149][T17004] netlink: 'syz.2.3070': attribute type 10 has an invalid length.
[  433.351413][T17004] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  433.704403][T17017] netlink: 'syz.0.3076': attribute type 6 has an invalid length.
[  433.768017][T17018] netlink: 'syz.3.3074': attribute type 1 has an invalid length.
[  433.907029][T17012] team0 (unregistering): Port device team_slave_0 removed
[  433.931418][T17012] team0 (unregistering): Port device team_slave_1 removed
[  433.980972][T17027] __nla_validate_parse: 1 callbacks suppressed
[  433.980993][T17027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3077'.
[  434.056747][T17029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3078'.
[  434.120672][T17029] netlink: 'syz.2.3078': attribute type 9 has an invalid length.
[  434.164209][T17032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3079'.
[  434.242897][T17029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3078'.
[  434.280022][T17029] netlink: 'syz.2.3078': attribute type 9 has an invalid length.
[  434.309738][T17037] netlink: 'syz.3.3080': attribute type 1 has an invalid length.
[  434.340665][T17037] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3080'.
[  434.685050][T17043] pim6reg1: entered promiscuous mode
[  434.699240][T17043] pim6reg1: entered allmulticast mode
[  434.934933][T17061] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  435.016563][T17061] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3092'.
[  435.119316][ T5160] Bluetooth: hci2: command tx timeout
[  435.211490][T17076] geneve3: entered promiscuous mode
[  435.216774][T17076] geneve3: entered allmulticast mode
[  435.301270][ T8711] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  435.391366][ T8710] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  435.420766][T17087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3099'.
[  435.421000][ T8710] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  435.443348][T17087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3099'.
[  435.512319][ T8710] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[  435.569629][T16995] chnl_net:caif_netlink_parms(): no params data found
[  435.677559][T17094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3101'.
[  435.891110][T16995] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.898610][T16995] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.910535][T16995] bridge_slave_0: entered allmulticast mode
[  435.919254][T16995] bridge_slave_0: entered promiscuous mode
[  435.922231][T17109] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3105'.
[  435.930625][T16995] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.942555][T16995] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.956664][T16995] bridge_slave_1: entered allmulticast mode
[  435.964969][T16995] bridge_slave_1: entered promiscuous mode
[  436.043001][T16995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.082931][T16995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.204424][T17118] vlan0: entered allmulticast mode
[  436.218075][T17118] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  436.238442][T16995] team0: Port device team_slave_0 added
[  436.262076][T16995] team0: Port device team_slave_1 added
[  436.345755][T16995] batman_adv: batadv0: Adding interface: batadv_slave_0
[  436.354741][T16995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.384174][T16995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  436.411648][T16995] batman_adv: batadv0: Adding interface: batadv_slave_1
[  436.419260][T16995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.446800][T16995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  436.469900][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.532504][T16995] hsr_slave_0: entered promiscuous mode
[  436.541352][T16995] hsr_slave_1: entered promiscuous mode
[  436.548759][T16995] debugfs: 'hsr0' already exists in 'hsr'
[  436.579970][T16995] Cannot create hsr debugfs directory
[  436.636736][T17133] IPVS: set_ctl: invalid protocol: 207 100.1.1.1:20000
[  437.106974][T17152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  437.134006][T16995] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  437.147548][T16995] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.189640][ T5160] Bluetooth: hci2: command tx timeout
[  437.282422][T16995] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  437.303629][T16995] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.361510][T17159] syzkaller1: entered promiscuous mode
[  437.367049][T17159] syzkaller1: entered allmulticast mode
[  437.408304][T16995] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  437.418613][T16995] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.577521][T16995] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  437.587617][T16995] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.629060][T17175] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0
[  437.729711][T17176] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  438.138022][T16995] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  438.228440][T16995] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  438.283938][T16995] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  438.319639][T16995] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  438.365793][T17205] netlink: 'syz.3.3136': attribute type 1 has an invalid length.
[  438.941234][T16995] 8021q: adding VLAN 0 to HW filter on device bond0
[  439.032572][T16995] 8021q: adding VLAN 0 to HW filter on device team0
[  439.096633][ T8699] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.103979][ T8699] bridge0: port 1(bridge_slave_0) entered forwarding state
[  439.174589][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.182100][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state
[  439.269366][ T5160] Bluetooth: hci2: command tx timeout
[  439.296777][T17235] __nla_validate_parse: 7 callbacks suppressed
[  439.296799][T17235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3141'.
[  439.834725][T17260] netlink: 'syz.1.3147': attribute type 1 has an invalid length.
[  440.080710][T16995] 8021q: adding VLAN 0 to HW filter on device batadv0
[  440.136329][T17271] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) !
[  440.264965][T17271] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3150'.
[  440.406130][T17282] netlink: 'syz.2.3152': attribute type 83 has an invalid length.
[  440.449757][T17283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3153'.
[  440.716957][T17297] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3156'.
[  441.250863][T16995] veth0_vlan: entered promiscuous mode
[  441.323200][T17328] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  441.336685][T17326] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  441.353510][T16995] veth1_vlan: entered promiscuous mode
[  441.359382][ T5160] Bluetooth: hci2: command tx timeout
[  441.462439][T16995] veth0_macvtap: entered promiscuous mode
[  441.522032][T16995] veth1_macvtap: entered promiscuous mode
[  441.668033][T16995] batman_adv: batadv0: Interface activated: batadv_slave_0
[  441.708138][T16995] batman_adv: batadv0: Interface activated: batadv_slave_1
[  441.750079][ T8699] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  441.789167][ T8699] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  441.864880][ T8699] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  441.899048][ T8699] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.062957][T17347] netlink: 'syz.0.3173': attribute type 7 has an invalid length.
[  442.199882][ T8711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.207757][ T8711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.325097][T17354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'.
[  442.351183][ T8697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.381970][ T8697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.507106][T17367] sctp: [Deprecated]: syz.1.3180 (pid 17367) Use of struct sctp_assoc_value in delayed_ack socket option.
[  442.507106][T17367] Use struct sctp_sack_info instead
[  442.767910][T17377] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  443.101625][T17387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3188'.
[  443.451845][T17399] netlink: 'syz.1.3192': attribute type 1 has an invalid length.
[  443.613676][T17399] 8021q: adding VLAN 0 to HW filter on device bond2
[  443.671256][T17400] bond2: (slave ip6erspan0): making interface the new active one
[  443.701355][T17400] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[  443.903778][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  443.922769][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  443.932491][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  443.950984][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  443.963797][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  443.996868][T17412] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  444.055496][ T5851] syz_tun (unregistering): left allmulticast mode
[  444.071931][ T5851] syz_tun (unregistering): left promiscuous mode
[  444.147165][ T5851] team0: Port device macvlan0 removed
[  444.297919][T17418] lo speed is unknown, defaulting to 1000
[  444.787804][T17450] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3204'.
[  444.910968][T17456] netlink: 'syz.1.3207': attribute type 1 has an invalid length.
[  444.939336][T17456] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3207'.
[  444.948448][T17456] nbd: couldn't find device at index 1048576
[  444.977862][T17459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3208'.
[  445.143921][T17464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3211'.
[  445.201525][T17464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  445.224800][T17464] netlink: 'syz.1.3211': attribute type 10 has an invalid length.
[  445.272963][T17464] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.280856][T17464] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.366726][T17464] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.374048][T17464] bridge0: port 2(bridge_slave_1) entered forwarding state
[  445.381736][T17464] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.389021][T17464] bridge0: port 1(bridge_slave_0) entered forwarding state
[  445.452653][T17464] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  445.597171][T17482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3213'.
[  445.645634][T17484] openvswitch: netlink: IPv6 tunnel dst address is zero
[  445.925624][T17493] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  445.946655][T17493] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  445.966263][T17496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3219'.
[  445.984116][T17501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3220'.
[  446.070472][T17496] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3219'.
[  446.079852][ T5852] Bluetooth: hci1: command tx timeout
[  446.235286][T17512] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  446.448799][T17418] chnl_net:caif_netlink_parms(): no params data found
[  446.626128][T17525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3228'.
[  446.677412][T17531] netlink: 'syz.3.3228': attribute type 1 has an invalid length.
[  446.883401][T17418] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.905021][T17418] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.916846][T17418] bridge_slave_0: entered allmulticast mode
[  446.949630][T17418] bridge_slave_0: entered promiscuous mode
[  447.095357][T17548] 8021q: adding VLAN 0 to HW filter on device bond11
[  447.119552][T17418] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.129305][T17418] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.147980][T17418] bridge_slave_1: entered allmulticast mode
[  447.169324][T17418] bridge_slave_1: entered promiscuous mode
[  447.187296][T17558] pim6reg: entered allmulticast mode
[  447.200519][T17570] netlink: 'syz.1.3237': attribute type 1 has an invalid length.
[  447.222029][T17563] IPv6: sit1: Disabled Multicast RS
[  447.228704][T17563] sit1: entered allmulticast mode
[  447.365589][T17573] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  447.446473][T17418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  447.474375][T17418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  447.615213][T17418] team0: Port device team_slave_0 added
[  447.634734][T17418] team0: Port device team_slave_1 added
[  447.800017][T17418] batman_adv: batadv0: Adding interface: batadv_slave_0
[  447.811210][T17594] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3244'.
[  447.831234][T17418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  447.921198][T17418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.009985][T17418] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.034100][T17418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.102642][T17418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  448.150163][ T5852] Bluetooth: hci1: command tx timeout
[  448.323622][T17418] hsr_slave_0: entered promiscuous mode
[  448.352917][T17418] hsr_slave_1: entered promiscuous mode
[  448.365708][T17418] debugfs: 'hsr0' already exists in 'hsr'
[  448.387120][T17418] Cannot create hsr debugfs directory
[  448.669877][T17638] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5
[  448.719432][T17642] bpq0: entered allmulticast mode
[  448.997799][T17652] netlink: 'syz.1.3262': attribute type 10 has an invalid length.
[  449.079900][T17652] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.102437][T17652] bridge_slave_1: left allmulticast mode
[  449.125687][T17652] bridge_slave_1: left promiscuous mode
[  449.141920][T17652] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.185536][T17652] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  449.536826][T17675] netlink: 'syz.4.3269': attribute type 21 has an invalid length.
[  449.579324][T17675] IPv6: NLM_F_CREATE should be specified when creating new route
[  449.605800][T17675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  449.613272][T17675] IPv6: NLM_F_CREATE should be set when creating new route
[  449.620807][T17675] IPv6: NLM_F_CREATE should be set when creating new route
[  449.628061][T17675] IPv6: NLM_F_CREATE should be set when creating new route
[  449.892556][T17690] __nla_validate_parse: 4 callbacks suppressed
[  449.892575][T17690] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3273'.
[  450.053524][T17692] tipc: Started in network mode
[  450.063125][T17692] tipc: Node identity 46f68be71ca4, cluster identity 4711
[  450.085093][T17692] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  450.166534][T17694] syzkaller0: entered promiscuous mode
[  450.192582][T17694] syzkaller0: entered allmulticast mode
[  450.216700][T17418] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  450.230072][ T5852] Bluetooth: hci1: command tx timeout
[  450.262559][T17692] tipc: Resetting bearer <eth:syzkaller0>
[  450.301048][T17418] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  450.330184][T17691] tipc: Resetting bearer <eth:syzkaller0>
[  450.367383][T17706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3277'.
[  450.386529][T17691] tipc: Disabling bearer <eth:syzkaller0>
[  450.411875][T17418] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  450.433914][T17418] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  450.445483][T17706] sctp: [Deprecated]: syz.0.3277 (pid 17706) Use of struct sctp_assoc_value in delayed_ack socket option.
[  450.445483][T17706] Use struct sctp_sack_info instead
[  450.622529][T17722] netlink: 696 bytes leftover after parsing attributes in process `syz.1.3280'.
[  450.655129][T17722] IPv6: NLM_F_CREATE should be specified when creating new route
[  450.693231][T17724] Bluetooth: MGMT ver 1.23
[  450.719855][T17722] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  450.888478][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3283'.
[  450.900154][T17418] 8021q: adding VLAN 0 to HW filter on device bond0
[  450.916377][T17730] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  450.953580][T17731] syzkaller1: entered promiscuous mode
[  450.959796][T17731] syzkaller1: entered allmulticast mode
[  451.220257][T17418] 8021q: adding VLAN 0 to HW filter on device team0
[  451.275628][ T8697] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.282872][ T8697] bridge0: port 1(bridge_slave_0) entered forwarding state
[  451.336322][ T8687] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.343956][ T8687] bridge0: port 2(bridge_slave_1) entered forwarding state
[  451.367328][T17747] warn_alloc: 1 callbacks suppressed
[  451.367351][T17747] syz.0.3291: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  451.403329][T17752] netlink: 'syz.3.3289': attribute type 2 has an invalid length.
[  451.424698][T17747] CPU: 0 UID: 0 PID: 17747 Comm: syz.0.3291 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) 
[  451.424729][T17747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  451.424747][T17747] Call Trace:
[  451.424756][T17747]  <TASK>
[  451.424770][T17747]  dump_stack_lvl+0x189/0x250
[  451.424803][T17747]  ? __pfx_dump_stack_lvl+0x10/0x10
[  451.424826][T17747]  ? __pfx__printk+0x10/0x10
[  451.424853][T17747]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  451.424878][T17747]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  451.424905][T17747]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  451.424933][T17747]  warn_alloc+0x214/0x310
[  451.424969][T17747]  ? __pfx_warn_alloc+0x10/0x10
[  451.425003][T17747]  ? __get_vm_area_node+0x28f/0x300
[  451.425037][T17747]  ? hash_ipportnet_create+0x358/0xfe0
[  451.425068][T17747]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  451.425088][T17747]  ? do_syscall_64+0xfa/0x3b0
[  451.425153][T17747]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  451.425181][T17747]  ? rcu_is_watching+0x15/0xb0
[  451.425215][T17747]  ? hash_ipportnet_create+0x358/0xfe0
[  451.425240][T17747]  ? hash_ipportnet_create+0x358/0xfe0
[  451.425263][T17747]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  451.425297][T17747]  ? hash_ipportnet_create+0x358/0xfe0
[  451.425323][T17747]  ? hash_ipportnet_create+0x2fe/0xfe0
[  451.425353][T17747]  hash_ipportnet_create+0x358/0xfe0
[  451.425389][T17747]  ? __nla_parse+0x40/0x60
[  451.425413][T17747]  ? __pfx_hash_ipportnet_create+0x10/0x10
[  451.425442][T17747]  ip_set_create+0xa97/0x1940
[  451.425468][T17747]  ? ip_set_create+0x4a2/0x1940
[  451.425509][T17747]  ? __pfx_ip_set_create+0x10/0x10
[  451.425578][T17747]  nfnetlink_rcv_msg+0xb4d/0x1130
[  451.425607][T17747]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  451.425664][T17747]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  451.425754][T17747]  netlink_rcv_skb+0x205/0x470
[  451.425787][T17747]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  451.425818][T17747]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  451.425862][T17747]  ? bpf_lsm_capable+0x9/0x20
[  451.425892][T17747]  ? security_capable+0x7e/0x2e0
[  451.425930][T17747]  nfnetlink_rcv+0x26a/0x2520
[  451.425958][T17747]  ? is_bpf_text_address+0x26/0x2b0
[  451.425995][T17747]  ? kernel_text_address+0xa5/0xe0
[  451.426024][T17747]  ? __kernel_text_address+0xd/0x40
[  451.426050][T17747]  ? unwind_get_return_address+0x4d/0x90
[  451.426072][T17747]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  451.426096][T17747]  ? arch_stack_walk+0xfc/0x150
[  451.426136][T17747]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  451.426164][T17747]  ? stack_depot_save_flags+0x40/0x900
[  451.426191][T17747]  ? __lock_acquire+0xab9/0xd20
[  451.426251][T17747]  ? __lock_acquire+0xab9/0xd20
[  451.426293][T17747]  ? netlink_deliver_tap+0x2e/0x1b0
[  451.426333][T17747]  ? netlink_deliver_tap+0x2e/0x1b0
[  451.426375][T17747]  netlink_unicast+0x82c/0x9e0
[  451.426414][T17747]  ? __pfx_netlink_unicast+0x10/0x10
[  451.426446][T17747]  ? netlink_sendmsg+0x642/0xb30
[  451.426475][T17747]  ? skb_put+0x11b/0x210
[  451.426500][T17747]  netlink_sendmsg+0x805/0xb30
[  451.426550][T17747]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.426587][T17747]  ? aa_sock_msg_perm+0x94/0x160
[  451.426619][T17747]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  451.426643][T17747]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.426683][T17747]  __sock_sendmsg+0x21c/0x270
[  451.426715][T17747]  ____sys_sendmsg+0x505/0x830
[  451.426744][T17747]  ? __pfx_____sys_sendmsg+0x10/0x10
[  451.426778][T17747]  ? import_iovec+0x74/0xa0
[  451.426813][T17747]  ___sys_sendmsg+0x21f/0x2a0
[  451.426838][T17747]  ? __pfx____sys_sendmsg+0x10/0x10
[  451.426905][T17747]  ? __fget_files+0x2a/0x420
[  451.426924][T17747]  ? __fget_files+0x3a0/0x420
[  451.426958][T17747]  __x64_sys_sendmsg+0x19b/0x260
[  451.426983][T17747]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  451.427017][T17747]  ? rcu_is_watching+0x15/0xb0
[  451.427056][T17747]  ? do_syscall_64+0xbe/0x3b0
[  451.427092][T17747]  do_syscall_64+0xfa/0x3b0
[  451.427122][T17747]  ? lockdep_hardirqs_on+0x9c/0x150
[  451.427152][T17747]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.427174][T17747]  ? clear_bhb_loop+0x60/0xb0
[  451.427199][T17747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.427220][T17747] RIP: 0033:0x7f32f898eb69
[  451.427239][T17747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  451.427259][T17747] RSP: 002b:00007f32f97c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  451.427283][T17747] RAX: ffffffffffffffda RBX: 00007f32f8bb6080 RCX: 00007f32f898eb69
[  451.427299][T17747] RDX: 0000000000004020 RSI: 0000200000000040 RDI: 0000000000000005
[  451.427313][T17747] RBP: 00007f32f8a11df1 R08: 0000000000000000 R09: 0000000000000000
[  451.427326][T17747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  451.427338][T17747] R13: 0000000000000000 R14: 00007f32f8bb6080 R15: 00007ffc2d44b7f8
[  451.427372][T17747]  </TASK>
[  451.639574][T17747] Mem-Info:
[  451.917924][T17747] active_anon:4628 inactive_anon:0 isolated_anon:0
[  451.917924][T17747]  active_file:1368 inactive_file:39957 isolated_file:0
[  451.917924][T17747]  unevictable:768 dirty:31 writeback:0
[  451.917924][T17747]  slab_reclaimable:12860 slab_unreclaimable:140110
[  451.917924][T17747]  mapped:29228 shmem:1370 pagetables:1091
[  451.917924][T17747]  sec_pagetables:0 bounce:0
[  451.917924][T17747]  kernel_misc_reclaimable:0
[  451.917924][T17747]  free:1289198 free_pcp:9960 free_cma:0
[  451.985647][T17747] Node 0 active_anon:18512kB inactive_anon:0kB active_file:5472kB inactive_file:159624kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116912kB dirty:124kB writeback:0kB shmem:3944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14912kB pagetables:4228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  452.023799][T17747] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  452.058015][T17747] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  452.093506][T17747] lowmem_reserve[]: 0 2500 2502 2502 2502
[  452.099819][T17747] Node 0 DMA32 free:1239788kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18360kB inactive_anon:0kB active_file:5472kB inactive_file:157820kB unevictable:1536kB writepending:124kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:26460kB local_pcp:18532kB free_cma:0kB
[  452.136243][T17747] lowmem_reserve[]: 0 0 1 1 1
[  452.151960][T17747] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1804kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  452.258060][T17418] 8021q: adding VLAN 0 to HW filter on device batadv0
[  452.277342][T17747] lowmem_reserve[]: 0 0 0 0 0
[  452.301901][T17747] Node 1 Normal free:3901648kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13728kB local_pcp:9344kB free_cma:0kB
[  452.342033][T17747] lowmem_reserve[]: 0 0 0 0 0
[  452.348204][ T5852] Bluetooth: hci1: command tx timeout
[  452.354400][T17747] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  452.368171][T17747] Node 0 DMA32: 642*4kB (UM) 554*8kB (ME) 80*16kB (ME) 114*32kB (UME) 94*64kB (UM) 77*128kB (UME) 120*256kB (UM) 37*512kB (UME) 7*1024kB (UME) 4*2048kB (UE) 280*4096kB (UM) = 1239704kB
[  452.388346][T17747] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB
[  452.403094][T17747] Node 1 Normal: 194*4kB (UME) 45*8kB (UME) 50*16kB (UME) 198*32kB (UME) 56*64kB (UME) 7*128kB (UME) 5*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3901648kB
[  452.405239][T17770] netlink: 'syz.4.3295': attribute type 64 has an invalid length.
[  452.423097][T17747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  452.423124][T17747] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  452.423144][T17747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  452.423162][T17747] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  452.423182][T17747] 42693 total pagecache pages
[  452.423196][T17747] 0 pages in swap cache
[  452.423206][T17747] Free swap  = 124996kB
[  452.423215][T17747] Total swap = 124996kB
[  452.423227][T17747] 2097051 pages RAM
[  452.423236][T17747] 0 pages HighMem/MovableOnly
[  452.423246][T17747] 424872 pages reserved
[  452.423255][T17747] 0 pages cma reserved
[  452.569376][T17773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3295'.
[  452.629934][T17770] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3295'.
[  452.747213][T17418] veth0_vlan: entered promiscuous mode
[  452.846815][T17418] veth1_vlan: entered promiscuous mode
[  452.954263][T17418] veth0_macvtap: entered promiscuous mode
[  452.986463][T17418] veth1_macvtap: entered promiscuous mode
[  453.096716][T17418] batman_adv: batadv0: Interface activated: batadv_slave_0
[  453.145057][T17418] batman_adv: batadv0: Interface activated: batadv_slave_1
[  453.185218][ T8710] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  453.203519][ T8710] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  453.232789][ T8710] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  453.257719][ T8714] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  453.459248][ T8710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.476472][ T8710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.581955][ T8714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.592711][ T8714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.821086][T17816] bridge: RTM_NEWNEIGH with invalid state 0x8
[  453.842697][T17816] netlink: 'syz.3.3309': attribute type 10 has an invalid length.
[  453.867106][T17816] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3309'.
[  454.209451][T17825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  454.726719][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  454.738177][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  454.748307][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  454.758360][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  454.767850][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  454.840719][ T8714] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.880651][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3317'.
[  454.892887][ T8714] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  455.002593][ T8714] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.023282][ T8714] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  455.127173][T17841] Bluetooth: MGMT ver 1.23
[  455.156128][ T8714] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.167316][ T8714] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  455.190443][T17849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3321'.
[  455.197630][T17850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3320'.
[  455.239487][T17850] bridge_slave_1: left allmulticast mode
[  455.253398][T17850] bridge_slave_1: left promiscuous mode
[  455.261946][T17850] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.283241][T17850] bridge_slave_0: left allmulticast mode
[  455.289610][T17850] bridge_slave_0: left promiscuous mode
[  455.295666][T17850] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.386712][T17830] lo speed is unknown, defaulting to 1000
[  455.393482][T17844] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢
…D£øUDŒžóúzR'
[  455.416046][T17844] CPU: 1 UID: 0 PID: 17844 Comm: syz.2.3319 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) 
[  455.416083][T17844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  455.416098][T17844] Call Trace:
[  455.416106][T17844]  <TASK>
[  455.416116][T17844]  dump_stack_lvl+0x189/0x250
[  455.416150][T17844]  ? __pfx_dump_stack_lvl+0x10/0x10
[  455.416180][T17844]  ? __pfx__printk+0x10/0x10
[  455.416208][T17844]  ? kernfs_path_from_node+0x2c/0x260
[  455.416235][T17844]  ? kernfs_path_from_node+0x2c/0x260
[  455.416259][T17844]  ? kernfs_path_from_node+0x2c/0x260
[  455.416295][T17844]  ? kernfs_path_from_node+0x22c/0x260
[  455.416319][T17844]  ? kernfs_path_from_node+0x2c/0x260
[  455.416350][T17844]  sysfs_warn_dup+0x8e/0xa0
[  455.416375][T17844]  sysfs_do_create_link_sd+0xc0/0x110
[  455.416405][T17844]  device_add_class_symlinks+0x1cf/0x240
[  455.416438][T17844]  device_add+0x475/0xb50
[  455.416470][T17844]  wiphy_register+0x1ba6/0x28d0
[  455.416524][T17844]  ? __pfx_wiphy_register+0x10/0x10
[  455.416556][T17844]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  455.416590][T17844]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  455.416619][T17844]  ieee80211_register_hw+0x3425/0x4080
[  455.416665][T17844]  ? ieee80211_register_hw+0x1411/0x4080
[  455.416701][T17844]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  455.416731][T17844]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  455.416771][T17844]  ? __hrtimer_setup+0x187/0x210
[  455.416803][T17844]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  455.416842][T17844]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  455.416909][T17844]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  455.416940][T17844]  ? trace_kmalloc+0x1f/0xd0
[  455.416970][T17844]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  455.417004][T17844]  ? kstrndup+0xbf/0x160
[  455.417040][T17844]  hwsim_new_radio_nl+0xea4/0x1b10
[  455.417075][T17844]  ? __pfx___nla_validate_parse+0x10/0x10
[  455.417118][T17844]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  455.417164][T17844]  ? __nla_parse+0x40/0x60
[  455.417192][T17844]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  455.417228][T17844]  genl_family_rcv_msg_doit+0x215/0x300
[  455.417263][T17844]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  455.417310][T17844]  ? bpf_lsm_capable+0x9/0x20
[  455.417339][T17844]  ? security_capable+0x7e/0x2e0
[  455.417377][T17844]  genl_rcv_msg+0x60e/0x790
[  455.417410][T17844]  ? __pfx_genl_rcv_msg+0x10/0x10
[  455.417436][T17844]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  455.417485][T17844]  netlink_rcv_skb+0x205/0x470
[  455.417515][T17844]  ? __lock_acquire+0xab9/0xd20
[  455.417546][T17844]  ? __pfx_genl_rcv_msg+0x10/0x10
[  455.417574][T17844]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  455.417631][T17844]  ? down_read+0x1ad/0x2e0
[  455.417656][T17844]  genl_rcv+0x28/0x40
[  455.417678][T17844]  netlink_unicast+0x82c/0x9e0
[  455.417721][T17844]  ? __pfx_netlink_unicast+0x10/0x10
[  455.417770][T17844]  ? netlink_sendmsg+0x642/0xb30
[  455.417801][T17844]  ? skb_put+0x11b/0x210
[  455.417827][T17844]  netlink_sendmsg+0x805/0xb30
[  455.417873][T17844]  ? __pfx_netlink_sendmsg+0x10/0x10
[  455.417912][T17844]  ? aa_sock_msg_perm+0x94/0x160
[  455.417944][T17844]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  455.417968][T17844]  ? __pfx_netlink_sendmsg+0x10/0x10
[  455.418004][T17844]  __sock_sendmsg+0x21c/0x270
[  455.418037][T17844]  ____sys_sendmsg+0x505/0x830
[  455.418068][T17844]  ? __pfx_____sys_sendmsg+0x10/0x10
[  455.418104][T17844]  ? import_iovec+0x74/0xa0
[  455.418140][T17844]  ___sys_sendmsg+0x21f/0x2a0
[  455.418167][T17844]  ? __pfx____sys_sendmsg+0x10/0x10
[  455.418237][T17844]  ? __fget_files+0x2a/0x420
[  455.418258][T17844]  ? __fget_files+0x3a0/0x420
[  455.418298][T17844]  __x64_sys_sendmsg+0x19b/0x260
[  455.418326][T17844]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  455.418362][T17844]  ? rcu_is_watching+0x15/0xb0
[  455.418401][T17844]  ? do_syscall_64+0xbe/0x3b0
[  455.418438][T17844]  do_syscall_64+0xfa/0x3b0
[  455.418467][T17844]  ? lockdep_hardirqs_on+0x9c/0x150
[  455.418496][T17844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.418518][T17844]  ? clear_bhb_loop+0x60/0xb0
[  455.418544][T17844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.418564][T17844] RIP: 0033:0x7f1d2318eb69
[  455.418584][T17844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  455.418603][T17844] RSP: 002b:00007f1d24016038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  455.418628][T17844] RAX: ffffffffffffffda RBX: 00007f1d233b5fa0 RCX: 00007f1d2318eb69
[  455.418643][T17844] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  455.418657][T17844] RBP: 00007f1d23211df1 R08: 0000000000000000 R09: 0000000000000000
[  455.418670][T17844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  455.418683][T17844] R13: 0000000000000000 R14: 00007f1d233b5fa0 R15: 00007ffc0406bb58
[  455.418718][T17844]  </TASK>
[  456.255151][ T8714] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.265119][ T8714] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  456.789086][ T5160] Bluetooth: hci0: command tx timeout
[  457.309970][T17830] chnl_net:caif_netlink_parms(): no params data found
[  457.599480][   T55] block nbd1: Possible stuck request ffff888025030000: control (read@0,1024B). Runtime 300 seconds
[  457.610645][   T55] block nbd1: Possible stuck request ffff8880250301c0: control (read@1024,1024B). Runtime 300 seconds
[  457.621830][   T55] block nbd1: Possible stuck request ffff888025030380: control (read@2048,1024B). Runtime 300 seconds
[  457.640192][   T55] block nbd1: Possible stuck request ffff888025030540: control (read@3072,1024B). Runtime 300 seconds
[  457.878002][ T8714] dvmrp0 (unregistering): left allmulticast mode
[  458.724028][ T8714] bond0 (unregistering): Released all slaves
[  458.753097][ T8714] bond1 (unregistering): Released all slaves
[  458.876538][ T8714] bond2 (unregistering): Released all slaves
[  458.879936][ T5160] Bluetooth: hci0: command tx timeout
[  458.996399][ T8714] bond3 (unregistering): Released all slaves
[  459.125690][ T8714] bond4 (unregistering): Released all slaves
[  459.143337][ T8714] bond5 (unregistering): Released all slaves
[  459.158565][ T8714] bond6 (unregistering): Released all slaves
[  459.178379][ T8714] bond7 (unregistering): Released all slaves
[  459.307834][ T8714] bond8 (unregistering): Released all slaves
[  459.325943][ T8714] bond9 (unregistering): Released all slaves
[  459.341608][ T8714] bond10 (unregistering): Released all slaves
[  459.485066][ T8714] bond11 (unregistering): Released all slaves
[  459.511956][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  459.657912][T17830] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.668583][T17830] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.676572][T17830] bridge_slave_0: entered allmulticast mode
[  459.688206][T17830] bridge_slave_0: entered promiscuous mode
[  459.705293][ T8714] tipc: Disabling bearer <eth:caif0>
[  459.737143][ T8714] tipc: Left network mode
[  459.745436][T17830] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.754096][T17830] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.762093][T17830] bridge_slave_1: entered allmulticast mode
[  459.770513][T17830] bridge_slave_1: entered promiscuous mode
[  459.847259][T17830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  459.862506][T17830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  459.935856][T17830] team0: Port device team_slave_0 added
[  459.947173][T17830] team0: Port device team_slave_1 added
[  460.004632][T17830] batman_adv: batadv0: Adding interface: batadv_slave_0
[  460.012174][T17830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  460.039268][T17830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  460.055116][T17830] batman_adv: batadv0: Adding interface: batadv_slave_1
[  460.062439][T17830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  460.090022][T17830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  460.197360][T17830] hsr_slave_0: entered promiscuous mode
[  460.204749][T17830] hsr_slave_1: entered promiscuous mode
[  460.211475][T17830] debugfs: 'hsr0' already exists in 'hsr'
[  460.217264][T17830] Cannot create hsr debugfs directory
[  460.643440][ T8714] hsr_slave_0: left promiscuous mode
[  460.949323][ T5160] Bluetooth: hci0: command tx timeout
[  461.519079][ T8699] smc: removing ib device syz2
[  461.960631][T17830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  461.975305][T17830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  461.986397][T17830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  462.001227][T17830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  462.100162][T17830] 8021q: adding VLAN 0 to HW filter on device bond0
[  462.124919][T17830] 8021q: adding VLAN 0 to HW filter on device team0
[  462.141947][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.149174][ T8711] bridge0: port 1(bridge_slave_0) entered forwarding state
[  462.170622][ T8697] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.177865][ T8697] bridge0: port 2(bridge_slave_1) entered forwarding state
[  462.408804][T17830] 8021q: adding VLAN 0 to HW filter on device batadv0
[  462.462473][T17830] veth0_vlan: entered promiscuous mode
[  462.477691][T17830] veth1_vlan: entered promiscuous mode
[  462.514287][T17830] veth0_macvtap: entered promiscuous mode
[  462.526433][T17830] veth1_macvtap: entered promiscuous mode
[  462.555517][T17830] batman_adv: batadv0: Interface activated: batadv_slave_0
[  462.573190][T17830] batman_adv: batadv0: Interface activated: batadv_slave_1
[  462.587906][ T8697] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.597679][ T8697] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.620766][ T8697] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.638085][ T8697] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.714183][ T8687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  462.730526][ T8687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  462.774499][ T8711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  462.783192][ T8711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.040157][ T5160] Bluetooth: hci0: command tx timeout
[  480.395889][T17910] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3335'.
[  480.582209][T17925] netlink: 'syz.3.3339': attribute type 2 has an invalid length.
[  480.593727][T17925] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3339'.
[  480.601639][T17921] netlink: 'syz.4.3338': attribute type 1 has an invalid length.
[  480.604280][T17925] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3339'.
[  480.621101][T17921] netlink: 'syz.4.3338': attribute type 2 has an invalid length.
[  480.787919][T17934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3341'.
[  480.797601][T17934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3341'.
[  480.867536][T17928] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  480.889723][T17938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3342'.
[  481.087753][T17943] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  482.064418][T17983] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3352'.
[  482.130084][T17990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3356'.
[  482.179581][T17990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3356'.
[  482.250649][T17996] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3357'.
[  482.502175][T18017] netlink: 'syz.3.3364': attribute type 21 has an invalid length.
[  482.512277][T18017] netlink: 'syz.3.3364': attribute type 1 has an invalid length.
[  482.943259][T18043] netlink: 'syz.2.3373': attribute type 10 has an invalid length.
[  482.978949][T18043] dummy0: entered promiscuous mode
[  482.999695][T18043] bridge0: port 3(dummy0) entered blocking state
[  483.026764][T18043] bridge0: port 3(dummy0) entered disabled state
[  483.067815][T18043] dummy0: entered allmulticast mode
[  483.103875][T18043] bridge0: port 3(dummy0) entered blocking state
[  483.110623][T18043] bridge0: port 3(dummy0) entered forwarding state
[  483.880648][T18096] openvswitch: netlink: Actions may not be safe on all matching packets
[  484.054814][T18106] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9
[  484.312282][T18121] netlink: 'syz.2.3392': attribute type 5 has an invalid length.
[  484.364316][T18121] geneve2: entered promiscuous mode
[  484.377846][T18121] geneve2: entered allmulticast mode
[  484.399864][ T8696] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  484.443494][ T8696] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  484.466241][ T8696] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  484.497058][ T8696] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  484.712676][T18145] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  484.755497][T18145] warn_alloc: 1 callbacks suppressed
[  484.755519][T18145] syz.4.3400: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  484.785949][T18145] CPU: 1 UID: 0 PID: 18145 Comm: syz.4.3400 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) 
[  484.785982][T18145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  484.785996][T18145] Call Trace:
[  484.786005][T18145]  <TASK>
[  484.786016][T18145]  dump_stack_lvl+0x189/0x250
[  484.786049][T18145]  ? __pfx_dump_stack_lvl+0x10/0x10
[  484.786072][T18145]  ? __pfx__printk+0x10/0x10
[  484.786105][T18145]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  484.786132][T18145]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  484.786160][T18145]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  484.786189][T18145]  warn_alloc+0x214/0x310
[  484.786213][T18145]  ? stack_depot_save_flags+0x40/0x900
[  484.786239][T18145]  ? __pfx_warn_alloc+0x10/0x10
[  484.786264][T18145]  ? kasan_save_track+0x4f/0x80
[  484.786294][T18145]  ? xskq_create+0x56/0x170
[  484.786323][T18145]  ? xsk_init_queue+0xb0/0x110
[  484.786349][T18145]  ? xsk_setsockopt+0x4dc/0x8d0
[  484.786373][T18145]  ? do_sock_setsockopt+0x179/0x1b0
[  484.786393][T18145]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  484.786413][T18145]  ? do_syscall_64+0xfa/0x3b0
[  484.786444][T18145]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.786473][T18145]  __vmalloc_node_range_noprof+0x125/0x12f0
[  484.786538][T18145]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  484.786563][T18145]  ? xskq_create+0x56/0x170
[  484.786595][T18145]  ? __kasan_kmalloc+0x93/0xb0
[  484.786630][T18145]  vmalloc_user_noprof+0xad/0xf0
[  484.786653][T18145]  ? xskq_create+0xbf/0x170
[  484.786683][T18145]  xskq_create+0xbf/0x170
[  484.786716][T18145]  xsk_init_queue+0xb0/0x110
[  484.786748][T18145]  xsk_setsockopt+0x4dc/0x8d0
[  484.786780][T18145]  ? __pfx_xsk_setsockopt+0x10/0x10
[  484.786809][T18145]  ? __pfx_aa_sk_perm+0x10/0x10
[  484.786842][T18145]  ? aa_sock_opt_perm+0x74/0x110
[  484.786872][T18145]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  484.786897][T18145]  ? __pfx_xsk_setsockopt+0x10/0x10
[  484.786927][T18145]  do_sock_setsockopt+0x179/0x1b0
[  484.786954][T18145]  __x64_sys_setsockopt+0x13f/0x1b0
[  484.786983][T18145]  do_syscall_64+0xfa/0x3b0
[  484.787014][T18145]  ? lockdep_hardirqs_on+0x9c/0x150
[  484.787045][T18145]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.787067][T18145]  ? clear_bhb_loop+0x60/0xb0
[  484.787093][T18145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.787115][T18145] RIP: 0033:0x7f72abf8eb69
[  484.787135][T18145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  484.787155][T18145] RSP: 002b:00007f72a9df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  484.787182][T18145] RAX: ffffffffffffffda RBX: 00007f72ac1b5fa0 RCX: 00007f72abf8eb69
[  484.787199][T18145] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  484.787212][T18145] RBP: 00007f72ac011df1 R08: 0000000000000004 R09: 0000000000000000
[  484.787226][T18145] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  484.787240][T18145] R13: 0000000000000000 R14: 00007f72ac1b5fa0 R15: 00007ffea8aa4a98
[  484.787275][T18145]  </TASK>
[  484.787376][T18145] Mem-Info:
[  484.959822][T18155] openvswitch: netlink: IPv4 tun info is not correct
[  485.057331][T18145] active_anon:4695 inactive_anon:0 isolated_anon:0
[  485.057331][T18145]  active_file:1432 inactive_file:39966 isolated_file:0
[  485.057331][T18145]  unevictable:768 dirty:69 writeback:0
[  485.057331][T18145]  slab_reclaimable:12519 slab_unreclaimable:145293
[  485.057331][T18145]  mapped:29321 shmem:1387 pagetables:1141
[  485.057331][T18145]  sec_pagetables:0 bounce:0
[  485.057331][T18145]  kernel_misc_reclaimable:0
[  485.057331][T18145]  free:1283464 free_pcp:11009 free_cma:0
[  485.057401][T18145] Node 0 active_anon:18780kB inactive_anon:0kB active_file:5728kB inactive_file:159660kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117284kB dirty:276kB writeback:0kB shmem:4012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14708kB pagetables:4428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  485.057465][T18145] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  485.057522][T18145] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  485.057591][T18145] lowmem_reserve[]: 0 2500 2502 2502 2502
[  485.057646][T18145] Node 0 DMA32 free:1215996kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18728kB inactive_anon:0kB active_file:5728kB inactive_file:157856kB unevictable:1536kB writepending:276kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:31136kB local_pcp:13356kB free_cma:0kB
[  485.362999][T18154] syzkaller0: entered promiscuous mode
[  485.368751][T18145] lowmem_reserve[]: 0 0 1 1 1
[  485.379282][T18154] syzkaller0: entered allmulticast mode
[  485.424674][T18145] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1804kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  485.475329][T18145] lowmem_reserve[]: 0 0 0 0 0
[  485.497492][T18145] Node 1 Normal free:3902472kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12896kB local_pcp:9056kB free_cma:0kB
[  485.542002][T18145] lowmem_reserve[]: 0 0 0 0 0
[  485.554978][T18145] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  485.597395][T18145] Node 0 DMA32: 577*4kB (UM) 414*8kB (UME) 209*16kB (UME) 274*32kB (UME) 229*64kB (UME) 88*128kB (UM) 23*256kB (UM) 7*512kB (UME) 7*1024kB (UME) 3*2048kB (ME) 279*4096kB (UM) = 1209220kB
[  485.646166][T18145] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB
[  485.665801][T18145] Node 1 Normal: 192*4kB (UME) 45*8kB (UME) 50*16kB (UME) 214*32kB (UME) 59*64kB (UME) 8*128kB (UME) 5*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3902472kB
[  485.698722][T18145] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  485.710608][T18145] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  485.720398][T18145] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  485.730685][T18145] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  485.741052][T18145] 42766 total pagecache pages
[  485.746164][T18145] 0 pages in swap cache
[  485.754318][T18145] Free swap  = 124996kB
[  485.758806][T18145] Total swap = 124996kB
[  485.765139][T18145] 2097051 pages RAM
[  485.770218][T18145] 0 pages HighMem/MovableOnly
[  485.775139][T18145] 424872 pages reserved
[  485.779883][T18145] 0 pages cma reserved
[  487.493734][T18164] ip6gre1: entered allmulticast mode
[  487.670469][   T55] block nbd1: Possible stuck request ffff888025030000: control (read@0,1024B). Runtime 330 seconds
[  487.683539][   T55] block nbd1: Possible stuck request ffff8880250301c0: control (read@1024,1024B). Runtime 330 seconds
[  487.694817][   T55] block nbd1: Possible stuck request ffff888025030380: control (read@2048,1024B). Runtime 330 seconds
[  487.705915][   T55] block nbd1: Possible stuck request ffff888025030540: control (read@3072,1024B). Runtime 330 seconds
[  487.816905][T18181] __nla_validate_parse: 7 callbacks suppressed
[  487.816928][T18181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3410'.
[  487.850516][T18188] pim6reg: entered allmulticast mode
[  488.033544][T18191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3412'.
[  488.077510][T18191] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3412'.
[  488.282942][T18199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  488.576659][T18211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3420'.
[  489.273875][T18228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3425'.
[  490.179187][T18235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3428'.
[  490.188246][T18235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3428'.
[  491.085874][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3427'.
[  491.466085][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3433'.
[  492.252124][T18276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  492.520145][T18290] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present
[  492.543482][T18290] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1)
[  492.573287][T18294] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3444'.
[  492.721940][T18302] netlink: 'syz.0.3446': attribute type 11 has an invalid length.
[  492.844963][T18308] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  492.875223][T18311] __nla_validate_parse: 2 callbacks suppressed
[  492.875243][T18311] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3451'.
[  493.018753][T18323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3453'.
[  493.198520][T18335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3457'.
[  493.349669][ T5160] Bluetooth: hci2: command tx timeout
[  493.481702][T18350] tipc: Started in network mode
[  493.486653][T18350] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  493.505476][T18350] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  493.705037][T18363] netlink: 'syz.3.3466': attribute type 1 has an invalid length.
[  493.719321][T18363] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3466'.
[  493.731487][T18364] netlink: 'syz.0.3465': attribute type 11 has an invalid length.
[  493.766823][T18367] syzkaller0: entered promiscuous mode
[  493.785548][T18367] syzkaller0: entered allmulticast mode
[  493.904851][T18374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3468'.
[  494.166634][T18389] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3469'.
[  494.177600][T18386] netlink: 'syz.0.3471': attribute type 7 has an invalid length.
[  494.227392][T18386] : entered promiscuous mode
[  494.434515][T18397] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  494.465505][ T5928] IPVS: starting estimator thread 0...
[  494.528982][ T5904] tipc: Node number set to 10136234
[  494.569162][T18398] IPVS: using max 23 ests per chain, 55200 per kthread
[  494.718487][   T31] INFO: task udevd:5891 blocked for more than 143 seconds.
[  494.719326][T18406] netlink: 'syz.3.3478': attribute type 7 has an invalid length.
[  494.747099][   T31]       Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0
[  494.765968][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  494.777142][T18406] netlink: 'syz.3.3478': attribute type 8 has an invalid length.
[  494.777715][   T31] task:udevd           state:D stack:22376 pid:5891  tgid:5891  ppid:5210   task_flags:0x400140 flags:0x00004006
[  494.819410][   T31] Call Trace:
[  494.822921][   T31]  <TASK>
[  494.826042][   T31]  __schedule+0x1737/0x4d30
[  494.843011][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  494.848649][   T31]  ? schedule+0x165/0x360
[  494.858519][   T31]  ? __pfx___schedule+0x10/0x10
[  494.868153][   T31]  ? schedule+0x91/0x360
[  494.899532][   T31]  schedule+0x165/0x360
[  494.914733][   T31]  io_schedule+0x80/0xd0
[  494.920721][   T31]  folio_wait_bit_common+0x6b0/0xb90
[  494.926236][   T31]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  494.934626][   T31]  ? __pfx_wake_page_function+0x10/0x10
[  494.942114][   T31]  ? __filemap_get_folio+0x6e0/0xaf0
[  494.947589][   T31]  ? do_read_cache_folio+0x4e9/0x590
[  494.954685][   T31]  do_read_cache_folio+0x1aa/0x590
[  494.960428][   T31]  ? __pfx_blkdev_read_folio+0x10/0x10
[  494.965943][   T31]  read_part_sector+0xb6/0x2b0
[  494.971450][   T31]  adfspart_check_POWERTEC+0x8c/0xf30
[  494.976876][   T31]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  494.983083][   T31]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  494.989579][   T31]  bdev_disk_changed+0x75c/0x14b0
[  494.994712][   T31]  ? __pfx_bdev_disk_changed+0x10/0x10
[  495.000406][   T31]  ? wait_on_inode+0xc0/0x230
[  495.005210][   T31]  blkdev_get_whole+0x380/0x510
[  495.014376][   T31]  bdev_open+0x31e/0xd30
[  495.018879][   T31]  blkdev_open+0x3a8/0x510
[  495.024126][   T31]  ? __pfx_blkdev_open+0x10/0x10
[  495.029748][   T31]  do_dentry_open+0xdf3/0x1970
[  495.034748][   T31]  vfs_open+0x3b/0x340
[  495.039181][   T31]  ? path_openat+0x2ecd/0x3830
[  495.045144][   T31]  path_openat+0x2ee5/0x3830
[  495.051575][   T31]  ? arch_stack_walk+0xfc/0x150
[  495.056609][   T31]  ? __pfx_path_openat+0x10/0x10
[  495.062403][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.068570][   T31]  do_filp_open+0x1fa/0x410
[  495.075353][   T31]  ? __lock_acquire+0xab9/0xd20
[  495.080950][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  495.086066][   T31]  ? _raw_spin_unlock+0x28/0x50
[  495.091276][   T31]  ? alloc_fd+0x64c/0x6c0
[  495.095696][   T31]  do_sys_openat2+0x121/0x1c0
[  495.101722][   T31]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  495.107230][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  495.115769][   T31]  ? rcu_is_watching+0x15/0xb0
[  495.121359][   T31]  __x64_sys_openat+0x138/0x170
[  495.126281][   T31]  do_syscall_64+0xfa/0x3b0
[  495.131915][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.138041][   T31]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  495.144591][   T31]  ? clear_bhb_loop+0x60/0xb0
[  495.151500][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.157458][   T31] RIP: 0033:0x7fae6d6a7407
[  495.163375][   T31] RSP: 002b:00007ffdad48ce40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  495.172227][   T31] RAX: ffffffffffffffda RBX: 00007fae6dd55880 RCX: 00007fae6d6a7407
[  495.181175][   T31] RDX: 00000000000a0800 RSI: 00005645d9457a80 RDI: ffffffffffffff9c
[  495.190454][   T31] RBP: 00005645d9444910 R08: 0000000000000000 R09: 0000000000000000
[  495.198567][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005645d9458bc0
[  495.207019][   T31] R13: 00005645d945c430 R14: 0000000000000000 R15: 00005645d9458bc0
[  495.216987][   T31]  </TASK>
[  495.223749][   T31] 
[  495.223749][   T31] Showing all locks held in the system:
[  495.252619][   T31] 1 lock held by khungtaskd/31:
[  495.257628][   T31]  #0: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  495.275858][   T31] 2 locks held by getty/5600:
[  495.300432][   T31]  #0: ffff88814d8fe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  495.311385][   T31]  #1: ffffc9000362b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  495.324393][   T31] 1 lock held by udevd/5891:
[  495.329354][   T31]  #0: ffff888024bc4358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  495.338681][   T31] 3 locks held by kworker/u8:24/8699:
[  495.345059][   T31]  #0: ffff88801a558148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  495.357022][   T31]  #1: ffffc9001d10fbc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  495.370905][   T31]  #2: ffff888021ba46d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  495.383129][   T31] 3 locks held by kworker/u8:34/8714:
[  495.388532][   T31]  #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  495.402222][   T31]  #1: ffffc9001d22fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  495.413102][   T31]  #2: ffffffff8f4fc190 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  495.423454][   T31] 2 locks held by syz.2.3402/18157:
[  495.428732][   T31]  #0: ffffffff8f4fc190 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  495.438632][   T31]  #1: ffff888021ba46d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  495.450125][   T31] 
[  495.452500][   T31] =============================================
[  495.452500][   T31] 
[  495.461125][   T31] NMI backtrace for cpu 1
[  495.461146][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) 
[  495.461173][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  495.461185][   T31] Call Trace:
[  495.461194][   T31]  <TASK>
[  495.461203][   T31]  dump_stack_lvl+0x189/0x250
[  495.461233][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  495.461255][   T31]  ? __pfx__printk+0x10/0x10
[  495.461295][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  495.461325][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  495.461355][   T31]  ? __pfx__printk+0x10/0x10
[  495.461395][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  495.461431][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  495.461462][   T31]  watchdog+0xf93/0xfe0
[  495.461503][   T31]  ? watchdog+0x1de/0xfe0
[  495.461537][   T31]  kthread+0x70e/0x8a0
[  495.461565][   T31]  ? __pfx_watchdog+0x10/0x10
[  495.461593][   T31]  ? __pfx_kthread+0x10/0x10
[  495.461620][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  495.461649][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  495.461678][   T31]  ? __pfx_kthread+0x10/0x10
[  495.461705][   T31]  ret_from_fork+0x3fc/0x770
[  495.461742][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  495.461781][   T31]  ? __switch_to_asm+0x39/0x70
[  495.461805][   T31]  ? __switch_to_asm+0x33/0x70
[  495.461828][   T31]  ? __pfx_kthread+0x10/0x10
[  495.461855][   T31]  ret_from_fork_asm+0x1a/0x30
[  495.461897][   T31]  </TASK>
[  495.461905][   T31] Sending NMI from CPU 1 to CPUs 0:
[  495.617025][    C0] NMI backtrace for cpu 0
[  495.617045][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) 
[  495.617067][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  495.617079][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  495.617110][    C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 6f 18 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  495.617127][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2
[  495.617145][    C0] RAX: c9accbcaf3264600 RBX: ffffffff81969b18 RCX: c9accbcaf3264600
[  495.617159][    C0] RDX: 0000000000000001 RSI: ffffffff8d9792e3 RDI: ffffffff8be30a00
[  495.617172][    C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb
[  495.617185][    C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa07bf0
[  495.617198][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a18
[  495.617211][    C0] FS:  0000000000000000(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000
[  495.617230][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  495.617243][    C0] CR2: 0000555556b615c8 CR3: 0000000077bca000 CR4: 00000000003526f0
[  495.617259][    C0] Call Trace:
[  495.617268][    C0]  <TASK>
[  495.617275][    C0]  default_idle+0x13/0x20
[  495.617292][    C0]  default_idle_call+0x74/0xb0
[  495.617310][    C0]  do_idle+0x1e8/0x510
[  495.617342][    C0]  ? __pfx_do_idle+0x10/0x10
[  495.617378][    C0]  cpu_startup_entry+0x44/0x60
[  495.617406][    C0]  rest_init+0x2de/0x300
[  495.617426][    C0]  start_kernel+0x3a9/0x410
[  495.617456][    C0]  x86_64_start_reservations+0x24/0x30
[  495.617478][    C0]  x86_64_start_kernel+0x143/0x1c0
[  495.617500][    C0]  common_startup_64+0x13e/0x147
[  495.617531][    C0]  </TASK>
[  495.618078][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  495.801614][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) 
[  495.813167][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  495.823232][   T31] Call Trace:
[  495.826537][   T31]  <TASK>
[  495.829484][   T31]  dump_stack_lvl+0x99/0x250
[  495.834107][   T31]  ? __asan_memcpy+0x40/0x70
[  495.838717][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  495.843923][   T31]  ? __pfx__printk+0x10/0x10
[  495.848531][   T31]  panic+0x2db/0x790
[  495.852437][   T31]  ? __pfx_panic+0x10/0x10
[  495.856856][   T31]  ? __pfx___x2apic_send_IPI_mask+0x10/0x10
[  495.862764][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  495.868940][   T31]  watchdog+0xfd2/0xfe0
[  495.873120][   T31]  ? watchdog+0x1de/0xfe0
[  495.877474][   T31]  kthread+0x70e/0x8a0
[  495.881551][   T31]  ? __pfx_watchdog+0x10/0x10
[  495.886234][   T31]  ? __pfx_kthread+0x10/0x10
[  495.890842][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  495.896067][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  495.901292][   T31]  ? __pfx_kthread+0x10/0x10
[  495.905896][   T31]  ret_from_fork+0x3fc/0x770
[  495.910506][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  495.915635][   T31]  ? __switch_to_asm+0x39/0x70
[  495.920419][   T31]  ? __switch_to_asm+0x33/0x70
[  495.925195][   T31]  ? __pfx_kthread+0x10/0x10
[  495.929792][   T31]  ret_from_fork_asm+0x1a/0x30
[  495.934623][   T31]  </TASK>
[  495.938010][   T31] Kernel Offset: disabled
[  495.942340][   T31] Rebooting in 86400 seconds..