last executing test programs:

3m3.197092842s ago: executing program 1 (id=5841):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff73013f0000000000950000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)

3m3.072295265s ago: executing program 1 (id=5844):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0xb0b}, 0x14}}, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0xa0, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x704c}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe1a}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44}, 0x801)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x160, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x11c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x160d}, @NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x66c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x602}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x58d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbb6a}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8b2b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x188}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "7df0"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900000073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001000000004daa6384000100000a8385724b68a92a0a362e1f9ef2a9477ecd5e4fb197e5e7c0c52191c2312a4d798f4c88a561eef02029e4f60bcabfc99ebf6100c4"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r6=>0x0}, &(0x7f0000000000)=0x8)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c0004400000000000000000090001"], 0x110}}, 0x0)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee0c7cdad9b4b47380c988ca", 0xe}, {&(0x7f00000006c0)="fc2309160162e5d1743720dc1faa0b866bcf68ad5497250c39f8dfe79a7f0cf8f8", 0x21}], 0x2)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000003c0)={r6, 0xcb}, 0x8)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000080)={r6, @in6={{0xa, 0x4e24, 0x56d, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x101}}}, &(0x7f0000000140)=0x84)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000740)=ANY=[@ANYBLOB="120000007d000000000000000200000000000000", @ANYRESDEC=r1, @ANYBLOB='\x00'/20, @ANYRES16=r11, @ANYRES32, @ANYBLOB="0000000000000000000000000000000400"/28], 0x50)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010428bd7000ffdbdf25080000001400028010000200000001800800010000000100180001801400020073797a5f74756e00"], 0x40}}, 0x10004000)

3m0.148438363s ago: executing program 1 (id=5856):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
socket$nl_netfilter(0x10, 0x3, 0xc)

3m0.071603291s ago: executing program 1 (id=5858):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000c00)='sit0\x00', 0x10)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x6}, 0xfe}, 0x18)
bind$xdp(r0, &(0x7f0000000d40)={0x2c, 0xe, r2, 0x2f}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x9)
r4 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x40000) (async)
sendmsg$AUDIT_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x10, 0x70bd26, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xe000200d})

2m59.738861806s ago: executing program 1 (id=5862):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x4c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(generic-gcm-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x2, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xffffffff}, 0x50)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000)
ppoll(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)
r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
listen(r4, 0x7ad)
ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f0000000100))
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0)

2m59.536933369s ago: executing program 1 (id=5864):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2040800}, 0x44000)
unshare(0x42000000)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b12050081010000240012800b00010069703667726500001400020008000100", @ANYRES32=r5, @ANYBLOB="0800050003"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x400000000000219, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x1413, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffeb9, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x202}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x1c010)
unshare(0x22020400)
unshare(0x20000400)
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
r7 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r7, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="a9050000000074640006000000003552bd078064", 0x14}, {0x0}], 0x2}}], 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00', 0x7101})
write$cgroup_devices(r1, 0x0, 0xffdd)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c001}, 0x4020018)
socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000440)=""/116, &(0x7f00000001c0)=0x74)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008c00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m44.0252147s ago: executing program 32 (id=5864):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2040800}, 0x44000)
unshare(0x42000000)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b12050081010000240012800b00010069703667726500001400020008000100", @ANYRES32=r5, @ANYBLOB="0800050003"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x400000000000219, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x1413, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffeb9, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x202}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x1c010)
unshare(0x22020400)
unshare(0x20000400)
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
r7 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r7, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="a9050000000074640006000000003552bd078064", 0x14}, {0x0}], 0x2}}], 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00', 0x7101})
write$cgroup_devices(r1, 0x0, 0xffdd)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c001}, 0x4020018)
socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000440)=""/116, &(0x7f00000001c0)=0x74)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008c00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

14.97758954s ago: executing program 4 (id=6894):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8, 0x700, 0xfffffc00, 0x9, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x65, 0x0, 0xf, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}}}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4008054)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r8=>0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x44005)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x310, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c080}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4)

11.786853982s ago: executing program 4 (id=6912):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r1=>0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r1, 0x7}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x99}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

11.595760107s ago: executing program 4 (id=6915):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket(0x400000000010, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r8, <r9=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000400000000000000000b7080000000000007b8af90f00000000b708000002000040738af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r13 = openat$cgroup_int(r12, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0)
write$cgroup_int(r13, &(0x7f0000000440)=0x51e, 0x12)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x9, 0x20000000, 0xb, 0x7}}, @TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r14, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5)

11.299420872s ago: executing program 4 (id=6920):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000001180100002020642500000000002020207b1af8ff00000000bfa108000700000047010000f6ffffffb702000008000000b703000000000100850000003500000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_emit_ethernet(0x166, &(0x7f00000002c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x130, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x7, [{0x18, 0x18, "00540200a600828dadce42ce3d02d319e0cabb0171499f7642598cf1a1d40ca51300988c260ed2c4af88bdac1fc3925f5acb8e09cece04229969a0aee0537e1cc71b3009ab18767945d27594b37cd8abb99636a90bca4c54c3ce345b74a5344d2cdda99627bb20ea64b77b50c6dd7ac0ce2c39bcfef13daaef4db59a4483f2894602231daf4f31b82654278904b95919abbb34b324bdfc5ea17efe35444c3cc8f5cb729268ea2d5032fee7123364eac506f32a93621cf58e9f47d53114fb"}, {0x4, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x3, 0x1, "005ff9297d00001392000100"}]}}}}}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a58000000060a09040000000000000000020000032c00048018000180080001006c6f67000c0002800800054000000008100001800c000100636f756e746572000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000001180100002020642500000000002020207b1af8ff00000000bfa108000700000047010000f6ffffffb702000008000000b703000000000100850000003500000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
syz_emit_ethernet(0x166, &(0x7f00000002c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x130, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x7, [{0x18, 0x18, "00540200a600828dadce42ce3d02d319e0cabb0171499f7642598cf1a1d40ca51300988c260ed2c4af88bdac1fc3925f5acb8e09cece04229969a0aee0537e1cc71b3009ab18767945d27594b37cd8abb99636a90bca4c54c3ce345b74a5344d2cdda99627bb20ea64b77b50c6dd7ac0ce2c39bcfef13daaef4db59a4483f2894602231daf4f31b82654278904b95919abbb34b324bdfc5ea17efe35444c3cc8f5cb729268ea2d5032fee7123364eac506f32a93621cf58e9f47d53114fb"}, {0x4, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x3, 0x1, "005ff9297d00001392000100"}]}}}}}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a58000000060a09040000000000000000020000032c00048018000180080001006c6f67000c0002800800054000000008100001800c000100636f756e746572000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async)

10.983338841s ago: executing program 4 (id=6922):
r0 = socket$xdp(0x2c, 0x3, 0x0)
unshare(0x20000400)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0)
sendfile(r2, r2, &(0x7f00000000c0)=0x4, 0x38c6)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0xa, @in=@private=0xa010102, 0x3507, 0x1, 0x1, 0x0, 0x0, 0x8007c, 0xfffffffe}}, 0xe8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x18)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x12}, 0x78)
r4 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0xfffffffe, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)

6.868752732s ago: executing program 4 (id=6940):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c2f00db5b686158bbcfe8875a0603000000"], 0xfdef)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r1 = socket(0x8, 0x0, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48)
ioctl$sock_netrom_SIOCADDRT(r1, 0x61d1, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x4000040)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, 0x0, 0x40490c4)
unshare(0x2c020400)
bind$rds(r2, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x421, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
close(0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

6.741781737s ago: executing program 0 (id=6941):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001001010000000000000000000500000a400000000c170101000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2f0000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e621a63f1}, 0x4000010)
r4 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r7 = accept4(r6, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r7)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r10, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r10, 0x1, 0x70bd26, 0x25dfdbf7, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={<r12=>0x0}, &(0x7f0000000700)=0xc)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x1, 0x2, 0x5, 0x5, 0x1}, 0x20)
sendmsg$nl_generic(r9, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000001200)=ANY=[@ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="5f82f2b87e9cdb67204e595c269f150d05812bd7081611b3bddc5460e211ba96b2f7d50a2bcf2afc99557e1fe038fd46d740aff15be513e66612e6b6eb7e7141be44d04aa36b3d7d9d4184648ed896581ae8839626f65cb99318952f57d465add22181dcd247563f135981439fcf598663727d2737b300289d68e84702036e14301a70bb622d8b2e927c78a250df81605104414fb93ca8c4c3fe51abad77ec4c608622055c7e22116c6669875e9d2901ab93dc23f6e8f297eefcaa5592056d8bc017fffd1c10c95d226c3aefe2f0c26a81df8ef1cf441cb6b4b47e7ebafa421746788f", @ANYRES32=r12, @ANYBLOB="00000073006300fdc0c80169aaa53bf604dab1d5f233939ffbf251591b5ac097433ad68212eef4cbad28fdbf8ec64734804ad9e204f7946d6a1e182bcca19b6c0de450f40f1d6bf751cb856ed74482ffff1992e62141061df8da9f0ca88e16996c0d9ca9de34750a8cc55d08096307f3d509bd4ddca6005300bb804d8c52af5aa3543fd54b15a8dd0ce0a1a0ec60fd7a844c244a081f0225e16ea2040057804d1ae06d342d820bc4967748364ba4aa33fbe4f992372af7dd9c901d3206070400888008006900", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="9bb77d08004500ffffffff0c0013008100"/28], 0x7bc}, 0x1, 0x0, 0x0, 0x880}, 0x804)

5.243840066s ago: executing program 0 (id=6950):
connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028a6704cdbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
tee(r2, r2, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000302040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000)

4.288834096s ago: executing program 0 (id=6957):
syz_emit_ethernet(0x17, &(0x7f0000002880)={@broadcast, @broadcast, @void, {@arp={0x806, @generic={0x110, 0x80f3, 0x6, 0x0, 0x4, @empty, "", @broadcast}}}}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f00000000c0)=0x100000001, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
close(0x3)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="06000040eda133a81f959a147375cabc191a731526747bcc2911f851ca00a61f16447300f400ac6067ebf7adfb66f36193a5c5b5d9a46fa6cb21f9f3fb12ec3c9cbfe0f32fac4aee8c21d859ee2406f64e8024b371b62ad7481d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x1c8, 0xc8, 0x8, 0x1c8, 0x5803, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x6, 0x300, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x0, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="540100001900010000000000000000001d01000008000500f880000015010400010000800202000031171e44b2b50e8f0400"], 0x154}}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)

4.062487606s ago: executing program 0 (id=6961):
r0 = socket$kcm(0x10, 0x7, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

3.939836897s ago: executing program 0 (id=6963):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r2 = socket(0x1a, 0x800, 0x0)
write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r3 = socket$inet(0x2, 0x2, 0x0)
r4 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async)
sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvfrom$inet(r3, &(0x7f00000000c0)=""/136, 0x88, 0x10120, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @empty}, {0x1, @random="a65cfd28f100"}, 0x2, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}})
r6 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xff}, 0x1c) (async)
bind$l2tp6(r6, &(0x7f0000001540)={0xa, 0x0, 0xc2da, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8001, 0x4}, 0x20) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x44884) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@deltclass={0x80, 0x29, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffff}, {0x9, 0xfff3}, {0xb, 0xf}}, [@tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x9}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x9}]}}, @TCA_RATE={0x6, 0x5, {0xa, 0x8}}, @tclass_kind_options=@c_htb={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x7, 0x5}}]}, 0x80}}, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180), 0x10) (async)
r8 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$SIOCGETNODEID(r8, 0x89e1, &(0x7f0000000000)) (async)
r9 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-'], 0xfe33)

3.395945353s ago: executing program 0 (id=6965):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x40}}, 0x8084) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
readv(r1, &(0x7f0000000c00)=[{&(0x7f0000000600)=""/119, 0x77}, {&(0x7f0000000880)=""/178, 0xb2}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f0000000a40)=""/194, 0xc2}, {&(0x7f0000000680)=""/10, 0xa}, {&(0x7f0000000b40)=""/131, 0x83}], 0x6)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async)
read$alg(r1, &(0x7f0000000080)=""/47, 0x2f)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) (async)
writev(r2, &(0x7f0000000140)=[{}, {&(0x7f00000003c0)="40000000000000000000b634b3144f73", 0x10}], 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x6, 0x8, 0x80, 0x6db, 0x4a, @loopback, @local, 0x80, 0x20, 0x40, 0x400}})
sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2f00003c3d84e0d45e30191ac751d2b40f27e83be2b89da02571d094bc4050037626d1d49bb00fe13a53e25d12a67d97b8a2346e170719fd0a1de8686f87128512bd28b43d70fa821a06633b528b4418ce1148461661a73483b2491c3545a3086d4a1d0500fd05ecf864f933bc747dc26cab3f0d1f4a39839960f2ab0b4108186f259f9d88796e693bfc32a4ef5476879620fad2329d19e44e3f59dedc95", @ANYRES32=r0, @ANYRESOCT=r2], 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x20000000) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x4ca782, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) (async)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={<r4=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x8008, 0x4, 0x7, r4}, &(0x7f0000000040)=0x10) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f0000003340)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0xfffffffd, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffd}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40000) (async)
sendto$inet6(r5, &(0x7f0000000300)="8b", 0x1, 0x2404c844, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast2}, 0x1c) (async)
shutdown(r5, 0x1) (async)
sendmmsg$unix(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, 0x0, 0x56) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000540)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]})

3.292934001s ago: executing program 5 (id=6967):
r0 = socket(0x10, 0x3, 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0xfdfc, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000001c0), 0x3)
setsockopt$inet6_tcp_int(r4, 0x11a, 0x2, &(0x7f0000000140)=0x304, 0x4)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x20000004)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xa0, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}]}, 0xa0}}, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x40}}, 0x0)

3.011124664s ago: executing program 5 (id=6969):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
pwrite64(r6, 0x0, 0xffffffffffffff4d, 0x7fffffffffffffff)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0)

2.471043472s ago: executing program 2 (id=6972):
r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000004ac0)=0x2c, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000260000000800000002"], 0x48) (async)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'gretap0\x00', 0x2}, 0x18) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000380), 0x0}, 0x20)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="06000000040000000800000001000000800000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000009426", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000200"/28], 0x50) (async)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000000214010026bd7000fbdbdf25080001000200000008004400", @ANYRES32, @ANYBLOB="090002"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4850)

2.385093552s ago: executing program 5 (id=6973):
mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='-[{.\x00', 0x100, &(0x7f0000000040)={@_ha_fsid={[0x8, 0x2]}, {0xfff8, 0xe3d, 0x3ff, 0x81}}, 0x72e1, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x81})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$inet6(r1, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r3, 0x6}, 0x8)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={r3, 0x2c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x3, @mcast2}, @in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f00000001c0)=0x10)

2.256063959s ago: executing program 3 (id=6975):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002440), 0x40, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0}) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)={0x68, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5bad}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}}, 0x4000000) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r7, 0x0, 0x0, 0x20004853, &(0x7f00000001c0)={0x11, 0x6, r3, 0x1, 0xa8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x14)

1.96156661s ago: executing program 2 (id=6976):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) (fail_nth: 5)

1.871707537s ago: executing program 3 (id=6977):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r3, &(0x7f0000000040), 0x0}, 0x20)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80180002"], 0x44}, 0x1, 0x0, 0x0, 0x6cb3fe8b19b50fba}, 0x0)

1.450275979s ago: executing program 2 (id=6978):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'})
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000140))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28)
writev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)="c800b66cf7e6a58cd8e0e80c86470ec8c3c0d6b06acd299df554ff6d4c46a5e948e458d6291d3aab88af945442040056972d9d82b584db7aed7075fcb4850257c7cf202122802afec235970a469a73ea4193e861993d0d14c39e25a81de895927d3a86ba369ed1c66b615488829a7502aaed5d20c90800753013f6a46fd587a882589bea59703c5619a8697ee9661140a295a65ede871662b0a5713e89f3bfff54a01fbb1a641056b8f7d98a65a17dedcf11ffbb8c93ed0275431beebd524767543f3a0083992c9406001106a201fa8fb4c2abb7d22d810aa4101e5e610000", 0xdf}, {&(0x7f0000000700)="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", 0xf12}], 0x2)
readv(r1, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000140)) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) (async)
writev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)="c800b66cf7e6a58cd8e0e80c86470ec8c3c0d6b06acd299df554ff6d4c46a5e948e458d6291d3aab88af945442040056972d9d82b584db7aed7075fcb4850257c7cf202122802afec235970a469a73ea4193e861993d0d14c39e25a81de895927d3a86ba369ed1c66b615488829a7502aaed5d20c90800753013f6a46fd587a882589bea59703c5619a8697ee9661140a295a65ede871662b0a5713e89f3bfff54a01fbb1a641056b8f7d98a65a17dedcf11ffbb8c93ed0275431beebd524767543f3a0083992c9406001106a201fa8fb4c2abb7d22d810aa4101e5e610000", 0xdf}, {&(0x7f0000000700)="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", 0xf12}], 0x2) (async)
readv(r1, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) (async)

1.386136949s ago: executing program 5 (id=6979):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd25, 0x1, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x0) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000000)=0x1, 0x4) (async)
socket$inet(0x2, 0x5, 0x8) (async)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x0, 0x260, 0x260, 0xfeffffff, 0xffffffff, 0x380, 0x260, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0xe22, 0x5, @loopback={0xff00000000000000}}, 0x1c) (async)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x100, @loopback={0xff00000000000002}}, 0x1c)
socket$caif_stream(0x25, 0x1, 0x2)

1.248974627s ago: executing program 2 (id=6980):
r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x800}) (async)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'ip6_vti0\x00', 0x400})
ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000380)=ANY=[]) (async)
r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})

1.174811561s ago: executing program 3 (id=6981):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_stats}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x10, &(0x7f0000000200)=""/16, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94)

1.159470811s ago: executing program 5 (id=6982):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x801, 0xfffffffd, 0x25dfdbfb, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x10}, {0x8, 0x1b, 0x0, 0x0, 0x8000}]}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0x40080f4)

796.868536ms ago: executing program 5 (id=6983):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x81}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x40, r3, 0x107, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6e}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x40}}, 0x20000001)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00')
unshare(0x6a040000)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000180)={{<r4=>r1, &(0x7f0000000080)='\x00', 0x1a1500, &(0x7f00000000c0)={@_ha_fsid={[0x5, 0xff]}, {0xd, 0x2, 0x79c4a16, 0x7c969db2}}, 0x3ff, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x5}, {[0x6, 0x1, 0x8000, 0x2]}, 0x200009, 0xec, &(0x7f0000000540)=""/236})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400"], 0x48)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="18"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000440)={0x0, 0xffffff7f, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000000102010200000000000000000a00006db9bdb1e911658f8005000100000000002c00018014000300fe80000000000000000000000000001914000400fc0100"/80], 0x50}}, 0x8000)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000010c0)={0x0, @in6={{0xa, 0x4e21, 0x800, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}}, &(0x7f0000000000)=0x84)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r8, 0x84, 0x72, 0x0, &(0x7f0000001080))
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x4001, 0x3, 0x430, 0x300, 0xb, 0x148, 0x0, 0x148, 0x398, 0x230, 0x242, 0x398, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x6}, 0x0, 0x1}}}, {{@uncond, 0xec010000, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

688.741108ms ago: executing program 2 (id=6984):
socket$packet(0x11, 0x3, 0x300) (async)
r0 = socket$packet(0x11, 0x3, 0x300)
socket(0x10, 0x2, 0x0) (async)
r1 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x300000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="11002bbd7003fcdbdf250600000008003f00090000000500350006000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000051}, 0x6f478820fbf2ccae)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x508, 0xffffffff, 0x0, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x438, 0x438, 0x438, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0x1d0, 0x8502}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x4, 0x0, 'system_u:object_r:wireless_device_t:s0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff, 0xff], [0xffffffff, 0xff, 0x0, 0xffffff00], 'erspan0\x00', 'caif0\x00', {}, {}, 0xc8, 0x0, 0x4, 0x50}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x1}}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x401}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x1007, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568)
close(r1)
sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

646.579186ms ago: executing program 3 (id=6985):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async)
close(0xffffffffffffffff) (async)
r2 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) (async)
sendfile(r1, r0, &(0x7f0000000400)=0x5, 0x9) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRESDEC=r2], 0xa4}, 0x1, 0x0, 0x0, 0x4000001}, 0x801)

431.990894ms ago: executing program 3 (id=6986):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="4002060100"], 0x9)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'tunl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0xffff7fff}, @TCA_CAKE_MPU={0x8, 0xe, 0xfd}]}}]}, 0x44}}, 0x4800)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r5, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r4)

35.271279ms ago: executing program 3 (id=6987):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="02000000020001000003be8c5ee1768810003308030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfcceb", 0x90) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x1416, 0xe50814127a83d959}, 0x10}}, 0x0) (async, rerun: 32)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) (rerun: 32)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)

0s ago: executing program 2 (id=6988):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) (fail_nth: 6)

kernel console output (not intermixed with test programs):

] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms
[  753.220608][    C0] lec:lec_tx_timeout: lec0
[  753.367928][T29185] team_slave_1: Caught tx_queue_len zero misconfig
[  753.646343][T29201] A link change request failed with some changes committed already. Interface sit3 may have been left with an inconsistent configuration, please check.
[  753.862227][T29213] bridge10: entered promiscuous mode
[  753.880892][T29213] bridge10: entered allmulticast mode
[  754.143655][T29230] syzkaller0: entered promiscuous mode
[  754.165669][T29230] syzkaller0: entered allmulticast mode
[  755.073006][T29270] bridge0: port 3(ipvlan3) entered blocking state
[  755.090138][T29270] bridge0: port 3(ipvlan3) entered disabled state
[  755.102874][T29270] ipvlan3: entered allmulticast mode
[  755.108312][T29270] bridge0: entered allmulticast mode
[  755.140355][T29270] ipvlan3: left allmulticast mode
[  755.153006][T29270] bridge0: left allmulticast mode
[  755.203587][T29274] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  755.665366][   T30] audit: type=1800 audit(1774849218.222:17): pid=29294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5788" name="memory.events" dev="tmpfs" ino=2810 res=0 errno=0
[  755.793818][   T30] audit: type=1804 audit(1774849218.342:18): pid=29298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5788" name="/newroot/547/memory.events" dev="tmpfs" ino=2810 res=1 errno=0
[  755.909731][T17073] lo speed is unknown, defaulting to 1000
[  755.916458][T21147] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  755.916497][T17073] syz2: Port: 1 Link DOWN
[  755.939104][T21147] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  756.056229][T21147] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  756.121097][T21147] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  756.551873][T29332] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  756.796800][T29332] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  756.831515][T29339] __nla_validate_parse: 7 callbacks suppressed
[  756.831537][T29339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5798'.
[  756.894577][T29339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5798'.
[  756.935249][T29332] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  756.955148][T29337] syzkaller1: entered promiscuous mode
[  756.960816][T29337] syzkaller1: entered allmulticast mode
[  757.053878][T29332] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  757.065352][T29353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5803'.
[  757.345003][T29352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  757.466610][   T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  757.475292][   T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  757.530799][T21151] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  757.624197][ T2980] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  757.843145][T29376] netlink: 'syz.2.5805': attribute type 29 has an invalid length.
[  757.884100][T29376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5805'.
[  757.907967][T29376] netlink: 'syz.2.5805': attribute type 29 has an invalid length.
[  757.921574][T29376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5805'.
[  758.249241][T29387] gre0 speed is unknown, defaulting to 1000
[  758.955061][T29387] lo speed is unknown, defaulting to 1000
[  758.964409][T29395] gre0 speed is unknown, defaulting to 1000
[  759.133060][T29397] netlink: 'syz.1.5811': attribute type 4 has an invalid length.
[  759.140851][T29397] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5811'.
[  759.519526][T29387] lo speed is unknown, defaulting to 1000
[  759.658177][T29417] netlink: 'syz.2.5816': attribute type 4 has an invalid length.
[  759.677369][T29395] lo speed is unknown, defaulting to 1000
[  760.390247][T29395] lo speed is unknown, defaulting to 1000
[  769.329029][ T7332] lec:lec_start_xmit: lec0:No lecd attached
[  769.933161][ T1683] block nbd1: Possible stuck request ffff888026d68000: control (read@0,1024B). Runtime 150 seconds
[  769.944852][ T1683] block nbd1: Possible stuck request ffff888026d68200: control (read@1024,1024B). Runtime 150 seconds
[  769.956223][ T1683] block nbd1: Possible stuck request ffff888026d68400: control (read@2048,1024B). Runtime 150 seconds
[  769.967595][ T1683] block nbd1: Possible stuck request ffff888026d68600: control (read@3072,1024B). Runtime 150 seconds
[  774.342906][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  774.351187][    C0] lec:lec_tx_timeout: lec0
[  776.400047][T29452] sctp: [Deprecated]: syz.0.5823 (pid 29452) Use of int in max_burst socket option deprecated.
[  776.400047][T29452] Use struct sctp_assoc_value instead
[  776.412137][T29437] IPVS: Scheduler module ip_vs_sip not found
[  776.642277][T29465] Cannot find del_set index 1536 as target
[  777.145552][T29486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5832'.
[  777.172120][T29489] netlink: 'syz.2.5824': attribute type 1 has an invalid length.
[  777.189100][T29477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  777.228248][T29496] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5824'.
[  777.264024][T29489] bond8: entered promiscuous mode
[  777.271051][T29489] 8021q: adding VLAN 0 to HW filter on device bond8
[  778.326997][T29536] batadv_slave_0: entered promiscuous mode
[  778.333338][T29536] batadv_slave_0: entered allmulticast mode
[  778.729131][T29552] pim6reg1: entered allmulticast mode
[  778.762676][T29555] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  778.804618][T29555] syzkaller0: entered promiscuous mode
[  778.810226][T29555] syzkaller0: entered allmulticast mode
[  778.817372][T29555] tipc: Resetting bearer <eth:syzkaller0>
[  778.835184][T29561] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  778.873350][T29553] tipc: Resetting bearer <eth:syzkaller0>
[  778.935345][T29563] netlink: 'syz.0.5847': attribute type 21 has an invalid length.
[  778.962581][T29563] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5847'.
[  779.215134][T29572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5849'.
[  781.338411][T29553] tipc: Disabling bearer <eth:syzkaller0>
[  781.347289][T29563] netlink: 'syz.0.5847': attribute type 5 has an invalid length.
[  781.355682][T29563] netlink: 'syz.0.5847': attribute type 6 has an invalid length.
[  781.364426][T29563] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5847'.
[  781.384128][T29586] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  781.462396][T29591] netlink: 'syz.0.5854': attribute type 6 has an invalid length.
[  781.541463][T29598] netlink: 'syz.4.5857': attribute type 5 has an invalid length.
[  781.752794][T29611] siw: device registration error -23
[  781.954453][T29614] sit0: entered allmulticast mode
[  781.966214][T29621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5863'.
[  781.987150][T29621] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5863'.
[  782.004927][T19304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  782.024990][T19304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  782.050185][T19304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  782.058998][T19304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  782.071188][T19304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  782.160728][T29628] netlink: 'syz.3.5865': attribute type 1 has an invalid length.
[  782.171654][T29624] gre0 speed is unknown, defaulting to 1000
[  782.577554][T29641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5868'.
[  782.634574][T29637] syzkaller0: entered promiscuous mode
[  782.640149][T29637] syzkaller0: entered allmulticast mode
[  782.738617][T29624] lo speed is unknown, defaulting to 1000
[  782.756904][T29629] gre0 speed is unknown, defaulting to 1000
[  783.014221][T29650] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5864'.
[  783.935422][T29659] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5870'.
[  784.095792][T17034] Bluetooth: hci0: command tx timeout
[  785.429887][T29624] lo speed is unknown, defaulting to 1000
[  785.433950][T29629] lo speed is unknown, defaulting to 1000
[  785.541388][T29668] syzkaller1: entered promiscuous mode
[  785.547527][T29668] syzkaller1: entered allmulticast mode
[  785.815083][T29666] ipvlan0: entered promiscuous mode
[  785.828653][T29630] gre0 speed is unknown, defaulting to 1000
[  785.969280][T29670] netlink: 'syz.2.5872': attribute type 1 has an invalid length.
[  786.056551][T29674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5872'.
[  786.110721][T29670] 8021q: adding VLAN 0 to HW filter on device bond9
[  786.175745][T17034] Bluetooth: hci0: command tx timeout
[  786.183318][T29680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5875'.
[  786.246197][T29679] bond9: (slave gretap3): making interface the new active one
[  786.259253][T29679] bond9: (slave gretap3): Enslaving as an active interface with an up link
[  786.567600][T29692] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5878'.
[  786.655533][T29692] vlan0: entered promiscuous mode
[  786.677135][T29692] bond9: entered promiscuous mode
[  786.699368][T29692] gretap3: entered promiscuous mode
[  787.211922][T29629] lo speed is unknown, defaulting to 1000
[  787.232006][T29698] bridge0: port 3(gretap0) entered blocking state
[  787.255190][T29706] netlink: 'syz.2.5881': attribute type 1 has an invalid length.
[  787.267445][T29698] bridge0: port 3(gretap0) entered disabled state
[  787.306603][T29698] gretap0: entered allmulticast mode
[  787.325546][T29698] gretap0: entered promiscuous mode
[  787.355780][T29699] smc: net device wlan0 applied user defined pnetid SYZ0
[  787.361360][T29630] lo speed is unknown, defaulting to 1000
[  787.379788][T29699] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0
[  787.473191][T29706] 8021q: adding VLAN 0 to HW filter on device bond10
[  787.543716][T29707] bond10: (slave veth13): Enslaving as an active interface with a down link
[  787.614124][T21154] dvmrp0: left allmulticast mode
[  787.900155][T21154] bond2 (unregistering): (slave gretap1): Releasing active interface
[  788.069139][T21154] bond8 (unregistering): (slave bridge4): Releasing backup interface
[  788.077832][T21154] bond8 (unregistering): (slave bridge4): the permanent HWaddr of slave - 7a:23:6e:9f:02:a1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  788.127693][T21154] bond8 (unregistering): (slave bridge5): Releasing backup interface
[  788.247713][T21154] bond9 (unregistering): (slave bridge8): Releasing active interface
[  788.262997][T17034] Bluetooth: hci0: command tx timeout
[  788.338272][T21154] bond0 (unregistering): left promiscuous mode
[  788.345244][T21154] bond_slave_0: left promiscuous mode
[  788.350854][T21154] bond_slave_1: left promiscuous mode
[  788.358231][T21154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  788.369729][T21154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  788.380951][T21154] bond0 (unregistering): Released all slaves
[  788.391868][T21154] bond1 (unregistering): Released all slaves
[  788.406097][T21154] bond2 (unregistering): Released all slaves
[  788.420415][T21154] bond3 (unregistering): (slave veth9): Releasing active interface
[  788.430481][T21154] bond3 (unregistering): Released all slaves
[  788.449755][T21154] bond4 (unregistering): Released all slaves
[  788.463455][T21154] bond5 (unregistering): Released all slaves
[  788.478486][T21154] bond6 (unregistering): Released all slaves
[  788.496886][T21154] bond7 (unregistering): Released all slaves
[  788.515533][T21154] bond8 (unregistering): Released all slaves
[  788.529144][T21154] bond9 (unregistering): Released all slaves
[  788.543503][T21154] bond10 (unregistering): Released all slaves
[  788.560065][T21154] bond11 (unregistering): Released all slaves
[  788.584116][T21154] bond12 (unregistering): Released all slaves
[  788.599455][T21154] bond13 (unregistering): Released all slaves
[  788.653108][T29712] netlink: 'syz.3.5882': attribute type 4 has an invalid length.
[  788.717702][T29630] lo speed is unknown, defaulting to 1000
[  788.989490][T29723] 0ŖX¹¦Ą: left allmulticast mode
[  789.002614][T29723] A link change request failed with some changes committed already. Interface 
60ŖX¹¦Ą may have been left with an inconsistent configuration, please check.
[  789.049050][T29732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5886'.
[  789.100914][T21154] tipc: Disabling bearer <udp:syz2>
[  789.146202][T21154] tipc: Left network mode
[  789.161572][T29624] chnl_net:caif_netlink_parms(): no params data found
[  789.467891][T29728] syzkaller0: entered promiscuous mode
[  789.477638][T29728] syzkaller0: entered allmulticast mode
[  789.818497][T29765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5890'.
[  790.119954][T29774] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.5891'.
[  790.305667][T29624] bridge0: port 1(bridge_slave_0) entered blocking state
[  790.333975][T17034] Bluetooth: hci0: command tx timeout
[  790.339858][T29624] bridge0: port 1(bridge_slave_0) entered disabled state
[  790.353142][T29624] bridge_slave_0: entered allmulticast mode
[  790.387878][T29624] bridge_slave_0: entered promiscuous mode
[  790.700507][T29624] bridge0: port 2(bridge_slave_1) entered blocking state
[  790.718479][T29624] bridge0: port 2(bridge_slave_1) entered disabled state
[  790.745674][T29624] bridge_slave_1: entered allmulticast mode
[  790.853845][T29624] bridge_slave_1: entered promiscuous mode
[  790.925048][T29802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5895'.
[  791.018799][T29801] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  791.086404][T29624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  791.235665][T29624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  791.809805][T29799] gre0 speed is unknown, defaulting to 1000
[  792.009400][T29624] team0: Port device team_slave_0 added
[  792.048091][T29624] team0: Port device team_slave_1 added
[  792.081826][T29837] netlink: 'syz.2.5900': attribute type 13 has an invalid length.
[  792.122673][T29837] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5900'.
[  792.497052][T29624] batman_adv: batadv0: Adding interface: batadv_slave_0
[  792.513994][T29624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  792.564108][T29624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  792.614895][T29624] batman_adv: batadv0: Adding interface: batadv_slave_1
[  792.622195][T29624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  792.659178][T29624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  792.726896][T29799] lo speed is unknown, defaulting to 1000
[  795.512767][T29799] lo speed is unknown, defaulting to 1000
[  795.556116][T29624] hsr_slave_0: entered promiscuous mode
[  795.571033][T29624] hsr_slave_1: entered promiscuous mode
[  795.584742][T29624] debugfs: 'hsr0' already exists in 'hsr'
[  795.590518][T29624] Cannot create hsr debugfs directory
[  796.609714][T21154] hsr_slave_0: left promiscuous mode
[  796.662693][T21154] hsr_slave_1: left promiscuous mode
[  796.668929][T21154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  796.693850][T21154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  797.126701][T29905] netlink: 324 bytes leftover after parsing attributes in process `syz.2.5907'.
[  797.137126][T21154] team0 (unregistering): Port device team_slave_1 removed
[  797.157353][T21154] team0 (unregistering): Port device team_slave_0 removed
[  797.776187][T29927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5911'.
[  797.821104][T29927] macvlan0: entered promiscuous mode
[  797.852739][T29927] netlink: 'syz.3.5911': attribute type 2 has an invalid length.
[  798.076077][T19304] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  798.087106][T19304] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  798.099782][T19304] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  798.111998][T19304] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  798.128558][T19304] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  798.201177][T29943] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5911'.
[  798.219110][T21154] IPVS: stop unused estimator thread 0...
[  798.246674][T29938] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  798.583014][T29942] gre0 speed is unknown, defaulting to 1000
[  798.611552][T29951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5913'.
[  799.085502][T29624] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  799.117699][T29624] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  799.143729][T29624] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  799.174869][T29624] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  799.349007][T29942] lo speed is unknown, defaulting to 1000
[  799.384652][T29931] gre0 speed is unknown, defaulting to 1000
[  799.532231][T29624] 8021q: adding VLAN 0 to HW filter on device bond0
[  799.608431][T29624] 8021q: adding VLAN 0 to HW filter on device team0
[  799.637641][T21154] bridge0: port 1(bridge_slave_0) entered blocking state
[  799.644998][T21154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  799.696209][T21154] bridge0: port 2(bridge_slave_1) entered blocking state
[  799.703848][T21154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  799.836245][T29979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5916'.
[  799.878506][T29979] 8021q: adding VLAN 0 to HW filter on device bond7
[  799.912184][T29980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5915'.
[  799.964515][T29987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5916'.
[  800.013676][ T1683] block nbd1: Possible stuck request ffff888026d68000: control (read@0,1024B). Runtime 180 seconds
[  800.026145][ T1683] block nbd1: Possible stuck request ffff888026d68200: control (read@1024,1024B). Runtime 180 seconds
[  800.038362][ T1683] block nbd1: Possible stuck request ffff888026d68400: control (read@2048,1024B). Runtime 180 seconds
[  800.050451][ T1683] block nbd1: Possible stuck request ffff888026d68600: control (read@3072,1024B). Runtime 180 seconds
[  800.071678][T29979] 8021q: adding VLAN 0 to HW filter on device bond8
[  800.085863][T29979] bond7: (slave bond8): Enslaving as an active interface with an up link
[  800.169194][T29987] bond7 (unregistering): (slave bond8): Releasing backup interface
[  800.190479][T29987] bond7 (unregistering): Released all slaves
[  800.239826][T29942] lo speed is unknown, defaulting to 1000
[  800.254157][T17034] Bluetooth: hci4: command tx timeout
[  800.255199][T29931] lo speed is unknown, defaulting to 1000
[  800.685397][T29624] 8021q: adding VLAN 0 to HW filter on device batadv0
[  800.782698][T30004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5919'.
[  800.815827][T30004] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5919'.
[  800.847377][T30004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5919'.
[  800.950417][T29624] veth0_vlan: entered promiscuous mode
[  801.068527][T30011] syzkaller0: entered promiscuous mode
[  801.074878][T30011] syzkaller0: entered allmulticast mode
[  801.098547][T29624] veth1_vlan: entered promiscuous mode
[  801.136261][T29931] lo speed is unknown, defaulting to 1000
[  802.102268][ T5194] udevd[5194]: worker [24379] /devices/virtual/block/nbd1 timeout; kill it
[  802.133277][ T5194] udevd[5194]: seq 32284 '/devices/virtual/block/nbd1' killed
[  802.333212][T17034] Bluetooth: hci4: command tx timeout
[  803.978532][T29624] veth0_macvtap: entered promiscuous mode
[  804.010916][T29624] veth1_macvtap: entered promiscuous mode
[  804.154880][T29624] batman_adv: batadv0: Interface activated: batadv_slave_0
[  804.256973][T30045] syzkaller0: create flow: hash 3375880953 index 2
[  804.407199][T30047] syzkaller0: delete flow: hash 3375880953 index 2
[  804.412941][T17034] Bluetooth: hci4: command tx timeout
[  806.496229][T17034] Bluetooth: hci4: command tx timeout
[  806.804830][T29624] batman_adv: batadv0: Interface activated: batadv_slave_1
[  806.895218][T10524] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  806.915024][T10524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  806.967658][T10524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  806.993077][T10524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  807.051958][T29931] chnl_net:caif_netlink_parms(): no params data found
[  807.457229][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  807.470986][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  807.498224][T29931] bridge0: port 1(bridge_slave_0) entered blocking state
[  807.508270][T29931] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.520492][T29931] bridge_slave_0: entered allmulticast mode
[  807.524460][T30075] netlink: 'syz.3.5933': attribute type 3 has an invalid length.
[  807.534411][T29931] bridge_slave_0: entered promiscuous mode
[  807.555179][T29931] bridge0: port 2(bridge_slave_1) entered blocking state
[  807.573416][T29931] bridge0: port 2(bridge_slave_1) entered disabled state
[  807.580933][T29931] bridge_slave_1: entered allmulticast mode
[  807.591554][T29931] bridge_slave_1: entered promiscuous mode
[  807.618650][T30075] netlink: 'syz.3.5933': attribute type 12 has an invalid length.
[  807.710702][T30070] netlink: 'syz.2.5931': attribute type 2 has an invalid length.
[  807.719630][T21147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  807.756387][T21147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  807.796063][T29931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  807.834813][T29931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  807.875340][T30079] netlink: 'syz.2.5931': attribute type 1 has an invalid length.
[  807.901443][T30089] gre0 speed is unknown, defaulting to 1000
[  807.966110][T30079] __nla_validate_parse: 1 callbacks suppressed
[  807.966134][T30079] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5931'.
[  808.106984][T29931] team0: Port device team_slave_0 added
[  808.146783][T29931] team0: Port device team_slave_1 added
[  808.221619][T30098] netlink: ct family unspecified
[  808.227749][T30098] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  808.257766][T29931] batman_adv: batadv0: Adding interface: batadv_slave_0
[  808.272536][T29931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  808.318088][T29931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  808.371892][T30089] lo speed is unknown, defaulting to 1000
[  808.394686][T29931] batman_adv: batadv0: Adding interface: batadv_slave_1
[  808.402160][T29931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  808.435293][T29931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  808.567349][T29931] hsr_slave_0: entered promiscuous mode
[  808.575685][T29931] hsr_slave_1: entered promiscuous mode
[  808.590697][T29931] debugfs: 'hsr0' already exists in 'hsr'
[  808.597132][T29931] Cannot create hsr debugfs directory
[  808.623563][T30113] bridge0: entered promiscuous mode
[  808.798834][T30115] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  808.892241][T30115] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  808.967760][T30089] lo speed is unknown, defaulting to 1000
[  808.976697][T30115] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  809.015863][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[  809.167263][T30125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  809.180843][T30115] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  809.288258][T30121] tipc: Disabling bearer <eth:syzkaller0>
[  809.411216][T29931] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  809.451248][T21151] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  809.488369][T29931] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  809.500109][T29931] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  809.510692][T30131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5946'.
[  809.521422][T30131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5946'.
[  809.546182][T29931] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  809.701757][T10524] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  809.722993][T10524] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  809.787054][T17671] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  809.967164][T30154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5950'.
[  810.048208][T29931] 8021q: adding VLAN 0 to HW filter on device bond0
[  810.203079][T29931] 8021q: adding VLAN 0 to HW filter on device team0
[  810.232423][T17663] bridge0: port 1(bridge_slave_0) entered blocking state
[  810.240483][T17663] bridge0: port 1(bridge_slave_0) entered forwarding state
[  810.306677][T17671] bridge0: port 2(bridge_slave_1) entered blocking state
[  810.315029][T17671] bridge0: port 2(bridge_slave_1) entered forwarding state
[  810.538342][T30160] netlink: 'syz.0.5952': attribute type 3 has an invalid length.
[  810.573830][T30160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5952'.
[  810.584034][T30160] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5952'.
[  810.594322][T30164] netlink: 'syz.0.5952': attribute type 1 has an invalid length.
[  810.925073][T29931] 8021q: adding VLAN 0 to HW filter on device batadv0
[  810.960637][T30188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5959'.
[  810.982362][T30188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5959'.
[  811.207356][T30197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5963'.
[  811.236315][T30197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5963'.
[  811.588211][T30206] Cannot find del_set index 1536 as target
[  811.652134][T30206] netlink: 'syz.4.5966': attribute type 39 has an invalid length.
[  811.753749][T30206] syz_tun (unregistering): left promiscuous mode
[  811.761742][T30206] team0: Port device syz_tun removed
[  811.893817][T29931] veth0_vlan: entered promiscuous mode
[  811.924113][T29931] veth1_vlan: entered promiscuous mode
[  812.073978][T30226] 8021q: adding VLAN 0 to HW filter on device bond0
[  812.100200][T30226] 8021q: adding VLAN 0 to HW filter on device team0
[  812.144369][T30226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  812.206711][T30231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  812.287615][T30237] gre0 speed is unknown, defaulting to 1000
[  812.318117][T29931] veth0_macvtap: entered promiscuous mode
[  812.367486][T29931] veth1_macvtap: entered promiscuous mode
[  812.434727][T29931] batman_adv: batadv0: Interface activated: batadv_slave_0
[  812.483072][T29931] batman_adv: batadv0: Interface activated: batadv_slave_1
[  812.530289][T21155] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  812.553034][T21155] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  812.597515][T21155] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  812.623688][T21155] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  812.941006][T30237] lo speed is unknown, defaulting to 1000
[  812.954850][T17663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  812.980261][T17663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  813.106609][T21155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  813.132723][T21155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  813.326238][T30267] Unknown options in mask 6
[  813.406439][T30275] __nla_validate_parse: 5 callbacks suppressed
[  813.406464][T30275] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5910'.
[  813.605917][T30281] vlan2: entered promiscuous mode
[  813.611228][T30281] geneve1: entered promiscuous mode
[  813.649424][T30281] vlan2: entered allmulticast mode
[  813.657486][T30281] geneve1: entered allmulticast mode
[  813.788608][T30237] lo speed is unknown, defaulting to 1000
[  814.111583][T30298] 8021q: adding VLAN 0 to HW filter on device bond11
[  814.172677][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5160 ms
[  814.180823][    C0] lec:lec_tx_timeout: lec0
[  814.368771][T30311] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5994'.
[  815.017668][T30330] netlink: 'syz.2.5998': attribute type 62 has an invalid length.
[  815.088162][T30338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5997'.
[  815.205321][T30327] gre0 speed is unknown, defaulting to 1000
[  815.492882][T30338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  815.621227][T30350] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  815.913313][T30358] IPv6: sit1: Disabled Multicast RS
[  815.921721][T30327] lo speed is unknown, defaulting to 1000
[  816.433348][T30377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6007'.
[  816.846089][T30327] lo speed is unknown, defaulting to 1000
[  817.394086][T30397] syzkaller0: entered promiscuous mode
[  817.413033][T30397] syzkaller0: entered allmulticast mode
[  817.678407][T30401] netlink: 'syz.3.6012': attribute type 2 has an invalid length.
[  818.159764][T30413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6016'.
[  818.200603][T30415] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  818.488025][T30429] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  818.785843][T30441] xt_socket: unknown flags 0xfc
[  818.845397][T30441] netlink: 'syz.5.6023': attribute type 20 has an invalid length.
[  818.939076][T30444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6023'.
[  818.962915][T30444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6023'.
[  819.328294][T19304] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  819.339258][T19304] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  819.364321][T19304] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  819.377942][T19304] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  819.399371][T19304] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  819.464229][T30454] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6029'.
[  819.598019][T30459] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6030'.
[  819.716426][T30458] macsec0: entered promiscuous mode
[  819.770054][T30459] bond0: entered promiscuous mode
[  819.776065][T30459] bond_slave_0: entered promiscuous mode
[  819.784373][T30459] bond_slave_1: entered promiscuous mode
[  819.792157][T30459] bond0: left promiscuous mode
[  819.805891][T30459] bond_slave_0: left promiscuous mode
[  819.811578][T30459] bond_slave_1: left promiscuous mode
[  819.836003][T30460] macsec0: left promiscuous mode
[  819.845099][T30449] gre0 speed is unknown, defaulting to 1000
[  820.031570][T30470] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6032'.
[  820.107948][T30470] ip6gretap0: entered promiscuous mode
[  820.158866][T30470] ip6gretap0: left promiscuous mode
[  820.294599][T30475] bond1 (unregistering): Released all slaves
[  820.357603][T30453] gre0 speed is unknown, defaulting to 1000
[  820.357634][T30449] lo speed is unknown, defaulting to 1000
[  820.846840][T30449] lo speed is unknown, defaulting to 1000
[  820.961581][T30453] lo speed is unknown, defaulting to 1000
[  821.124728][   T30] audit: type=1804 audit(1774849283.682:19): pid=30489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6036" name="/newroot/601/memory.events" dev="tmpfs" ino=3095 res=1 errno=0
[  821.153396][   T30] audit: type=1800 audit(1774849283.682:20): pid=30489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6036" name="memory.events" dev="tmpfs" ino=3095 res=0 errno=0
[  821.183083][   T30] audit: type=1804 audit(1774849283.682:21): pid=30489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.6036" name="/newroot/601/memory.events" dev="tmpfs" ino=3095 res=1 errno=0
[  821.358857][T30453] lo speed is unknown, defaulting to 1000
[  821.453434][T17034] Bluetooth: hci1: command tx timeout
[  821.562011][T30449] chnl_net:caif_netlink_parms(): no params data found
[  821.736821][T30449] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.746225][T30449] bridge0: port 1(bridge_slave_0) entered disabled state
[  821.755132][T30449] bridge_slave_0: entered allmulticast mode
[  821.772318][T30449] bridge_slave_0: entered promiscuous mode
[  821.807824][T30501] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6038'.
[  821.817561][T30449] bridge0: port 2(bridge_slave_1) entered blocking state
[  821.825446][T30449] bridge0: port 2(bridge_slave_1) entered disabled state
[  821.837917][T30449] bridge_slave_1: entered allmulticast mode
[  821.846376][T30449] bridge_slave_1: entered promiscuous mode
[  822.025643][T30449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  822.098952][T30449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  822.232667][T30512] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6042'.
[  822.260432][T30505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6040'.
[  822.270609][T30505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6040'.
[  822.287675][T30505] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6040'.
[  822.294841][T30449] team0: Port device team_slave_0 added
[  822.369127][T30449] team0: Port device team_slave_1 added
[  822.711793][T30449] batman_adv: batadv0: Adding interface: batadv_slave_0
[  822.742683][T30449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  822.789136][T30449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  822.906089][T30449] batman_adv: batadv0: Adding interface: batadv_slave_1
[  822.920314][T30449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  822.986789][T30449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  823.286677][T30531] gre0 speed is unknown, defaulting to 1000
[  823.301743][T30449] hsr_slave_0: entered promiscuous mode
[  823.339214][T30449] hsr_slave_1: entered promiscuous mode
[  823.346529][T30449] debugfs: 'hsr0' already exists in 'hsr'
[  823.363929][T30449] Cannot create hsr debugfs directory
[  823.442038][T30556] netlink: 'syz.0.6050': attribute type 2 has an invalid length.
[  823.494481][T30556] l24): entered promiscuous mode
[  823.532879][T17034] Bluetooth: hci1: command tx timeout
[  823.763414][T30562] 8021q: adding VLAN 0 to HW filter on device bond1
[  823.804486][T30561] bond1: option mode: unable to set because the bond device is up
[  824.087407][T30531] lo speed is unknown, defaulting to 1000
[  824.120554][T30580] __nla_validate_parse: 2 callbacks suppressed
[  824.120597][T30580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6057'.
[  824.192142][T30580] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6057'.
[  824.389992][T30449] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  824.430554][T30449] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  824.473188][T30449] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  824.520671][T30449] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  824.585663][T30590] Cannot find set identified by id 65534 to match
[  824.644958][T30599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6060'.
[  824.672594][T30599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6060'.
[  824.698023][T30599] netlink: 'syz.0.6060': attribute type 4 has an invalid length.
[  824.708681][T30531] lo speed is unknown, defaulting to 1000
[  824.927925][T30449] 8021q: adding VLAN 0 to HW filter on device bond0
[  824.998728][T30605] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6062'.
[  825.036795][T30449] 8021q: adding VLAN 0 to HW filter on device team0
[  825.060399][T21155] bridge0: port 1(bridge_slave_0) entered blocking state
[  825.067841][T21155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  825.139557][T17671] bridge0: port 2(bridge_slave_1) entered blocking state
[  825.146891][T17671] bridge0: port 2(bridge_slave_1) entered forwarding state
[  825.430367][T30620] vlan2: entered promiscuous mode
[  825.463939][T30620] geneve1: entered promiscuous mode
[  825.482696][T30620] vlan2: entered allmulticast mode
[  825.489823][T30620] geneve1: entered allmulticast mode
[  825.547436][T30627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6065'.
[  825.609944][T30630] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  825.614787][T17034] Bluetooth: hci1: command tx timeout
[  825.657042][T30630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6065'.
[  825.672317][T30630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6065'.
[  826.826656][T30638] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6068'.
[  826.837055][T30639] No such timeout policy "syz1"
[  826.848606][T30635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6067'.
[  826.900239][T30449] 8021q: adding VLAN 0 to HW filter on device batadv0
[  827.584716][T30653] gre0 speed is unknown, defaulting to 1000
[  827.652032][T30449] veth0_vlan: entered promiscuous mode
[  827.684196][T30449] veth1_vlan: entered promiscuous mode
[  827.693948][T17034] Bluetooth: hci1: command tx timeout
[  827.776473][T30449] veth0_macvtap: entered promiscuous mode
[  827.808558][T30449] veth1_macvtap: entered promiscuous mode
[  827.886635][T30449] batman_adv: batadv0: Interface activated: batadv_slave_0
[  827.934383][T30449] batman_adv: batadv0: Interface activated: batadv_slave_1
[  829.252710][T30653] lo speed is unknown, defaulting to 1000
[  829.304192][T30678] 8021q: adding VLAN 0 to HW filter on device bond2
[  829.353720][T30680] syz_tun: entered promiscuous mode
[  829.362712][T30683] openvswitch: netlink: Key type 310 is out of range max 32
[  829.363806][T30680] bond2: (slave macvlan2): Enslaving as an active interface with an up link
[  829.389340][T21155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  829.448947][T21155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  829.473145][T30685] __nla_validate_parse: 6 callbacks suppressed
[  829.473168][T30685] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6077'.
[  829.504720][T21155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  829.527126][T21155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  829.584375][T30687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6078'.
[  829.593931][T30687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6078'.
[  829.604699][T30687] netlink: 'syz.0.6078': attribute type 14 has an invalid length.
[  829.790703][T30653] lo speed is unknown, defaulting to 1000
[  829.819190][T17666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  829.882855][T17666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  830.002292][T17663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  830.016444][T30691] delete_channel: no stack
[  830.054060][T17663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  830.092840][ T1683] block nbd1: Possible stuck request ffff888026d68000: control (read@0,1024B). Runtime 210 seconds
[  830.106432][ T1683] block nbd1: Possible stuck request ffff888026d68200: control (read@1024,1024B). Runtime 210 seconds
[  830.118381][ T1683] block nbd1: Possible stuck request ffff888026d68400: control (read@2048,1024B). Runtime 210 seconds
[  830.130635][ T1683] block nbd1: Possible stuck request ffff888026d68600: control (read@3072,1024B). Runtime 210 seconds
[  830.133247][T30707] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6082'.
[  830.184564][T30709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6083'.
[  830.360401][T17065] IPVS: starting estimator thread 0...
[  830.462983][T30718] IPVS: using max 27 ests per chain, 64800 per kthread
[  830.741517][T19304] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  830.757080][T19304] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  830.769570][T19304] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  830.779691][T19304] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  830.789879][T19304] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  830.959974][T30732] vlan2: entered promiscuous mode
[  831.014268][T30732] geneve1: entered promiscuous mode
[  831.023890][T30732] vlan2: entered allmulticast mode
[  831.041053][T30732] geneve1: entered allmulticast mode
[  831.395784][T30740] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6087'.
[  832.470177][T30751] x_tables: duplicate underflow at hook 2
[  832.490828][T30728] gre0 speed is unknown, defaulting to 1000
[  832.623731][T30758] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:0
[  832.726235][ T7332] lec:lec_start_xmit: lec0:No lecd attached
[  832.897845][T19304] Bluetooth: hci5: command tx timeout
[  832.981260][T30728] lo speed is unknown, defaulting to 1000
[  833.257584][T30778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6099'.
[  833.547115][T30728] lo speed is unknown, defaulting to 1000
[  833.760681][T30786] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6101'.
[  833.942197][T30788] syzkaller0: create flow: hash 3375880953 index 1
[  833.952895][T17073] syzkaller0: tun_net_xmit 76
[  833.983289][T11415] syzkaller0: tun_net_xmit 76
[  834.003086][T30787] syzkaller0: delete flow: hash 3375880953 index 2
[  834.973643][T19304] Bluetooth: hci5: command tx timeout
[  836.773840][T30728] chnl_net:caif_netlink_parms(): no params data found
[  836.918832][T30728] bridge0: port 1(bridge_slave_0) entered blocking state
[  836.927060][T30728] bridge0: port 1(bridge_slave_0) entered disabled state
[  836.936677][T30728] bridge_slave_0: entered allmulticast mode
[  836.945262][T30728] bridge_slave_0: entered promiscuous mode
[  836.955215][T30728] bridge0: port 2(bridge_slave_1) entered blocking state
[  836.962766][T30728] bridge0: port 2(bridge_slave_1) entered disabled state
[  836.970090][T30728] bridge_slave_1: entered allmulticast mode
[  836.979142][T30728] bridge_slave_1: entered promiscuous mode
[  837.069625][T19304] Bluetooth: hci5: command tx timeout
[  837.116878][T30728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  837.130656][T30728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  837.188927][T30728] team0: Port device team_slave_0 added
[  837.209769][T30728] team0: Port device team_slave_1 added
[  837.226770][T30829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6112'.
[  837.312360][T30728] batman_adv: batadv0: Adding interface: batadv_slave_0
[  837.345359][T30833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6112'.
[  837.368637][T30728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  837.399240][T30728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  837.423800][T30728] batman_adv: batadv0: Adding interface: batadv_slave_1
[  837.431188][T30728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  837.459565][T30728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  837.579857][T30728] hsr_slave_0: entered promiscuous mode
[  837.604591][T30728] hsr_slave_1: entered promiscuous mode
[  837.613156][T30728] debugfs: 'hsr0' already exists in 'hsr'
[  837.629095][T30728] Cannot create hsr debugfs directory
[  837.690922][T30840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6114'.
[  837.911626][T30847] netlink: 'syz.0.6116': attribute type 1 has an invalid length.
[  837.926786][T30847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6116'.
[  837.944486][T30849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6115'.
[  838.067444][T30853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6118'.
[  838.172995][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5440 ms
[  838.181113][    C0] lec:lec_tx_timeout: lec0
[  838.288922][T30860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6120'.
[  838.303466][T30860] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6120'.
[  838.392704][T30728] bond0: (slave netdevsim0): Releasing backup interface
[  838.392950][T30867] netlink: 'syz.0.6122': attribute type 11 has an invalid length.
[  838.427620][T30728] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode
[  838.789828][T30728] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  838.834136][T30728] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  838.886305][T30728] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  838.907223][T30728] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  839.143433][T19304] Bluetooth: hci5: command tx timeout
[  839.176960][T30728] 8021q: adding VLAN 0 to HW filter on device bond0
[  839.220546][T30728] 8021q: adding VLAN 0 to HW filter on device team0
[  839.239154][T17671] bridge0: port 1(bridge_slave_0) entered blocking state
[  839.246691][T17671] bridge0: port 1(bridge_slave_0) entered forwarding state
[  839.334026][T17663] bridge0: port 2(bridge_slave_1) entered blocking state
[  839.341401][T17663] bridge0: port 2(bridge_slave_1) entered forwarding state
[  839.918471][T30919] gre0 speed is unknown, defaulting to 1000
[  840.023263][T30728] 8021q: adding VLAN 0 to HW filter on device batadv0
[  840.093262][T30728] veth0_vlan: entered promiscuous mode
[  840.109616][T30728] veth1_vlan: entered promiscuous mode
[  840.134462][T30933] Bluetooth: MGMT ver 1.23
[  840.154669][T30923] syzkaller0: entered allmulticast mode
[  840.165522][T30728] veth0_macvtap: entered promiscuous mode
[  840.199023][T30728] veth1_macvtap: entered promiscuous mode
[  840.259243][T30728] batman_adv: batadv0: Interface activated: batadv_slave_0
[  840.295969][T30728] batman_adv: batadv0: Interface activated: batadv_slave_1
[  840.350702][T21155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  840.381206][T21155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  840.413251][T30921] syzkaller0: left allmulticast mode
[  840.423076][T21155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  840.445166][T21155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  840.666044][T17663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  840.700347][T17663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  840.716855][T30919] lo speed is unknown, defaulting to 1000
[  840.918405][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  840.929327][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  841.174863][T30960] syzkaller0: entered promiscuous mode
[  841.180465][T30960] syzkaller0: entered allmulticast mode
[  841.332133][T30919] lo speed is unknown, defaulting to 1000
[  841.432141][T30969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  841.559313][T30977] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.6147'.
[  841.619312][T30977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6147'.
[  841.749538][T30985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  842.451282][T31004] netlink: 'syz.0.6155': attribute type 3 has an invalid length.
[  842.515822][T31004] nbd: nbd0 already in use
[  842.528546][T31004] block nbd0: NBD_DISCONNECT
[  842.543823][T31004] block nbd0: Send disconnect failed -32
[  842.634280][T31008] netlink: 'syz.4.6156': attribute type 1 has an invalid length.
[  842.697840][T31008] vlan3: entered promiscuous mode
[  842.723766][T31008] syzkaller0: entered promiscuous mode
[  842.729482][T31008] vlan3: entered allmulticast mode
[  842.752917][T31008] syzkaller0: entered allmulticast mode
[  842.930115][T31019] net veth1_virt_wifi ŖŖŖŖŖ: renamed from virt_wifi0
[  843.310150][T31034] netlink: 'syz.4.6163': attribute type 62 has an invalid length.
[  843.388132][T31034] netlink: 'syz.4.6163': attribute type 62 has an invalid length.
[  843.880174][T31064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6170'.
[  844.057012][T31066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6172'.
[  844.069548][T31072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6173'.
[  844.535087][T31102] netlink: 136 bytes leftover after parsing attributes in process `syz.4.6181'.
[  844.599119][T31102] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  844.689406][T31107] bond3 (unregistering): Released all slaves
[  844.758814][T31102] syzkaller1: tun_chr_ioctl cmd 1074025677
[  844.790385][T31102] syzkaller1: linktype set to 805
[  844.904813][T31123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6187'.
[  845.079457][T31133] netlink: 276 bytes leftover after parsing attributes in process `syz.2.6190'.
[  845.254277][T31143] Bluetooth: MGMT ver 1.23
[  845.279263][T31143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6193'.
[  845.795857][T31176] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6201'.
[  846.277268][   T30] audit: type=1107 audit(1774849308.822:22): pid=31199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  846.312624][T31202] gre0 speed is unknown, defaulting to 1000
[  846.424475][T31214] xt_bpf: check failed: parse error
[  846.878017][T17034] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  846.893441][T17034] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  846.907359][T17034] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  846.923908][T17034] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  846.927213][T31202] lo speed is unknown, defaulting to 1000
[  846.940970][T17034] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  846.960402][T31209] gre0 speed is unknown, defaulting to 1000
[  847.109552][T31224] netlink: 'syz.5.6216': attribute type 10 has an invalid length.
[  847.965662][T31209] lo speed is unknown, defaulting to 1000
[  847.974770][T31221] gre0 speed is unknown, defaulting to 1000
[  847.999228][T31241] netlink: 'syz.3.6221': attribute type 1 has an invalid length.
[  848.117215][T31202] lo speed is unknown, defaulting to 1000
[  848.363159][T31246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6224'.
[  848.416385][T31247] netlink: 'syz.3.6224': attribute type 15 has an invalid length.
[  848.468430][T31221] lo speed is unknown, defaulting to 1000
[  848.468775][T31226] gre0 speed is unknown, defaulting to 1000
[  848.973237][T17034] Bluetooth: hci3: command tx timeout
[  849.138211][T31226] lo speed is unknown, defaulting to 1000
[  849.204212][T31261] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  849.314075][T31209] lo speed is unknown, defaulting to 1000
[  850.096749][T31280] netlink: 'syz.0.6234': attribute type 1 has an invalid length.
[  850.105623][T31221] lo speed is unknown, defaulting to 1000
[  850.465374][T31283] netlink: 'syz.0.6236': attribute type 3 has an invalid length.
[  850.484942][T31283] netlink: 'syz.0.6236': attribute type 1 has an invalid length.
[  850.523979][T31283] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6236'.
[  850.697100][T31226] lo speed is unknown, defaulting to 1000
[  850.747646][T31292] : entered promiscuous mode
[  851.052652][T17034] Bluetooth: hci3: command tx timeout
[  851.063073][T31300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6239'.
[  851.476569][T31221] chnl_net:caif_netlink_parms(): no params data found
[  851.914194][T31221] bridge0: port 1(bridge_slave_0) entered blocking state
[  851.928179][T31221] bridge0: port 1(bridge_slave_0) entered disabled state
[  851.975164][T31221] bridge_slave_0: entered allmulticast mode
[  852.052982][T31221] bridge_slave_0: entered promiscuous mode
[  852.080176][T31316] gre0 speed is unknown, defaulting to 1000
[  852.132973][T31317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  852.177857][T31221] bridge0: port 2(bridge_slave_1) entered blocking state
[  852.191993][T31221] bridge0: port 2(bridge_slave_1) entered disabled state
[  852.199942][T31221] bridge_slave_1: entered allmulticast mode
[  852.231653][T31221] bridge_slave_1: entered promiscuous mode
[  852.309791][T31335] netlink: set zone limit has 4 unknown bytes
[  852.606307][T31221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  852.640968][T31221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  853.025886][T31221] team0: Port device team_slave_0 added
[  853.079829][T31221] team0: Port device team_slave_1 added
[  853.135516][T17034] Bluetooth: hci3: command tx timeout
[  853.244180][T31221] batman_adv: batadv0: Adding interface: batadv_slave_0
[  853.263512][T31221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  853.315570][T31221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  853.333823][T31316] lo speed is unknown, defaulting to 1000
[  853.357074][T31221] batman_adv: batadv0: Adding interface: batadv_slave_1
[  853.376891][T31221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  853.413477][T31221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  853.600136][T31358] netlink: 'syz.0.6250': attribute type 9 has an invalid length.
[  853.700099][T31221] hsr_slave_0: entered promiscuous mode
[  853.724400][T31221] hsr_slave_1: entered promiscuous mode
[  853.731680][T31221] debugfs: 'hsr0' already exists in 'hsr'
[  853.742916][T31221] Cannot create hsr debugfs directory
[  853.851135][T31365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6253'.
[  853.868725][T31365] netlink: 'syz.0.6253': attribute type 1 has an invalid length.
[  853.991228][T31367] Cannot find add_set index 0 as target
[  854.019867][T31316] lo speed is unknown, defaulting to 1000
[  854.297018][T31371] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6255'.
[  854.309912][T31371] netlink: 'syz.0.6255': attribute type 4 has an invalid length.
[  854.348694][T31221] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  854.446634][T31221] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  854.566053][T31221] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  854.698099][T31221] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  854.768244][T31383] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  854.784673][T31383] netlink: 'syz.4.6259': attribute type 8 has an invalid length.
[  854.860133][T31383] veth1_to_team: entered promiscuous mode
[  855.178803][T31386] tipc: Started in network mode
[  855.203800][T31386] tipc: Node identity 6e1072ce3c15, cluster identity 4711
[  855.212601][T17034] Bluetooth: hci3: command tx timeout
[  855.213576][T31386] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  855.274015][T31390] syzkaller0: entered promiscuous mode
[  855.279802][T31390] syzkaller0: entered allmulticast mode
[  855.483898][T31386] syzkaller0: mtu less than device minimum
[  855.583847][T31221] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  855.639407][T31385] tipc: Resetting bearer <eth:syzkaller0>
[  855.678601][T31385] tipc: Disabling bearer <eth:syzkaller0>
[  855.723871][T31221] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  855.797836][T31221] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  855.884683][T31221] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  855.903327][T31406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6266'.
[  856.033864][T31408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6266'.
[  856.073059][T31408] nbd: device at index 64 is going down
[  856.102939][T31410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6267'.
[  856.128070][T31406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6266'.
[  856.281034][T31399] netlink: zone id is out of range
[  856.292700][T31399] netlink: zone id is out of range
[  856.348176][T23487] udevd[23487]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  856.352920][T31399] netlink: zone id is out of range
[  856.374669][T31399] netlink: zone id is out of range
[  856.379917][T31399] netlink: zone id is out of range
[  856.400730][T31399] netlink: zone id is out of range
[  856.448235][T31428] sctp: [Deprecated]: syz.0.6269 (pid 31428) Use of int in maxseg socket option.
[  856.448235][T31428] Use struct sctp_assoc_value instead
[  856.641914][T31221] 8021q: adding VLAN 0 to HW filter on device bond0
[  856.727778][T31221] 8021q: adding VLAN 0 to HW filter on device team0
[  856.798109][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  856.806006][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  856.854155][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  856.861883][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  856.909070][T31441] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6273'.
[  856.984918][T31448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6274'.
[  857.350277][T31458] sctp: [Deprecated]: syz.0.6277 (pid 31458) Use of int in max_burst socket option deprecated.
[  857.350277][T31458] Use struct sctp_assoc_value instead
[  857.356585][T31464] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6280'.
[  857.414267][T31464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6280'.
[  857.458013][T31468] mac80211_hwsim hwsim76 wlan0: default FDB implementation only supports local addresses
[  857.598362][T31221] 8021q: adding VLAN 0 to HW filter on device batadv0
[  857.707222][T31476] netlink: 'syz.5.6282': attribute type 21 has an invalid length.
[  857.726078][T31476] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6282'.
[  857.756960][T31476] netlink: 'syz.5.6282': attribute type 4 has an invalid length.
[  857.783531][T31476] netlink: 'syz.5.6282': attribute type 3 has an invalid length.
[  857.785406][T31483] netlink: 27 bytes leftover after parsing attributes in process `syz.5.6282'.
[  857.811346][T31482] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  857.824784][T31221] veth0_vlan: entered promiscuous mode
[  857.844650][T31221] veth1_vlan: entered promiscuous mode
[  857.918948][T31487] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20002
[  857.983779][T31221] veth0_macvtap: entered promiscuous mode
[  858.001591][T31221] veth1_macvtap: entered promiscuous mode
[  858.055230][T31221] batman_adv: batadv0: Interface activated: batadv_slave_0
[  858.080592][T31221] batman_adv: batadv0: Interface activated: batadv_slave_1
[  858.135838][T10530] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  858.146988][T10530] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  858.179190][T10530] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  858.228233][T21155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  858.422023][T21155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  858.449179][T21155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  858.585211][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  858.616735][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  859.009793][T31537] net_ratelimit: 11 callbacks suppressed
[  859.009819][T31537] netlink: Unknown conntrack attr (0)
[  859.121933][T31543] bond0: entered promiscuous mode
[  859.154842][T31543] bond_slave_0: entered promiscuous mode
[  859.175624][T31543] bond_slave_1: entered promiscuous mode
[  859.208407][T31543] bond0: left promiscuous mode
[  859.231107][T31543] bond_slave_0: left promiscuous mode
[  859.254034][T31543] bond_slave_1: left promiscuous mode
[  859.520600][T31555] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  859.606446][T31541] netlink: 'syz.3.6295': attribute type 2 has an invalid length.
[  859.671207][T31562] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  859.677827][T31558] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  859.689140][T31562] syzkaller0: entered promiscuous mode
[  859.698427][T31562] syzkaller0: entered allmulticast mode
[  859.740562][T31562] tipc: Resetting bearer <eth:syzkaller0>
[  859.767189][T31561] tipc: Resetting bearer <eth:syzkaller0>
[  859.801513][T31561] tipc: Disabling bearer <eth:syzkaller0>
[  859.840906][T31568] Bluetooth: MGMT ver 1.23
[  860.069290][T31574] netlink: 'syz.5.6303': attribute type 1 has an invalid length.
[  860.080591][T31573] tap0: tun_chr_ioctl cmd 1074025681
[  860.175730][ T1683] block nbd1: Possible stuck request ffff888026d68000: control (read@0,1024B). Runtime 240 seconds
[  860.187988][ T1683] block nbd1: Possible stuck request ffff888026d68200: control (read@1024,1024B). Runtime 240 seconds
[  860.203976][ T1683] block nbd1: Possible stuck request ffff888026d68400: control (read@2048,1024B). Runtime 240 seconds
[  860.218562][ T1683] block nbd1: Possible stuck request ffff888026d68600: control (read@3072,1024B). Runtime 240 seconds
[  860.330119][T31585] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up
[  860.517881][T31590] syzkaller0: entered promiscuous mode
[  860.531082][T31590] syzkaller0: entered allmulticast mode
[  860.663615][T31598] gretap1: entered promiscuous mode
[  860.676778][T31598] batman_adv: batadv0: Adding interface: gretap1
[  860.695960][T31598] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  860.860179][T31598] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  861.877583][T31612] __nla_validate_parse: 12 callbacks suppressed
[  861.877608][T31612] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6316'.
[  862.009280][T31617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6317'.
[  862.074724][T31614] openvswitch: netlink: IP tunnel dst address not specified
[  862.154045][T31614] gre0 speed is unknown, defaulting to 1000
[  862.628479][T31627] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20004
[  862.653489][T31626] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6319'.
[  862.692686][T31626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6319'.
[  862.795670][T31631] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6321'.
[  862.859260][T31624] gre0 speed is unknown, defaulting to 1000
[  862.943589][T31614] lo speed is unknown, defaulting to 1000
[  863.162953][T31633] IPv6: NLM_F_CREATE should be specified when creating new route
[  863.248220][T31624] lo speed is unknown, defaulting to 1000
[  863.274142][T31637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6324'.
[  863.284111][T31638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6324'.
[  863.660141][T31614] lo speed is unknown, defaulting to 1000
[  864.470588][T31624] lo speed is unknown, defaulting to 1000
[  865.114878][T31695] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6338'.
[  865.129264][T31695] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6338'.
[  865.149792][T31695] netlink: 'syz.3.6338': attribute type 5 has an invalid length.
[  865.167191][T31695] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6338'.
[  866.118084][T31730] hsr0: entered promiscuous mode
[  866.192607][T31730] hsr0: entered allmulticast mode
[  866.197987][T31730] hsr_slave_0: entered allmulticast mode
[  866.208168][T31730] hsr_slave_1: entered allmulticast mode
[  866.527560][T31741] netlink: 'syz.2.6349': attribute type 11 has an invalid length.
[  866.596484][T31741] team0: entered promiscuous mode
[  866.613865][T31741] team_slave_0: entered promiscuous mode
[  866.620285][T31741] team_slave_1: entered promiscuous mode
[  866.645336][T31741] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  867.529945][T31772] __nla_validate_parse: 5 callbacks suppressed
[  867.529969][T31772] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6359'.
[  867.767464][T31777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6361'.
[  867.771677][T31776] nbd: must specify a device to reconfigure
[  867.835979][T31777] gretap0: entered promiscuous mode
[  867.907473][T31782] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6364'.
[  867.945511][T31786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6365'.
[  867.964812][T31784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6363'.
[  868.005193][T31784] 8021q: adding VLAN 0 to HW filter on device bond4
[  868.035691][T31784] macsec2: entered allmulticast mode
[  868.041055][T31784] bond4: entered allmulticast mode
[  868.058878][T31786] IPv6: NLM_F_CREATE should be specified when creating new route
[  868.088357][T31784] bond4: left allmulticast mode
[  868.212061][T31799] x_tables: duplicate underflow at hook 1
[  868.224757][T31799] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6368'.
[  868.473252][T31814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6371'.
[  868.657095][T31815] gre0 speed is unknown, defaulting to 1000
[  868.896701][T31836] geneve2: entered promiscuous mode
[  868.912480][T31836] geneve2: entered allmulticast mode
[  868.924533][T10541] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  868.934014][T10541] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  868.956039][T10541] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  868.978424][T10541] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  869.154970][T31844] netlink: 'syz.5.6377': attribute type 22 has an invalid length.
[  869.182186][T31844] netlink: 'syz.5.6377': attribute type 1 has an invalid length.
[  869.244968][T31844] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6377'.
[  869.363193][T31815] lo speed is unknown, defaulting to 1000
[  869.370013][T31852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6379'.
[  869.392679][T31852] netlink: 'syz.3.6379': attribute type 30 has an invalid length.
[  869.475035][T17667] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  869.495752][T17667] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  869.514027][T31856] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6380'.
[  869.553324][T17667] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  869.617636][T17667] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  870.117614][T31815] lo speed is unknown, defaulting to 1000
[  870.147647][T31865] syzkaller0: entered promiscuous mode
[  870.171279][T31865] syzkaller0: entered allmulticast mode
[  870.358666][T31875] tc action pedit offset 128 out of bounds
[  870.429515][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[  870.711943][T31890] pimreg: entered allmulticast mode
[  870.749449][T31894] veth0_to_bridge: entered promiscuous mode
[  870.890793][T31901] netlink: 'syz.5.6394': attribute type 30 has an invalid length.
[  870.991064][T31905] openvswitch: netlink: Multiple metadata blocks provided
[  871.066421][T31892] bridge0: port 2(bridge_slave_1) entered disabled state
[  871.074120][T31892] bridge0: port 1(bridge_slave_0) entered disabled state
[  871.184937][T31910] netlink: 'syz.5.6394': attribute type 1 has an invalid length.
[  871.535989][T31892] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  871.581709][T31892] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  872.071223][T31902] netlink: 'syz.3.6395': attribute type 29 has an invalid length.
[  872.213467][T10530] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  872.236672][T31896] veth0_to_bridge: left promiscuous mode
[  872.272633][T10530] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  872.322684][T10530] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  872.358978][T10530] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  873.562098][T31958] __nla_validate_parse: 11 callbacks suppressed
[  873.562121][T31958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6409'.
[  873.714103][T31965] gre0 speed is unknown, defaulting to 1000
[  874.298315][T31992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6417'.
[  874.362269][T31965] lo speed is unknown, defaulting to 1000
[  874.980589][T31965] lo speed is unknown, defaulting to 1000
[  875.158374][T32019] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6424'.
[  875.179155][T32019] vlan3: entered promiscuous mode
[  875.194536][T32019] syz_tun: entered promiscuous mode
[  876.002248][T32031] gre0 speed is unknown, defaulting to 1000
[  876.029843][T32052] xfrm0: entered promiscuous mode
[  876.035990][T32052] xfrm0: entered allmulticast mode
[  876.173303][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms
[  876.181599][    C0] lec:lec_tx_timeout: lec0
[  876.199272][T32047] bond0: option arp_validate: invalid value (55553)
[  876.206865][T21148] bond0: (slave bond_slave_0): interface is now down
[  876.216097][T21148] bond0: (slave bond_slave_1): interface is now down
[  876.244496][T10530] bond0: (slave bond_slave_0): interface is now down
[  876.254220][T10530] bond0: (slave bond_slave_1): interface is now down
[  876.310525][T10530] bond0: now running without any active interface!
[  876.463775][T32064] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6431'.
[  876.463994][T32065] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6432'.
[  876.476007][T32064] xt_bpf: check failed: parse error
[  876.521471][T32064] vcan0: tx drop: invalid da for name 0x0000000000000003
[  876.770931][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804a470800: rx timeout, send abort
[  876.865073][T32031] lo speed is unknown, defaulting to 1000
[  876.946186][T17074] IPVS: starting estimator thread 0...
[  877.033298][T32084] syzkaller0: entered promiscuous mode
[  877.040594][T32084] syzkaller0: entered allmulticast mode
[  877.063039][T32083] IPVS: using max 32 ests per chain, 76800 per kthread
[  877.247223][T32092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6439'.
[  877.271131][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880436a6400: rx timeout, send abort
[  877.280547][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804a470800: abort rx timeout. Force session deactivation
[  877.391324][T32031] lo speed is unknown, defaulting to 1000
[  877.779442][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880436a6400: abort rx timeout. Force session deactivation
[  878.614024][T32141] netlink: 'syz.4.6446': attribute type 4 has an invalid length.
[  879.014725][T32162] netlink: 'syz.4.6451': attribute type 4 has an invalid length.
[  879.033581][T32162] netlink: 'syz.4.6451': attribute type 4 has an invalid length.
[  879.044849][T32161] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  879.206627][T32166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6453'.
[  879.229620][T32166] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.6453'.
[  880.651186][T32195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6462'.
[  880.667688][T32195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6462'.
[  880.678525][T32195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6462'.
[  880.915667][T32201] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6464'.
[  880.953006][T32201] netlink: 'syz.4.6464': attribute type 1 has an invalid length.
[  880.960984][T32201] netlink: 'syz.4.6464': attribute type 1 has an invalid length.
[  880.994767][T32201] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6464'.
[  881.042359][T32206] netlink: 'syz.4.6464': attribute type 10 has an invalid length.
[  881.070272][T32206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6464'.
[  881.086716][T32201] netlink: 'syz.4.6464': attribute type 8 has an invalid length.
[  881.103327][T32201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6464'.
[  881.114493][T32201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6464'.
[  881.212267][T32219] netlink: 'syz.3.6469': attribute type 1 has an invalid length.
[  881.296720][T32219] 8021q: adding VLAN 0 to HW filter on device bond1
[  881.392334][T32223] bridge0: port 2(bridge_slave_1) entered disabled state
[  881.400424][T32223] bridge0: port 1(bridge_slave_0) entered disabled state
[  881.538996][T32223] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  881.560091][T32223] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  881.571439][T32238] netlink: 'syz.4.6470': attribute type 13 has an invalid length.
[  881.589947][T32238] netlink: 'syz.4.6470': attribute type 17 has an invalid length.
[  881.718025][T32224] bond1 (unregistering): Released all slaves
[  881.820755][T32238] 8021q: adding VLAN 0 to HW filter on device bond0
[  881.837074][T32238] 8021q: adding VLAN 0 to HW filter on device team0
[  881.860972][T32238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  881.879246][T17666] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  881.889501][T17666] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  881.948636][T17666] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  881.990840][T17666] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  882.531109][T32258] openvswitch: netlink: Key 9 has unexpected len 16 expected 4
[  883.035242][T32282] block nbd0: not configured, cannot reconfigure
[  883.124965][T32287] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  883.149653][T17034] Bluetooth: hci3: command tx timeout
[  883.482835][T32307] netlink: 'syz.3.6490': attribute type 11 has an invalid length.
[  884.045010][T32334] validate_nla: 3 callbacks suppressed
[  884.045034][T32334] netlink: 'syz.2.6496': attribute type 10 has an invalid length.
[  884.066944][T32334] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  884.097298][T32334] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  884.126569][T32334] team0: Failed to send options change via netlink (err -105)
[  884.177991][T32334] team0: Port device netdevsim0 added
[  884.200683][T32340] netlink: 'syz.3.6497': attribute type 12 has an invalid length.
[  884.381867][T32352] netlink: 'syz.4.6501': attribute type 6 has an invalid length.
[  884.431923][T32352] IPv6: NLM_F_CREATE should be specified when creating new route
[  884.456742][T32352] __nla_validate_parse: 6 callbacks suppressed
[  884.456764][T32352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6501'.
[  884.488631][T32352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6501'.
[  884.509971][T32364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6503'.
[  884.741754][T32352] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  884.809504][T32364] pim6reg: entered allmulticast mode
[  885.689488][T32404] syzkaller1: entered promiscuous mode
[  885.728790][T32404] syzkaller1: entered allmulticast mode
[  885.758472][T32402] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  885.762727][T32407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6512'.
[  885.921298][T32413] netlink: 'syz.0.6513': attribute type 10 has an invalid length.
[  885.974088][T32416] netlink: 'syz.0.6513': attribute type 10 has an invalid length.
[  886.007568][T32413] team0: Port device dummy0 added
[  886.134028][T32422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6517'.
[  886.168930][T32416] team0: Port device dummy0 removed
[  886.269919][T32416] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  886.270584][T32430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6518'.
[  886.322631][T32430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6518'.
[  886.417712][T32430] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6518'.
[  886.876510][T32443] netlink: 'syz.4.6520': attribute type 21 has an invalid length.
[  886.885993][T32443] IPVS: length: 528 != 8
[  886.975071][T32448] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6521'.
[  887.542239][T32466] netlink: 175008 bytes leftover after parsing attributes in process `syz.5.6526'.
[  887.642123][T32478] rdma_rxe: rxe_newlink: failed to add lo
[  887.649619][T32477] rdma_rxe: rxe_newlink: failed to add lo
[  887.866458][T32485] netlink: 'syz.5.6532': attribute type 10 has an invalid length.
[  887.918000][T32485] team0: Cannot enslave team device to itself
[  888.820542][T32513] gre0 speed is unknown, defaulting to 1000
[  889.166652][T32520] pimreg: entered allmulticast mode
[  889.928753][T32532] gre0 speed is unknown, defaulting to 1000
[  889.940778][T32513] lo speed is unknown, defaulting to 1000
[  890.259366][ T1683] block nbd1: Possible stuck request ffff888026d68000: control (read@0,1024B). Runtime 270 seconds
[  890.271085][ T1683] block nbd1: Possible stuck request ffff888026d68200: control (read@1024,1024B). Runtime 270 seconds
[  890.284347][ T1683] block nbd1: Possible stuck request ffff888026d68400: control (read@2048,1024B). Runtime 270 seconds
[  890.296418][ T1683] block nbd1: Possible stuck request ffff888026d68600: control (read@3072,1024B). Runtime 270 seconds
[  890.758725][T32577] __nla_validate_parse: 1 callbacks suppressed
[  890.758747][T32577] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6558'.
[  890.763776][T32513] lo speed is unknown, defaulting to 1000
[  890.909811][T32532] lo speed is unknown, defaulting to 1000
[  891.306164][T32589] xt_bpf: check failed: parse error
[  891.365314][T32532] lo speed is unknown, defaulting to 1000
[  896.036423][ T7332] lec:lec_start_xmit: lec0:No lecd attached
[  901.213204][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5170 ms
[  901.221421][    C0] lec:lec_tx_timeout: lec0
[  914.640463][T32606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6566'.
[  914.806581][T32614] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  914.824471][T32614] bond1 (unregistering): Released all slaves
[  914.836708][T32624] xt_l2tp: missing protocol rule (udp|l2tpip)
[  915.094616][T32638] netlink: 168 bytes leftover after parsing attributes in process `syz.5.6572'.
[  915.224082][T32646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6575'.
[  915.264628][T32640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6574'.
[  915.296905][T32651] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6578'.
[  915.312748][T32640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6574'.
[  915.319383][T32651] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6578'.
[  915.343425][T32640] netlink: 58 bytes leftover after parsing attributes in process `syz.2.6574'.
[  915.704985][T32669] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6581'.
[  915.870078][T32675] netlink: 'syz.5.6583': attribute type 1 has an invalid length.
[  915.968919][T32681] syzkaller0: entered promiscuous mode
[  915.975810][T32681] syzkaller0: entered allmulticast mode
[  916.092371][T32692] xt_cgroup: invalid path, errno=-2
[  916.126892][T32693] netlink: 548 bytes leftover after parsing attributes in process `syz.4.6588'.
[  916.408695][T32707] bond1: option arp_all_targets: invalid value (129)
[  916.420017][T32707] bond1 (unregistering): Released all slaves
[  916.713276][T32733] netlink: 'syz.0.6600': attribute type 2 has an invalid length.
[  917.147937][T32750] gre0 speed is unknown, defaulting to 1000
[  917.297682][T32753] bond3: entered promiscuous mode
[  917.306179][T32753] 8021q: adding VLAN 0 to HW filter on device bond3
[  917.410850][T17076] IPVS: starting estimator thread 0...
[  917.456609][T32750] lo speed is unknown, defaulting to 1000
[  917.502984][T32758] IPVS: using max 28 ests per chain, 67200 per kthread
[  917.795925][T32750] lo speed is unknown, defaulting to 1000
[  919.315578][T32704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  919.576334][  T315] netlink: 'syz.3.6611': attribute type 64 has an invalid length.
[  919.763911][  T326] __nla_validate_parse: 8 callbacks suppressed
[  919.763934][  T326] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6617'.
[  919.800540][  T326] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6617'.
[  919.830967][  T326] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6617'.
[  919.871564][  T326] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6617'.
[  919.896018][  T326] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6617'.
[  919.953120][  T326] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6617'.
[  919.987917][  T326] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6617'.
[  920.019657][  T326] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6617'.
[  920.040954][  T326] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6617'.
[  920.074319][  T326] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6617'.
[  920.373150][ T1683] block nbd1: Possible stuck request ffff888026d68000: control (read@0,1024B). Runtime 300 seconds
[  920.385250][ T1683] block nbd1: Possible stuck request ffff888026d68200: control (read@1024,1024B). Runtime 300 seconds
[  920.398428][ T1683] block nbd1: Possible stuck request ffff888026d68400: control (read@2048,1024B). Runtime 300 seconds
[  920.418894][ T1683] block nbd1: Possible stuck request ffff888026d68600: control (read@3072,1024B). Runtime 300 seconds
[  920.487305][  T367] –: renamed from vxcan1 (while UP)
[  920.654492][  T375] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  920.779750][  T379] syzkaller0: entered promiscuous mode
[  920.785843][  T379] syzkaller0: entered allmulticast mode
[  920.798212][  T379] TC_ACT_REPEAT abuse ?
[  920.909127][  T344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  920.923226][  T358] netlink: 'syz.2.6625': attribute type 1 has an invalid length.
[  921.220439][  T386] netlink: 'syz.4.6633': attribute type 11 has an invalid length.
[  921.611974][  T410] netlink: 'syz.2.6639': attribute type 83 has an invalid length.
[  921.688702][  T415] netlink: 'syz.0.6641': attribute type 1 has an invalid length.
[  921.819544][  T415] 8021q: adding VLAN 0 to HW filter on device bond5
[  922.114299][  T431] x_tables: unsorted entry at hook 1
[  922.293791][  T423] netlink: 'syz.5.6644': attribute type 3 has an invalid length.
[  922.376505][  T447] xt_CT: You must specify a L4 protocol and not use inversions on it
[  922.925178][  T469] netlink: 'syz.5.6659': attribute type 1 has an invalid length.
[  923.037049][  T473] netlink: 'syz.2.6661': attribute type 13 has an invalid length.
[  923.090213][  T469] 8021q: adding VLAN 0 to HW filter on device bond4
[  923.121770][  T477] bond4: (slave geneve2): making interface the new active one
[  923.151191][  T477] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  923.174290][T17671] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  923.184265][T17671] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  923.232756][T17671] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  923.281477][T17671] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  923.694879][T19304] Bluetooth: hci4: command 0x0406 tx timeout
[  923.903588][  T516] netlink: 'syz.0.6669': attribute type 8 has an invalid length.
[  923.921807][  T516] bond0: entered promiscuous mode
[  923.927400][  T516] bond_slave_0: entered promiscuous mode
[  923.934098][  T516] bond_slave_1: entered promiscuous mode
[  923.940480][  T516] dummy0: entered promiscuous mode
[  923.960756][  T516] gretap0: entered promiscuous mode
[  923.968376][  T516] debugfs: 'hsr1' already exists in 'hsr'
[  923.976742][  T516] Cannot create hsr debugfs directory
[  923.982304][  T516] hsr1: entered promiscuous mode
[  924.532289][  T543] netlink: 'syz.3.6675': attribute type 2 has an invalid length.
[  924.659320][  T546] netlink: 'syz.4.6676': attribute type 2 has an invalid length.
[  924.717187][  T546] !©9: entered promiscuous mode
[  925.319979][  T578] __nla_validate_parse: 88 callbacks suppressed
[  925.320002][  T578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6684'.
[  925.351000][  T579] netlink: 71 bytes leftover after parsing attributes in process `syz.3.6682'.
[  925.422212][  T582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6686'.
[  925.840455][  T603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6689'.
[  926.707294][  T631] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6698'.
[  926.728457][  T629] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  926.872858][  T641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6702'.
[  926.994095][  T647] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  927.012187][  T647] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  928.272632][  T677] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20003
[  928.357212][  T684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6710'.
[  928.509843][  T694] netlink: 47 bytes leftover after parsing attributes in process `syz.4.6714'.
[  928.744572][  T709] tipc: Started in network mode
[  928.749856][  T709] tipc: Node identity cef384e2435, cluster identity 4711
[  928.773326][  T709] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  928.834934][  T713] veth5: entered promiscuous mode
[  928.853514][  T718] syzkaller0: entered promiscuous mode
[  928.867750][  T718] syzkaller0: entered allmulticast mode
[  928.888745][  T698] tipc: Resetting bearer <eth:syzkaller0>
[  928.956212][  T697] tipc: Resetting bearer <eth:syzkaller0>
[  928.987122][  T697] tipc: Disabling bearer <eth:syzkaller0>
[  929.484258][  T753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6726'.
[  929.504851][  T750] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6726'.
[  929.809587][  T767] bond5: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  929.863215][  T771] erspan0: entered promiscuous mode
[  929.869501][  T771] vlan4: entered promiscuous mode
[  930.281162][  T789] netdevsim netdevsim0: Direct firmware load for . failed with error -2
[  930.292353][  T789] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  930.483659][  T803] bond1: entered promiscuous mode
[  930.489326][  T803] 8021q: adding VLAN 0 to HW filter on device bond1
[  931.144731][  T818] __nla_validate_parse: 2 callbacks suppressed
[  931.144756][  T818] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.6744'.
[  931.508886][  T827] netlink: 'syz.2.6747': attribute type 1 has an invalid length.
[  931.820394][  T843] netlink: 'syz.2.6752': attribute type 1 has an invalid length.
[  931.865880][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[  931.892145][  T849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6754'.
[  931.896981][  T843] bond1: entered promiscuous mode
[  931.907821][  T843] 8021q: adding VLAN 0 to HW filter on device bond1
[  931.989301][  T842] bond2: option ad_actor_sys_prio: invalid value (0)
[  932.024694][  T842] bond2: option ad_actor_sys_prio: allowed values 1 - 65535
[  932.046622][  T842] bond2 (unregistering): Released all slaves
[  932.628232][  T886] netlink: 'syz.5.6762': attribute type 1 has an invalid length.
[  933.176880][  T909] netlink: 'syz.4.6765': attribute type 178 has an invalid length.
[  933.597180][  T928] netlink: 'syz.5.6769': attribute type 3 has an invalid length.
[  933.606941][  T928] netlink: 'syz.5.6769': attribute type 1 has an invalid length.
[  933.630015][  T928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6769'.
[  933.701840][  T928] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  933.720330][  T928] batman_adv: batadv0: Removing interface: batadv_slave_0
[  933.736532][  T937] netlink: 'syz.0.6772': attribute type 1 has an invalid length.
[  933.755582][  T928] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  933.764093][  T928] batman_adv: batadv0: Removing interface: batadv_slave_1
[  933.795791][ T5892] IPVS: starting estimator thread 0...
[  933.805817][  T950] netlink: 'syz.4.6775': attribute type 1 has an invalid length.
[  933.864776][  T953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6775'.
[  933.892924][  T949] IPVS: using max 26 ests per chain, 62400 per kthread
[  934.184937][  T967] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6779'.
[  934.196244][  T967] .70·: renamed from hsr0
[  934.208472][  T967] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  934.225913][  T967] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  934.238765][  T967] .70·: entered allmulticast mode
[  934.244839][  T967] hsr_slave_0: entered allmulticast mode
[  934.284580][  T967] hsr_slave_1: entered allmulticast mode
[  934.301609][  T967] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check.
[  934.349086][  T973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6780'.
[  934.436131][  T976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6782'.
[  934.568749][  T981] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6783'.
[  934.639181][  T981] netlink: 212088 bytes leftover after parsing attributes in process `syz.0.6783'.
[  934.826051][  T988] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6785'.
[  934.846361][  T992] netlink: 'syz.5.6786': attribute type 12 has an invalid length.
[  935.179507][ T1003] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  935.220174][ T1005] sctp: [Deprecated]: syz.0.6791 (pid 1005) Use of int in maxseg socket option.
[  935.220174][ T1005] Use struct sctp_assoc_value instead
[  935.879137][ T1021] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  935.927148][ T1021] netlink: 'syz.0.6798': attribute type 27 has an invalid length.
[  936.230746][ T1039] openvswitch: netlink: Multiple metadata blocks provided
[  936.270469][ T1044] SET target dimension over the limit!
[  936.311423][ T1042] Can't find ip_set type bitmapJ°(°mac
[  936.345352][ T1044] gre0 speed is unknown, defaulting to 1000
[  936.397379][ T1060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6805'.
[  936.471543][ T1065] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  936.517419][ T1067] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.6807'.
[  936.543264][ T1067] openvswitch: netlink: Missing key (keys=40, expected=100)
[  936.567859][ T1069] validate_nla: 1 callbacks suppressed
[  936.567880][ T1069] netlink: 'syz.4.6808': attribute type 34 has an invalid length.
[  936.745239][ T1075] x_tables: duplicate underflow at hook 2
[  936.754290][ T1075] gre0: entered promiscuous mode
[  936.759409][ T1075] gre0: entered allmulticast mode
[  936.873559][ T1079] netlink: 'syz.4.6813': attribute type 4 has an invalid length.
[  936.897650][ T1079] netlink: 240 bytes leftover after parsing attributes in process `syz.4.6813'.
[  937.076402][ T1088] tipc: Failed to remove unknown binding: 66,1,1/0:2725500463/2725500465
[  937.077914][ T1091] netlink: 'syz.5.6818': attribute type 15 has an invalid length.
[  937.096041][ T1091] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6818'.
[  937.113657][ T1044] lo speed is unknown, defaulting to 1000
[  937.188313][ T1095] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6816'.
[  937.212448][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms
[  937.220748][    C0] lec:lec_tx_timeout: lec0
[  937.323923][ T1098] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6819'.
[  937.506612][ T1105] sctp: [Deprecated]: syz.2.6819 (pid 1105) Use of int in maxseg socket option.
[  937.506612][ T1105] Use struct sctp_assoc_value instead
[  937.588985][ T1108] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  937.611771][ T1107] gre0 speed is unknown, defaulting to 1000
[  937.679903][ T1108] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6821'.
[  937.804329][ T1044] lo speed is unknown, defaulting to 1000
[  938.429568][ T1107] lo speed is unknown, defaulting to 1000
[  938.452797][ T1118] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  938.578778][ T1120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6824'.
[  939.133694][ T1131] ipvlan1: entered promiscuous mode
[  939.217633][ T1107] lo speed is unknown, defaulting to 1000
[  939.549252][ T1136] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  940.404592][ T1148] team0: left promiscuous mode
[  940.423466][ T1148] team_slave_0: left promiscuous mode
[  940.429434][ T1148] team_slave_1: left promiscuous mode
[  940.437130][ T1148] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  940.458654][ T1148] team0: entered allmulticast mode
[  940.466269][ T1148] team_slave_0: entered allmulticast mode
[  940.485228][ T1148] team_slave_1: entered allmulticast mode
[  940.520655][ T1148] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  940.867160][ T1154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6829'.
[  941.034796][ T1155] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6829'.
[  941.063516][    C1] 0: reclassify loop, rule prio 0, protocol 800
[  941.503759][ T1187] netlink: 'syz.0.6839': attribute type 3 has an invalid length.
[  941.533492][ T1187] netlink: 'syz.0.6839': attribute type 1 has an invalid length.
[  941.614966][ T1187] 8021q: adding VLAN 0 to HW filter on device bond6
[  941.628827][ T1195] __nla_validate_parse: 1 callbacks suppressed
[  941.628849][ T1195] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6838'.
[  941.747203][ T1185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6838'.
[  941.794391][ T1200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6840'.
[  941.947808][ T1203] netlink: 'syz.5.6841': attribute type 10 has an invalid length.
[  941.992651][ T1203] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6841'.
[  942.010141][ T1203] team0: entered promiscuous mode
[  942.037502][ T1203] team_slave_0: entered promiscuous mode
[  942.065803][ T1203] team_slave_1: entered promiscuous mode
[  942.096299][    C1] 0: reclassify loop, rule prio 0, protocol 800
[  942.114824][ T1203] team0: entered allmulticast mode
[  942.120204][ T1203] team_slave_0: entered allmulticast mode
[  942.135040][ T1203] team_slave_1: entered allmulticast mode
[  942.145622][ T1203] 8021q: adding VLAN 0 to HW filter on device team0
[  942.195428][ T1203] bridge0: port 3(team0) entered blocking state
[  942.241673][ T1203] bridge0: port 3(team0) entered disabled state
[  942.298321][ T1203] bridge0: port 3(team0) entered blocking state
[  942.304987][ T1203] bridge0: port 3(team0) entered forwarding state
[  942.517214][ T1223] netlink: 'syz.5.6848': attribute type 1 has an invalid length.
[  942.726364][ T1223] bond6: entered promiscuous mode
[  942.754871][ T1223] 8021q: adding VLAN 0 to HW filter on device bond6
[  942.837765][ T1225] 8021q: adding VLAN 0 to HW filter on device bond6
[  942.857070][ T1225] bond6: (slave vcan1): The slave device specified does not support setting the MAC address
[  942.879468][ T1225] bond6: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  942.913895][ T1225] bond6: (slave vcan1): making interface the new active one
[  942.921603][ T1225] vcan1: entered promiscuous mode
[  942.931440][ T1225] bond6: (slave vcan1): Enslaving as an active interface with an up link
[  942.953601][ T1235] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  942.975924][ T1235] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  943.069525][ T1248] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  943.106730][ T1248] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  943.157717][ T1254] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  943.169177][ T1257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6857'.
[  943.259523][ T1257] ip6gre1: entered promiscuous mode
[  943.267750][ T1257] ip6gre1: entered allmulticast mode
[  943.314677][ T1265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6858'.
[  943.398659][ T1267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6860'.
[  944.026127][ T1307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6868'.
[  944.178267][T17034] Bluetooth: hci1: command 0x0406 tx timeout
[  944.367455][ T1314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6870'.
[  944.482195][ T1317] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6871'.
[  945.150522][ T1333] IPv6: addrconf: prefix option has invalid lifetime
[  945.492055][ T1344] veth2: entered allmulticast mode
[  945.530246][ T1347] netlink: 'syz.0.6879': attribute type 1 has an invalid length.
[  945.760000][ T1354] netlink: 'syz.4.6884': attribute type 1 has an invalid length.
[  945.846327][T19304] Bluetooth: hci3: link tx timeout
[  945.854754][T19304] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  945.898512][ T1354] 8021q: adding VLAN 0 to HW filter on device bond3
[  946.277775][ T1379] syzkaller1: tun_chr_ioctl cmd 1074025677
[  946.298744][ T1379] syzkaller1: linktype set to 825
[  947.582897][ T1428] netlink: 'syz.3.6901': attribute type 2 has an invalid length.
[  947.591011][ T1428] __nla_validate_parse: 8 callbacks suppressed
[  947.591028][ T1428] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6901'.
[  947.631946][ T1428] netlink: 'syz.3.6901': attribute type 7 has an invalid length.
[  947.640408][ T1428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6901'.
[  947.933801][T19304] Bluetooth: hci3: command 0x0406 tx timeout
[  947.997226][ T1432] xt_hashlimit: size too large, truncated to 1048576
[  948.045642][ T1434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6903'.
[  948.108147][ T1434] 8021q: adding VLAN 0 to HW filter on device bond1
[  948.530616][ T1449] xt_CT: No such helper "netbios-ns"
[  948.616014][ T1453] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6908'.
[  948.635528][ T1453] syzkaller0: entered promiscuous mode
[  948.641589][ T1453] syzkaller0: entered allmulticast mode
[  948.653123][ T1453] tcf_pedit_act: 7 callbacks suppressed
[  948.653160][ T1453] tc action pedit offset must be on 32 bit boundaries
[  948.839876][ T1457] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6909'.
[  948.858137][ T1457] ip6gre2: entered promiscuous mode
[  948.864045][ T1457] ip6gre2: entered allmulticast mode
[  948.931691][ T1458] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  948.984915][ T1458] batman_adv: batadv0: Removing interface: batadv_slave_0
[  949.687919][ T1395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  949.703106][ T1404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6894'.
[  949.986674][ T1473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6914'.
[  950.019109][ T1473] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  950.056988][ T1473] batman_adv: batadv0: Adding interface: gretap1
[  950.064091][ T1473] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  950.094624][ T1473] batman_adv: batadv0: Interface activated: gretap1
[  950.415026][ T1683] block nbd1: Possible stuck request ffff888026d68000: control (read@0,1024B). Runtime 330 seconds
[  950.428047][ T1683] block nbd1: Possible stuck request ffff888026d68200: control (read@1024,1024B). Runtime 330 seconds
[  950.429880][ T1495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6919'.
[  950.440046][ T1683] block nbd1: Possible stuck request ffff888026d68400: control (read@2048,1024B). Runtime 330 seconds
[  950.464579][ T1683] block nbd1: Possible stuck request ffff888026d68600: control (read@3072,1024B). Runtime 330 seconds
[  951.257979][ T1495] gre0 speed is unknown, defaulting to 1000
[  951.837074][ T1512] gre0 speed is unknown, defaulting to 1000
[  951.846759][ T1495] lo speed is unknown, defaulting to 1000
[  952.418451][ T1529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6927'.
[  952.493778][ T1512] lo speed is unknown, defaulting to 1000
[  952.523084][ T1495] lo speed is unknown, defaulting to 1000
[  952.910552][ T1465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  952.927929][ T1511] netlink: 'syz.0.6924': attribute type 9 has an invalid length.
[  953.127210][ T1512] lo speed is unknown, defaulting to 1000
[  953.449871][ T1542] FAULT_INJECTION: forcing a failure.
[  953.449871][ T1542] name failslab, interval 1, probability 0, space 0, times 0
[  953.468054][ T1542] CPU: 0 UID: 0 PID: 1542 Comm: syz.3.6931 Not tainted syzkaller #0 PREEMPT(full) 
[  953.468086][ T1542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  953.468099][ T1542] Call Trace:
[  953.468108][ T1542]  <TASK>
[  953.468117][ T1542]  dump_stack_lvl+0xe8/0x150
[  953.468155][ T1542]  should_fail_ex+0x412/0x560
[  953.468192][ T1542]  should_failslab+0xa8/0x100
[  953.468222][ T1542]  __kmalloc_noprof+0xe8/0x760
[  953.468248][ T1542]  ? kernfs_fop_write_iter+0x158/0x540
[  953.468280][ T1542]  kernfs_fop_write_iter+0x158/0x540
[  953.468312][ T1542]  vfs_write+0x61d/0xb90
[  953.468346][ T1542]  ? __pfx_vfs_write+0x10/0x10
[  953.468383][ T1542]  ? __fget_files+0x2a/0x420
[  953.468436][ T1542]  ksys_write+0x150/0x270
[  953.468469][ T1542]  ? __pfx_ksys_write+0x10/0x10
[  953.468508][ T1542]  do_syscall_64+0x14d/0xf80
[  953.468537][ T1542]  ? trace_irq_disable+0x3b/0x150
[  953.468556][ T1542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.468577][ T1542]  ? clear_bhb_loop+0x40/0x90
[  953.468605][ T1542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.468626][ T1542] RIP: 0033:0x7f088d39c799
[  953.468647][ T1542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  953.468665][ T1542] RSP: 002b:00007f088e30b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  953.468687][ T1542] RAX: ffffffffffffffda RBX: 00007f088d615fa0 RCX: 00007f088d39c799
[  953.468703][ T1542] RDX: 0000000000000012 RSI: 00002000000000c0 RDI: 0000000000000006
[  953.468716][ T1542] RBP: 00007f088e30b090 R08: 0000000000000000 R09: 0000000000000000
[  953.468729][ T1542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  953.468742][ T1542] R13: 00007f088d616038 R14: 00007f088d615fa0 R15: 00007ffee33781a8
[  953.468778][ T1542]  </TASK>
[  954.118439][ T1550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6934'.
[  954.158877][ T1550] bond0: entered promiscuous mode
[  954.180745][ T1550] bond_slave_0: entered promiscuous mode
[  954.231133][ T1550] bond_slave_1: entered promiscuous mode
[  954.313437][ T1550] bond0: left promiscuous mode
[  954.318953][ T1550] bond_slave_0: left promiscuous mode
[  954.337935][ T1550] bond_slave_1: left promiscuous mode
[  954.548947][ T1563] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6936'.
[  954.595243][ T1563] nbd: must specify at least one socket
[  954.607756][ T1564] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20001
[  955.128906][ T1589] FAULT_INJECTION: forcing a failure.
[  955.128906][ T1589] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  955.154560][ T1592] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6941'.
[  955.171078][ T1589] CPU: 0 UID: 0 PID: 1589 Comm: syz.5.6942 Not tainted syzkaller #0 PREEMPT(full) 
[  955.171110][ T1589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  955.171123][ T1589] Call Trace:
[  955.171133][ T1589]  <TASK>
[  955.171142][ T1589]  dump_stack_lvl+0xe8/0x150
[  955.171177][ T1589]  should_fail_ex+0x412/0x560
[  955.171212][ T1589]  _copy_from_iter+0x1d3/0x1670
[  955.171260][ T1589]  ? __pfx__copy_from_iter+0x10/0x10
[  955.171288][ T1589]  ? trace_kmalloc+0x2a/0x110
[  955.171316][ T1589]  ? __kmalloc_noprof+0x37d/0x760
[  955.171339][ T1589]  ? kernfs_fop_write_iter+0x158/0x540
[  955.171362][ T1589]  ? __kmalloc_noprof+0x1b8/0x760
[  955.171389][ T1589]  kernfs_fop_write_iter+0x19b/0x540
[  955.171423][ T1589]  vfs_write+0x61d/0xb90
[  955.171455][ T1589]  ? __pfx_vfs_write+0x10/0x10
[  955.171491][ T1589]  ? __fget_files+0x2a/0x420
[  955.171532][ T1589]  ksys_write+0x150/0x270
[  955.171559][ T1589]  ? __pfx_ksys_write+0x10/0x10
[  955.171596][ T1589]  do_syscall_64+0x14d/0xf80
[  955.171625][ T1589]  ? trace_irq_disable+0x3b/0x150
[  955.171643][ T1589]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  955.171664][ T1589]  ? clear_bhb_loop+0x40/0x90
[  955.171692][ T1589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  955.171712][ T1589] RIP: 0033:0x7f4dd459c799
[  955.171733][ T1589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  955.171751][ T1589] RSP: 002b:00007f4dd540c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  955.171776][ T1589] RAX: ffffffffffffffda RBX: 00007f4dd4815fa0 RCX: 00007f4dd459c799
[  955.171792][ T1589] RDX: 0000000000000012 RSI: 00002000000000c0 RDI: 0000000000000006
[  955.171805][ T1589] RBP: 00007f4dd540c090 R08: 0000000000000000 R09: 0000000000000000
[  955.171819][ T1589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  955.171832][ T1589] R13: 00007f4dd4816038 R14: 00007f4dd4815fa0 R15: 00007ffd31b83368
[  955.171866][ T1589]  </TASK>
[  955.420809][ T1593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6941'.
[  955.510755][ T1597] netlink: 27 bytes leftover after parsing attributes in process `syz.5.6943'.
[  955.778597][ T1583] gre0 speed is unknown, defaulting to 1000
[  956.657515][ T1619] 8021q: adding VLAN 0 to HW filter on device team0
[  956.712689][ T1619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  956.744270][ T1627] FAULT_INJECTION: forcing a failure.
[  956.744270][ T1627] name failslab, interval 1, probability 0, space 0, times 0
[  956.750654][ T1626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6951'.
[  956.761926][ T1627] CPU: 1 UID: 0 PID: 1627 Comm: syz.5.6953 Not tainted syzkaller #0 PREEMPT(full) 
[  956.761954][ T1627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  956.761966][ T1627] Call Trace:
[  956.761974][ T1627]  <TASK>
[  956.761982][ T1627]  dump_stack_lvl+0xe8/0x150
[  956.762014][ T1627]  should_fail_ex+0x412/0x560
[  956.762048][ T1627]  should_failslab+0xa8/0x100
[  956.762076][ T1627]  __kmalloc_cache_noprof+0x88/0x660
[  956.762100][ T1627]  ? find_css_set+0x9b6/0x1a50
[  956.762120][ T1627]  ? _raw_spin_unlock_irq+0x23/0x50
[  956.762150][ T1627]  find_css_set+0x9b6/0x1a50
[  956.762182][ T1627]  ? __lock_acquire+0x6b5/0x2cf0
[  956.762209][ T1627]  ? __pfx_find_css_set+0x10/0x10
[  956.762240][ T1627]  ? do_raw_spin_lock+0x12b/0x2f0
[  956.762288][ T1627]  cgroup_migrate_prepare_dst+0x130/0x700
[  956.762327][ T1627]  cgroup_attach_task+0x47c/0x870
[  956.762542][ T1627]  ? __pfx_cgroup_attach_task+0x10/0x10
[  956.762563][ T1627]  ? iput+0x47f/0xe80
[  956.762602][ T1627]  ? cgroup_attach_permissions+0x4f3/0x9e0
[  956.762634][ T1627]  __cgroup_procs_write+0x2a9/0x300
[  956.762666][ T1627]  cgroup_procs_write+0x27/0x50
[  956.762692][ T1627]  ? __pfx_cgroup_procs_write+0x10/0x10
[  956.762719][ T1627]  cgroup_file_write+0x36f/0x790
[  956.762753][ T1627]  ? __pfx_cgroup_file_write+0x10/0x10
[  956.762795][ T1627]  ? __pfx_cgroup_file_write+0x10/0x10
[  956.762819][ T1627]  kernfs_fop_write_iter+0x3af/0x540
[  956.762851][ T1627]  vfs_write+0x61d/0xb90
[  956.762883][ T1627]  ? __pfx_vfs_write+0x10/0x10
[  956.762917][ T1627]  ? __fget_files+0x2a/0x420
[  956.762956][ T1627]  ksys_write+0x150/0x270
[  956.762982][ T1627]  ? __pfx_ksys_write+0x10/0x10
[  956.763018][ T1627]  do_syscall_64+0x14d/0xf80
[  956.763046][ T1627]  ? trace_irq_disable+0x3b/0x150
[  956.763064][ T1627]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.763085][ T1627]  ? clear_bhb_loop+0x40/0x90
[  956.763111][ T1627]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.763132][ T1627] RIP: 0033:0x7f4dd459c799
[  956.763154][ T1627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  956.763171][ T1627] RSP: 002b:00007f4dd540c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  956.763194][ T1627] RAX: ffffffffffffffda RBX: 00007f4dd4815fa0 RCX: 00007f4dd459c799
[  956.763208][ T1627] RDX: 0000000000000012 RSI: 00002000000000c0 RDI: 0000000000000006
[  956.763221][ T1627] RBP: 00007f4dd540c090 R08: 0000000000000000 R09: 0000000000000000
[  956.763234][ T1627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  956.763245][ T1627] R13: 00007f4dd4816038 R14: 00007f4dd4815fa0 R15: 00007ffd31b83368
[  956.763280][ T1627]  </TASK>
[  956.793328][ T1625] Cannot find del_set index 1536 as target
[  957.162244][ T1620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  957.199109][ T1622] 8021q: VLANs not supported on ip6tnl0
[  957.206938][ T1583] lo speed is unknown, defaulting to 1000
[  957.216911][ T1590] gre0 speed is unknown, defaulting to 1000
[  957.449416][ T1649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6959'.
[  957.471428][ T1651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6956'.
[  957.498040][ T1648] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6957'.
[  957.801951][ T1665] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  957.813783][ T1663] FAULT_INJECTION: forcing a failure.
[  957.813783][ T1663] name failslab, interval 1, probability 0, space 0, times 0
[  957.829051][ T1663] CPU: 1 UID: 0 PID: 1663 Comm: syz.2.6964 Not tainted syzkaller #0 PREEMPT(full) 
[  957.829084][ T1663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  957.829107][ T1663] Call Trace:
[  957.829116][ T1663]  <TASK>
[  957.829126][ T1663]  dump_stack_lvl+0xe8/0x150
[  957.829163][ T1663]  should_fail_ex+0x412/0x560
[  957.829201][ T1663]  should_failslab+0xa8/0x100
[  957.829231][ T1663]  __kmalloc_cache_noprof+0x88/0x660
[  957.829258][ T1663]  ? allocate_cgrp_cset_links+0xc9/0x320
[  957.829288][ T1663]  ? __kasan_kmalloc+0x93/0xb0
[  957.829320][ T1663]  allocate_cgrp_cset_links+0xc9/0x320
[  957.829357][ T1663]  find_css_set+0x9d8/0x1a50
[  957.829395][ T1663]  ? __lock_acquire+0x6b5/0x2cf0
[  957.829424][ T1663]  ? __pfx_find_css_set+0x10/0x10
[  957.829459][ T1663]  ? do_raw_spin_lock+0x12b/0x2f0
[  957.829500][ T1663]  cgroup_migrate_prepare_dst+0x130/0x700
[  957.829536][ T1663]  cgroup_attach_task+0x47c/0x870
[  957.829562][ T1663]  ? __pfx_cgroup_attach_task+0x10/0x10
[  957.829583][ T1663]  ? iput+0x47f/0xe80
[  957.829626][ T1663]  ? cgroup_attach_permissions+0x4f3/0x9e0
[  957.829661][ T1663]  __cgroup_procs_write+0x2a9/0x300
[  957.829696][ T1663]  cgroup_procs_write+0x27/0x50
[  957.829724][ T1663]  ? __pfx_cgroup_procs_write+0x10/0x10
[  957.829754][ T1663]  cgroup_file_write+0x36f/0x790
[  957.829791][ T1663]  ? __pfx_cgroup_file_write+0x10/0x10
[  957.829836][ T1663]  ? __pfx_cgroup_file_write+0x10/0x10
[  957.829862][ T1663]  kernfs_fop_write_iter+0x3af/0x540
[  957.829896][ T1663]  vfs_write+0x61d/0xb90
[  957.829932][ T1663]  ? __pfx_vfs_write+0x10/0x10
[  957.829970][ T1663]  ? __fget_files+0x2a/0x420
[  957.830011][ T1663]  ksys_write+0x150/0x270
[  957.830037][ T1663]  ? __pfx_ksys_write+0x10/0x10
[  957.830076][ T1663]  do_syscall_64+0x14d/0xf80
[  957.830114][ T1663]  ? trace_irq_disable+0x3b/0x150
[  957.830132][ T1663]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  957.830155][ T1663]  ? clear_bhb_loop+0x40/0x90
[  957.830182][ T1663]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  957.830203][ T1663] RIP: 0033:0x7fa0dbb9c799
[  957.830225][ T1663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  957.830243][ T1663] RSP: 002b:00007fa0d9df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  957.830267][ T1663] RAX: ffffffffffffffda RBX: 00007fa0dbe15fa0 RCX: 00007fa0dbb9c799
[  957.830283][ T1663] RDX: 0000000000000012 RSI: 00002000000000c0 RDI: 0000000000000006
[  957.830298][ T1663] RBP: 00007fa0d9df6090 R08: 0000000000000000 R09: 0000000000000000
[  957.830311][ T1663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  957.830324][ T1663] R13: 00007fa0dbe16038 R14: 00007fa0dbe15fa0 R15: 00007fff661bbb88
[  957.830360][ T1663]  </TASK>
[  958.045555][ T1590] lo speed is unknown, defaulting to 1000
[  958.106831][ T1583] lo speed is unknown, defaulting to 1000
[  958.535008][ T1677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6968'.
[  958.946589][ T1686] bond7: entered allmulticast mode
[  958.978127][ T1689] macvlan2: entered promiscuous mode
[  959.002548][ T1689] macvlan2: entered allmulticast mode
[  959.019545][ T1689] bond7: entered promiscuous mode
[  959.026810][ T1689] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  959.066654][ T1689] bond7: left promiscuous mode
[  959.125798][ T1590] lo speed is unknown, defaulting to 1000
[  959.426318][ T1708] syzkaller0: entered promiscuous mode
[  959.445286][ T1708] syzkaller0: entered allmulticast mode
[  959.714354][ T1710] FAULT_INJECTION: forcing a failure.
[  959.714354][ T1710] name failslab, interval 1, probability 0, space 0, times 0
[  959.730262][ T1710] CPU: 1 UID: 0 PID: 1710 Comm: syz.2.6976 Not tainted syzkaller #0 PREEMPT(full) 
[  959.730293][ T1710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  959.730306][ T1710] Call Trace:
[  959.730315][ T1710]  <TASK>
[  959.730324][ T1710]  dump_stack_lvl+0xe8/0x150
[  959.730359][ T1710]  should_fail_ex+0x412/0x560
[  959.730396][ T1710]  should_failslab+0xa8/0x100
[  959.730426][ T1710]  __kmalloc_cache_noprof+0x88/0x660
[  959.730452][ T1710]  ? allocate_cgrp_cset_links+0xc9/0x320
[  959.730483][ T1710]  ? __kmalloc_cache_noprof+0x15b/0x660
[  959.730513][ T1710]  allocate_cgrp_cset_links+0xc9/0x320
[  959.730553][ T1710]  find_css_set+0x9d8/0x1a50
[  959.730591][ T1710]  ? __lock_acquire+0x6b5/0x2cf0
[  959.730621][ T1710]  ? __pfx_find_css_set+0x10/0x10
[  959.730656][ T1710]  ? do_raw_spin_lock+0x12b/0x2f0
[  959.730698][ T1710]  cgroup_migrate_prepare_dst+0x130/0x700
[  959.730734][ T1710]  cgroup_attach_task+0x47c/0x870
[  959.730761][ T1710]  ? __pfx_cgroup_attach_task+0x10/0x10
[  959.730782][ T1710]  ? iput+0x47f/0xe80
[  959.730825][ T1710]  ? cgroup_attach_permissions+0x4f3/0x9e0
[  959.730861][ T1710]  __cgroup_procs_write+0x2a9/0x300
[  959.730896][ T1710]  cgroup_procs_write+0x27/0x50
[  959.730924][ T1710]  ? __pfx_cgroup_procs_write+0x10/0x10
[  959.730954][ T1710]  cgroup_file_write+0x36f/0x790
[  959.730992][ T1710]  ? __pfx_cgroup_file_write+0x10/0x10
[  959.731039][ T1710]  ? __pfx_cgroup_file_write+0x10/0x10
[  959.731065][ T1710]  kernfs_fop_write_iter+0x3af/0x540
[  959.731109][ T1710]  vfs_write+0x61d/0xb90
[  959.731140][ T1710]  ? __pfx_vfs_write+0x10/0x10
[  959.731173][ T1710]  ? __fget_files+0x2a/0x420
[  959.731214][ T1710]  ksys_write+0x150/0x270
[  959.731242][ T1710]  ? __pfx_ksys_write+0x10/0x10
[  959.731281][ T1710]  do_syscall_64+0x14d/0xf80
[  959.731311][ T1710]  ? trace_irq_disable+0x3b/0x150
[  959.731328][ T1710]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  959.731350][ T1710]  ? clear_bhb_loop+0x40/0x90
[  959.731377][ T1710]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  959.731398][ T1710] RIP: 0033:0x7fa0dbb9c799
[  959.731421][ T1710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  959.731440][ T1710] RSP: 002b:00007fa0d9df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  959.731463][ T1710] RAX: ffffffffffffffda RBX: 00007fa0dbe15fa0 RCX: 00007fa0dbb9c799
[  959.731479][ T1710] RDX: 0000000000000012 RSI: 00002000000000c0 RDI: 0000000000000006
[  959.731491][ T1710] RBP: 00007fa0d9df6090 R08: 0000000000000000 R09: 0000000000000000
[  959.731504][ T1710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  959.731516][ T1710] R13: 00007fa0dbe16038 R14: 00007fa0dbe15fa0 R15: 00007fff661bbb88
[  959.731550][ T1710]  </TASK>
[  960.276728][ T7332] lec:lec_start_xmit: lec0:No lecd attached
[  960.976974][ T1739] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6983'.
[  961.028410][ T1737] gre0 speed is unknown, defaulting to 1000
[  961.029890][ T1735] xt_l2tp: v2 doesn't support IP mode
[  961.082103][ T1735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6983'.
[  961.114827][ T1735] 8021q: VLANs not supported on ip6gre0
[  961.213876][ T1741] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4
[  961.673658][ T1757] netlink: 'syz.3.6987': attribute type 21 has an invalid length.
[  961.713521][ T1757] netlink: 'syz.3.6987': attribute type 1 has an invalid length.
[  961.721566][ T1757] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6987'.
[  961.762301][ T1759] FAULT_INJECTION: forcing a failure.
[  961.762301][ T1759] name failslab, interval 1, probability 0, space 0, times 0
[  961.776945][ T1759] CPU: 1 UID: 0 PID: 1759 Comm: syz.2.6988 Not tainted syzkaller #0 PREEMPT(full) 
[  961.777031][ T1759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  961.777045][ T1759] Call Trace:
[  961.777053][ T1759]  <TASK>
[  961.777061][ T1759]  dump_stack_lvl+0xe8/0x150
[  961.777098][ T1759]  should_fail_ex+0x412/0x560
[  961.777134][ T1759]  should_failslab+0xa8/0x100
[  961.777163][ T1759]  __kmalloc_cache_noprof+0x88/0x660
[  961.777190][ T1759]  ? allocate_cgrp_cset_links+0xc9/0x320
[  961.777219][ T1759]  ? __kmalloc_cache_noprof+0x15b/0x660
[  961.777326][ T1759]  allocate_cgrp_cset_links+0xc9/0x320
[  961.777369][ T1759]  find_css_set+0x9d8/0x1a50
[  961.777406][ T1759]  ? __lock_acquire+0x6b5/0x2cf0
[  961.777435][ T1759]  ? __pfx_find_css_set+0x10/0x10
[  961.777470][ T1759]  ? do_raw_spin_lock+0x12b/0x2f0
[  961.777512][ T1759]  cgroup_migrate_prepare_dst+0x130/0x700
[  961.777547][ T1759]  cgroup_attach_task+0x47c/0x870
[  961.777574][ T1759]  ? __pfx_cgroup_attach_task+0x10/0x10
[  961.777595][ T1759]  ? iput+0x47f/0xe80
[  961.777639][ T1759]  ? cgroup_attach_permissions+0x4f3/0x9e0
[  961.777701][ T1759]  __cgroup_procs_write+0x2a9/0x300
[  961.777738][ T1759]  cgroup_procs_write+0x27/0x50
[  961.777768][ T1759]  ? __pfx_cgroup_procs_write+0x10/0x10
[  961.777798][ T1759]  cgroup_file_write+0x36f/0x790
[  961.777835][ T1759]  ? __pfx_cgroup_file_write+0x10/0x10
[  961.777879][ T1759]  ? __pfx_cgroup_file_write+0x10/0x10
[  961.777907][ T1759]  kernfs_fop_write_iter+0x3af/0x540
[  961.777943][ T1759]  vfs_write+0x61d/0xb90
[  961.777978][ T1759]  ? __pfx_vfs_write+0x10/0x10
[  961.778008][ T1759]  ? __fget_files+0x2a/0x420
[  961.778043][ T1759]  ksys_write+0x150/0x270
[  961.778070][ T1759]  ? __pfx_ksys_write+0x10/0x10
[  961.778110][ T1759]  do_syscall_64+0x14d/0xf80
[  961.778140][ T1759]  ? trace_irq_disable+0x3b/0x150
[  961.778159][ T1759]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  961.778181][ T1759]  ? clear_bhb_loop+0x40/0x90
[  961.778210][ T1759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  961.778244][ T1759] RIP: 0033:0x7fa0dbb9c799
[  961.778267][ T1759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  961.778286][ T1759] RSP: 002b:00007fa0d9df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  961.778310][ T1759] RAX: ffffffffffffffda RBX: 00007fa0dbe15fa0 RCX: 00007fa0dbb9c799
[  961.778325][ T1759] RDX: 0000000000000012 RSI: 00002000000000c0 RDI: 0000000000000006
[  961.778339][ T1759] RBP: 00007fa0d9df6090 R08: 0000000000000000 R09: 0000000000000000
[  961.778353][ T1759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  961.778366][ T1759] R13: 00007fa0dbe16038 R14: 00007fa0dbe15fa0 R15: 00007fff661bbb88
[  961.778404][ T1759]  </TASK>
[  961.933807][   T31] INFO: task udevd:24379 blocked for more than 143 seconds.
[  962.253098][   T31]       Not tainted syzkaller #0
[  962.258197][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  962.270926][   T31] task:udevd           state:D stack:22496 pid:24379 tgid:24379 ppid:5194   task_flags:0x400140 flags:0x00080002
[  962.284503][   T31] Call Trace:
[  962.288078][   T31]  <TASK>
[  962.291041][   T31]  __schedule+0x15dd/0x52d0
[  962.296218][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  962.301570][   T31]  ? __pfx___schedule+0x10/0x10
[  962.308568][   T31]  ? schedule+0x90/0x360
[  962.314017][   T31]  schedule+0x164/0x360
[  962.318254][   T31]  io_schedule+0x7f/0xd0
[  962.323589][   T31]  folio_wait_bit_common+0x6d8/0xbc0
[  962.329114][   T31]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  962.335425][   T31]  ? __pfx_wake_page_function+0x10/0x10
[  962.341033][   T31]  ? __filemap_get_folio_mpol+0x7a9/0xb00
[  962.348304][   T31]  do_read_cache_folio+0x1ad/0x590
[  962.354235][   T31]  ? __pfx_blkdev_read_folio+0x10/0x10
[  962.359951][   T31]  read_part_sector+0xb6/0x2b0
[  962.365762][   T31]  adfspart_check_POWERTEC+0x92/0xef0
[  962.371633][   T31]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  962.378744][   T31]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  962.385697][   T31]  bdev_disk_changed+0x7ba/0x1550
[  962.390891][   T31]  ? bdev_open+0xe0/0xd30
[  962.396086][   T31]  ? __pfx_bdev_disk_changed+0x10/0x10
[  962.401870][   T31]  blkdev_get_whole+0x380/0x510
[  962.408502][   T31]  bdev_open+0x31e/0xd30
[  962.419203][   T31]  blkdev_open+0x470/0x610
[  962.424890][   T31]  ? __pfx_blkdev_open+0x10/0x10
[  962.429882][   T31]  do_dentry_open+0x785/0x14e0
[  962.436601][   T31]  vfs_open+0x3b/0x340
[  962.440831][   T31]  ? path_openat+0x2df0/0x3860
[  962.446673][   T31]  path_openat+0x2e08/0x3860
[  962.451516][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  962.457659][   T31]  ? stack_depot_save_flags+0x33/0x810
[  962.464587][   T31]  ? __pfx_path_openat+0x10/0x10
[  962.470030][   T31]  ? __x64_sys_openat+0x138/0x170
[  962.475854][   T31]  ? do_syscall_64+0x14d/0xf80
[  962.480751][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  962.488879][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  962.495055][   T31]  do_file_open+0x23e/0x4a0
[  962.499630][   T31]  ? __pfx_do_file_open+0x10/0x10
[  962.506584][   T31]  ? _raw_spin_unlock+0x28/0x50
[  962.511592][   T31]  ? alloc_fd+0x64b/0x6c0
[  962.517101][   T31]  do_sys_openat2+0x113/0x200
[  962.522009][   T31]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  962.529417][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  962.538518][   T31]  ? rcu_is_watching+0x15/0xb0
[  962.544177][   T31]  __x64_sys_openat+0x138/0x170
[  962.549091][   T31]  do_syscall_64+0x14d/0xf80
[  962.555157][   T31]  ? trace_irq_disable+0x3b/0x150
[  962.560330][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  962.567533][   T31]  ? clear_bhb_loop+0x40/0x90
[  962.576913][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  962.584225][   T31] RIP: 0033:0x7f3ff82a7407
[  962.588779][   T31] RSP: 002b:00007ffe784e58c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  962.598078][   T31] RAX: ffffffffffffffda RBX: 00007f3ff8a77880 RCX: 00007f3ff82a7407
[  962.606948][   T31] RDX: 00000000000a0800 RSI: 000055dba9bc2c10 RDI: ffffffffffffff9c
[  962.615848][   T31] RBP: 000055dba9ba0910 R08: 0000000000000000 R09: 0000000000000000
[  962.624957][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055dba9ba8650
[  962.633588][   T31] R13: 000055dba9bae190 R14: 0000000000000000 R15: 000055dba9ba8650
[  962.642063][   T31]  </TASK>
[  962.647301][   T31] 
[  962.647301][   T31] Showing all locks held in the system:
[  962.673144][ T1737] lo speed is unknown, defaulting to 1000
[  962.732719][   T31] 1 lock held by khungtaskd/31:
[  962.737826][   T31]  #0: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  962.803916][   T31] 2 locks held by getty/5585:
[  962.809005][   T31]  #0: ffff888036bfb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  962.854714][   T31]  #1: ffffc9000322b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  962.866173][   T31] 1 lock held by udevd/24379:
[  962.871071][   T31]  #0: ffff888026cba358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  962.880828][   T31] 4 locks held by syz.4.6940/1583:
[  962.886478][   T31]  #0: ffffffff8fbbacf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  962.896854][   T31]  #1: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: caif_exit_net+0x6a/0x4a0
[  962.906730][   T31]  #2: ffff8880a123db80 (&caifn->caifdevs.lock){+.+.}-{4:4}, at: caif_exit_net+0x7d/0x4a0
[  962.927634][   T31]  #3: ffffffff8e764938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  962.939012][   T31] 2 locks held by syz.4.6940/1590:
[  962.944732][   T31]  #0: ffffffff8fbbacf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  962.955064][   T31]  #1: ffff888053ec8ff8 (&device->compat_devs_mutex){+.+.}-{4:4}, at: rdma_dev_exit_net+0x1b2/0x350
[  962.966846][   T31] 2 locks held by syz.0.6965/1669:
[  962.972255][   T31] 4 locks held by syz.5.6983/1737:
[  962.977574][   T31] 
[  962.988322][   T31] =============================================
[  962.988322][   T31] 
[  963.013310][   T31] NMI backtrace for cpu 0
[  963.013335][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  963.013358][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  963.013370][   T31] Call Trace:
[  963.013380][   T31]  <TASK>
[  963.013389][   T31]  dump_stack_lvl+0xe8/0x150
[  963.013425][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  963.013450][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  963.013480][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  963.013508][   T31]  sys_info+0x135/0x170
[  963.013528][   T31]  watchdog+0xfd9/0x1030
[  963.013553][   T31]  ? watchdog+0x21a/0x1030
[  963.013581][   T31]  kthread+0x388/0x470
[  963.013602][   T31]  ? __pfx_watchdog+0x10/0x10
[  963.013620][   T31]  ? __pfx_kthread+0x10/0x10
[  963.013644][   T31]  ret_from_fork+0x51e/0xb90
[  963.013673][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  963.013698][   T31]  ? __switch_to+0xc7d/0x1450
[  963.013726][   T31]  ? __pfx_kthread+0x10/0x10
[  963.013749][   T31]  ret_from_fork_asm+0x1a/0x30
[  963.013796][   T31]  </TASK>
[  963.013805][   T31] Sending NMI from CPU 0 to CPUs 1:
[  963.134408][    C1] NMI backtrace for cpu 1
[  963.134429][    C1] CPU: 1 UID: 0 PID: 17667 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(full) 
[  963.134449][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  963.134460][    C1] Workqueue: krds_cp_wq#19/0 rds_connect_worker
[  963.134484][    C1] RIP: 0010:rds_tcp_conn_path_connect+0x4ce/0x930
[  963.134508][    C1] Code: 44 8b 33 41 ff c6 44 89 f7 44 89 ee e8 ab d6 ce f6 45 39 ee b8 00 00 00 00 44 0f 43 f0 43 0f b6 04 3c 84 c0 0f 85 dc 00 00 00 <49> 89 dd 44 89 33 4c 89 fb 48 8b 44 24 78 42 0f b6 04 38 84 c0 48
[  963.134522][    C1] RSP: 0018:ffffc9000686f920 EFLAGS: 00000246
[  963.134537][    C1] RAX: 0000000000000000 RBX: ffff888043f67a50 RCX: 0000000000000000
[  963.134549][    C1] RDX: ffff888034245b80 RSI: 0000000000000dc9 RDI: 00000000000004ba
[  963.134560][    C1] RBP: ffffc9000686fa98 R08: ffff888092edd38f R09: 1ffff110125dba71
[  963.134572][    C1] R10: dffffc0000000000 R11: ffffed10125dba72 R12: 1ffff110087ecf4a
[  963.134584][    C1] R13: 0000000000000dc9 R14: 00000000000004ba R15: dffffc0000000000
[  963.134596][    C1] FS:  0000000000000000(0000) GS:ffff888125555000(0000) knlGS:0000000000000000
[  963.134609][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  963.134621][    C1] CR2: 0000200000e3f030 CR3: 0000000025c9a000 CR4: 00000000003526f0
[  963.134638][    C1] Call Trace:
[  963.134645][    C1]  <TASK>
[  963.134659][    C1]  ? __pfx_rds_tcp_conn_path_connect+0x10/0x10
[  963.134681][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  963.134707][    C1]  rds_connect_worker+0x1d8/0x290
[  963.134722][    C1]  ? process_scheduled_works+0xa8d/0x18c0
[  963.134744][    C1]  process_scheduled_works+0xb6e/0x18c0
[  963.134778][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  963.134801][    C1]  ? assign_work+0x3d5/0x5e0
[  963.134823][    C1]  worker_thread+0xa53/0xfc0
[  963.134856][    C1]  kthread+0x388/0x470
[  963.134872][    C1]  ? __pfx_worker_thread+0x10/0x10
[  963.134892][    C1]  ? __pfx_kthread+0x10/0x10
[  963.134908][    C1]  ret_from_fork+0x51e/0xb90
[  963.134930][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  963.134949][    C1]  ? __switch_to+0xc7d/0x1450
[  963.134970][    C1]  ? __pfx_kthread+0x10/0x10
[  963.134986][    C1]  ret_from_fork_asm+0x1a/0x30
[  963.135016][    C1]  </TASK>
[  963.377712][ T1737] lo speed is unknown, defaulting to 1000
[  963.380865][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  963.380891][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  963.380914][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  963.380928][   T31] Call Trace:
[  963.380938][   T31]  <TASK>
[  963.380947][   T31]  vpanic+0x56c/0xa60
[  963.380981][   T31]  ? __pfx___schedule+0x10/0x10
[  963.381008][   T31]  ? __pfx_vpanic+0x10/0x10
[  963.381044][   T31]  ? __pfx_console_unlock+0x10/0x10
[  963.381080][   T31]  panic+0xc5/0xd0
[  963.381104][   T31]  ? __pfx_panic+0x10/0x10
[  963.381132][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  963.381159][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  963.381186][   T31]  watchdog+0x1023/0x1030
[  963.381210][   T31]  ? watchdog+0x21a/0x1030
[  963.381236][   T31]  kthread+0x388/0x470
[  963.381256][   T31]  ? __pfx_watchdog+0x10/0x10
[  963.381273][   T31]  ? __pfx_kthread+0x10/0x10
[  963.381294][   T31]  ret_from_fork+0x51e/0xb90
[  963.381323][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  963.381346][   T31]  ? __switch_to+0xc7d/0x1450
[  963.381373][   T31]  ? __pfx_kthread+0x10/0x10
[  963.381393][   T31]  ret_from_fork_asm+0x1a/0x30
[  963.381436][   T31]  </TASK>
[  963.384181][   T31] Kernel Offset: disabled