last executing test programs:

2.348383973s ago: executing program 3 (id=4119):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1000, 0x1000, 0x0, 0x3}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) (async)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000300)={0x214, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x4}, @generic="f3ff97e605beecf09d797624d96a6d92569241c669a8ce925db0d169dab9ad179b02d2536f90380573f2541b6af0c245a07b72d88f088b1b2763e9e3e877a2a3be9a0cff07555ce785d5bd1f9fcc01614188ffc727697c1f5a8c29be96c16f64616782cd6f553add40f876db528b770ff98d1c9cd8d2e14be25c330c1a10876fdce0eb30f38c7563bc86804ef55e36099079ed516bc1326c49de5f9a8d67c8441c74988b94a2536ff36a7348c32ac257", @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x4}, @typed={0x4}, @generic="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", @generic="c0f8b4f24a85cee1f7418d6b7cc1baa61925e398566aef0534cae00f1a399431cf29d9f506fa8eed95f6f53ff85e8530f492743c0f265c1cd1606dfe60e1"]}]}, 0x214}], 0x1}, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000000d40), 0x40000000000038f, 0x10020, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4)
sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r5, 0x201, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) (async)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x80000)
sendmmsg$alg(r8, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)="3a74966c898cdc52852ffa9889efcf7a8e1444544a82e9673d69d231d0ed18285689cc9a1f37c73be7d6d58c6c80e343e1c3b394cf3338d92d82ba5889c8f3fa39c8aa924ff8fea9567f6519d3c9f0b2681a2f2c58cfb74a7d849c28d547d17ae901ba4d113aeb4f55c5e7cda943ba3ec84f52f399ffce18fa806da1f7f595da1c59290bf3f679a3ca884499104de4fa87666b94bcfbc7644467092214d49a739a031e783c9d44fc79ddfff1b9fefa09e52a", 0xb2}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8004}], 0x1, 0x40800) (async)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/82, 0x52}, {&(0x7f0000000280)=""/96, 0x60}], 0x2}, 0x500) (async)
unshare(0x6a040000) (async)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0)

1.931150263s ago: executing program 3 (id=4121):
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000000000000000000004000000850000005e0000009500000000000000a30b406b5a2bc8900d74868f5f4d1098c19588a23d7ae496951cac6cba4fd5c344499902356fe555b769ad074a9c8526831ea54da16a35cf6ba9"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.630419323s ago: executing program 4 (id=4124):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)

1.627335793s ago: executing program 2 (id=4125):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c40"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000200)=0xf, 0x4)
setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0xffffffcb, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f00000000c0)=0xb)
listen(r4, 0x1ad72f7)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x64, r6, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x15}}}]}, 0x64}}, 0x0)
accept4(r4, 0x0, 0x0, 0x80000)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f00000001c0)={<r8=>r3, &(0x7f0000000000)='}{,]\x00', 0x78000, &(0x7f00000000c0)={@_ha_fsid={[0x9cb8, 0x4]}, {0x1ff, 0xd, 0x7, 0x9}}, 0xb8, &(0x7f0000000100), &(0x7f0000000180)=0x3})
r9 = socket(0x11, 0x6, 0x3)
sendmsg$NFT_BATCH(r9, &(0x7f0000000b40)={&(0x7f00000002c0), 0xc, &(0x7f0000000b00)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x3c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x3d0, 0xe, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3b4, 0x3, 0x0, 0x1, [{0x3b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0xd8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xb8, 0x1, "708cad30f387732a2ae6ecf76d51c8b952ae38dc5612393bedc8ced9927852bc29d39351b8ed1e4d345fb4d2180501451abece860f3a1b874dc992288b0684c54ef5bd99b4b739025a5f104f3e1b2c15e9159188b7755ec6028d9fd00056116d4b69b6cf81f081f4fbe406f8b50b9f8101f1ad38777a7d632e6cc698da8630a52e2dd9d26c137fc90f780cab36505621a4846375ddf5a25c08486b4025946dbae1b4e0285223d202d6d5fb3ad3861806fc91d599"}]}, @NFTA_SET_ELEM_USERDATA={0x7f, 0x6, 0x1, 0x0, "842bf1a43af1a586037e5e518a2ebcdf749b615c7cde1883bc1a9c1e8aaa63e642de0d3d5ad8eabc547df4674cde1d0cd45ed0a30e552059896306b6174521a660fc00be128b9a119a7f4c30a7d1f1c2b6c86d2fcba19977c404f4814b9ac0cc5bd482e5a1c46a342f8b265c32063640c3589c904451cbe3e2a54e"}, @NFTA_SET_ELEM_DATA={0x230, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x19, 0x1, "6739c551f6a7dea14497d4cb21aea84b21f6d4758e"}, @NFTA_DATA_VALUE={0xae, 0x1, "362e893d82e436de4c2e87f8c1a03bd0363b54c0b5fc4f077b283dc5d088ae16fecc8c05a50e4d9976430d791312fec651304c10df78f465284bd4f2a10eac523bee5c5044a722e4ecc9840dca96e546bbaceea2a8727753943e9572433b63c3c6ef55a49901f09f67145f4855f7574063a8e0581c7a28f597a8c1054ce9931d5a79aa900971f696348f1b6d0f4c98b6ce544a19d41db34445b4242144020435dd48458400a415d94bf9"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xc6, 0x1, "a82cf204a96eb370f7c57b8beb5392e7932fbfbefeaafd040ad4f4b03ae4b0c4833ac4e18bbb5881daa114779827645ad0822eeb0756fbaae5b10c480aa82e7934c7f72f57d61e34f851e95ce8b852adf586f2fcffe8dcebbbc08df0866a74c0907ace4989f87d93494d07f59a757225845bc61bff12a6c473955dd392cb5b42a53a89ccd6f69a069c11a81c614d2e52b15eeb6e67034666d52fd9594a8f879b6967e59ccd19390b5e42f94415339056493418ce667157964739681ae4788db51c8f"}, @NFTA_DATA_VALUE={0x89, 0x1, "f54d94081671d17e5994ca6db09b4e156de6d38cd6ec23b67a8cbe4b3b0e2cceb546066718b7fbf73f3cd8bbf64f4116d53de55d29cd0395513bb5f34f9218b14d9bd703dd319ad94cd6e9d17944d010ecd5ddfe4806efb0723e92a501dcb73b5fe3bfb104b7d817116157d0b6ea8bfc8f2fc26d01fb2e1a7116a3d44c0356b9bc714b1de3"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x45}]}]}]}, @NFT_MSG_NEWRULE={0x358, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1ff}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f5}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_USERDATA={0xed, 0x7, 0x1, 0x0, "2aacd0b8ca01dff63751d29c10e4b6b99bc1486a39deb69f4609da44fc8afa375a0303c8119be9420775a5f9bd7123faed929e5ed4a8af93d9423380c5e37e836d6a30637b094e4106830a6d19b5163c49290ce6f01bb1d4eea32873d626fcda1b473fa0163aea2f12697bbb9fc690333113e20bfb591701ec3a4afe5a6a4c9c8b130a622998903b137b24d7b3b3d44003b84f456855d87596812f65a5cfd5130bb7783bc965626fafed12b1133c9a946f32791282efa30ebe0a80f0fcaaeaa267d0a85d8298b33b0ee5cd6eee97d44c43c9599302d49040ea29a402715502e1a1a584271a6f211883"}, @NFTA_RULE_EXPRESSIONS={0xcc, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x30, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xc8}]}}}, {0x4c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x83}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x118, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x31}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x23}, @NFTA_INNER_EXPR={0x4c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4e}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x13}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}]}}}]}}}, {0x50, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xfe6544af00445d4a}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7f0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0x6, 0x3}, 0x6)
bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)

1.625089478s ago: executing program 0 (id=4126):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000003, @private2, 0x1000000}}}, 0x88) (async)
shutdown(r0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000140)=0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x21) (async)
ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x1ff) (async)
r5 = accept4$x25(r4, &(0x7f0000000280)={0x9, @remote}, &(0x7f0000000300)=0x12, 0x80800)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x3000000, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) (async)
getsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff"], 0xfc}}, 0x0) (async)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94)

1.612970825s ago: executing program 3 (id=4127):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x2000000000032, 0xffffffffffffffff, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x1, 0x8eb4}]})
close(0x3)

1.486515669s ago: executing program 4 (id=4128):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fbc84589ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe953054720185010000f1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe0", 0x33f}], 0x2}, 0x0) (async)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="0000000000303e97380e90231bdbdaf6a4bd77eabcd3866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9d00000c0a498396b28c7d1784d04aa38922721cb781608144284d90a72d7d2e3152d201ed78ffb6e711b889cda0346ce9bca2e6e9e46b15980456c43a659f427e3e6e9e16e0de93100734d409ca57c27d3bde66b2791c1b2f7032f3cc02c85c43e8652f13258bd412174ea931f1d39a9830e593761d91c56f637f0e1568ea66a15d9f0eba504ab3eb205fda13d1068e7692f8d00a2d92d2fb48887b6f71c6de43a923bbcaa9e3ac5bd82ac0ec00000000000000000000000000000000e48251271d0ed111d9ed7f4d18ee4aa30240843ed560aeebee209d8c557e60e69e634b37c43235e062634e8f0932582eb91d27c5c81911c5a4d57ea2813573aec3a6909f30f29c535a", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0010003900010013b2d59df64a0f9ab37b8166a82457faff0700fedbdf25010000000800ec000b800000a94c7f2c8133b28e1ce133b03dbd0ce8ff69435b34038557453f30a0ce42589b8e5ec91deb448ef126e3ef3c6fb94ff1c3e3d36a47bcc1f841803d4dc9c63ce40810d1201eb1a3b79042"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0010003900010013b2d59df64a0f9ab37b8166a82457faff0700fedbdf25010000000800ec000b800000a94c7f2c8133b28e1ce133b03dbd0ce8ff69435b34038557453f30a0ce42589b8e5ec91deb448ef126e3ef3c6fb94ff1c3e3d36a47bcc1f841803d4dc9c63ce40810d1201eb1a3b79042"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x6c, r2, 0x411, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000804}, 0x4000800) (async)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x6c, r2, 0x411, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000804}, 0x4000800)

1.411078689s ago: executing program 0 (id=4129):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000048300007010000080020b07500feffa1d3ac4895"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xfa, &(0x7f0000000f40)=""/250, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94)

1.408441295s ago: executing program 2 (id=4130):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000005cfb00000000220000000a000100774a70616e3100"], 0x20}}, 0x4000000)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
unshare(0x2c060000)
unshare(0x24020400)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r5 = socket$xdp(0x2c, 0x3, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'})
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'})
setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4)

1.251858463s ago: executing program 4 (id=4131):
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6gre0\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', r2, 0x29, 0x0, 0xf4, 0x1, 0x48, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1, 0x98ca, 0xfffffffd}})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {0x0, 0x5}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xd4, 0x7f}}]}}]}, 0x40}}, 0x20000000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r5, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4008010)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x7}], 0x10}, 0x41)

1.146227994s ago: executing program 4 (id=4132):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
read$rfkill(r0, &(0x7f0000001780), 0x8)

1.026933646s ago: executing program 1 (id=4133):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x3, 0x9)
ioctl$sock_inet_SIOCSARP(r1, 0x891b, &(0x7f0000000000)={{0x2, 0x4, @rand_addr=0x64010102}, {0x1, @broadcast}, 0x4a, {0x2, 0x8102, @initdev={0xac, 0x1e, 0x2, 0x0}}, 'veth1_to_bridge\x00'})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r4, 0x1, 0x70bd2c, 0xa5dfdbfa, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000050000009e6000008500000041"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x15, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r0], 0x158}, 0x1, 0xba01}, 0x44)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r6, 0x8915, &(0x7f0000000000)={'vxcan1\x00'})

1.026497076s ago: executing program 4 (id=4134):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20076}, 0x38)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f00000001c0)=""/135, &(0x7f0000000280)=0x87)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000085}, 0x4008001)
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008090}, 0x810)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0)
sendto$inet6(r2, &(0x7f00000004c0)="d7", 0x1, 0x10000, &(0x7f0000000000)={0xa, 0x0, 0x4, @private1, 0x8}, 0x1c)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x6, 0xffff, 0x7, 0x74, 0xffff}, &(0x7f0000000440)=0x14)
connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
listen(r1, 0x1ad72f7)
accept4(r1, 0x0, 0x0, 0x80000)
r4 = accept4$netrom(r1, 0x0, 0x0, 0x80000)
writev(r4, &(0x7f00000001c0), 0x7)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xffffff7f}}], 0x1c)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000100)=0x10)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20f9a53727b9a3f94cbd7000fddbdf251862ecd14a40b32a0800030000000001"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x24001850)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x2000000000000128, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

951.023161ms ago: executing program 2 (id=4135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="94eed7159138febf8e83f1dec9aac14c5e", @ANYRES16=r3, @ANYBLOB="100026bd7000fedbdf255c00000008006b001c020000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

833.482463ms ago: executing program 2 (id=4136):
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x10000001})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r4 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0)
write(r3, &(0x7f0000000340)="0a000300010000", 0x7)
recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0)

735.042312ms ago: executing program 1 (id=4137):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x39)

734.376211ms ago: executing program 0 (id=4138):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
close(0x3)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48)
listen(r3, 0x80) (async)
listen(r3, 0x80)
accept$netrom(r3, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}}], 0x2, 0x32001, 0x0) (async)
recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}}], 0x2, 0x32001, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x20}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f00000003c0)=[{0x15, 0x1, 0x3, 0x6000}, {0x60, 0x8, 0xff}, {}, {0x15, 0x0, 0x0, 0x3}, {0x6, 0x3, 0x0, 0x6a}]})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r6, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000000000000000010000009402"], 0x18}}], 0x1, 0x20000000) (async)
sendmmsg$inet(r6, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000000000000000010000009402"], 0x18}}], 0x1, 0x20000000)
r7 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)

694.478709ms ago: executing program 1 (id=4139):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000009000000090000000050000000e00000002000006040000000a0000005e300000030000020f000000040000000000000e04000000010000000100000004000004a79e00000900000002000000810b00000800000000000000060000000a00000003000000020000000000000005000000000100000c000000000000110400000002000000000000000000000200000000010000000000000c0300000000615f3000"], &(0x7f0000000040)=""/124, 0xad, 0x7c, 0x1, 0x7, 0x10000}, 0x28)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000800)={0x38, r5, 0x2, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8021}, 0x40080)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan1\x00'})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x407f}]}, 0x28}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r8=>0x0})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=r9, 0x7, 0x0, 0xddd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', r8, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50)
pipe(&(0x7f00000006c0)={<r12=>0xffffffffffffffff})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x21, &(0x7f0000000500)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @ldst={0x3, 0x3, 0x0, 0x9, 0x8, 0x30}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @jmp={0x5, 0x1, 0xc, 0x4, 0x0, 0x10, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @ldst={0x3, 0x1, 0x4, 0x8, 0x3, 0xfffffffffffffff0, 0xfffffffffffffffc}, @map_val={0x18, 0x9, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x8000}], &(0x7f0000000440)='GPL\x00', 0x7fffffff, 0x62, &(0x7f0000000640)=""/98, 0x41100, 0x10, '\x00', r8, 0x0, r0, 0x8, &(0x7f0000000480)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x231ea, r12, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x5}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r8, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40)
write$tun(r2, &(0x7f0000000340)=ANY=[], 0x4b)
ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000700)={'vxcan0\x00'})

541.836177ms ago: executing program 1 (id=4140):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000090a010400000000000000000a0000040900010073790540000000020900020073797a320000000008000a40ffffff7808000840000000f507000c40000084a36a07034000000010140000001100010000000000000000000300000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000008000100", @ANYRES32=r6, @ANYBLOB="a801028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003"], 0x25c}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000180)=0x4000000)
ioctl$PPPIOCGUNIT(r7, 0x80047456, &(0x7f0000000040))
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x7, 0x101, 0x7fffffff, 0x1100, r1, 0xd, '\x00', 0x0, r8, 0x0, 0x0, 0x4, 0x4}, 0x50)
r10 = socket(0x10, 0x3, 0x0)
write(r10, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYRES8=r9, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000025000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11, r9}, 0xc)
r12 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r12, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad", 0xb}], 0x1}, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00?'], 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x20044890)
listen(r12, 0x2)

460.971307ms ago: executing program 0 (id=4141):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c5}, 0x0)

460.171765ms ago: executing program 3 (id=4142):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)

397.936905ms ago: executing program 3 (id=4143):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x1ff, 0x1, 0x2d57, 0x2}, 0x14) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000052000101fef3ffff0100000002"], 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) (async)
syz_genetlink_get_family_id$smc(&(0x7f00000007c0), r0)

347.283184ms ago: executing program 2 (id=4144):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646, 0x1600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
r3 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', r4, 0x29, 0x6, 0xa, 0x1f, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, @private1, 0x20, 0x80, 0x5, 0x9}})
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)

258.099724ms ago: executing program 0 (id=4145):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000001f0000007b000400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x5a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x24)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10)
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000a00))
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="b9d1", 0x2}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x40801)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r5 = socket(0x840000000002, 0x3, 0x100)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xffffffff, 0x0, 0x2d8, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x91a, 0x0, 0xc}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0)
r6 = socket(0x10, 0x803, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r7, 0x112, 0xb, 0x0, &(0x7f00000000c0))
r8 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f00000002c0)={0x3, 0x6, "e5a055", 0x6, 0xa7})
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000300)=0x2, 0x4)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', <r12=>0x0})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="06000000", @ANYRES16=r11, @ANYBLOB="20002dbd7000fddbdf2505000000050005008100000008000400f7ffffff0c000180060005004e220000080002000500000054000680060005004e22000014000400fe8000000000000000000000000000bb0600010002000000060005004e2300000500020001000000080006000c00000014000400fc01000000000000000000000000000128000680060005004e21000008000700", @ANYRES32=r12, @ANYBLOB="1400040020010000000000000000000000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x24040000)

206.258402ms ago: executing program 3 (id=4146):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4)
socket$inet6(0xa, 0x802, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000280)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bfc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2c3f3d84ef0400000000f1ff02ff23403d8b2fc653ae1ebfcb1e349b6551e8bcc84eee753f003949004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea0500000000000000be2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3c8bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86c0d255dc4d555aab841eabe4ab190c092d077ce", 0x118)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @private1, 0x9}, 0x1c)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0)
sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x0, 0xa20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x73}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x200400dc}, 0x20000804)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000cd00000095000000000000002e7fe8e11f1025d421bf723145f5baef1889cf06291960a4ab5d7c5a785c2f331021149da43cc671f45960680c49eb45a07352de86efd6a72f5baefec7623befc4f8790a0000002c69363d8da837cbf73030"], &(0x7f0000000380)='GPL\x00', 0x4, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008840}, 0x20040040)

205.378579ms ago: executing program 0 (id=4147):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x2)
close(r1)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00'})
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@x25, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c121500000000ff110000000000000000125ce882cbf490d908f1523f000000000000", 0x2e}], 0x1}, 0x4005)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

192.794182ms ago: executing program 1 (id=4148):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20000000}, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004"], 0x48)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000340)=0x31, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7ff, @remote, 0x5}, 0x1c)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

98.785597ms ago: executing program 1 (id=4149):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0xfffe)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4)
bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0xc, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r4 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e)
connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@multicast, @random="bad4f9431624", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x8, 0x7f}}}}}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x4000)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x3)
preadv(r2, &(0x7f0000000100), 0xa, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x9, 0x5a}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000)
socket(0x10, 0x3, 0x0)

2.591607ms ago: executing program 2 (id=4150):
unshare(0x22020600)
unshare(0x2a020400)
r0 = socket(0x1, 0x2, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000480)={@in6={{0xa, 0x4e20, 0x81, @remote, 0x72ea}}, 0x0, 0x0, 0x4a, 0x0, "042f769c1583509786a1752ef58eefbbf87661ecaaf2bcc41cad50354af04429c8e421c366e225b6346991e3b85c4f4fea1cd596373d8cb077756e8516b1b8b4c7e698232f9b99fc3a902918d935a942"}, 0xd8)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x8000, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x2000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x53}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)

0s ago: executing program 4 (id=4151):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getqdisc={0x2c, 0x26, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffe6, 0x8}, {0xd, 0xf}, {0x3, 0x10}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048001}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_timeval(r7, 0x1, 0x4a, &(0x7f0000000040), 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x53a8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x440e0}, 0x4890)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

62763][T16745] syzkaller0: entered promiscuous mode
[  353.170184][T16745] syzkaller0: entered allmulticast mode
[  353.180771][T16743] syzkaller0: entered promiscuous mode
[  353.187094][T16743] syzkaller0: entered allmulticast mode
[  353.227755][ T5823] Bluetooth: hci5: command tx timeout
[  353.249803][T16743] netlink: 'syz.4.2867': attribute type 1 has an invalid length.
[  353.304676][T16743] bond9: entered promiscuous mode
[  353.313970][T16743] 8021q: adding VLAN 0 to HW filter on device bond9
[  353.392349][T16751] bond9: (slave veth13): making interface the new active one
[  353.403551][T16751] veth13: entered promiscuous mode
[  353.411863][T16751] bond9: (slave veth13): Enslaving as an active interface with an up link
[  353.610479][T16761] ip6_vti0 speed is unknown, defaulting to 1000
[  353.806269][T16772] ip6tnl2: entered allmulticast mode
[  353.971720][T16761] lo speed is unknown, defaulting to 1000
[  355.307584][ T5823] Bluetooth: hci5: command tx timeout
[  355.874638][T16727] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  356.053355][T16797] __nla_validate_parse: 4 callbacks suppressed
[  356.053375][T16797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2882'.
[  356.101114][T16804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2879'.
[  356.104514][T16799] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2881'.
[  356.113216][T16804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2879'.
[  356.159183][T16808] nft_compat: unsupported protocol 1
[  356.160499][T16804] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2879'.
[  356.174911][T16809] ip6t_srh: unknown srh match flags  4000
[  356.210641][T16804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2879'.
[  356.371149][T16824] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2889'.
[  356.489229][T16835] tipc: Enabled bearer <eth:gre0>, priority 10
[  356.551562][T16838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2891'.
[  356.610562][T16842] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  356.765080][T16853] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2895'.
[  356.876627][T16861] netlink: 'syz.2.2897': attribute type 1 has an invalid length.
[  356.949708][T16864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2897'.
[  356.960060][T16863] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  356.973229][T16864] bond0: (slave bond_slave_1): Releasing backup interface
[  356.993725][T16863] syzkaller0: entered promiscuous mode
[  356.999428][T16863] syzkaller0: entered allmulticast mode
[  357.100444][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x38
[  357.117073][T16873] tipc: Resetting bearer <eth:syzkaller0>
[  357.231793][T16862] tipc: Resetting bearer <eth:syzkaller0>
[  357.328254][T16862] tipc: Disabling bearer <eth:syzkaller0>
[  357.356139][T16880] sit0: entered promiscuous mode
[  357.393480][T16880] netlink: 'syz.0.2902': attribute type 1 has an invalid length.
[  357.896035][T16890] ip6_vti0 speed is unknown, defaulting to 1000
[  358.117701][   T11] block nbd0: Possible stuck request ffff888027350000: control (read@0,1024B). Runtime 63 seconds
[  358.128883][   T11] block nbd0: Possible stuck request ffff888027350200: control (read@1024,1024B). Runtime 63 seconds
[  358.140920][   T11] block nbd0: Possible stuck request ffff888027350400: control (read@2048,1024B). Runtime 63 seconds
[  358.152733][   T11] block nbd0: Possible stuck request ffff888027350600: control (read@3072,1024B). Runtime 63 seconds
[  358.363118][T16888] ip6_vti0 speed is unknown, defaulting to 1000
[  358.373330][T16890] lo speed is unknown, defaulting to 1000
[  358.746354][T16921] gtp1: entered promiscuous mode
[  358.770474][T16921] IPVS: Error connecting to the multicast addr
[  358.789266][T16921] IPv6: NLM_F_CREATE should be specified when creating new route
[  358.806930][T16923] veth2: entered allmulticast mode
[  359.071366][T16888] lo speed is unknown, defaulting to 1000
[  359.321687][T16933] 8021q: adding VLAN 0 to HW filter on device bond11
[  359.354461][T16935] bond11: option miimon: invalid value (18446744071562067968)
[  359.374744][T16935] bond11: option miimon: allowed values 0 - 2147483647
[  359.471060][T16938] ip6_vti0 speed is unknown, defaulting to 1000
[  359.818593][T16950] ip6_vti0 speed is unknown, defaulting to 1000
[  359.873147][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  359.883626][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  359.895385][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  359.939305][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  359.961497][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  360.159826][T16952] ip6_vti0 speed is unknown, defaulting to 1000
[  360.256558][T16938] lo speed is unknown, defaulting to 1000
[  360.264609][T16957] bridge_slave_1: left allmulticast mode
[  360.273891][T16957] bridge_slave_1: left promiscuous mode
[  360.280813][T16957] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.292887][T16957] bridge_slave_0: left allmulticast mode
[  360.300613][T16957] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.634054][T16950] lo speed is unknown, defaulting to 1000
[  360.947685][T16952] lo speed is unknown, defaulting to 1000
[  361.828787][T16967] __nla_validate_parse: 11 callbacks suppressed
[  361.828808][T16967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2927'.
[  362.027968][ T5823] Bluetooth: hci1: command tx timeout
[  362.062569][T16968] 8021q: adding VLAN 0 to HW filter on device bond1
[  362.246655][T16952] chnl_net:caif_netlink_parms(): no params data found
[  362.732377][T16981] ipvlan2: entered promiscuous mode
[  363.089374][T16952] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.096747][T16952] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.107548][T16952] bridge_slave_0: entered allmulticast mode
[  363.117699][T16952] bridge_slave_0: entered promiscuous mode
[  363.129703][T16989] tipc: Started in network mode
[  363.134611][T16989] tipc: Node identity , cluster identity 4711
[  363.155981][T16989] tipc: Failed to obtain node identity
[  363.163051][T16989] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  363.181415][T16952] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.203288][T16952] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.219055][T16952] bridge_slave_1: entered allmulticast mode
[  363.242724][T16952] bridge_slave_1: entered promiscuous mode
[  363.560188][T16952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  363.643652][T16952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.694477][T16952] team0: Port device team_slave_0 added
[  363.715088][T16952] team0: Port device team_slave_1 added
[  363.753298][T16952] batman_adv: batadv0: Adding interface: batadv_slave_0
[  363.762005][T16952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  363.792613][T16952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  363.805709][T16952] batman_adv: batadv0: Adding interface: batadv_slave_1
[  363.814288][T16952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  363.846530][T16952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  364.088358][T16952] hsr_slave_0: entered promiscuous mode
[  364.089687][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2934'.
[  364.105595][T17000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2934'.
[  364.106537][T16952] hsr_slave_1: entered promiscuous mode
[  364.123132][ T5823] Bluetooth: hci1: command tx timeout
[  364.130634][T16952] debugfs: 'hsr0' already exists in 'hsr'
[  364.136665][T16952] Cannot create hsr debugfs directory
[  364.175120][T17000] geneve0: entered promiscuous mode
[  364.181927][T17000] geneve0: entered allmulticast mode
[  364.277823][T17007] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2935'.
[  364.499820][   T48] team0: Port device netdevsim0 removed
[  364.537954][T17012] netlink: 'syz.1.2936': attribute type 1 has an invalid length.
[  364.559680][T17012] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2936'.
[  364.584982][T17012] netlink: 658 bytes leftover after parsing attributes in process `syz.1.2936'.
[  364.612457][T17012] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2936'.
[  364.760571][T17019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2938'.
[  364.772318][T17019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2938'.
[  364.833143][T17028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2940'.
[  364.845812][T17028] netlink: 'syz.4.2940': attribute type 6 has an invalid length.
[  365.224347][T17051] lo: Caught tx_queue_len zero misconfig
[  365.364173][T17060] bridge9: the hash_elasticity option has been deprecated and is always 16
[  365.392890][T17060] bridge9: entered allmulticast mode
[  365.602808][T17077] netlink: 'syz.3.2955': attribute type 5 has an invalid length.
[  365.736381][T17082] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  366.187677][ T5823] Bluetooth: hci1: command tx timeout
[  366.346354][   T48] bridge_slave_1: left allmulticast mode
[  366.374845][   T48] bridge_slave_1: left promiscuous mode
[  366.387081][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.414886][   T48] ¾x9ÿ: left allmulticast mode
[  366.425412][   T48] ¾x9ÿ: left promiscuous mode
[  366.439716][   T48] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  366.909662][T12990] smc: removing ib device syz2
[  366.930382][T17125] __nla_validate_parse: 12 callbacks suppressed
[  366.930399][T17125] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2971'.
[  367.151635][   T11] block nbd0: Possible stuck request ffff888027350000: control (read@0,1024B). Runtime 72 seconds
[  367.162809][   T11] block nbd0: Possible stuck request ffff888027350200: control (read@1024,1024B). Runtime 72 seconds
[  367.181357][   T11] block nbd0: Possible stuck request ffff888027350400: control (read@2048,1024B). Runtime 72 seconds
[  367.197670][   T11] block nbd0: Possible stuck request ffff888027350600: control (read@3072,1024B). Runtime 72 seconds
[  367.556419][   T48] bond3 (unregistering): (slave bridge4): Releasing active interface
[  367.585382][   T48] bond3 (unregistering): (slave bridge4): the permanent HWaddr of slave - 92:f3:2a:b8:07:68 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  367.688564][   T48] bond3 (unregistering): (slave bridge5): Releasing active interface
[  367.824980][   T48] team0: Port device bridge7 removed
[  367.939289][   T48] team0: Port device bridge8 removed
[  367.982438][   T48] team0: Port device bridge9 removed
[  368.058427][   T48] team0: Port device bridge10 removed
[  368.131929][   T48] team0: Port device bridge11 removed
[  368.203631][   T48] team0: Port device bridge12 removed
[  368.256789][   T48] team0: Port device bridge13 removed
[  368.269904][ T5823] Bluetooth: hci1: command tx timeout
[  368.715746][   T48] team0: Port device bridge19 removed
[  368.777275][   T48] bond7 (unregistering): (slave bridge20): Releasing backup interface
[  369.052979][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  369.075047][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  369.089575][   T48] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  369.102585][   T48] bond0 (unregistering): Released all slaves
[  369.116667][   T48] bond1 (unregistering): Released all slaves
[  369.135888][   T48] bond2 (unregistering): Released all slaves
[  369.169811][   T48] bond3 (unregistering): Released all slaves
[  369.189853][   T48] bond4 (unregistering): Released all slaves
[  369.217757][   T48] bond5 (unregistering): Released all slaves
[  369.241790][   T48] bond6 (unregistering): Released all slaves
[  369.260345][   T48] bond7 (unregistering): Released all slaves
[  369.301832][T17121] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  369.338414][T17131] tipc: Started in network mode
[  369.343647][T17131] tipc: Node identity , cluster identity 4711
[  369.358465][T17131] tipc: Failed to obtain node identity
[  369.374356][T17131] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  369.537167][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2973'.
[  369.754601][T17143] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2974'.
[  369.764693][T17143] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2974'.
[  369.812488][T17143] syzkaller0: entered allmulticast mode
[  369.824149][T17143] syzkaller0 (unregistering): left allmulticast mode
[  370.007136][T17156] netlink: 'syz.2.2976': attribute type 4 has an invalid length.
[  370.061270][T17158] netlink: 'syz.2.2976': attribute type 4 has an invalid length.
[  370.165675][T17156] bond1: option mode: unable to set because the bond device is up
[  370.179544][T17159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2977'.
[  370.243781][T17156] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  370.268711][T12990] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  370.409745][T16952] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  370.456429][T16952] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  370.495112][T16952] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  370.540609][T16952] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  370.892536][T17195] geneve3: entered promiscuous mode
[  370.899631][T17195] geneve3: entered allmulticast mode
[  370.901653][T17193] netlink: 'syz.3.2983': attribute type 2 has an invalid length.
[  370.939374][T17193] �9: entered promiscuous mode
[  370.945154][T12989] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  370.952550][T17193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2983'.
[  370.963027][T17191] lo speed is unknown, defaulting to 1000
[  370.971394][T12989] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  370.998270][T12989] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  371.019104][T17201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2986'.
[  371.041442][T17201] netlink: 'syz.1.2986': attribute type 1 has an invalid length.
[  371.055536][T17196] geneve3: entered promiscuous mode
[  371.062286][T17196] geneve3: entered allmulticast mode
[  371.084095][T16952] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.097185][T12989] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  371.118023][   T48] !©�9: left promiscuous mode
[  371.159463][T17203] tipc: Enabling of bearer <eth:gre0> rejected, already enabled
[  371.200264][   T48] �9: left promiscuous mode
[  371.235228][T16952] 8021q: adding VLAN 0 to HW filter on device team0
[  371.273374][   T48] hmac(sha224): left promiscuous mode
[  371.316665][T12989] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.323878][T12989] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.383406][T12989] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.390742][T12989] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.397643][   T48] tipc: Left network mode
[  371.561630][T16952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  371.623617][T17193] lo speed is unknown, defaulting to 1000
[  372.215509][T16952] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.333543][T17242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2993'.
[  372.353299][T17242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2993'.
[  372.392910][T16952] veth0_vlan: entered promiscuous mode
[  372.409583][T16952] veth1_vlan: entered promiscuous mode
[  372.448109][T16952] veth0_macvtap: entered promiscuous mode
[  372.459175][T16952] veth1_macvtap: entered promiscuous mode
[  372.484034][T16952] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.498648][T16952] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.519934][T12989] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.531914][T12989] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.551189][T12989] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.576195][T12989] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.663640][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.684976][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.744384][T12989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.772340][T12989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.026510][T17258] netlink: 'syz.1.2997': attribute type 142 has an invalid length.
[  373.785743][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[  373.835641][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[  373.845625][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  373.863797][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  373.874961][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  373.884496][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  373.899124][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  374.068951][T17285] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3002'.
[  374.121374][T17287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3002'.
[  374.365857][   T48] team0 (unregistering): Port device team_slave_1 removed
[  374.383053][   T48] team0 (unregistering): Port device team_slave_0 removed
[  374.391061][T12989] smc: removing ib device !yz!
[  374.559250][T17285] veth0_to_team: entered promiscuous mode
[  374.576143][T17285] veth0_to_team: left promiscuous mode
[  374.592917][T17287] veth0_to_team: entered promiscuous mode
[  374.602652][T17287] veth0_to_team: left promiscuous mode
[  374.693718][T17278] lo speed is unknown, defaulting to 1000
[  374.913730][T17291] geneve6: entered promiscuous mode
[  375.042590][T17294] openvswitch: netlink: Message has 8 unknown bytes.
[  375.144767][T17302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3007'.
[  375.149777][T17299] syzkaller0: entered promiscuous mode
[  375.160138][T17299] syzkaller0: entered allmulticast mode
[  375.211968][T17299] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  375.237042][T17311] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3008'.
[  375.251624][T17298] tipc: Resetting bearer <eth:syzkaller0>
[  375.292698][T17298] tipc: Disabling bearer <eth:syzkaller0>
[  375.586420][T17323] bridge8: entered promiscuous mode
[  375.592679][T17323] bridge8: entered allmulticast mode
[  375.638762][T17323] team0: Port device bridge8 added
[  375.793863][T17337] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3015'.
[  375.847177][T17332] tipc: Enabled bearer <eth:gre0>, priority 10
[  375.947652][ T5818] Bluetooth: hci2: command tx timeout
[  376.004738][T17344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3019'.
[  376.013871][T17344] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3019'.
[  376.196076][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3021'.
[  376.376499][T17349] bridge_slave_0: left promiscuous mode
[  376.420685][T17349] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  376.437231][T17349] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  376.588316][   T11] block nbd0: Possible stuck request ffff888027350000: control (read@0,1024B). Runtime 81 seconds
[  376.599223][   T11] block nbd0: Possible stuck request ffff888027350200: control (read@1024,1024B). Runtime 81 seconds
[  376.610456][   T11] block nbd0: Possible stuck request ffff888027350400: control (read@2048,1024B). Runtime 81 seconds
[  376.621654][   T11] block nbd0: Possible stuck request ffff888027350600: control (read@3072,1024B). Runtime 81 seconds
[  376.744030][T17349] geneve3: left promiscuous mode
[  376.751519][T17349] geneve3: left allmulticast mode
[  376.758299][T17355] netlink: 'syz.0.3022': attribute type 1 has an invalid length.
[  376.841930][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  376.861264][T17368] syzkaller0: entered promiscuous mode
[  376.877801][T17368] syzkaller0: entered allmulticast mode
[  376.905079][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.006947][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.017114][ T7037] tipc: Node number set to 1022580113
[  377.025301][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.051234][T17374] syzkaller0: entered promiscuous mode
[  377.073363][T17374] syzkaller0: entered allmulticast mode
[  377.112575][T17278] chnl_net:caif_netlink_parms(): no params data found
[  377.256429][T17381] syzkaller0: entered promiscuous mode
[  377.262667][T17381] syzkaller0: entered allmulticast mode
[  377.277240][   T48] IPVS: stop unused estimator thread 0...
[  377.423944][T17278] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.429363][T17393] __nla_validate_parse: 1 callbacks suppressed
[  377.429380][T17393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'.
[  377.431676][T17278] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.454065][T17278] bridge_slave_0: entered allmulticast mode
[  377.464115][T17278] bridge_slave_0: entered promiscuous mode
[  377.477187][T17278] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.485167][T17278] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.492804][T17278] bridge_slave_1: entered allmulticast mode
[  377.502030][T17278] bridge_slave_1: entered promiscuous mode
[  377.582828][T17278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  377.604584][T17278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.629335][T17400] netlink: 'syz.0.3033': attribute type 1 has an invalid length.
[  377.683711][T17278] team0: Port device team_slave_0 added
[  377.692974][T17278] team0: Port device team_slave_1 added
[  377.715360][T17404] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3035'.
[  377.742965][T17278] batman_adv: batadv0: Adding interface: batadv_slave_0
[  377.746886][T17404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3035'.
[  377.759334][T17278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  377.759364][T17278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  377.761298][T17278] batman_adv: batadv0: Adding interface: batadv_slave_1
[  377.806489][T17278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  377.833646][T17278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  377.897050][T17278] hsr_slave_0: entered promiscuous mode
[  377.905074][T17278] hsr_slave_1: entered promiscuous mode
[  377.912537][T17278] debugfs: 'hsr0' already exists in 'hsr'
[  377.918969][T17278] Cannot create hsr debugfs directory
[  377.932620][T17408] syzkaller0: entered promiscuous mode
[  377.940331][T17408] syzkaller0: entered allmulticast mode
[  378.039013][ T5818] Bluetooth: hci2: command tx timeout
[  378.150237][T17412] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.3038'.
[  378.155050][T17278] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  378.193904][T17412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3038'.
[  378.235471][T17278] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  378.276833][T17278] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  378.328159][T17422] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.3038'.
[  378.361675][T17278] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  378.591902][T17278] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  378.595408][T17427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3042'.
[  378.644915][T17278] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  378.668328][T17278] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  378.689175][T17278] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  378.791722][T17442] syzkaller0: entered promiscuous mode
[  378.799076][T17442] syzkaller0: entered allmulticast mode
[  378.816954][T17442] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  378.843512][T17441] tipc: Resetting bearer <eth:syzkaller0>
[  378.891743][T17441] tipc: Disabling bearer <eth:syzkaller0>
[  378.900763][T17446] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3048'.
[  378.929723][T17448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3048'.
[  378.941059][T17446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3048'.
[  378.959948][T17450] netlink: 'syz.2.3049': attribute type 1 has an invalid length.
[  378.998738][T17278] 8021q: adding VLAN 0 to HW filter on device bond0
[  379.043685][T17278] 8021q: adding VLAN 0 to HW filter on device team0
[  379.085879][T12990] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.093092][T12990] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.121741][T12990] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.128973][T12990] bridge0: port 2(bridge_slave_1) entered forwarding state
[  379.439006][T17468] tipc: Started in network mode
[  379.444591][T17468] tipc: Node identity , cluster identity 4711
[  379.454608][T17468] tipc: Failed to obtain node identity
[  379.460269][T17468] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  379.963320][T17278] 8021q: adding VLAN 0 to HW filter on device batadv0
[  380.080148][T17278] veth0_vlan: entered promiscuous mode
[  380.094997][T17278] veth1_vlan: entered promiscuous mode
[  380.117821][ T5818] Bluetooth: hci2: command tx timeout
[  380.148040][T17278] veth0_macvtap: entered promiscuous mode
[  380.161706][T17278] veth1_macvtap: entered promiscuous mode
[  380.185369][T17278] batman_adv: batadv0: Interface activated: batadv_slave_0
[  380.220954][T17278] batman_adv: batadv0: Interface activated: batadv_slave_1
[  380.240958][T12989] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.253102][T12989] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.290179][T12989] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.306030][T12989] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  380.407245][T17486] syzkaller0: entered promiscuous mode
[  380.419734][T17486] syzkaller0: entered allmulticast mode
[  380.458815][T17486] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  380.470579][T17485] tipc: Resetting bearer <eth:syzkaller0>
[  380.488522][T17485] tipc: Disabling bearer <eth:syzkaller0>
[  380.502834][T12989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.513515][T12989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.594082][T12991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.614968][T12991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.656114][T17494] ip6gretap0: entered promiscuous mode
[  380.825786][T17502] netlink: 'syz.1.3064': attribute type 10 has an invalid length.
[  380.843738][T17502] dummy0: entered promiscuous mode
[  380.851288][T17502] bridge0: port 3(dummy0) entered blocking state
[  380.862134][T17502] bridge0: port 3(dummy0) entered disabled state
[  380.889283][T17502] dummy0: entered allmulticast mode
[  380.912663][T17502] bridge0: port 3(dummy0) entered blocking state
[  380.919314][T17502] bridge0: port 3(dummy0) entered forwarding state
[  381.011163][T17508] netlink: 'syz.0.3067': attribute type 10 has an invalid length.
[  381.029933][T17508] 8021q: adding VLAN 0 to HW filter on device bond0
[  381.042405][T17508] team0: Port device bond0 added
[  381.173723][T17510] bridge0: port 3(dummy0) entered disabled state
[  381.180460][T17510] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.188168][T17510] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.271573][T17510] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  381.283968][T17510] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  381.368670][T17515] ip6_vti0 speed is unknown, defaulting to 1000
[  381.374990][T12989] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  381.403508][  T175] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  381.426523][  T175] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  381.451854][T17515] ip6_vti0 speed is unknown, defaulting to 1000
[  381.458616][  T175] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  381.469326][T17515] ip6_vti0 speed is unknown, defaulting to 1000
[  381.848195][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  381.866811][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  381.890537][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  381.903567][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  381.912519][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  382.025679][T17526] lo speed is unknown, defaulting to 1000
[  382.189068][ T5818] Bluetooth: hci2: command tx timeout
[  382.280119][T17515] infiniband syz2: set down
[  382.284711][T17515] infiniband syz2: added ip6_vti0
[  382.351672][ T7036] ip6_vti0 speed is unknown, defaulting to 1000
[  382.381805][T17515] RDS/IB: syz2: added
[  382.385934][T17515] smc: adding ib device syz2 with port count 1
[  382.412011][T17515] smc:    ib device syz2 port 1 has no pnetid
[  382.426300][T17540] sctp: [Deprecated]: syz.2.3076 (pid 17540) Use of int in max_burst socket option deprecated.
[  382.426300][T17540] Use struct sctp_assoc_value instead
[  382.473315][T17515] ip6_vti0 speed is unknown, defaulting to 1000
[  382.481199][ T5876] ip6_vti0 speed is unknown, defaulting to 1000
[  382.712577][T17550] __nla_validate_parse: 3 callbacks suppressed
[  382.712597][T17550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3078'.
[  382.821179][T17526] chnl_net:caif_netlink_parms(): no params data found
[  382.883458][T17556] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3079'.
[  382.911547][T17556] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  382.938096][T17556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  382.964547][T17526] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.009762][T17526] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.020893][T17526] bridge_slave_0: entered allmulticast mode
[  383.026965][T17563] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3081'.
[  383.041988][T17526] bridge_slave_0: entered promiscuous mode
[  383.055083][T17526] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.077504][T17526] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.084910][T17526] bridge_slave_1: entered allmulticast mode
[  383.099974][T17526] bridge_slave_1: entered promiscuous mode
[  383.192669][T17570] netlink: 876 bytes leftover after parsing attributes in process `syz.0.3083'.
[  383.210692][T17570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3083'.
[  383.264522][T17515] ip6_vti0 speed is unknown, defaulting to 1000
[  383.335978][T17526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  383.581808][T17526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  383.703295][T17576] netlink: 'syz.0.3084': attribute type 9 has an invalid length.
[  383.718861][T17526] team0: Port device team_slave_0 added
[  383.734462][T17526] team0: Port device team_slave_1 added
[  383.750674][T17515] ip6_vti0 speed is unknown, defaulting to 1000
[  383.751690][T17574] lo speed is unknown, defaulting to 1000
[  383.757878][T17579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3084'.
[  383.828097][T17526] batman_adv: batadv0: Adding interface: batadv_slave_0
[  383.835256][T17526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  383.911092][T17526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  383.957468][ T5823] Bluetooth: hci0: command tx timeout
[  384.350862][T17526] batman_adv: batadv0: Adding interface: batadv_slave_1
[  384.369403][T17589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3086'.
[  384.387961][T17526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  384.468642][T17526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  384.545522][T17515] ip6_vti0 speed is unknown, defaulting to 1000
[  384.569507][T17526] hsr_slave_0: entered promiscuous mode
[  384.586672][T17526] hsr_slave_1: entered promiscuous mode
[  384.622956][T17526] debugfs: 'hsr0' already exists in 'hsr'
[  384.639889][T17526] Cannot create hsr debugfs directory
[  384.806890][T17593] "syz.3.3087" (17593) uses obsolete ecb(arc4) skcipher
[  385.053568][T17526] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  385.065304][T17526] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.096762][T17526] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  385.122271][T17574] ip6_vti0 speed is unknown, defaulting to 1000
[  385.218068][T17526] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  385.248135][T17526] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.271470][T17526] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  385.320975][T17604] netlink: 'syz.3.3089': attribute type 1 has an invalid length.
[  385.404692][T17526] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  385.429295][T17526] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.441926][T17526] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  385.496323][T17515] ip6_vti0 speed is unknown, defaulting to 1000
[  385.587690][T17526] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  385.608232][T17526] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.628672][   T11] block nbd0: Possible stuck request ffff888027350000: control (read@0,1024B). Runtime 90 seconds
[  385.629099][T17526] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  385.639581][   T11] block nbd0: Possible stuck request ffff888027350200: control (read@1024,1024B). Runtime 90 seconds
[  385.660322][T17618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3092'.
[  385.660978][   T11] block nbd0: Possible stuck request ffff888027350400: control (read@2048,1024B). Runtime 90 seconds
[  385.681255][   T11] block nbd0: Possible stuck request ffff888027350600: control (read@3072,1024B). Runtime 90 seconds
[  385.723636][T17618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3092'.
[  386.028658][ T5823] Bluetooth: hci0: command 0x041b tx timeout
[  386.049697][T17515] ip6_vti0 speed is unknown, defaulting to 1000
[  386.084048][T17526] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  386.132658][T17526] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  386.159060][T17526] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  386.186568][T17526] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  386.483290][T17526] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.500913][T17515] ip6_vti0 speed is unknown, defaulting to 1000
[  386.524443][T17526] 8021q: adding VLAN 0 to HW filter on device team0
[  386.569197][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.576559][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.601998][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.609238][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.816040][T17657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3099'.
[  386.850088][T17657] vlan0: entered allmulticast mode
[  386.889524][T17515] ip6_vti0 speed is unknown, defaulting to 1000
[  387.143102][T17526] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.741461][T17692] __nla_validate_parse: 3 callbacks suppressed
[  387.741482][T17692] netlink: 36248 bytes leftover after parsing attributes in process `syz.1.3103'.
[  387.767864][T17692] openvswitch: netlink: Key type 2563 is out of range max 32
[  387.988913][T17526] veth0_vlan: entered promiscuous mode
[  388.080538][T17526] veth1_vlan: entered promiscuous mode
[  388.117073][ T5818] Bluetooth: hci0: command 0x041b tx timeout
[  388.227053][T17711] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3106'.
[  388.245388][T17708] syzkaller0: entered promiscuous mode
[  388.263901][T17708] syzkaller0: entered allmulticast mode
[  388.442023][T17526] veth0_macvtap: entered promiscuous mode
[  388.542247][T17526] veth1_macvtap: entered promiscuous mode
[  388.657166][T17526] batman_adv: batadv0: Interface activated: batadv_slave_0
[  388.694477][T17526] batman_adv: batadv0: Interface activated: batadv_slave_1
[  388.764062][T12987] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.794047][T12987] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  388.813436][T12987] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  388.832555][T17730] Cannot find add_set index 0 as target
[  388.838638][ T1087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.974519][T17737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3112'.
[  389.003582][T17737] hsr_slave_0: left promiscuous mode
[  389.014163][T17737] hsr_slave_1: left promiscuous mode
[  389.231080][T17738] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  389.249171][T17738] bond1 (unregistering): Released all slaves
[  389.498216][T17732] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  389.541456][  T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.563051][  T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.583080][T17732] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048)
[  389.701582][  T175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.711443][  T175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.848400][T17755] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3115'.
[  389.882533][T17757] netlink: 'syz.4.3070': attribute type 2 has an invalid length.
[  389.900622][T17757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3070'.
[  389.956383][T17758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3070'.
[  390.017185][T17758] lo speed is unknown, defaulting to 1000
[  390.197817][ T5818] Bluetooth: hci0: command 0x041b tx timeout
[  390.390870][T17769] "syz.1.3118" (17769) uses obsolete ecb(arc4) skcipher
[  390.463901][T17772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3118'.
[  390.484284][T17772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3118'.
[  390.505540][T17772] syzkaller0: entered promiscuous mode
[  390.528317][T17772] syzkaller0: entered allmulticast mode
[  390.566869][T17758] ip6_vti0 speed is unknown, defaulting to 1000
[  390.607953][T17757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3070'.
[  390.608533][T17774] IPVS: length: 164 != 24
[  390.845781][T17793] netlink: 'syz.0.3123': attribute type 10 has an invalid length.
[  390.863519][T17793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3123'.
[  391.033621][T17793] team0: Failed to send options change via netlink (err -105)
[  391.051265][T17793] team0: Port device geneve0 added
[  391.515632][T17814] netlink: 'syz.1.3130': attribute type 1 has an invalid length.
[  391.519000][T17816] bridge_slave_1: left allmulticast mode
[  391.542377][T17816] bridge_slave_1: left promiscuous mode
[  391.568773][T17816] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.625832][T17816] bridge_slave_0: left allmulticast mode
[  391.651335][T17816] bridge_slave_0: left promiscuous mode
[  391.697644][T17816] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.242387][T17854] tipc: Enabling of bearer <eth:gre0> rejected, already enabled
[  392.277912][ T5818] Bluetooth: hci0: command 0x041b tx timeout
[  392.301349][T17856] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  392.554344][T17879] žÿ: renamed from team_slave_1 (while UP)
[  392.566134][T17879] netlink: Conntrack attr has 3 unknown bytes
[  392.573233][T17877] netlink: 'syz.4.3144': attribute type 5 has an invalid length.
[  392.691376][T17886] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 2, id = 0
[  392.838241][T17900] __nla_validate_parse: 11 callbacks suppressed
[  392.838261][T17900] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3150'.
[  392.887667][T17902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3151'.
[  392.922990][T17904] dvmrp0: entered allmulticast mode
[  393.314064][T17916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3155'.
[  393.323342][T17916] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3155'.
[  393.332542][T17916] tipc: Invalid UDP bearer configuration
[  393.332587][T17916] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  393.615479][T17928] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3158'.
[  394.513545][T17976] netlink: 'syz.4.3170': attribute type 21 has an invalid length.
[  394.521825][T17976] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3170'.
[  394.592550][T17979] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3170'.
[  394.668189][   T11] block nbd0: Possible stuck request ffff888027350000: control (read@0,1024B). Runtime 99 seconds
[  394.679877][   T11] block nbd0: Possible stuck request ffff888027350200: control (read@1024,1024B). Runtime 99 seconds
[  394.690996][T17976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3170'.
[  394.707652][   T11] block nbd0: Possible stuck request ffff888027350400: control (read@2048,1024B). Runtime 99 seconds
[  394.719105][   T11] block nbd0: Possible stuck request ffff888027350600: control (read@3072,1024B). Runtime 99 seconds
[  394.978014][T17991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3172'.
[  395.036513][T17992] syzkaller1: entered promiscuous mode
[  395.042206][T17992] syzkaller1: entered allmulticast mode
[  395.081607][T17995] tipc: Started in network mode
[  395.086684][T17995] tipc: Node identity 0ea15c8bc10d, cluster identity 4711
[  395.104842][T17995] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  395.111504][T17997] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.3176'.
[  395.168030][T17995] tipc: Resetting bearer <eth:syzkaller0>
[  395.295282][T17994] tipc: Disabling bearer <eth:syzkaller0>
[  395.394722][T18003] netlink: 'syz.0.3178': attribute type 61 has an invalid length.
[  395.464193][T18003] netlink: 'syz.0.3178': attribute type 62 has an invalid length.
[  395.474526][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  395.486817][T18006] syzkaller0: entered promiscuous mode
[  395.493669][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  395.502710][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  395.504973][T18006] syzkaller0: entered allmulticast mode
[  395.527551][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  395.536037][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  395.573020][T18006] tipc: Started in network mode
[  395.584172][T18006] tipc: Node identity 9a499563ff3b, cluster identity 4711
[  395.605218][T18006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  395.637618][T18004] tipc: Resetting bearer <eth:syzkaller0>
[  395.661373][T18004] tipc: Disabling bearer <eth:syzkaller0>
[  395.716789][T18014] netlink: 'syz.0.3182': attribute type 9 has an invalid length.
[  395.726621][ T5836] bond0: (slave syz_tun): Releasing backup interface
[  395.815674][T18005] lo speed is unknown, defaulting to 1000
[  395.831999][T18016] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  395.899013][   T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  395.921436][   T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.238729][   T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  396.314547][   T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.645391][T18030] tipc: Enabled bearer <eth:gre0>, priority 10
[  396.654810][T18005] ip6_vti0 speed is unknown, defaulting to 1000
[  396.849887][   T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  396.877165][   T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.925080][T18038] openvswitch: netlink: Flow actions attr not present in new flow.
[  397.013153][   T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  397.034419][   T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.165309][T18046] syzkaller0: entered promiscuous mode
[  397.187498][T18046] syzkaller0: entered allmulticast mode
[  397.318325][T18044] xfrm1: entered allmulticast mode
[  397.324123][T18048] syzkaller0: entered promiscuous mode
[  397.333824][T18048] syzkaller0: entered allmulticast mode
[  397.353852][T18056] xt_CT: You must specify a L4 protocol and not use inversions on it
[  397.364749][T18056] Bluetooth: MGMT ver 1.23
[  397.403994][T18048] tipc: Started in network mode
[  397.409235][T18048] tipc: Node identity 5e816696ff8a, cluster identity 4711
[  397.416645][T18048] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  397.473104][T18047] tipc: Resetting bearer <eth:syzkaller0>
[  397.509121][T18047] tipc: Disabling bearer <eth:syzkaller0>
[  397.529392][   T48] bridge_slave_1: left allmulticast mode
[  397.536990][   T48] bridge_slave_1: left promiscuous mode
[  397.546264][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.586717][   T48] bridge_slave_0: left promiscuous mode
[  397.592722][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.627630][ T5823] Bluetooth: hci4: command tx timeout
[  397.740441][   T48] tipc: Resetting bearer <eth:gre0>
[  398.090526][   T48] bond7 (unregistering): (slave erspan2): Releasing active interface
[  398.098927][   T48] erspan2 (unregistering): left promiscuous mode
[  398.141625][   T48] bond9 (unregistering): (slave gretap2): Releasing active interface
[  398.151120][   T48] gretap2 (unregistering): left allmulticast mode
[  398.173151][   T48] bond10 (unregistering): (slave gretap4): Releasing active interface
[  398.189384][   T48] tipc: Disabling bearer <eth:gre0>
[  398.213809][   T48] bond8 (unregistering): (slave geneve3): Releasing active interface
[  398.232778][   T48] bond3 (unregistering): (slave geneve2): Releasing active interface
[  398.422731][   T48] team0: Port device bridge4 removed
[  398.642981][   T48] bond1 (unregistering): (slave macvlan2): Removing an active aggregator
[  398.652378][   T48] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[  398.669501][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  398.682569][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  398.696223][   T48] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  398.712537][   T48] bond0 (unregistering): Released all slaves
[  398.722680][   T48] bond1 (unregistering): Released all slaves
[  398.736640][   T48] bond2 (unregistering): Released all slaves
[  398.752068][   T48] bond3 (unregistering): Released all slaves
[  398.773116][   T48] bond4 (unregistering): Released all slaves
[  398.786477][   T48] bond5 (unregistering): Released all slaves
[  398.805002][   T48] bond6 (unregistering): Released all slaves
[  398.818048][   T48] bond7 (unregistering): Released all slaves
[  398.833693][   T48] bond8 (unregistering): Released all slaves
[  398.847041][   T48] bond9 (unregistering): Released all slaves
[  398.864541][   T48] bond10 (unregistering): Released all slaves
[  398.883138][   T48] bond11 (unregistering): Released all slaves
[  398.904690][   T50] tipc: Node number set to 1702008163
[  398.939491][T18072] batadv0: entered promiscuous mode
[  398.980521][T18072] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  399.375079][T18005] chnl_net:caif_netlink_parms(): no params data found
[  399.509976][T18100] netlink: 'syz.4.3204': attribute type 1 has an invalid length.
[  399.536504][T18100] __nla_validate_parse: 6 callbacks suppressed
[  399.536524][T18100] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3204'.
[  399.708282][ T5823] Bluetooth: hci4: command tx timeout
[  399.718437][T18005] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.737528][T18005] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.745061][T18005] bridge_slave_0: entered allmulticast mode
[  399.753968][T18005] bridge_slave_0: entered promiscuous mode
[  399.763303][T18005] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.771532][T18005] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.779512][T18005] bridge_slave_1: entered allmulticast mode
[  399.789143][T18005] bridge_slave_1: entered promiscuous mode
[  399.920189][T18005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  399.950561][T18005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  400.200871][T18005] team0: Port device team_slave_0 added
[  400.210805][T18005] team0: Port device team_slave_1 added
[  400.217171][T18120] syzkaller0: entered promiscuous mode
[  400.262795][T18120] syzkaller0: entered allmulticast mode
[  400.373906][T18120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  400.399054][T18119] tipc: Resetting bearer <eth:syzkaller0>
[  400.455654][T18119] tipc: Disabling bearer <eth:syzkaller0>
[  400.473607][ T5192] udevd[5192]: worker [11097] /devices/virtual/block/nbd0 is taking a long time
[  400.473906][T18005] batman_adv: batadv0: Adding interface: batadv_slave_0
[  400.491926][T18005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  400.521133][T18005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  400.534872][T18005] batman_adv: batadv0: Adding interface: batadv_slave_1
[  400.560584][T18005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  400.588494][T18005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  400.601399][T18133] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3209'.
[  400.612427][   T48] mÿ5nè‹Ò: left promiscuous mode
[  400.646424][T18144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3212'.
[  400.662286][   T48] �9: left promiscuous mode
[  400.670771][T18145] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  400.783729][T18145] syzkaller1: entered promiscuous mode
[  400.791201][T18145] syzkaller1: entered allmulticast mode
[  400.817446][   T48] tipc: Left network mode
[  400.829500][T18005] hsr_slave_0: entered promiscuous mode
[  400.861924][T18005] hsr_slave_1: entered promiscuous mode
[  400.874120][T18005] debugfs: 'hsr0' already exists in 'hsr'
[  400.894483][T18005] Cannot create hsr debugfs directory
[  400.918114][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'.
[  401.009562][T18168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'.
[  401.118990][T18171] dvmrp0: entered allmulticast mode
[  401.453906][T18182] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  401.520287][T18176] syzkaller0: entered promiscuous mode
[  401.528998][T18176] syzkaller0: entered allmulticast mode
[  401.628769][T18186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3220'.
[  401.647773][T18186] bridge_slave_1: entered promiscuous mode
[  401.669881][T18176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3218'.
[  401.794813][ T5823] Bluetooth: hci4: command tx timeout
[  401.864683][T18176] tipc: Resetting bearer <eth:syzkaller0>
[  401.973012][T18175] tipc: Resetting bearer <eth:syzkaller0>
[  402.033425][T18175] tipc: Disabling bearer <eth:syzkaller0>
[  402.213020][T18203] syzkaller0: entered promiscuous mode
[  402.229623][T18203] syzkaller0: entered allmulticast mode
[  402.261606][T18207] tipc: Started in network mode
[  402.281548][T18207] tipc: Node identity c6449d4d4ecd, cluster identity 4711
[  402.301207][T18207] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  402.442154][T18202] tipc: Resetting bearer <eth:syzkaller0>
[  402.472505][T18202] tipc: Disabling bearer <eth:syzkaller0>
[  402.771256][T18235] sctp: [Deprecated]: syz.2.3228 (pid 18235) Use of int in maxseg socket option.
[  402.771256][T18235] Use struct sctp_assoc_value instead
[  402.803987][T18235] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  402.875052][T18005] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  402.985633][T18005] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  403.034462][T18005] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  403.062229][T18252] netlink: 'syz.2.3232': attribute type 3 has an invalid length.
[  403.082956][T18005] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  403.131294][T18252] netlink: 'syz.2.3232': attribute type 3 has an invalid length.
[  403.191803][T18252] netlink: 'syz.2.3232': attribute type 3 has an invalid length.
[  403.217469][T18252] netlink: 'syz.2.3232': attribute type 3 has an invalid length.
[  403.420473][   T29] audit: type=1107 audit(1771866557.029:17): pid=18273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¨Â=–n�Âuâ9�ánQbgøY‡¡ÕÈöNwAO"oã=ê*n"”Ân!ohppZnm˜¾ƒ£énõÓ}àü'
[  403.869192][ T5823] Bluetooth: hci4: command tx timeout
[  404.109617][   T11] block nbd0: Connection timed out, retrying (0/1 alive)
[  404.117010][   T11] block nbd0: Connection timed out, retrying (0/1 alive)
[  404.125553][   T11] block nbd0: Connection timed out, retrying (0/1 alive)
[  404.133415][   T11] block nbd0: Connection timed out, retrying (0/1 alive)
[  404.145814][   T11] block nbd0: Dead connection, failed to find a fallback
[  404.240624][   T48] team_slave_1 (unregistering): left allmulticast mode
[  404.269490][   T48] team0 (unregistering): Port device team_slave_1 removed
[  404.289197][   T48] team_slave_0 (unregistering): left allmulticast mode
[  404.300607][   T48] team0 (unregistering): Port device team_slave_0 removed
[  404.593301][T18005] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.682554][T18330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3242'.
[  404.726526][T18330] macvtap1: entered promiscuous mode
[  404.732969][T18330] veth1_to_hsr: entered promiscuous mode
[  404.739671][T18330] macvtap1: entered allmulticast mode
[  404.746711][T18330] veth1_to_hsr: entered allmulticast mode
[  404.753614][T18330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3242'.
[  404.756477][T18005] 8021q: adding VLAN 0 to HW filter on device team0
[  404.808723][T18330] macvtap2: entered promiscuous mode
[  404.814235][T18330] macvtap2: entered allmulticast mode
[  404.836966][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3240'.
[  404.869739][T18330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3242'.
[  404.880727][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3240'.
[  404.882129][ T1087] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  404.947601][ T1087] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  404.977166][T18330] macvtap2: entered promiscuous mode
[  404.989688][T18330] macvtap2: entered allmulticast mode
[  404.998266][T18345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3245'.
[  405.028109][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3240'.
[  405.037230][ T1087] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  405.056702][ T1087] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  405.089644][T18330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3242'.
[  405.133065][T12991] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.140272][T12991] bridge0: port 1(bridge_slave_0) entered forwarding state
[  405.168792][T12991] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.175987][T12991] bridge0: port 2(bridge_slave_1) entered forwarding state
[  405.216061][T18330] macvtap2: entered promiscuous mode
[  405.233380][T18330] macvtap2: entered allmulticast mode
[  405.311728][T18330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3242'.
[  405.327506][T18351] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3247'.
[  405.368873][T18330] macvtap2: entered promiscuous mode
[  405.400194][T18330] macvtap2: entered allmulticast mode
[  405.958383][ T5823] Bluetooth: hci4: command tx timeout
[  408.553460][T18360] syzkaller0: entered promiscuous mode
[  408.559690][T18360] syzkaller0: entered allmulticast mode
[  410.381771][   T48] IPVS: stop unused estimator thread 0...
[  410.410535][T18431] IPVS: Error connecting to the multicast addr
[  410.514324][T18005] 8021q: adding VLAN 0 to HW filter on device batadv0
[  410.538482][T18436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  410.563649][T18438] __nla_validate_parse: 1 callbacks suppressed
[  410.563667][T18438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3259'.
[  410.590473][T18438] netlink: 'syz.0.3259': attribute type 4 has an invalid length.
[  410.604528][T18438] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3259'.
[  410.682362][T18005] veth0_vlan: entered promiscuous mode
[  410.695827][T18005] veth1_vlan: entered promiscuous mode
[  410.733414][T18005] veth0_macvtap: entered promiscuous mode
[  410.741972][T18445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  410.745300][T18005] veth1_macvtap: entered promiscuous mode
[  410.793103][T18445] syzkaller0: entered promiscuous mode
[  410.807789][T18445] syzkaller0: entered allmulticast mode
[  410.972267][T18449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3263'.
[  410.990121][T18447] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3262'.
[  411.023759][T18450] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3263'.
[  412.616497][T18005] batman_adv: batadv0: Interface activated: batadv_slave_0
[  412.642885][T18005] batman_adv: batadv0: Interface activated: batadv_slave_1
[  412.675912][T18454] xt_limit: Overflow, try lower: 268435456/134217728
[  412.683419][T12989] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  412.716607][T12989] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  412.726479][T12989] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  412.755040][T12989] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  412.803246][T18458] syzkaller0: entered promiscuous mode
[  412.809005][T18458] syzkaller0: entered allmulticast mode
[  412.910838][T12987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.933162][T12987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  413.049692][T18458] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  413.056439][  T175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  413.064651][  T175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  413.091398][T18458] tipc: Resetting bearer <eth:syzkaller0>
[  413.107988][T18458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.116428][T18458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.247606][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.289541][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3269'.
[  413.306270][T18471] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3269'.
[  413.322002][T18457] tipc: Resetting bearer <eth:syzkaller0>
[  413.370484][T18457] tipc: Disabling bearer <eth:syzkaller0>
[  413.416829][T18482] netlink: 'syz.4.3272': attribute type 1 has an invalid length.
[  413.422676][T18484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3273'.
[  413.428672][T18482] syzkaller0: entered promiscuous mode
[  413.439619][T18482] syzkaller0: entered allmulticast mode
[  413.593544][T18490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3276'.
[  413.653023][T18490] netlink: 'syz.1.3276': attribute type 16 has an invalid length.
[  413.746314][T18492] syzkaller0: entered promiscuous mode
[  413.761196][T18492] syzkaller0: entered allmulticast mode
[  413.916542][T18504] syzkaller0: entered promiscuous mode
[  413.929793][T18504] syzkaller0: entered allmulticast mode
[  414.005058][T18513] netlink: 'syz.4.3285': attribute type 1 has an invalid length.
[  414.016366][T18513] netlink: 'syz.4.3285': attribute type 1 has an invalid length.
[  414.182926][T18516] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  414.378801][T18530] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.422826][T18530] syzkaller0: entered promiscuous mode
[  414.429984][T18530] syzkaller0: entered allmulticast mode
[  414.527985][T18529] tipc: Resetting bearer <eth:syzkaller0>
[  416.459836][T18529] tipc: Disabling bearer <eth:syzkaller0>
[  416.488330][ T5861] tipc: Node number set to 3484179595
[  416.702176][T18555] netlink: 'syz.0.3296': attribute type 1 has an invalid length.
[  416.737439][T18553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3297'.
[  416.837604][T18572] netlink: 'syz.2.3294': attribute type 9 has an invalid length.
[  416.901026][T18555] netlink: 'syz.0.3296': attribute type 10 has an invalid length.
[  417.051995][T18555] bond0: (slave wlan1): Opening slave failed
[  417.305883][T18587] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  417.313215][T18587] IPv6: NLM_F_CREATE should be set when creating new route
[  417.320513][T18587] IPv6: NLM_F_CREATE should be set when creating new route
[  417.546102][T18597] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.562295][T18597] syzkaller0: entered promiscuous mode
[  417.587428][T18597] syzkaller0: entered allmulticast mode
[  417.774083][T18605] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3302'.
[  417.801432][T18606] tipc: Resetting bearer <eth:syzkaller0>
[  417.841985][T18596] tipc: Resetting bearer <eth:syzkaller0>
[  417.894181][T18596] tipc: Disabling bearer <eth:syzkaller0>
[  417.938182][T18615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3306'.
[  418.096092][T18632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3310'.
[  418.123391][ T5971] IPVS: starting estimator thread 0...
[  418.143877][T18640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3311'.
[  418.155240][T18641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3311'.
[  418.217561][T18636] IPVS: using max 33 ests per chain, 79200 per kthread
[  418.467782][T18656] syzkaller0: entered promiscuous mode
[  418.477531][T18656] syzkaller0: entered allmulticast mode
[  418.500046][T18656] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  418.538114][T18655] tipc: Resetting bearer <eth:syzkaller0>
[  418.554042][T18665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3316'.
[  418.586032][T18665] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3316'.
[  418.665548][T18655] tipc: Disabling bearer <eth:syzkaller0>
[  418.724378][T18673] æÿîÿ: entered promiscuous mode
[  418.792938][T18665] lo speed is unknown, defaulting to 1000
[  419.111177][T18683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3319'.
[  419.543528][T18683] hsr_slave_0: left promiscuous mode
[  419.557588][T18683] hsr_slave_1: left promiscuous mode
[  419.594235][T18684] lo speed is unknown, defaulting to 1000
[  419.607422][T18665] ip6_vti0 speed is unknown, defaulting to 1000
[  419.862595][T18706] nbd: must specify at least one socket
[  420.085014][T18714] Bluetooth: MGMT ver 1.23
[  420.395818][T18684] ip6_vti0 speed is unknown, defaulting to 1000
[  420.862185][T18733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  421.280035][T18748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3331'.
[  421.361685][T18748] netlink: 'syz.4.3331': attribute type 1 has an invalid length.
[  421.505205][T18748] bond1: entered promiscuous mode
[  421.572596][T18748] 8021q: adding VLAN 0 to HW filter on device bond1
[  421.743336][T18758] 8021q: adding VLAN 0 to HW filter on device bond1
[  421.756994][T18758] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  421.778469][T18758] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  421.821403][T18758] bond1: (slave vti0): making interface the new active one
[  421.829638][T18758] vti0: entered promiscuous mode
[  421.836183][T18758] bond1: (slave vti0): Enslaving as an active interface with an up link
[  421.845408][T18750] lo speed is unknown, defaulting to 1000
[  421.927087][T18778] sctp: [Deprecated]: syz.1.3336 (pid 18778) Use of int in max_burst socket option.
[  421.927087][T18778] Use struct sctp_assoc_value instead
[  422.089584][T18782] __nla_validate_parse: 2 callbacks suppressed
[  422.089601][T18782] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3337'.
[  422.237239][T18786] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3338'.
[  422.378818][T18750] ip6_vti0 speed is unknown, defaulting to 1000
[  422.497812][T18793] netlink: 'syz.1.3339': attribute type 1 has an invalid length.
[  422.544834][T18793] netlink: 'syz.1.3339': attribute type 2 has an invalid length.
[  422.552800][T18793] netlink: 'syz.1.3339': attribute type 1 has an invalid length.
[  422.574451][T18793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3339'.
[  422.860515][T18781] lo speed is unknown, defaulting to 1000
[  423.249934][T18831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3347'.
[  423.769102][T18868] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  423.842859][T18781] ip6_vti0 speed is unknown, defaulting to 1000
[  423.955472][T18868] netlink: 372 bytes leftover after parsing attributes in process `syz.4.3352'.
[  424.123032][T18868] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3352'.
[  424.446501][T18874] lo speed is unknown, defaulting to 1000
[  426.358466][T18874] ip6_vti0 speed is unknown, defaulting to 1000
[  426.384361][T18902] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  426.740812][T18919] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3358'.
[  427.020838][T18933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3361'.
[  427.599869][T18952] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3365'.
[  427.696255][T18963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3367'.
[  428.138269][T18981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3370'.
[  428.273946][T18986] lo speed is unknown, defaulting to 1000
[  428.291083][T18991] vlan2: entered promiscuous mode
[  428.319005][T18991] geneve1: entered promiscuous mode
[  428.334031][T18991] vlan2: entered allmulticast mode
[  428.353869][T18991] geneve1: entered allmulticast mode
[  428.581069][T18995] netlink: 'syz.1.3372': attribute type 2 has an invalid length.
[  428.589031][T18995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3372'.
[  428.685468][T18986] ip6_vti0 speed is unknown, defaulting to 1000
[  428.853782][T19019] sctp: [Deprecated]: syz.0.3376 (pid 19019) Use of int in maxseg socket option.
[  428.853782][T19019] Use struct sctp_assoc_value instead
[  428.897707][T19022] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3377'.
[  429.047204][T19022] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.194178][T19034] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3379'.
[  429.262314][T19022] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.373069][T19038] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  429.461445][T19022] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.490632][T19045] bridge_slave_0: left allmulticast mode
[  429.500762][T19045] bridge_slave_0: left promiscuous mode
[  429.506561][T19045] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.530011][T19045] bridge_slave_1: left allmulticast mode
[  429.536244][T19045] bridge_slave_1: left promiscuous mode
[  429.543797][T19045] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.556991][T19045] bond0: (slave bond_slave_0): Releasing backup interface
[  429.569489][T19045] bond0: (slave bond_slave_1): Releasing backup interface
[  429.583049][T19054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3384'.
[  429.592744][T19054] netlink: 'syz.1.3384': attribute type 5 has an invalid length.
[  429.602769][T19045] team0: Port device team_slave_0 removed
[  429.631301][T19045] team0: Port device team_slave_1 removed
[  429.651352][T19045] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  429.663475][T19045] batman_adv: batadv0: Removing interface: batadv_slave_0
[  429.675333][T19045] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  429.683269][T19045] batman_adv: batadv0: Removing interface: batadv_slave_1
[  429.693705][T19045] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  429.800818][T19022] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.821517][T19054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3384'.
[  429.832556][T19054] netlink: 'syz.1.3384': attribute type 5 has an invalid length.
[  429.851750][T18849] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  429.913391][T18849] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  429.936106][T18849] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  429.983642][T18849] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  430.160957][T18844] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.181506][T19066] netlink: 'syz.3.3387': attribute type 2 has an invalid length.
[  430.286791][   T48] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.482774][   T48] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.552021][T18845] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.735540][T19090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3390'.
[  430.766761][T19090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3390'.
[  430.821427][T19090] syz_tun: entered promiscuous mode
[  430.854688][T19090] erspan0: entered promiscuous mode
[  430.874240][T19090] debugfs: 'hsr1' already exists in 'hsr'
[  430.907642][T19090] Cannot create hsr debugfs directory
[  431.396858][T19114] 0: reclassify loop, rule prio 0, protocol 700
[  433.586366][T19083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  434.160296][T19157] netlink: 'syz.4.3405': attribute type 1 has an invalid length.
[  434.168777][T19158] netlink: 'syz.4.3405': attribute type 1 has an invalid length.
[  434.178279][T19161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3408'.
[  434.227238][T19160] 8021q: adding VLAN 0 to HW filter on device bond1
[  434.286440][T19157] bond1: entered promiscuous mode
[  434.295447][T19157] 8021q: adding VLAN 0 to HW filter on device bond1
[  434.297412][T19174] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3411'.
[  434.421364][T19181] netlink: 'syz.4.3412': attribute type 1 has an invalid length.
[  434.438280][T19181] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3412'.
[  434.450069][T19181] NCSI netlink: No device for ifindex 0
[  434.456411][T19184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3414'.
[  434.479450][T19185] netlink: 'syz.3.3413': attribute type 1 has an invalid length.
[  434.503626][T19181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3412'.
[  434.524563][T19185] 8021q: VLANs not supported on syztnl1
[  434.595403][T19188] syzkaller1: entered promiscuous mode
[  434.601058][T19188] syzkaller1: entered allmulticast mode
[  435.024962][T19204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3422'.
[  435.208823][T19210] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.3423'.
[  435.219414][T19210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3423'.
[  435.280971][T19217] netlink: 'syz.0.3425': attribute type 2 has an invalid length.
[  435.363446][T19217] : entered promiscuous mode
[  435.658894][T19241] netlink: 'syz.1.3431': attribute type 4 has an invalid length.
[  435.738102][T19234] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3429'.
[  435.741634][T19245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3432'.
[  435.773002][T19241] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  435.781098][T19241] syzkaller0: entered promiscuous mode
[  435.786700][T19241] syzkaller0: entered allmulticast mode
[  435.814622][T19241] tipc: Resetting bearer <eth:syzkaller0>
[  435.838964][T19240] tipc: Resetting bearer <eth:syzkaller0>
[  435.898014][T19240] tipc: Disabling bearer <eth:syzkaller0>
[  435.915753][T19248] netlink: 'syz.2.3433': attribute type 3 has an invalid length.
[  435.919648][T19250] netlink: 'syz.4.3434': attribute type 18 has an invalid length.
[  435.958421][T19248] syz_tun: entered allmulticast mode
[  436.015867][T19248] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  436.113688][T19258] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.123282][T19258] 8021q: adding VLAN 0 to HW filter on device team0
[  436.140884][T19258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  436.178237][T19255] lo: Caught tx_queue_len zero misconfig
[  436.240044][T19262] lo speed is unknown, defaulting to 1000
[  436.300145][T19247] syz_tun: left allmulticast mode
[  436.413616][T19278] netlink: set zone limit has 4 unknown bytes
[  436.776612][T19290] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  436.793856][T19262] ip6_vti0 speed is unknown, defaulting to 1000
[  436.803274][T19275] lo speed is unknown, defaulting to 1000
[  437.448523][T19275] ip6_vti0 speed is unknown, defaulting to 1000
[  437.448555][T19302] lo speed is unknown, defaulting to 1000
[  437.564025][T19312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  437.633393][T19320] sctp: [Deprecated]: syz.2.3454 (pid 19320) Use of struct sctp_assoc_value in delayed_ack socket option.
[  437.633393][T19320] Use struct sctp_sack_info instead
[  437.830537][T19302] ip6_vti0 speed is unknown, defaulting to 1000
[  438.056763][T19322] bond3: option arp_interval: invalid value (18446744073709551615)
[  438.071176][T19322] bond3: option arp_interval: allowed values 0 - 2147483647
[  438.084784][T19322] bond3 (unregistering): Released all slaves
[  438.166670][T19329] Cannot find del_set index 4 as target
[  438.615770][T19334] lo speed is unknown, defaulting to 1000
[  438.626851][T19342] netlink: 'syz.1.3460': attribute type 1 has an invalid length.
[  438.635228][T19343] netlink: 'syz.1.3460': attribute type 1 has an invalid length.
[  438.694386][T19342] 8021q: adding VLAN 0 to HW filter on device bond1
[  438.722394][T19344] 8021q: adding VLAN 0 to HW filter on device batadv1
[  438.731529][T19344] bond1: (slave batadv1): making interface the new active one
[  438.740850][T19344] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  438.787703][T19342] bond1 (unregistering): (slave batadv1): Releasing active interface
[  438.803248][T19342] bond1 (unregistering): Released all slaves
[  439.082007][T19334] ip6_vti0 speed is unknown, defaulting to 1000
[  439.412891][T19365] __nla_validate_parse: 10 callbacks suppressed
[  439.412912][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3465'.
[  439.510420][T19372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3465'.
[  439.758591][T19381] lo speed is unknown, defaulting to 1000
[  439.947629][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  440.411363][T19381] ip6_vti0 speed is unknown, defaulting to 1000
[  441.424517][T19404] syzkaller0: entered promiscuous mode
[  441.430166][T19404] syzkaller0: entered allmulticast mode
[  441.440957][T19404] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  441.468377][T19403] tipc: Resetting bearer <eth:syzkaller0>
[  441.520137][T19403] tipc: Disabling bearer <eth:syzkaller0>
[  441.632359][T19407] netlink: 'syz.2.3475': attribute type 1 has an invalid length.
[  441.688326][T19407] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3475'.
[  441.946987][T19417] bridge0: entered allmulticast mode
[  442.216749][T19432] xt_policy: too many policy elements
[  442.284971][T19436] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3486'.
[  442.596119][T19452] dvmrp1: tun_chr_ioctl cmd 2147767506
[  442.731675][T19458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  443.063253][T19477] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3499'.
[  443.203142][T19483] netlink: 'syz.0.3500': attribute type 15 has an invalid length.
[  443.580766][T19506] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:20004
[  443.593973][T19506] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3504'.
[  443.608771][   T50] IPVS: starting estimator thread 0...
[  443.642139][T19505] lo speed is unknown, defaulting to 1000
[  443.697413][T19507] IPVS: using max 34 ests per chain, 81600 per kthread
[  443.717802][T19509] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3506'.
[  443.836528][T19512] syzkaller0: entered promiscuous mode
[  443.857226][T19512] syzkaller0: entered allmulticast mode
[  443.902888][T19512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3508'.
[  444.045633][T19514] lo speed is unknown, defaulting to 1000
[  444.045633][T19505] ip6_vti0 speed is unknown, defaulting to 1000
[  444.160684][T19523] vlan0: entered promiscuous mode
[  444.621833][T19514] ip6_vti0 speed is unknown, defaulting to 1000
[  445.360233][T19545] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.367953][T19545] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.522570][T19545] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  445.537290][T19545] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  445.630609][T18845] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  445.674847][T18845] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  445.699646][T18845] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  445.720985][T18845] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  445.772131][T19558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3520'.
[  445.949772][T19569] vlan0: entered promiscuous mode
[  446.085810][T19573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3524'.
[  446.117210][T19573] tipc: Enabled bearer <eth:vlan0>, priority 0
[  446.170484][T19575] batadv_slave_0: entered promiscuous mode
[  446.455903][T19575] batadv_slave_0: left promiscuous mode
[  446.678722][T19601] syzkaller0: entered promiscuous mode
[  446.684238][T19601] syzkaller0: entered allmulticast mode
[  446.703885][T19601] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  446.716720][T19600] tipc: Resetting bearer <eth:syzkaller0>
[  446.742213][T19604] netlink: 'syz.0.3532': attribute type 1 has an invalid length.
[  446.756940][T19600] tipc: Disabling bearer <eth:syzkaller0>
[  446.831887][T19610] æÿîÿ: entered promiscuous mode
[  446.872731][T19610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'.
[  446.911551][T19613] syzkaller0: entered promiscuous mode
[  446.937636][T19613] syzkaller0: entered allmulticast mode
[  446.954321][T19620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  446.984525][T19620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3536'.
[  446.996556][T19620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3536'.
[  447.046000][T19614] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3534'.
[  447.056193][T19620] netlink: 'syz.3.3536': attribute type 1 has an invalid length.
[  447.103234][T19620] netlink: 'syz.3.3536': attribute type 2 has an invalid length.
[  447.252493][T19633] netlink: 'syz.0.3540': attribute type 3 has an invalid length.
[  447.261278][T19629] syzkaller1: entered promiscuous mode
[  447.274692][T19629] syzkaller1: entered allmulticast mode
[  447.302622][T19633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3540'.
[  447.346137][T19633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3540'.
[  447.359830][T19633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3540'.
[  447.389283][T19633] netlink: 'syz.0.3540': attribute type 5 has an invalid length.
[  447.514112][T19642] lo speed is unknown, defaulting to 1000
[  447.604357][T19648] sctp: [Deprecated]: syz.2.3542 (pid 19648) Use of int in max_burst socket option.
[  447.604357][T19648] Use struct sctp_assoc_value instead
[  447.877064][T19661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3548'.
[  447.940422][T19642] ip6_vti0 speed is unknown, defaulting to 1000
[  448.005160][T19664] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  448.177566][T19670] netlink: 'syz.4.3551': attribute type 8 has an invalid length.
[  448.198737][T19670] netlink: 'syz.4.3551': attribute type 9 has an invalid length.
[  448.238239][T19671] netlink: 'syz.3.3552': attribute type 2 has an invalid length.
[  448.263363][T19670] netlink: 'syz.4.3551': attribute type 10 has an invalid length.
[  448.295817][T19670] netlink: 'syz.4.3551': attribute type 11 has an invalid length.
[  448.515574][T19680] veth0_to_team: entered promiscuous mode
[  448.523288][T19680] veth0_to_team: left promiscuous mode
[  448.571188][T19685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  448.615414][T19687] veth0_to_team: entered promiscuous mode
[  448.643151][T19687] veth0_to_team: left promiscuous mode
[  448.975450][T19705] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  449.095155][T19718] bond1: option ad_select: invalid value (34)
[  449.106181][T19718] bond1 (unregistering): Released all slaves
[  449.231969][T19724] syzkaller0: entered promiscuous mode
[  449.277486][T19724] syzkaller0: entered allmulticast mode
[  449.292069][T19727] tipc: Started in network mode
[  449.296984][T19727] tipc: Node identity 322d5a751b82, cluster identity 4711
[  449.316668][T19727] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  449.332983][T19722] tipc: Resetting bearer <eth:syzkaller0>
[  449.359169][T19722] tipc: Disabling bearer <eth:syzkaller0>
[  450.322061][T19784] syzkaller0: entered promiscuous mode
[  450.356815][T19784] syzkaller0: entered allmulticast mode
[  450.382232][T19771] bridge0: port 1(batadv1) entered blocking state
[  450.391046][T19771] bridge0: port 1(batadv1) entered disabled state
[  450.397926][T19771] batadv1: entered allmulticast mode
[  450.405173][T19771] batadv1: entered promiscuous mode
[  450.428319][T19784] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  450.445985][T19782] tipc: Resetting bearer <eth:syzkaller0>
[  450.540858][T19782] tipc: Disabling bearer <eth:syzkaller0>
[  450.569761][T19787] lo speed is unknown, defaulting to 1000
[  450.799083][T19808] __nla_validate_parse: 13 callbacks suppressed
[  450.799102][T19808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3584'.
[  450.879483][T18849] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  450.889273][T18849] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  451.093822][T19821] 8021q: adding VLAN 0 to HW filter on device bond3
[  451.108716][T19820] 8021q: adding VLAN 0 to HW filter on device batadv2
[  451.118318][T19820] bond3: (slave batadv2): making interface the new active one
[  451.127225][T19820] bond3: (slave batadv2): Enslaving as an active interface with an up link
[  451.218771][T19830] syzkaller1: entered promiscuous mode
[  451.224293][T19830] syzkaller1: entered allmulticast mode
[  451.293084][T19787] ip6_vti0 speed is unknown, defaulting to 1000
[  451.610427][T19858] nbd: must specify at least one socket
[  451.763321][T19865] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  451.776958][T19865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3602'.
[  451.856076][T19868] bridge9: entered promiscuous mode
[  451.863312][T19868] bridge9: entered allmulticast mode
[  451.874165][T19868] team0: Port device bridge9 added
[  452.080891][T19880] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  452.230878][T19880] syzkaller0: entered promiscuous mode
[  452.236393][T19880] syzkaller0: entered allmulticast mode
[  452.310621][T19880] tipc: Resetting bearer <eth:syzkaller0>
[  452.452026][T18845] tipc: Resetting bearer <eth:syzkaller0>
[  452.461168][T19897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3611'.
[  452.477078][T19895] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3609'.
[  452.525687][T19899] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3612'.
[  452.568158][T19897] xt_TPROXY: Can be used only with -p tcp or -p udp
[  452.586904][T19897] bond4: (slave vcan1): refused to change device type
[  452.709453][T19912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  452.749544][T19912] syzkaller0: entered promiscuous mode
[  452.755049][T19912] syzkaller0: entered allmulticast mode
[  452.794359][T19874] tipc: Resetting bearer <eth:syzkaller0>
[  452.824959][T19922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3618'.
[  454.900883][T19874] tipc: Disabling bearer <eth:syzkaller0>
[  454.919491][T19922] batman_adv: batadv0: Removing interface: batadv_slave_1
[  454.945771][ T5935] tipc: Node number set to 2701878934
[  454.978844][T19920] tipc: Resetting bearer <eth:syzkaller0>
[  455.034482][T19920] tipc: Disabling bearer <eth:syzkaller0>
[  455.046050][T19953] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3622'.
[  455.066295][T19959] validate_nla: 1 callbacks suppressed
[  455.066311][T19959] netlink: 'syz.2.3624': attribute type 1 has an invalid length.
[  455.090395][T19959] netlink: 174 bytes leftover after parsing attributes in process `syz.2.3624'.
[  455.215394][T19970] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3627'.
[  455.315746][T19976] lo speed is unknown, defaulting to 1000
[  455.410199][T19992] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  455.425665][T19993] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  455.434639][   T50] IPVS: starting estimator thread 0...
[  455.538180][T19994] IPVS: using max 30 ests per chain, 72000 per kthread
[  455.575605][T19992] syzkaller0: entered promiscuous mode
[  455.592688][T19992] syzkaller0: entered allmulticast mode
[  457.168755][T19993] lo speed is unknown, defaulting to 1000
[  457.184407][T19976] ip6_vti0 speed is unknown, defaulting to 1000
[  457.242712][T20018] geneve4: entered promiscuous mode
[  457.255712][T18847] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  457.280889][T18847] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  457.327491][T18847] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  457.358013][T18847] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  457.378689][T20022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3642'.
[  457.645035][T20035] netlink: 'syz.2.3646': attribute type 1 has an invalid length.
[  457.663157][T20035] netlink: 174 bytes leftover after parsing attributes in process `syz.2.3646'.
[  457.766137][T19993] ip6_vti0 speed is unknown, defaulting to 1000
[  457.804665][T20047] netlink: 'syz.0.3649': attribute type 2 has an invalid length.
[  457.947797][T20060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3653'.
[  457.974807][T20062] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3654'.
[  458.026444][T20062] nbd: must specify a device to reconfigure
[  458.368907][T20073] lo speed is unknown, defaulting to 1000
[  458.915065][T20090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3661'.
[  459.062158][T20092] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3661'.
[  459.264366][T20073] ip6_vti0 speed is unknown, defaulting to 1000
[  459.397584][T20096] ªªªªªª: renamed from wg2
[  459.517237][T20098] lo speed is unknown, defaulting to 1000
[  459.780937][T20106] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  459.871301][T20098] ip6_vti0 speed is unknown, defaulting to 1000
[  459.911465][T20106] netlink: 'syz.2.3666': attribute type 13 has an invalid length.
[  459.935794][T20106] netlink: 'syz.2.3666': attribute type 17 has an invalid length.
[  460.227892][T20106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  460.401603][T20109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  460.466155][T20109] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3667'.
[  461.265556][T20127] tipc: Disabling bearer <eth:vlan0>
[  461.629584][T20135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3673'.
[  461.648552][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3672'.
[  461.677592][T20135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3673'.
[  462.069452][T20158] macvlan1: entered promiscuous mode
[  462.075674][T20158] macvlan1: entered allmulticast mode
[  462.089335][T20158] veth1_vlan: entered allmulticast mode
[  462.110862][T20158] netlink: 'syz.0.3681': attribute type 12 has an invalid length.
[  462.160524][   T29] audit: type=1800 audit(1771866615.779:18): pid=20166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3684" name="memory.events" dev="tmpfs" ino=390 res=0 errno=0
[  465.084595][T20161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  465.241907][T20187] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  465.400263][T20202] __nla_validate_parse: 3 callbacks suppressed
[  465.400281][T20202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3693'.
[  465.709947][T20226] xt_l2tp: wrong L2TP version: 0
[  465.732930][T20226] netlink: 'syz.2.3699': attribute type 2 has an invalid length.
[  465.746882][T20226] netlink: 'syz.2.3699': attribute type 1 has an invalid length.
[  465.754165][T20229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3701'.
[  465.762840][T20226] netlink: 'syz.2.3699': attribute type 1 has an invalid length.
[  465.806166][T20229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3701'.
[  465.837154][T20229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  465.880889][T20234] pimreg: entered allmulticast mode
[  466.084878][T20258] netlink: 'syz.0.3710': attribute type 39 has an invalid length.
[  466.130386][T20256] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  466.160940][T20261] gre0: MTU too low for tipc bearer
[  466.166242][T20261] tipc: Disabling bearer <eth:gre0>
[  466.931811][T20296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3723'.
[  467.286614][T20297] syzkaller0: entered promiscuous mode
[  467.292516][T20297] syzkaller0: entered allmulticast mode
[  467.530425][T20320] netlink: 'syz.4.3725': attribute type 10 has an invalid length.
[  467.589436][T20323] netlink: 'syz.4.3725': attribute type 10 has an invalid length.
[  469.601196][T20320] team0: Port device dummy0 added
[  469.609208][T20323] team0: Port device dummy0 removed
[  469.616761][T20323] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  469.762317][T20325] lo speed is unknown, defaulting to 1000
[  469.992138][T20355] netlink: 'syz.0.3734': attribute type 9 has an invalid length.
[  470.087585][T20338] lo speed is unknown, defaulting to 1000
[  470.117733][T20325] ip6_vti0 speed is unknown, defaulting to 1000
[  470.308780][T20368] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3738'.
[  470.321751][T20366] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  470.331309][   T50] IPVS: starting estimator thread 0...
[  470.437849][T20369] IPVS: using max 31 ests per chain, 74400 per kthread
[  470.495469][T20373] IPv6: NLM_F_REPLACE set, but no existing node found!
[  470.603146][T20338] ip6_vti0 speed is unknown, defaulting to 1000
[  471.964022][T20426] vlan2: entered promiscuous mode
[  471.973404][T20426] geneve1: entered promiscuous mode
[  471.990107][T20426] vlan2: entered allmulticast mode
[  471.997698][T20429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3759'.
[  472.008362][T20426] geneve1: entered allmulticast mode
[  472.226670][T20444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3763'.
[  472.270504][T20444] vlan2: entered promiscuous mode
[  472.275739][T20444] dummy0: entered promiscuous mode
[  472.327165][T20448] lo speed is unknown, defaulting to 1000
[  472.476584][T20463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  472.484584][T20463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  472.615903][T20448] ip6_vti0 speed is unknown, defaulting to 1000
[  472.739486][T20471] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3769'.
[  472.866535][T20479] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002
[  472.942519][T20483] openvswitch: netlink: Invalid VLAN frame
[  472.949644][T20483] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3773'.
[  473.288724][T20497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3776'.
[  473.325891][T20497] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3776'.
[  473.405176][T20497] geneve2: entered promiscuous mode
[  473.413601][T20497] geneve2: entered allmulticast mode
[  473.437466][T20500] xt_CT: No such helper "snmp_trap"
[  473.697894][T20511] No such timeout policy "syz1"
[  473.946883][T20519] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3781'.
[  473.993497][T20524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3782'.
[  474.605134][T20553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3787'.
[  474.668815][T20553] netlink: 'syz.2.3787': attribute type 1 has an invalid length.
[  474.864147][T20553] bond5: entered promiscuous mode
[  474.879616][T20553] bond5: entered allmulticast mode
[  474.885367][T20553] 8021q: adding VLAN 0 to HW filter on device bond5
[  475.062066][T20587] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3789'.
[  475.277531][T20599] batadv_slave_0: entered promiscuous mode
[  475.341913][T20601] batadv_slave_0: left promiscuous mode
[  475.720822][T20621] netlink: 'syz.0.3799': attribute type 1 has an invalid length.
[  475.779060][T20627] netlink: 'syz.1.3801': attribute type 3 has an invalid length.
[  475.801237][T20627] netlink: 'syz.1.3801': attribute type 2 has an invalid length.
[  475.828706][T20627] netlink: 'syz.1.3801': attribute type 2 has an invalid length.
[  475.876382][T20628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  476.043036][T20644] syzkaller0: entered promiscuous mode
[  476.078901][T20644] syzkaller0: entered allmulticast mode
[  476.103922][T20644] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  476.143399][T20640] tipc: Resetting bearer <eth:syzkaller0>
[  476.219063][T20640] tipc: Disabling bearer <eth:syzkaller0>
[  476.779547][T20693] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  477.208924][T20710] syzkaller0: entered promiscuous mode
[  477.246268][T20710] syzkaller0: entered allmulticast mode
[  477.267702][T20716] __nla_validate_parse: 25 callbacks suppressed
[  477.267720][T20716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3824'.
[  477.285347][T20715] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  477.297814][T20709] tipc: Resetting bearer <eth:syzkaller0>
[  477.351047][T20709] tipc: Disabling bearer <eth:syzkaller0>
[  477.526779][T20722] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.3825'.
[  477.736714][T20733] IPVS: set_ctl: invalid protocol: 212 255.255.255.255:20000
[  477.841609][T20737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  477.870918][T20738] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  478.094724][T20754] syzkaller1: entered promiscuous mode
[  478.100909][T20754] syzkaller1: entered allmulticast mode
[  478.114734][T20755] syzkaller0: entered promiscuous mode
[  478.120599][T20755] syzkaller0: entered allmulticast mode
[  478.131450][T20755] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  478.141302][T20753] tipc: Resetting bearer <eth:syzkaller0>
[  478.170604][T20753] tipc: Disabling bearer <eth:syzkaller0>
[  478.201571][T20763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3839'.
[  478.210595][T20763] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3839'.
[  478.229754][T20763] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  478.284278][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3840'.
[  478.344746][T20769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3841'.
[  478.562669][T20780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3844'.
[  478.581399][T20780] ip6gretap0: entered promiscuous mode
[  478.594639][T20780] ip6gretap0: left promiscuous mode
[  478.731771][T20783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3845'.
[  478.760707][T20785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  478.786694][T20785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  478.813377][T20790] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3847'.
[  478.824635][T20790] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3847'.
[  478.964578][T20800] netlink: 'syz.4.3850': attribute type 9 has an invalid length.
[  479.307214][T20833] wg1: entered promiscuous mode
[  479.333755][T20833] wg1: entered allmulticast mode
[  479.463508][T20839] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  479.475255][T20839] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.551556][T20850] xt_cgroup: path and classid specified
[  479.635926][T20839] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  479.647096][T20839] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.666687][T20855] ±ÿ: renamed from team_slave_1
[  479.675275][T20849] syzkaller0: entered promiscuous mode
[  479.689943][T20849] syzkaller0: entered allmulticast mode
[  479.773186][T20839] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  479.801558][T20839] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.937208][T20839] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  479.979082][T20839] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.083595][   T48] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  480.092539][   T48] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  480.102472][   T48] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  480.113039][   T48] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  480.145226][T18849] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  480.154748][T18849] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  480.176692][T18847] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  480.187184][T18847] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  482.231224][ T5192] udevd[5192]: worker [11097] /devices/virtual/block/nbd0 timeout; kill it
[  482.240176][ T5192] udevd[5192]: seq 21031 '/devices/virtual/block/nbd0' killed
[  482.987583][T17281] Bluetooth: hci5: command 0x0406 tx timeout
[  482.993937][T17281] Bluetooth: hci1: command 0x0406 tx timeout
[  498.347645][ T5823] Bluetooth: hci2: command 0x0406 tx timeout
[  531.567214][T20899] lo speed is unknown, defaulting to 1000
[  531.613011][T20909] __nla_validate_parse: 7 callbacks suppressed
[  531.613029][T20909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3879'.
[  531.667199][T20912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3875'.
[  531.770991][T20899] ip6_vti0 speed is unknown, defaulting to 1000
[  532.160671][T20932] netlink: 'syz.1.3882': attribute type 1 has an invalid length.
[  532.168664][T20932] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3882'.
[  532.272809][T20935] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3882'.
[  532.419897][T20937] FAULT_INJECTION: forcing a failure.
[  532.419897][T20937] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  532.465128][T20937] CPU: 0 UID: 0 PID: 20937 Comm: syz.0.3884 Not tainted syzkaller #0 PREEMPT(full) 
[  532.465155][T20937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  532.465166][T20937] Call Trace:
[  532.465173][T20937]  <TASK>
[  532.465181][T20937]  dump_stack_lvl+0xe8/0x150
[  532.465213][T20937]  should_fail_ex+0x412/0x560
[  532.465238][T20937]  _copy_to_user+0x31/0xb0
[  532.465265][T20937]  simple_read_from_buffer+0xe1/0x170
[  532.465293][T20937]  proc_fail_nth_read+0x1bb/0x230
[  532.465319][T20937]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  532.465345][T20937]  ? rw_verify_area+0x2a6/0x4d0
[  532.465361][T20937]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  532.465386][T20937]  vfs_read+0x20c/0xa70
[  532.465401][T20937]  ? fdget_pos+0x246/0x320
[  532.465429][T20937]  ? __pfx___mutex_lock+0x10/0x10
[  532.465455][T20937]  ? __pfx_vfs_read+0x10/0x10
[  532.465474][T20937]  ? __fget_files+0x2a/0x420
[  532.465501][T20937]  ? __fget_files+0x3a0/0x420
[  532.465522][T20937]  ? __fget_files+0x2a/0x420
[  532.465553][T20937]  ksys_read+0x150/0x270
[  532.465573][T20937]  ? __pfx_ksys_read+0x10/0x10
[  532.465608][T20937]  do_syscall_64+0x14d/0xf80
[  532.465631][T20937]  ? trace_irq_disable+0x3b/0x150
[  532.465655][T20937]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.465672][T20937]  ? clear_bhb_loop+0x40/0x90
[  532.465694][T20937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.465711][T20937] RIP: 0033:0x7fc91f95cece
[  532.465729][T20937] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  532.465743][T20937] RSP: 002b:00007fc9208eafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  532.465763][T20937] RAX: ffffffffffffffda RBX: 00007fc9208eb6c0 RCX: 00007fc91f95cece
[  532.465776][T20937] RDX: 000000000000000f RSI: 00007fc9208eb0a0 RDI: 0000000000000004
[  532.465787][T20937] RBP: 00007fc9208eb090 R08: 0000000000000000 R09: 0000000000000000
[  532.465797][T20937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  532.465807][T20937] R13: 00007fc91fc16038 R14: 00007fc91fc15fa0 R15: 00007fff00bc4a18
[  532.465838][T20937]  </TASK>
[  533.028714][T20943] bond6: invalid ARP target 0.0.0.0 specified for addition
[  533.046248][T20943] bond6: option arp_ip_target: invalid value (0)
[  533.070427][T20943] bond6 (unregistering): Released all slaves
[  535.013127][T20972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3895'.
[  535.052002][T20972] netlink: 'syz.2.3895': attribute type 1 has an invalid length.
[  535.060043][T20973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3894'.
[  535.060070][T20973] openvswitch: netlink: Key type 8981 is out of range max 32
[  535.106095][T20975] xt_CT: You must specify a L4 protocol and not use inversions on it
[  535.151755][T20978] syzkaller1: entered promiscuous mode
[  535.179719][T20978] syzkaller1: entered allmulticast mode
[  535.407226][T20994] lo speed is unknown, defaulting to 1000
[  535.546323][T21006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3905'.
[  535.803514][T21020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3906'.
[  535.863473][T21022] bridge0: entered allmulticast mode
[  535.880166][T21022] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  535.912810][T21025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3909'.
[  535.943753][T21021] lo speed is unknown, defaulting to 1000
[  535.943788][T20994] ip6_vti0 speed is unknown, defaulting to 1000
[  536.241529][T21041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3913'.
[  536.251184][T21040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  536.258456][T21040] IPv6: NLM_F_CREATE should be set when creating new route
[  536.265733][T21040] IPv6: NLM_F_CREATE should be set when creating new route
[  536.285927][T21040] sctp: [Deprecated]: syz.2.3914 (pid 21040) Use of struct sctp_assoc_value in delayed_ack socket option.
[  536.285927][T21040] Use struct sctp_sack_info instead
[  536.475561][T21021] ip6_vti0 speed is unknown, defaulting to 1000
[  536.522088][T21051] netlink: 'syz.2.3917': attribute type 1 has an invalid length.
[  536.723832][T21065] delete_channel: no stack
[  536.781291][T21067] __nla_validate_parse: 4 callbacks suppressed
[  536.781312][T21067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3922'.
[  536.899531][T21067] 8021q: adding VLAN 0 to HW filter on device bond1
[  536.921614][T21067] RDS: rds_bind could not find a transport for 4004:0:20:0:c002:0:20:0, load rds_tcp or rds_rdma?
[  537.050032][T21076] netlink: 'syz.0.3924': attribute type 15 has an invalid length.
[  537.058086][T21076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3924'.
[  537.095072][T18847] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0
[  537.097607][T21076] netlink: 'syz.0.3924': attribute type 15 has an invalid length.
[  537.118347][T18848] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0
[  537.132741][T18848] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0
[  537.147565][T21076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3924'.
[  537.147708][T18848] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0
[  537.436625][T21088] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  537.517083][T21095] netlink: 'syz.0.3931': attribute type 12 has an invalid length.
[  537.526216][T21095] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3931'.
[  537.540709][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3930'.
[  537.569202][T21093] netlink: 'syz.2.3930': attribute type 8 has an invalid length.
[  537.659149][T21093] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  537.728747][T21102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3933'.
[  537.758989][T21102] IPv6: Can't replace route, no match found
[  537.827995][T21105] netlink: 'syz.2.3934': attribute type 1 has an invalid length.
[  537.947719][T21113] netlink: 'syz.0.3936': attribute type 2 has an invalid length.
[  537.955484][T21113] netlink: 'syz.0.3936': attribute type 1 has an invalid length.
[  538.031333][T21113] netlink: 'syz.0.3936': attribute type 2 has an invalid length.
[  538.034950][T21105] bond7: entered promiscuous mode
[  538.041560][T21113] netlink: 'syz.0.3936': attribute type 2 has an invalid length.
[  538.052641][T21113] netlink: 'syz.0.3936': attribute type 1 has an invalid length.
[  538.057515][T21105] bond7: entered allmulticast mode
[  538.075829][T21113] netlink: 'syz.0.3936': attribute type 1 has an invalid length.
[  538.078131][T21105] 8021q: adding VLAN 0 to HW filter on device bond7
[  538.118692][T21113] netlink: 'syz.0.3936': attribute type 2 has an invalid length.
[  538.128988][T21116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3937'.
[  538.140113][T21108] erspan1: entered allmulticast mode
[  538.153861][T21108] bond7: (slave erspan1): making interface the new active one
[  538.161684][T21108] erspan1: entered promiscuous mode
[  538.171295][T21108] bond7: (slave erspan1): Enslaving as an active interface with an up link
[  538.195380][T21108] syz.2.3934 (21108) used greatest stack depth: 16712 bytes left
[  538.262027][T21118] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3938'.
[  538.271756][T21118] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3938'.
[  538.285603][T21124] syz_tun: entered promiscuous mode
[  538.414768][T21131] lo speed is unknown, defaulting to 1000
[  538.500633][T21141] bond2: option xmit_hash_policy: invalid value (10)
[  538.516811][T21141] bond2 (unregistering): Released all slaves
[  538.647560][T21144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  538.663677][T21144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  538.680514][T21149] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  538.720304][T21144] veth1_vlan: left allmulticast mode
[  538.753457][T21148] syzkaller0: entered promiscuous mode
[  538.761762][T21148] syzkaller0: entered allmulticast mode
[  538.770827][T21131] ip6_vti0 speed is unknown, defaulting to 1000
[  538.777178][T18849] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  538.787663][T18849] netdevsim netdevsim0 eth0: unset [0, 1] type 1 family 0 port 2816 - 0
[  538.796033][T18849] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  538.806506][T18849] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  538.821990][T18849] netdevsim netdevsim0 eth1: unset [0, 1] type 1 family 0 port 2816 - 0
[  538.836447][T18849] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  538.885803][T18849] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  538.907484][T18849] netdevsim netdevsim0 eth2: unset [0, 1] type 1 family 0 port 2816 - 0
[  538.916116][T18849] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  538.927935][T18846] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  538.938953][T18846] netdevsim netdevsim0 eth3: unset [0, 1] type 1 family 0 port 2816 - 0
[  538.968199][T18846] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.291219][T21167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3951'.
[  540.061116][T21184] bond0: (slave rose0): Enslaving as an active interface with an up link
[  540.301723][T21196] syzkaller0: entered promiscuous mode
[  540.307245][T21196] syzkaller0: entered allmulticast mode
[  540.322809][T21196] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  540.339310][T21195] tipc: Resetting bearer <eth:syzkaller0>
[  540.372457][T21195] tipc: Disabling bearer <eth:syzkaller0>
[  540.385363][T21201] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  540.396333][T21201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  540.407072][T21201] hsr0: entered promiscuous mode
[  540.414539][T21201] bridge0: port 3(hsr0) entered blocking state
[  540.421069][T21201] bridge0: port 3(hsr0) entered disabled state
[  540.436300][T21201] hsr0: entered allmulticast mode
[  540.444144][T21201] hsr_slave_0: entered allmulticast mode
[  540.450228][T21201] hsr_slave_1: entered allmulticast mode
[  540.516904][T21210] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  541.102871][T21241] 8021q: adding VLAN 0 to HW filter on device team0
[  541.124862][T21241] bond0: (slave team0): Enslaving as an active interface with an up link
[  541.295945][T21253] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  541.403616][T21257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  541.895591][T21291] __nla_validate_parse: 16 callbacks suppressed
[  541.895608][T21291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3991'.
[  542.016745][T21300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3992'.
[  542.230799][T21312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3995'.
[  542.341041][T21319] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3998'.
[  542.343743][T21318] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3997'.
[  542.352676][T21320] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3998'.
[  542.551813][T21331] validate_nla: 7 callbacks suppressed
[  542.551831][T21331] netlink: 'syz.4.4002': attribute type 1 has an invalid length.
[  542.593320][T21331] bond2: entered promiscuous mode
[  542.598788][T21331] bond2: entered allmulticast mode
[  542.618290][T21333] bond2: (slave ip6gretap1): making interface the new active one
[  542.626385][T21333] ip6gretap1: entered promiscuous mode
[  542.632728][T21333] ip6gretap1: entered allmulticast mode
[  542.642073][T21333] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  542.659306][T21331] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4002'.
[  542.672270][T21331] bond2: left promiscuous mode
[  542.677068][T21331] ip6gretap1: left promiscuous mode
[  542.684489][T21331] bond2: left allmulticast mode
[  542.691733][T21331] ip6gretap1: left allmulticast mode
[  542.700882][T21331] 8021q: adding VLAN 0 to HW filter on device bond2
[  542.823804][T21343] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode
[  542.840654][T21343] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode
[  542.918380][T21349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4009'.
[  542.987032][T21355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4012'.
[  543.003642][T21356] bond0: (slave gre0): Error: Device type is different from other slaves
[  543.080463][T21360] raw_sendmsg: syz.2.4014 forgot to set AF_INET. Fix it!
[  543.323262][T21372] netlink: 'syz.0.4018': attribute type 1 has an invalid length.
[  543.356057][T21372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4018'.
[  543.466908][T21380] syzkaller0: entered promiscuous mode
[  543.473163][T21380] syzkaller0: entered allmulticast mode
[  543.768079][T21397] syzkaller0: entered promiscuous mode
[  543.773786][T21397] syzkaller0: entered allmulticast mode
[  543.789336][T21397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  543.803597][T21396] tipc: Resetting bearer <eth:syzkaller0>
[  543.836450][T21396] tipc: Disabling bearer <eth:syzkaller0>
[  544.341011][T21434] x_tables: unsorted entry at hook 3
[  544.341622][T21436] netlink: 'syz.1.4038': attribute type 4 has an invalid length.
[  544.348526][T21434] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  544.590586][T21447] syzkaller0: entered promiscuous mode
[  544.596264][T21447] syzkaller0: entered allmulticast mode
[  544.606438][T21447] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  544.620340][T21446] tipc: Resetting bearer <eth:syzkaller0>
[  544.654051][T21446] tipc: Disabling bearer <eth:syzkaller0>
[  545.318956][T21489] bridge3: entered promiscuous mode
[  545.330709][T21489] bridge3: entered allmulticast mode
[  545.351233][T21489] team0: Port device bridge3 added
[  545.553564][T21493] bond2 (unregistering): Released all slaves
[  545.643985][T21503] netlink: 'syz.0.4053': attribute type 83 has an invalid length.
[  545.764127][T21505] Cannot find del_set index 2 as target
[  545.771073][T21500] ip6erspan1: entered allmulticast mode
[  546.072527][T21524] netlink: 'syz.2.4061': attribute type 10 has an invalid length.
[  546.073565][T21525] netlink: 'syz.2.4061': attribute type 10 has an invalid length.
[  546.128677][T21524] syz_tun: entered promiscuous mode
[  546.171931][T21524] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  546.283026][T21524] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  546.846818][T21552] syzkaller0: entered promiscuous mode
[  546.869396][T21552] syzkaller0: entered allmulticast mode
[  546.909457][T21557] __nla_validate_parse: 1 callbacks suppressed
[  546.909478][T21557] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4071'.
[  546.995774][T21559] syzkaller0: entered promiscuous mode
[  547.015002][T21559] syzkaller0: entered allmulticast mode
[  547.166358][T21572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4076'.
[  547.212151][T21576] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4077'.
[  547.212168][T21575] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4077'.
[  547.300105][T21579] netlink: 'syz.2.4078': attribute type 29 has an invalid length.
[  547.452584][T21590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4082'.
[  547.492729][T21590] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4082'.
[  547.591433][T21590] bond8: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  547.604577][T21590] bond8 (unregistering): Released all slaves
[  547.791880][T21599] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  547.802823][T21599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4085'.
[  547.811959][T21599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4085'.
[  547.899435][T21604] IPv6: NLM_F_CREATE should be specified when creating new route
[  548.161839][T21627] syzkaller0: entered promiscuous mode
[  548.178243][T21627] syzkaller0: entered allmulticast mode
[  548.196010][T21627] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  548.219671][T21625] tipc: Resetting bearer <eth:syzkaller0>
[  548.262880][T21625] tipc: Disabling bearer <eth:syzkaller0>
[  548.353410][T21635] syzkaller0: entered promiscuous mode
[  548.359508][T21635] syzkaller0: entered allmulticast mode
[  549.405927][T21645] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4097'.
[  550.233177][T21649] syzkaller1: entered promiscuous mode
[  550.239956][T21649] syzkaller1: entered allmulticast mode
[  550.317811][T21654] lo speed is unknown, defaulting to 1000
[  550.443490][T21661] netlink: 'syz.4.4101': attribute type 1 has an invalid length.
[  550.467452][T21661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4101'.
[  550.542777][T21671] netlink: 'syz.2.4104': attribute type 21 has an invalid length.
[  550.578541][T21671] netlink: 'syz.2.4104': attribute type 3 has an invalid length.
[  550.689519][T21677] syzkaller0: entered promiscuous mode
[  550.695040][T21677] syzkaller0: entered allmulticast mode
[  550.732214][T21677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  550.782259][T21676] tipc: Resetting bearer <eth:syzkaller0>
[  550.872326][T21676] tipc: Disabling bearer <eth:syzkaller0>
[  551.011416][T21697] netlink: 'syz.3.4110': attribute type 4 has an invalid length.
[  551.022962][T21697] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  551.124462][T21654] ip6_vti0 speed is unknown, defaulting to 1000
[  551.992225][T21735] __nla_validate_parse: 8 callbacks suppressed
[  551.992242][T21735] netlink: 508 bytes leftover after parsing attributes in process `syz.3.4119'.
[  552.354399][T21747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4120'.
[  552.671045][T21768] lo: entered allmulticast mode
[  552.712392][T21770] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.4125'.
[  553.361039][T21802] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4133'.
[  553.406493][T21802] vlan3: entered allmulticast mode
[  553.417485][T21802] gretap0: entered allmulticast mode
[  553.782149][T21823] netlink: 'syz.1.4140': attribute type 12 has an invalid length.
[  553.820218][T21826] netlink: 'syz.0.4141': attribute type 10 has an invalid length.
[  553.835583][T21823] netlink: 'syz.1.4140': attribute type 1 has an invalid length.
[  553.843489][T21823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4140'.
[  553.860591][T21823] netlink: 364 bytes leftover after parsing attributes in process `syz.1.4140'.
[  553.873717][T21823] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4140'.
[  553.876386][T21826] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  553.929164][T21823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4140'.
[  553.930636][T21832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4143'.
[  554.050610][T21834] bond8: entered allmulticast mode
[  554.092400][T21844] xt_ipcomp: unknown flags 1D
[  554.131432][T21840] syzkaller0: entered promiscuous mode
[  554.137168][T21840] syzkaller0: entered allmulticast mode
[  554.512266][   T30] INFO: task kworker/0:0H:11 blocked for more than 143 seconds.
[  554.520333][   T30]       Not tainted syzkaller #0
[  554.525488][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  554.534722][   T30] task:kworker/0:0H    state:D stack:26496 pid:11    tgid:11    ppid:2      task_flags:0x4208060 flags:0x00080000
[  554.546955][   T30] Workqueue: kblockd blk_mq_requeue_work
[  554.553010][   T30] Call Trace:
[  554.556292][   T30]  <TASK>
[  554.560620][   T30]  __schedule+0x1585/0x5340
[  554.565292][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  554.570464][   T30]  ? __pfx___schedule+0x10/0x10
[  554.575360][   T30]  ? schedule+0x90/0x360
[  554.579833][   T30]  schedule+0x164/0x360
[  554.584013][   T30]  schedule_timeout+0x158/0x2c0
[  554.589233][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  554.594626][   T30]  ? __pfx_process_timeout+0x10/0x10
[  554.600148][   T30]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  554.605976][   T30]  ? prepare_to_wait_event+0x436/0x480
[  554.611882][   T30]  nbd_queue_rq+0x857/0x1100
[  554.616519][   T30]  ? __pfx_nbd_queue_rq+0x10/0x10
[  554.621677][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  554.627876][   T30]  blk_mq_dispatch_rq_list+0xa70/0x1910
[  554.633467][   T30]  ? sbitmap_get+0x229/0x390
[  554.638210][   T30]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  554.644205][   T30]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  554.650168][   T30]  __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  554.656524][   T30]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  554.663406][   T30]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  554.669696][   T30]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  554.674978][   T30]  blk_mq_run_hw_queue+0x348/0x4f0
[  554.680462][   T30]  blk_mq_run_hw_queues+0x26c/0x3f0
[  554.685857][   T30]  blk_mq_requeue_work+0x71c/0x780
[  554.691118][   T30]  ? __pfx_blk_mq_requeue_work+0x10/0x10
[  554.696846][   T30]  ? process_scheduled_works+0xa25/0x1830
[  554.702822][   T30]  ? process_scheduled_works+0xa25/0x1830
[  554.708745][   T30]  process_scheduled_works+0xb02/0x1830
[  554.714322][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  554.720443][   T30]  ? assign_work+0x3d5/0x5e0
[  554.725060][   T30]  worker_thread+0xa50/0xfc0
[  554.729852][   T30]  kthread+0x388/0x470
[  554.733943][   T30]  ? __pfx_worker_thread+0x10/0x10
[  554.739173][   T30]  ? __pfx_kthread+0x10/0x10
[  554.743774][   T30]  ret_from_fork+0x51e/0xb90
[  554.748562][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  554.753691][   T30]  ? __switch_to+0xc7d/0x1450
[  554.758527][   T30]  ? __pfx_kthread+0x10/0x10
[  554.763133][   T30]  ret_from_fork_asm+0x1a/0x30
[  554.768086][   T30]  </TASK>
[  554.771405][   T30] 
[  554.771405][   T30] Showing all locks held in the system:
[  554.779291][   T30] 4 locks held by kworker/0:0H/11:
[  554.784429][   T30]  #0: ffff88801f683d48 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  554.795811][   T30]  #1: ffffc90000107c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  554.810528][   T30]  #2: ffff8880254d6298 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0
[  554.820290][   T30]  #3: ffff888027350780 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100
[  554.829827][   T30] 1 lock held by khungtaskd/30:
[  554.834814][   T30]  #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  554.844997][   T30] 2 locks held by getty/5580:
[  554.849872][   T30]  #0: ffff888036da00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  554.859876][   T30]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  554.870257][   T30] 1 lock held by udevd/11097:
[  554.874932][   T30]  #0: ffff888027300358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  554.884332][   T30] 3 locks held by kworker/u8:22/18841:
[  554.889890][   T30]  #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  554.901641][   T30]  #1: ffffc90004f6fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  554.913259][   T30]  #2: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  554.922540][   T30] 5 locks held by kworker/u8:27/18846:
[  554.928148][   T30] 3 locks held by kworker/u8:28/18847:
[  554.933718][   T30]  #0: ffff888031beb148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  554.945411][   T30]  #1: ffffc90004d97c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  554.958415][   T30]  #2: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0
[  554.968121][   T30] 2 locks held by syz.0.4147/21839:
[  554.973322][   T30]  #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  554.982485][   T30]  #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  554.993450][   T30] 4 locks held by syz.3.4146/21841:
[  554.998832][   T30]  #0: ffff8880466a9ec8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  555.009104][   T30]  #1: ffffffff8fc374b0 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90
[  555.020382][   T30]  #2: ffff88805b3e20d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x13d/0xdb0
[  555.030941][   T30]  #3: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  555.042094][   T30] 2 locks held by syz.1.4149/21847:
[  555.047301][   T30]  #0: ffff888085dd0208 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  555.057726][   T30]  #1: ffff88803445e260 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pptp_release+0x52/0x310
[  555.067160][   T30] 2 locks held by syz.1.4149/21848:
[  555.072512][   T30]  #0: ffffffff8f382ca8 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1b10
[  555.082271][   T30]  #1: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: ppp_ioctl+0x6ce/0x1b10
[  555.091184][   T30] 1 lock held by syz.2.4150/21850:
[  555.096315][   T30]  #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0
[  555.105949][   T30] 1 lock held by syz.2.4150/21853:
[  555.111167][   T30]  #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30
[  555.120533][   T30] 1 lock held by syz.4.4151/21851:
[  555.125652][   T30]  #0: ffff88805b9a3b88 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  555.135910][   T30] 1 lock held by syz.4.4151/21852:
[  555.141202][   T30]  #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10
[  555.150647][   T30] 1 lock held by syz.4.4151/21855:
[  555.155764][   T30]  #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  555.164932][   T30] 1 lock held by syz.4.4151/21859:
[  555.170101][   T30]  #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  555.179052][   T30] 1 lock held by syz.4.4151/21861:
[  555.184170][   T30]  #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0
[  555.193728][   T30] 
[  555.196063][   T30] =============================================
[  555.196063][   T30] 
[  555.204636][   T30] NMI backtrace for cpu 1
[  555.204651][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  555.204669][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  555.204678][   T30] Call Trace:
[  555.204684][   T30]  <TASK>
[  555.204691][   T30]  dump_stack_lvl+0xe8/0x150
[  555.204717][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  555.204737][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  555.204757][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  555.204778][   T30]  sys_info+0x135/0x170
[  555.204793][   T30]  watchdog+0xfd9/0x1030
[  555.204820][   T30]  ? watchdog+0x21a/0x1030
[  555.204842][   T30]  kthread+0x388/0x470
[  555.204852][   T30]  ? __pfx_watchdog+0x10/0x10
[  555.204864][   T30]  ? __pfx_kthread+0x10/0x10
[  555.204873][   T30]  ret_from_fork+0x51e/0xb90
[  555.204888][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  555.204906][   T30]  ? __switch_to+0xc7d/0x1450
[  555.204919][   T30]  ? __pfx_kthread+0x10/0x10
[  555.204928][   T30]  ret_from_fork_asm+0x1a/0x30
[  555.204949][   T30]  </TASK>
[  555.204956][   T30] Sending NMI from CPU 1 to CPUs 0:
[  555.315331][    C0] NMI backtrace for cpu 0
[  555.315349][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  555.315365][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  555.315374][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  555.315400][    C0] Code: 8e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 4d 1c 00 fb f4 <e9> 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  555.315413][    C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246
[  555.315427][    C0] RAX: 00000000001fb799 RBX: ffffffff819a80dd RCX: 0000000080000001
[  555.315438][    C0] RDX: 0000000000000001 RSI: ffffffff8def18d2 RDI: ffffffff8c27a480
[  555.315448][    C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b
[  555.315458][    C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901172b0
[  555.315468][    C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000
[  555.315478][    C0] FS:  0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000
[  555.315490][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  555.315500][    C0] CR2: 000000110c346188 CR3: 000000007e9cc000 CR4: 00000000003526f0
[  555.315513][    C0] Call Trace:
[  555.315520][    C0]  <TASK>
[  555.315525][    C0]  default_idle+0x9/0x20
[  555.315540][    C0]  default_idle_call+0x72/0xb0
[  555.315556][    C0]  do_idle+0x1bd/0x500
[  555.315573][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  555.315595][    C0]  ? __pfx_do_idle+0x10/0x10
[  555.315618][    C0]  cpu_startup_entry+0x43/0x60
[  555.315637][    C0]  rest_init+0x2de/0x300
[  555.315654][    C0]  start_kernel+0x385/0x3d0
[  555.315675][    C0]  x86_64_start_reservations+0x24/0x30
[  555.315691][    C0]  x86_64_start_kernel+0x143/0x1c0
[  555.315705][    C0]  common_startup_64+0x13e/0x147
[  555.315728][    C0]  </TASK>
[  555.496012][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  555.502888][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  555.511986][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  555.522023][   T30] Call Trace:
[  555.525287][   T30]  <TASK>
[  555.528204][   T30]  vpanic+0x56c/0xa60
[  555.532178][   T30]  ? __pfx___schedule+0x10/0x10
[  555.537018][   T30]  ? __pfx_vpanic+0x10/0x10
[  555.541507][   T30]  ? __pfx_console_unlock+0x10/0x10
[  555.546700][   T30]  panic+0xc5/0xd0
[  555.550410][   T30]  ? __pfx_panic+0x10/0x10
[  555.554818][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  555.560191][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  555.566334][   T30]  watchdog+0x1023/0x1030
[  555.570659][   T30]  ? watchdog+0x21a/0x1030
[  555.575071][   T30]  kthread+0x388/0x470
[  555.579157][   T30]  ? __pfx_watchdog+0x10/0x10
[  555.583847][   T30]  ? __pfx_kthread+0x10/0x10
[  555.588442][   T30]  ret_from_fork+0x51e/0xb90
[  555.593035][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  555.598139][   T30]  ? __switch_to+0xc7d/0x1450
[  555.602817][   T30]  ? __pfx_kthread+0x10/0x10
[  555.607395][   T30]  ret_from_fork_asm+0x1a/0x30
[  555.612164][   T30]  </TASK>
[  555.615519][   T30] Kernel Offset: disabled
[  555.619829][   T30] Rebooting in 86400 seconds..