last executing test programs:

47.949359705s ago: executing program 2 (id=1568):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x100, 0x5, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x11}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x810)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x900, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r6)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="019f07"])
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

47.279213243s ago: executing program 2 (id=1571):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
writev(r2, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4)
recvmmsg(r1, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r4}, 0x10)
r5 = socket$key(0xf, 0x3, 0x2)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
vmsplice(r9, &(0x7f0000001c00)=[{&(0x7f0000002000)="f8", 0x1}], 0x1, 0x9)
close(r9)
splice(r8, 0x0, r9, 0x0, 0x10500, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000200)={'veth0_macvtap\x00', @random="655222b8cef7"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
r10 = socket$inet6(0xa, 0x805, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback={0x0, 0xffff888101827518}, 0x0, 0x20, 0x10000, 0x10000}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000004010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x7}, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x300000d, 0x12, r11, 0x1000)

46.941423931s ago: executing program 2 (id=1574):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4010}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) (async)
r1 = socket(0x1e, 0x805, 0x0) (async, rerun: 32)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async)
sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) (async)
getsockname(r1, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x80)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1)

46.703626738s ago: executing program 2 (id=1576):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x10, 0x6, @link_local}, 0x14)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000180)={@empty, @remote, r2}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendto$packet(r5, &(0x7f0000000140)="33aaf14f564b1bf220cb1137d54b", 0xe, 0x40, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x8, 0x6, @multicast}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002bc0)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd27, 0x25dfdbff, {0x2, 0x10, 0x80, 0x9, 0x1, 0x0, 0x0, 0x3, 0x10000}, [@FRA_SRC={0x8, 0x2, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x13}}}, 0x24}}, 0x0)
unshare(0x62040200)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

43.86329442s ago: executing program 1 (id=1597):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/237, 0xed, 0x0, &(0x7f0000000240)=""/150, 0x96}, &(0x7f00000000c0)=0x40)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xe0000000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000)

43.541072897s ago: executing program 1 (id=1600):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001100", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) (async)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001100", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x13}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000040)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)={0x1c8, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}, @generic="5dd7a330dc7b7690c8d9ecb51d93a6ce9bf7e22ff148b337253c2bbf8531d6d29d648ccceaefeb37ddaef1902679db03c88d99e59b98835d1331d8c64647bafcbafd0e167fa910ae08be3a53f5e9f0dc215d708c645f19318835567c9539f3b5954833e18e3fa9e36fbd26f762a31025e65c222315b1d189eedbdd76a2a46ca20f38e64f4d1456d62e671b2a9a26c5dcb693c1a5b9b26f53bcf3d95067e11609228df5f0c67fd5ddc3cd3bf5514ac370f0a1"]}, 0x1c8}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b3300"/27, 0x1b}], 0x1}, 0x20000000)
recvmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) (async)
recvmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0xa, 0x5, 0x0) (async)
r5 = socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0xa, 0x5, 0x0) (async)
r6 = socket$kcm(0xa, 0x5, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=r7], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r6})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x6)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000021140000001100"], 0xd8}}, 0x8090)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='btrfs_transaction_commit\x00', r7, 0x0, 0x510}, 0x18)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='westwood\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, &(0x7f00000007c0)={0xfffc, 0x5, 0xffc0, 0x0, 0x7f, 0x4, 0xffff}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)

43.292540289s ago: executing program 4 (id=1604):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000007f0000000000000039070dde00fff9eb70fa8a00"/39], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b7000000000000009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40800000000000073112000000000008510000002000000b7000000000000009500c2000000000095000012000000000e09b9445761db3ed82f7be4b9f1628b"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x4000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf"], 0xfc}, 0x1, 0x0, 0x0, 0x8040}, 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18)

43.167017633s ago: executing program 1 (id=1605):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000580)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43, 0x101d0}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4004000)
r2 = socket(0x10, 0x3, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r2], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
ppoll(&(0x7f00000004c0)=[{0xffffffffffffffff, 0x9000}, {r3, 0x10}], 0x2, 0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xb, 0x8, 0xb, 0x8, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000002c0)={<r7=>0x0, 0x6c1, 0x20, 0x6, 0x8a74}, &(0x7f0000000300)=0x18)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000340)={r7, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x8, 0x5}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000f000000000000000008181100004dbf2bf4271330dcf54d2a5734f765d0c0f46c2e4075c44ac342d003", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000085000000a000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81}, 0x50)
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r8, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8)
recvmmsg(r8, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r8, 0x0, 0x2a, 0x20004001, &(0x7f0000000300)={0xa, 0x4e24, 0x209, @loopback, 0x7}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x15, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r9], 0x158}, 0x1, 0xba01}, 0x44)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x4, 0x4, 0x1, 0x281a4, 0xffffffffffffffff, 0x8, '\x00', 0x0, r8, 0x4, 0x1, 0x3, 0x9}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x1e, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0xdf1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x2, 0x6, 0xa, 0x6, 0xffffffffffffffe0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x0, 0x5, 0x2, 0xb, 0xffffffffffffff74, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9d3c}}, @ldst={0x2, 0x2, 0x2, 0x8, 0x7, 0xfffffffffffffff8, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}]}, &(0x7f0000000540)='GPL\x00', 0x8, 0x1d, &(0x7f00000006c0)=""/29, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x8, 0x6828, 0xa4}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[r6, r10, 0xffffffffffffffff], &(0x7f0000000900)=[{0x4, 0x4, 0xd, 0x1}, {0x3, 0x2, 0x9, 0x8}], 0x10, 0x5}, 0x94)

43.124277048s ago: executing program 4 (id=1607):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095000000000000002348003fd384040b849ab5520d07a7441e0e65de07b1a4da87429bf84f9cc4addb972fe68b01196cdbfb8074d6fe83f29db843dd34ca85ef20e674748aef24cf35b549cfb4581366483833300977e1634540353ccf997711ddff6d524d787f3755fea2032afa25b19c04ec2479621010653defe15d0d429513a8f1f186d0d755aeffcbd12ed27bb72bfe4a061c38320d93662f420ec1333b7554bfb2bf76f731c3d754a8e9a237fc3ecc92343a9a10459d2440bc05d00f1f3e873ee6268f070b27fdcb8686de52e8513818bcae356b70036c7d01545089c720814b561efd10fe3f8a41c86582a3a06ee563667231996662380cbd6118e84f136ed709ebfdbb73e91e9caf7338fb815ac7d5c1a63fcf4b1a9f2c3f0b944489cad573dcacbf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x40, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffff9}, @TCA_PIE_TARGET={0x8, 0x1, 0x80000001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000040)={r3})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3)
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8054}, 0x24044801)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, 0x0, 0x0)
shutdown(r0, 0x1)

42.940047269s ago: executing program 4 (id=1608):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@deltclass={0xe4, 0x29, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xffff, 0xf}, {0x4, 0xd}, {0x2, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x5b, 0x9}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_hfsc={{0x9}, {0x84, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x7, 0x853, 0xc0000000}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x3, 0x8}}, @TCA_HFSC_RSC={0x10, 0x1, {0x82a, 0x4da, 0x4}}, @TCA_HFSC_USC={0x10, 0x3, {0x10000, 0x80, 0x5}}, @TCA_HFSC_USC={0x10, 0x3, {0xffff2642, 0x0, 0x2}}, @TCA_HFSC_USC={0x10, 0x3, {0x898a, 0x2, 0x1bd}}, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x3, 0x6}}, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x3, 0x1000}}]}}, @TCA_RATE={0x6, 0x5, {0x19, 0x7}}, @TCA_RATE={0x6}]}, 0xe4}}, 0x0)

42.779091015s ago: executing program 2 (id=1610):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[], 0x1a4}}, 0x0)
unshare(0x62040200)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30, 0x0, 0xa3}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r4 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000012003fbd70000000000007000000", @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2d6370f561636374202b6370756163b02838c7d18fb53a7d746374202d6e6574202d726c696d6974202d6d656d6f7279202d6e6574202d63707573657420"], 0x34)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r2, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x14bf41, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r7, 0x6, 0x0, &(0x7f0000000180)=0x7ff57fc4, 0x4)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})

42.777807578s ago: executing program 4 (id=1611):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
recvfrom(r0, &(0x7f0000000140)=""/59, 0x3b, 0x2000, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @remote}, 0x1, 0x1, 0x3, 0x4}}, 0x80)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@can_newroute={0x40, 0x18, 0x1, 0x70bd25, 0x0, {0x1d, 0x1, 0x1}, [@CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x1, 0x1, 0x1}, 0x7, 0x3, 0x0, 0x0, "0e5fa2e4e96119c1"}, 0x5}}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}}, @CGW_SRC_IF={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008044}, 0xc000)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r8=>0x0})
r9 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x388, 0x0, 0xffffffff, 0x0, 0x258, 0x610, 0x610, 0xffffffff, 0x610, 0x610, 0x5, 0x0, {[{{@ipv6={@private2, @loopback, [0xffffff00, 0xff, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 'batadv0\x00', 'macvlan1\x00', {}, {0xff}, 0x0, 0x8, 0x2, 0x8}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv4=@rand_addr=0x64010100, @ipv4=@multicast1, @icmp_id=0x67, @icmp_id=0x65}}}, {{@ipv6={@empty, @loopback, [0xffffffff, 0xff, 0x0, 0xffffff00], [0x100000001, 0xffffff00, 0xffffff00, 0xff], 'lo\x00', 'rose0\x00', {0x33faf3d1ebf79628}, {}, 0x21, 0x9, 0xe, 0x1}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv6=@local, @ipv6=@mcast1, @port=0x4e24, @icmp_id=0x67}}}, {{@ipv6={@mcast2, @loopback, [0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffff00, 0xff, 0xffffff00], 'veth0_to_bridge\x00', 'ipvlan1\x00', {}, {}, 0x32, 0x6, 0x9, 0x8}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv6=@empty, @ipv6=@local, @port=0x4e21, @gre_key=0x40}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x17, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0xf635, @port=0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0)
bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x74, r8, {0xfffd, 0xffeb}, {0x1, 0x1}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xbc, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4001}, 0x40)

42.631075147s ago: executing program 3 (id=1613):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, 0x0, 0x7, 0x5, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008050}, 0x20000050)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x30, r1, 0x1, 0xffffffff, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x30}}, 0x20000000)

42.537587677s ago: executing program 3 (id=1614):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f00000000c0)=0x9b)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000001b80)=ANY=[], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x5}, 0x8)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xe5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000800)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r7}, 0x10)
close(0x3)

42.359263221s ago: executing program 3 (id=1615):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r1, 0x89a2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)

42.22007303s ago: executing program 1 (id=1616):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
clock_gettime(0x2, &(0x7f00000001c0))
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8)
sendto$inet6(r3, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000800)={0x5, 0x3, 0x4, 0xb, 0x3, 0x3ff, 0xc1, 0x7}, 0x20)
syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00')
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
syz_emit_ethernet(0x12d, &(0x7f00000002c0)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x3b, 0x4, 0x2, 0x3, 0x11f, 0x66, 0x0, 0x9, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @empty, {[@timestamp_addr={0x44, 0x1c, 0x8e, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast2, 0x1}, {@multicast2, 0x8}]}, @timestamp={0x44, 0x8, 0x4a, 0x0, 0x3, [0x2]}, @timestamp_addr={0x44, 0x24, 0xbb, 0x1, 0x4, [{@local, 0x5}, {@rand_addr=0x64010100, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@empty}]}, @end, @timestamp_prespec={0x44, 0x54, 0xf1, 0x3, 0x9, [{@loopback, 0xffff}, {@private=0xa010101, 0xfffffffb}, {@multicast2, 0xfffffff8}, {@local, 0x4e3}, {@local, 0x6ad}, {@private=0xa010102, 0x5}, {@rand_addr=0x64010100, 0x2}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@broadcast, 0x2a77ad}]}, @rr={0x7, 0xf, 0x56, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp_addr={0x44, 0x2c, 0x4c, 0x1, 0x8, [{@private=0xa010101, 0x5}, {@empty, 0x5}, {@rand_addr=0x64010101, 0x5}, {@broadcast, 0xfffffffb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x22f9}]}]}}, {0x4e24, 0x4e21, 0x33, 0x0, @gue={{0x1, 0x1, 0x2, 0x8, 0x100, @void}, "c74884b38fe1d477ac8e3510e015802c146ff12cda42ab1205f0a86f0fdae7a7ec4c0de287ff9c"}}}}}}, 0x0)
accept$alg(r0, 0x0, 0x0)

42.213282207s ago: executing program 3 (id=1617):
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
syz_emit_ethernet(0x4a, 0x0, 0x0) (async)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0xacdf6000)

41.902544522s ago: executing program 3 (id=1620):
r0 = socket$phonet(0x23, 0x2, 0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
tee(r0, r1, 0x1, 0xe)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r2=>r1})
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0xb7, "46f797585ec001dcc55c337b713291f6b0a15090a1bf3f066a27dafca448c840a82bdf264779e088d0e6d2b35e789f63a422d2be3ea1cc6485b8bb72790ff8dbd1c652fe981f22ba3e6c6fa0604d97e97521bf5151f172953348b9fa857e62442fdb709a0f210be5b9b1254415ff4459210e4ab939d498c285a58a0d5378b832593564f0f3db0b8d7546746c7a04e89bf02571dd4ea719d9c02ff9fb0e00b9df189d68fcd858704cee07dcd3379866570aacade7799189"}, &(0x7f0000000140)=0xdb)
getsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
recvmmsg(r1, &(0x7f0000000f40)=[{{&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)=""/224, 0xe0}, {&(0x7f0000000380)=""/118, 0x76}], 0x2, &(0x7f0000000440)=""/150, 0x96}, 0x3}, {{&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/162, 0xa2}, {&(0x7f0000000640)=""/159, 0x9f}, {&(0x7f0000000700)=""/184, 0xb8}], 0x3, &(0x7f0000000800)=""/49, 0x31}}, {{&(0x7f0000000840)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/120, 0x78}, {&(0x7f0000000940)=""/26, 0x1a}, {&(0x7f0000000980)=""/105, 0x69}, {&(0x7f0000000a00)=""/88, 0x58}, {&(0x7f0000000a80)=""/109, 0x6d}, {&(0x7f0000000b00)=""/223, 0xdf}, {&(0x7f0000000c00)=""/202, 0xca}, {&(0x7f0000000d00)=""/240, 0xf0}], 0x8, &(0x7f0000000e80)=""/149, 0x95}, 0x8}], 0x3, 0x0, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000011c0)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000001140), &(0x7f0000001180)}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@bloom_filter={0x1e, 0xf24, 0x4344, 0x4, 0x400, 0x1, 0xee42, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5, 0x7}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)}, 0x20)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001500), 0x4)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000015c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1000, '\x00', 0x0, r0, 0x1, 0x0, 0x5}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000016c0)={{0x1, <r12=>0xffffffffffffffff}, &(0x7f0000001640), &(0x7f0000001680)='%-010d \x00'}, 0x20)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001700)={0xffffffffffffffff, 0x3, 0x8}, 0xc)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000017c0)={{r2, <r14=>0xffffffffffffffff}, &(0x7f0000001740), &(0x7f0000001780)='%pK    \x00'}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001880)=@bpf_ext={0x1c, 0x30, &(0x7f0000001340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x9}, @map_val={0x18, 0x1, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x4b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000014c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000001540)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001580)={0x2, 0x9, 0x6, 0xb}, 0x10, 0x229df, 0xffffffffffffffff, 0x1, &(0x7f0000001800)=[r11, r12, r13, r14], &(0x7f0000001840)=[{0x3, 0x3, 0x4, 0x1}], 0x10, 0x9}, 0x94)
unshare(0x30000080)
unshare(0x4000100)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001940)={'bond0\x00'})
ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000001980)={0x2})
setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000001a00)=@srh={0x68, 0x8, 0x4, 0x4, 0x9, 0x0, 0xcc0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x28}, @mcast2, @remote]}, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$isdn_base(0x22, 0x3, 0x0)
socket$kcm(0x29, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a80)='./cgroup/syz1\x00', 0x200002, 0x0)
getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000001bc0)={'filter\x00', 0x0, 0x3, 0x14, [0xe2, 0x400, 0x5, 0x8, 0xffffffffffff46bd], 0x4, &(0x7f0000001b40)=[{}, {}, {}, {}], &(0x7f0000001b80)=""/20}, &(0x7f0000001c40)=0x78)

41.726925289s ago: executing program 0 (id=1621):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0xb}}, @var={0x5, 0x0, 0x0, 0xe, 0x1, 0x1}, @func={0x3, 0x0, 0x0, 0xc, 0x4}, @func={0xc, 0x0, 0x0, 0xc, 0x4}, @var={0x10, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x5f, 0x5f, 0x0]}}, &(0x7f0000000080)=""/4096, 0x6d, 0x1000, 0x1, 0x1, 0x10000}, 0x28)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001100)={'team0\x00', <r2=>0x0})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001140)={<r3=>0x0, @multicast1, @broadcast}, &(0x7f0000001180)=0xc)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001200)={'syztnl1\x00', &(0x7f00000011c0)={'erspan0\x00', <r4=>0x0, 0x8, 0x20, 0x59d2, 0x8e7, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x67, 0x0, 0x5, 0x2f, 0x0, @multicast2, @empty, {[@noop]}}}}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r6], 0x2c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001380)={'syztnl1\x00', &(0x7f0000001240)={'gretap0\x00', <r8=>0x0, 0x8, 0x1, 0x3, 0x80000000, {{0x3e, 0x4, 0x1, 0x2b, 0xf8, 0x67, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x17, 0xda, [@multicast2, @empty, @broadcast, @rand_addr=0x64010102, @local]}, @timestamp_prespec={0x44, 0x34, 0xcd, 0x3, 0x3, [{@loopback}, {@private=0xa010101, 0xff8}, {@dev={0xac, 0x14, 0x14, 0x31}, 0xe4}, {@multicast1, 0x8}, {@broadcast, 0x8}, {@multicast2, 0x1}]}, @lsrr={0x83, 0x7, 0xb6, [@multicast1]}, @generic={0x88, 0x2}, @end, @lsrr={0x83, 0x7, 0xfd, [@local]}, @lsrr={0x83, 0x7, 0xd4, [@broadcast]}, @lsrr={0x83, 0x7, 0xcd, [@rand_addr=0x64010101]}, @ssrr={0x89, 0x1b, 0x59, [@broadcast, @local, @multicast2, @local, @private=0xa010102, @broadcast]}, @cipso={0x86, 0x5f, 0x0, [{0x7, 0xc, "036223025f94049603ce"}, {0x0, 0x2}, {0x2, 0xf, "703e98ce947eb9ffc86f2f7eed"}, {0x0, 0xf, "8578ad08109136da8b3b53a7b8"}, {0x5, 0x9, "9f106987f9d30d"}, {0x0, 0xc, "5a0a132d615cd474c95a"}, {0x0, 0xa, "b81f26762476e76d"}, {0x6, 0xe, "7c1746723a1d2cf597d9ef1f"}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'team0\x00', <r9=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001400)=<r10=>0x0, &(0x7f0000001440)=0x4)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001480)={@private0, <r11=>0x0}, &(0x7f00000014c0)=0x14)
r12 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r13=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r13, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001500)={'team0\x00', <r14=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000015c0)={'syztnl0\x00', &(0x7f0000001540)={'syztnl0\x00', <r15=>0x0, 0x29, 0x10, 0xfc, 0x6aef, 0x24, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0x7, 0x1}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001640)={'syztnl0\x00', &(0x7f0000001600)={'erspan0\x00', <r16=>0x0, 0x700, 0x700, 0x800, 0x10000, {{0x7, 0x4, 0x0, 0x7, 0x1c, 0x68, 0x0, 0x5, 0x29, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010102]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001700)={'syztnl0\x00', &(0x7f0000001680)={'syztnl2\x00', <r17=>0x0, 0x29, 0x5, 0x80, 0x8, 0x8, @mcast2, @private0, 0x80, 0x20, 0x9, 0xffff}})
r18 = socket(0x400000000010, 0x3, 0x0)
r19 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r20=>0x0})
sendmsg$nl_route_sched(r18, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000019100)={&(0x7f0000019080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r20, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r18, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004900)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r20, {0xb, 0xfff3}, {0x5, 0x1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40808)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000017c0)={'ip6tnl0\x00', &(0x7f0000001740)={'syztnl0\x00', <r21=>0x0, 0x2f, 0x4, 0x4e, 0x6, 0xc, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x1, 0x56e, 0xfffffffd}})
getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001840)=0x14)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d40)={&(0x7f0000001880)={0x4a0, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r4}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x110}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x240, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x33}}, {0x8, 0x6, r20}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r22}}}]}}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x40400c1}, 0x4000)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf250c000000d9b2799a9578cdfbe355239c73408ff146ec732fd5d77043d22b9f90a928b4a27bb6c86ae171ce77d2c434bf02735cb4f5f95fa64c1961b3b49df774a8f1d0d6532315d4004cce3202c775ca61400f5edbf655b95d780b4ec43c836162b3a7c5b831e2f5bf4ecfb3b36e9b4b0990e8c7477bf3c48e11a70d91221fad2602cb84742a001a9896ae89f17bdcb9442d2f775495c38251abb8dc0969da915e6780a7b003c14e10f173dad0a472df1946a1739838e34c5a7cb0d7315dfa0c494954bb9beaab6d0c0aec"], 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x0)

41.606060805s ago: executing program 0 (id=1622):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) (async)
r1 = gettid()
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1) (async, rerun: 32)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r1) (rerun: 32)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000000c0)=<r2=>0x0)
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={r1, r2, 0xee01}, 0xc) (async, rerun: 32)
write$cgroup_type(r0, &(0x7f0000000140), 0x9) (async, rerun: 32)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000180)={<r3=>0x0, 0x9, 0xff})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000580)={r3, "357e0ca6acf251a2039e93d33a4f94da"}) (async)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x44, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4040040) (async, rerun: 32)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001700), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0xc000)
mmap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x3000009, 0x400a010, r0, 0xb6f4a000) (async)
r6 = accept4$unix(r0, &(0x7f0000001800), &(0x7f0000001880)=0x6e, 0x800) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001900)={r1, r0, 0x0, 0x3, &(0x7f00000018c0)='\xb4,\x00'}, 0x30) (async)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001940)={<r7=>r3, "00eaa085f81bd9ed5640a16fe65b36e4"})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000002940)={r7, 0x8, 0x1, [0x4, 0x8000000000000001, 0x81, 0xd, 0x100000001], [0x0, 0x0, 0x4, 0x3, 0x7, 0x8, 0x5, 0x9, 0x34f, 0xc000000000000000, 0x7d, 0x1000000000, 0x2, 0x3, 0xa5df, 0x2, 0xbb, 0x9, 0x0, 0x1, 0x9, 0x7, 0xc, 0x1, 0x4db2, 0x1, 0xffffffff, 0x6, 0x8, 0x7, 0x3e, 0x0, 0x6, 0x40, 0x3ff, 0x40, 0x8, 0xfffffffffffffff3, 0x0, 0xa171, 0x6, 0xa, 0x8000, 0xfffffffffffffffc, 0x8, 0xe, 0x8f3, 0xe67c, 0x81, 0x0, 0x4, 0x4, 0x7, 0x6, 0x1, 0xbd, 0x49c421e9, 0x7fff, 0x4, 0x3, 0x3cb, 0x9, 0x0, 0x7, 0x3, 0x2e6, 0xcdc9, 0x5, 0x0, 0x4, 0x8, 0xff, 0x8, 0x6, 0x40, 0x2, 0xffffffffffffffff, 0x6, 0x2, 0x1, 0x4, 0x0, 0x0, 0x3ff, 0x279b2f5a, 0x8, 0x100000000, 0xc, 0x6, 0x6, 0x7, 0x100, 0x3, 0x2, 0x8000000000000001, 0xfffffffffffffdeb, 0x3, 0x4, 0x9, 0x3, 0x4, 0x0, 0x4, 0x401, 0x4, 0x9, 0x1, 0xffffffffffffffff, 0x2, 0x9, 0x5, 0x7, 0x400, 0xf592, 0x8, 0x0, 0xa, 0x6, 0xae, 0x5, 0xffffffffffff2ab1]})
socket$igmp6(0xa, 0x3, 0x2) (async)
recvmsg$unix(r6, &(0x7f0000004280)={0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002d80)=""/100, 0x64}, {&(0x7f0000002e00)=""/211, 0xd3}, {&(0x7f0000002f00)=""/155, 0x9b}, {&(0x7f0000002fc0)=""/111, 0x6f}, {&(0x7f0000003040)=""/105, 0x69}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/16, 0x10}, {&(0x7f0000004100)=""/127, 0x7f}], 0x8, &(0x7f0000004200)=[@rights={{0x38, 0x1, 0x1, [<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, <r14=>0xffffffffffffffff, 0xffffffffffffffff, <r15=>0xffffffffffffffff, 0xffffffffffffffff, <r16=>0xffffffffffffffff, 0xffffffffffffffff, <r17=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x40000023)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004680)={r0, 0xe0, &(0x7f0000004580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000043c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r18=>0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000004400)=[0x0], &(0x7f0000004440)=[0x0, 0x0], <r19=>0x0, 0xfb, &(0x7f0000004480)=[{}, {}], 0x10, 0x10, &(0x7f00000044c0), &(0x7f0000004500), 0x8, 0xf4, 0x8, 0x8, &(0x7f0000004540)}}, 0x10)
sendmsg$inet(r10, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004380)=[{&(0x7f00000042c0)="b6c52e443eaa324ee2ccb5e5c83a807a4e643218641fc603022adf0ee3e1e1274f5012121b36244f2be464b55d2d08b1e6441ba2939b914dd5b1753c74cfec88c407893d5f76de47ac585ec47c7601e7de3fcb74cd355dc803e68e60572b7aa4944e4155d7e7120c09697d6ffcc7bd3f5761c6cfc2ff2b140f7fc8a965e2372817dfe0506d3e43f74ad882efc2e44f62f21dc7aae272a4602425346b816fd7c8671700e97bdf68c2a47784", 0xab}], 0x1, &(0x7f00000046c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x594}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r18, @broadcast, @private=0xa010101}}}, @ip_retopts={{0xf4, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xcb, 0x0, 0x3, [0x3, 0x1, 0x0, 0x10001]}, @cipso={0x86, 0x22, 0x1, [{0x6, 0x2}, {0x0, 0x10, "ada74a5e9025bac6b53c0e075896"}, {0x1, 0xa, "c7d19b04594d0644"}]}, @rr={0x7, 0x13, 0x24, [@dev={0xac, 0x14, 0x14, 0x33}, @remote, @local, @dev={0xac, 0x14, 0x14, 0x1e}]}, @timestamp={0x44, 0x14, 0x8c, 0x0, 0x4, [0x3, 0x10, 0xff, 0xfff]}, @end, @timestamp_addr={0x44, 0x34, 0x5c, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x4}, {@local, 0x7}, {@rand_addr=0x64010102, 0x4}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x3}]}, @ra={0x94, 0x4}, @noop, @cipso={0x86, 0x47, 0x3, [{0x0, 0x3, "ea"}, {0x0, 0x9, "bff4853e98050b"}, {0x0, 0x5, "8230a4"}, {0x1, 0xc, "bbbc7ec6644bf3f12229"}, {0x2, 0x12, "342b8cd4212763d883243ccaa6701b31"}, {0x2, 0x12, "de1121a8e0f0fcc21c204c382821dde8"}]}, @ra={0x94, 0x4, 0x1}]}}}], 0x148}, 0x40000) (async)
r20 = accept4(r9, 0x0, &(0x7f0000004880), 0x80000)
sendmsg$key(r20, &(0x7f0000004a00)={0x0, 0x0, &(0x7f00000049c0)={&(0x7f00000048c0)={0x2, 0x0, 0x2, 0x9, 0x1b, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_x_sa2={0x2, 0x13, 0xd4, 0x0, 0x0, 0x70bd2a, 0x3504}, @sadb_key={0x16, 0x8, 0x528, 0x0, "9faf581b2672b5e78c8f3568ff2833474cd5b6a06054fed64a0f104d9f7345566fdec4239de456595c29370022f0f2e6200857226866601f19ab7304867b03c953d3d7dee16199663aa18f36d94855d4b430ee0b96216dfbb1ac7513a4173fff14bfcb2b92b9d870f4299a6c87589c612c1cab40dd53b825b79d4df10850508d7f7fc46a79b9a8db0ff3a976a9ee0f67bcdef05d68a606324f0d59b6b3d6b5a70448937df6"}]}, 0xd8}}, 0x880) (async, rerun: 32)
r21 = bpf$MAP_CREATE(0x0, &(0x7f0000004a40)=@base={0xc, 0x10000, 0x2, 0x10, 0x8410, r11, 0x7, '\x00', r18, r15, 0x0, 0x1, 0xfffffffb, 0x0, @value=r8}, 0x50) (async, rerun: 32)
sendmsg$SOCK_DIAG_BY_FAMILY(r14, &(0x7f0000004c00)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x42103020}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004b00)={0xc0, 0x14, 0x800, 0x70bd29, 0x25dfdbfb, {0x1a, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "0f0b8687f1a4a2a0fd9c483e6450a3591d093c0d6574e5469b1d4fd3e62925d2a264ab8d2d2129e34e8bcf63f136d00963ee0ae134d869bae1cf5927eb83309ba23ced3264082a71471dcc145e9bde5d43f37364e4ec15f5393a387d8c88186c4d72bb6d83df69341712d51e889a379ed7c5fcf9304eaa57a09794a58f5fa941ac9edfedbc07ffe0b761ed687ab4a68c6879079a45780711451b1a4792cf6f2e76c842e6378a"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x855}, 0x4081) (async)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004cc0)={{r16, <r22=>0xffffffffffffffff}, &(0x7f0000004c40), &(0x7f0000004c80)=r17}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000004f40)={0x3, 0x17, &(0x7f0000004d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@jmp={0x5, 0x0, 0x1, 0x7, 0x5, 0xffffffffffffffe0, 0x8}, @jmp={0x5, 0x0, 0x4, 0x3, 0x9, 0xffffffffffffffff, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r22}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000004dc0)='GPL\x00', 0x6, 0x5a, &(0x7f0000004e00)=""/90, 0x41000, 0x4, '\x00', r18, @sched_cls=0x2e, r0, 0x8, &(0x7f0000004e80)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, r19, r10, 0x2, &(0x7f0000004ec0)=[r10, r21, r8, r16, r21, r13], &(0x7f0000004f00)=[{0x5, 0x1, 0xa, 0xd}, {0x4, 0x3, 0xb, 0xc}], 0x10, 0x9}, 0x94)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f0000005100)={0x0, 0x5}, &(0x7f0000005140)=0x8)

41.540564763s ago: executing program 4 (id=1623):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000400)="936af2963f8abd52372cca3a030c53a6ecd0716530029bf497d473b77afa830c4c98f45c838c3e2a1914f3e017d0ba56566123861a231757590d500485dfa70be3c47c5ba3f0dd1761c829a16f9b770d762e03c76034b7985f0e5e88a0fd7b2cddd8ed6935c9324bb0c82cfe33b065f87491076d2f9477232f2be13bbc06658ebc92d07c171f60f3e1be9f7969b8089cef1661ace4e82dd0d1b67c224365ec723ef4d8c56f49bfea321b66375840c9e0cb734164e2ff7e35ed3aec75bc", &(0x7f0000000540)=""/154, &(0x7f0000000600)="5ae0be47bb89e22c2418e1c848125c2ae411db9db7c7b549a90c004150c6c6138016bcbe7fe2d5ecafe603c6e16cc295b443603f635db0d3d3d2f630d3b7024deeba2b62da3e5113956ee3b313f179563270415a6b5e6c7d2aa3a42629bfa4ca8d031503f840bd93dceeaad42e7522fdc7cdb6d5b83631068508b9a99b08dd8e0d6d601e4ea7356f79d47c562a0da3c1824f2117fd959769ea9d72131c91bf4ad5b8b71ff5ac7c9cbb8c54ec54", &(0x7f00000006c0)="ecf50ef0be539909725c4bd30b3ee22076c053483634013ab09fbb7f9e525d9694179ddd10e4a8c9cf9259a353b19745956391115c3c0d3d759aa7dc020e4626c2c15493b00876c04244fd57506142a5435d02622b898b7b104106a223949e4ceb81efd9deffcdc60a9f35c722d9fc2d5725381f0dcdac42cc11a60a40956ab06ee5a0fa182040afee9be56055094b2d5b6b2d1bc1c38e488ed1e5149917a0f09e6ff3a470a783a4f758dac9b5fbe52bb77ec37132ddce0858aa23c8d5a114aa088d5359a667f76a1feeb61653fb1272f32c7ec7e10240a1abe9f507fdef14f3c3a2969e3854052c5a2c", 0x5a0b, r1}, 0x38)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)

41.475261909s ago: executing program 0 (id=1624):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0)
r2 = socket$inet(0xa, 0x801, 0x84)
listen(r2, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x7021, @private0, 0x7fffffff}], 0x1c)
recvfrom$llc(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/175, 0xaf}], 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x404, 0x4)

41.469534197s ago: executing program 2 (id=1625):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x18) (async, rerun: 64)
unshare(0x62040200) (rerun: 64)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f9078ac1c0001e000000100006558001890780400000000000000be04000000"], 0x3e)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5452, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000780)="e58465dead113e82fe6d216c7a9c0104e5afe5250fad9272c00bbd8ff6c1a82c83d62b4833568709446177769dc15d473a000acce2b47832bd2be1fcba454e613fa1ec1fad37d4e0046e0afa346a9d4f8592dfa8a62e3e98f5ae90512b5d981b3cf24af0d736801c6604da6b846fade76b4e09d32b0e8763651c1acacd35788068644f26abcd5763d78c8fc4f3b8e457a78f980b1f7c611fbb4ebff4973c", 0x9e, 0x44, &(0x7f00000003c0)={0xa, 0x4e23, 0x7, @private0, 0x574}, 0x1c) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0)
write(r5, 0x0, 0x91cb1e61)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4c1ce000) (async, rerun: 32)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0) (rerun: 32)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async)
setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x8a, 0x0, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000037000b002dbd78000a", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000080) (async, rerun: 32)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10)

36.229332711s ago: executing program 3 (id=1626):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r1 = socket$netlink(0x10, 0x3, 0xb)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @local, 0x9}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x40000)
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r2, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000ffffffff00000000000000850000001b000000b700000000000000950000000000000079d18d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x0, 'veth1_to_bond\x00', {0x1}, 0x7})
setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000200)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0)

36.074958226s ago: executing program 0 (id=1627):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="dc010000160001000000000000000000fe880000000000000000000000000001fe80000000000000000000000000001b000000fb000000000000200004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14143f000000000000000000000000000004d36c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000003000000000000000000000000000000090000000000000000000400000000000000000000000000000000000000000000000000000000000200000026bd7000020000100200000000000000000000000400000005000000e4000600ffffffff0000000000000000000000007f0000010000000000000000000000004e2100404e2200080a00008004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000002000004d2ff000000fc010000000000000000000000000001010000000000000000000000000000001000000000000000010000000100000005000000000000000400000000000000d100000000000000040000000000000002000000000000000500000000000000020000000000000009000000000000007107000080000000000000002cbd7000003500000a0001058c00000000000000"], 0x1dc}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)

33.804648516s ago: executing program 4 (id=1628):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$llc_int(r3, 0x10c, 0x7, 0x0, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
shutdown(r1, 0x1)
ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@none})
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r6})
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffe, 0x2ffffffff}, 0xc)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="871d62ef15abd8307b4fcb2e25bff13c7f38a802a9139e55b47801feeb21df24460a278feeb703a1f21903f888d9dc62848557095d1e670b65cdea4deff75025e601deea6ef58d965c9ffd93d9e34493bd41e6729f91228d1bfaaa702ebfe123cc3d14971e9cdde8692f16d028bb074d3aa32824432227e17d721002f9b19feef9028d78a962", @ANYRES16=0x0, @ANYBLOB="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"], 0x6c4}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010)

29.584335727s ago: executing program 0 (id=1629):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x29, 0x100000005, 0xfffffffd, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r3 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4c, &(0x7f0000000180)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3e, 0x67, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0x3ff, "7d980eb329ff8dafb7a0b5c7ca802a62e33f8ed8a552c9ecd8285a011eb3a440e3eb"}}}}}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x60, 0x1411, 0x1, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x35}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

27.397857431s ago: executing program 1 (id=1630):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x2d, 0x0, 0x7, 0x8000}, {0x6}]}, 0x10)

23.832534487s ago: executing program 32 (id=1625):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x18) (async, rerun: 64)
unshare(0x62040200) (rerun: 64)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f9078ac1c0001e000000100006558001890780400000000000000be04000000"], 0x3e)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5452, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000780)="e58465dead113e82fe6d216c7a9c0104e5afe5250fad9272c00bbd8ff6c1a82c83d62b4833568709446177769dc15d473a000acce2b47832bd2be1fcba454e613fa1ec1fad37d4e0046e0afa346a9d4f8592dfa8a62e3e98f5ae90512b5d981b3cf24af0d736801c6604da6b846fade76b4e09d32b0e8763651c1acacd35788068644f26abcd5763d78c8fc4f3b8e457a78f980b1f7c611fbb4ebff4973c", 0x9e, 0x44, &(0x7f00000003c0)={0xa, 0x4e23, 0x7, @private0, 0x574}, 0x1c) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0)
write(r5, 0x0, 0x91cb1e61)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4c1ce000) (async, rerun: 32)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0) (rerun: 32)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async)
setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x8a, 0x0, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000037000b002dbd78000a", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000080) (async, rerun: 32)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10)

20.733929727s ago: executing program 0 (id=1632):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r3)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0xffff, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0xc43}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xa0600}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12032}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xf}]}}]}, 0x5c}}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x70, r4, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800)
bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
r13 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r13, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r11, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x30}}, 0x0)
sendfile(r2, r9, 0x0, 0xffffffff000)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xfe00}]}}}]}, 0x38}}, 0x0)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}, @IFLA_EVENT={0x8, 0x2c, 0x2}]}, 0x44}}, 0x0)
ppoll(&(0x7f0000000300)=[{r0, 0x100}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0)

19.173970116s ago: executing program 33 (id=1626):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r1 = socket$netlink(0x10, 0x3, 0xb)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @local, 0x9}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x40000)
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r2, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000ffffffff00000000000000850000001b000000b700000000000000950000000000000079d18d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x0, 'veth1_to_bond\x00', {0x1}, 0x7})
setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000200)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0)

18.993365601s ago: executing program 1 (id=1634):
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'team0\x00', {0x2, 0x0, @private}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x2}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map, r4, 0x5}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
write$bt_hci(r0, 0x0, 0x0)

17.481447216s ago: executing program 34 (id=1628):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$llc_int(r3, 0x10c, 0x7, 0x0, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
shutdown(r1, 0x1)
ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@none})
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r6})
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffe, 0x2ffffffff}, 0xc)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="871d62ef15abd8307b4fcb2e25bff13c7f38a802a9139e55b47801feeb21df24460a278feeb703a1f21903f888d9dc62848557095d1e670b65cdea4deff75025e601deea6ef58d965c9ffd93d9e34493bd41e6729f91228d1bfaaa702ebfe123cc3d14971e9cdde8692f16d028bb074d3aa32824432227e17d721002f9b19feef9028d78a962", @ANYRES16=0x0, @ANYBLOB="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"], 0x6c4}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010)

3.030052782s ago: executing program 35 (id=1632):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r3)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0xffff, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0xc43}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xa0600}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12032}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xf}]}}]}, 0x5c}}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x70, r4, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800)
bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
r13 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r13, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r11, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x30}}, 0x0)
sendfile(r2, r9, 0x0, 0xffffffff000)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xfe00}]}}}]}, 0x38}}, 0x0)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}, @IFLA_EVENT={0x8, 0x2c, 0x2}]}, 0x44}}, 0x0)
ppoll(&(0x7f0000000300)=[{r0, 0x100}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0)

0s ago: executing program 36 (id=1634):
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'team0\x00', {0x2, 0x0, @private}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x2}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map, r4, 0x5}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
write$bt_hci(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

us mode
[  104.759587][ T6294] syzkaller1: entered allmulticast mode
[  104.768957][ T6288] syz.3.77 (6288) used greatest stack depth: 17992 bytes left
[  104.881137][ T6305] Bluetooth: MGMT ver 1.23
[  104.917401][ T6301] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  104.941597][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  105.157611][ T6195] udevd[6195]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  105.229195][ T6195] udevd[6195]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  105.657793][ T6333] xt_CT: No such helper "snmp"
[  105.985056][ T6363] pim6reg1: entered promiscuous mode
[  105.998656][ T6363] pim6reg1: entered allmulticast mode
[  106.203125][ T6195] udevd[6195]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  106.242542][ T6374] __nla_validate_parse: 6 callbacks suppressed
[  106.242562][ T6374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.100'.
[  106.277919][ T5917] udevd[5917]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  106.549756][ T6385] trusted_key: syz.3.103 sent an empty control message without MSG_MORE.
[  106.809592][ T6395] netlink: 104 bytes leftover after parsing attributes in process `syz.3.106'.
[  106.858934][ T6396] syzkaller0: tun_chr_ioctl cmd 1074025677
[  106.903411][ T6396] syzkaller0: linktype set to 774
[  106.926330][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'.
[  106.969465][ T6402] netlink: 120 bytes leftover after parsing attributes in process `syz.1.109'.
[  107.009289][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'.
[  107.030634][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  107.184480][ T6414] netlink: 'syz.2.110': attribute type 1 has an invalid length.
[  107.542940][ T6433] netlink: 'syz.3.117': attribute type 13 has an invalid length.
[  107.729167][ T6443] netlink: 60 bytes leftover after parsing attributes in process `syz.4.119'.
[  107.767511][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.776083][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.345109][ T6433] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.446813][ T6433] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.561260][ T6474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.121'.
[  108.689214][   T61] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.765032][ T6475] vlan2: entered allmulticast mode
[  108.770221][ T6475] dummy0: entered allmulticast mode
[  108.851778][   T61] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.872834][   T61] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.908713][   T61] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.409678][ T6499] netlink: 'syz.3.126': attribute type 4 has an invalid length.
[  109.494560][ T6498] netlink: 'syz.3.126': attribute type 4 has an invalid length.
[  109.698381][ T6506] netlink: 'syz.2.129': attribute type 13 has an invalid length.
[  109.730655][ T6506] netlink: 'syz.2.129': attribute type 17 has an invalid length.
[  109.849744][ T6506] gretap0: refused to change device tx_queue_len
[  109.871059][ T6506] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  109.999647][ T6519] netlink: 20 bytes leftover after parsing attributes in process `syz.1.134'.
[  110.157556][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'.
[  110.188872][ T6522] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.135'.
[  110.296896][ T6152] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.339469][ T6152] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.379633][ T6152] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.401014][ T6152] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.886728][ T6556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  111.209630][ T6574] netlink: 'syz.1.152': attribute type 23 has an invalid length.
[  111.734864][ T6603] __nla_validate_parse: 4 callbacks suppressed
[  111.734883][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'.
[  112.474146][ T6616] syzkaller0: entered promiscuous mode
[  112.479933][ T6616] syzkaller0: entered allmulticast mode
[  112.938326][ T6654] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  112.966498][ T6654] netlink: 'syz.4.171': attribute type 3 has an invalid length.
[  113.017933][ T6654] netlink: 'syz.4.171': attribute type 3 has an invalid length.
[  113.069791][ T6654] netlink: 16 bytes leftover after parsing attributes in process `syz.4.171'.
[  114.221298][ T6693] netlink: 'syz.2.180': attribute type 1 has an invalid length.
[  114.260479][ T6669] geneve2: entered promiscuous mode
[  114.280561][ T6669] geneve2: entered allmulticast mode
[  114.474800][ T6675] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.482644][ T6675] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.521713][ T6152] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  114.560716][   T61] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  114.658980][   T61] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  114.687437][   T61] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  114.901813][ T6719] geneve3: entered promiscuous mode
[  114.907918][ T6716] netlink: 32 bytes leftover after parsing attributes in process `syz.4.184'.
[  114.936383][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'.
[  115.273980][ T6739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.187'.
[  115.860114][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'.
[  115.894799][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.195'.
[  115.908510][ T6769] vlan2: entered allmulticast mode
[  115.917633][ T6769] dummy0: entered allmulticast mode
[  116.276962][ T6783] netlink: 'syz.0.199': attribute type 1 has an invalid length.
[  116.419483][ T6787] 8021q: VLANs not supported on vcan0
[  116.559374][ T6793] netlink: 20 bytes leftover after parsing attributes in process `syz.3.203'.
[  116.923318][ T6808] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  116.979280][ T6810] x_tables: duplicate underflow at hook 1
[  117.416382][ T6833] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  117.557389][ T6840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.575608][ T6840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.595785][ T6840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.608924][ T6840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.629689][ T6840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.107462][ T6858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.218'.
[  118.168265][ T6861] netlink: 'syz.2.219': attribute type 1 has an invalid length.
[  119.011508][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'.
[  119.058271][ T6894] geneve2: entered promiscuous mode
[  119.165344][ T6894] geneve2: entered allmulticast mode
[  119.216635][ T6152] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 44147 - 0
[  119.529927][ T6846] syz.3.213: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  119.574405][ T6152] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 44147 - 0
[  119.600864][ T6152] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 44147 - 0
[  119.627462][ T6926] netlink: 27 bytes leftover after parsing attributes in process `syz.2.227'.
[  119.640647][ T6846] CPU: 1 UID: 0 PID: 6846 Comm: syz.3.213 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) 
[  119.640679][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  119.640701][ T6846] Call Trace:
[  119.640710][ T6846]  <TASK>
[  119.640720][ T6846]  dump_stack_lvl+0x189/0x250
[  119.640767][ T6846]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.640795][ T6846]  ? __pfx__printk+0x10/0x10
[  119.640827][ T6846]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  119.640868][ T6846]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  119.640901][ T6846]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  119.640935][ T6846]  warn_alloc+0x214/0x310
[  119.640974][ T6846]  ? __pfx_warn_alloc+0x10/0x10
[  119.641017][ T6846]  ? __get_vm_area_node+0x28f/0x300
[  119.641047][ T6846]  ? __do_replace+0xb4/0xaa0
[  119.641074][ T6846]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  119.641105][ T6846]  ? stack_depot_save_flags+0x40/0x900
[  119.641166][ T6846]  ? translate_table+0x1b4d/0x1f90
[  119.641191][ T6846]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  119.641230][ T6846]  ? __do_replace+0xb4/0xaa0
[  119.641252][ T6846]  vzalloc_noprof+0xb2/0xf0
[  119.641281][ T6846]  ? __do_replace+0xb4/0xaa0
[  119.641305][ T6846]  __do_replace+0xb4/0xaa0
[  119.641330][ T6846]  ? __pfx_translate_table+0x10/0x10
[  119.641359][ T6846]  ? __pfx___do_replace+0x10/0x10
[  119.641393][ T6846]  ? _copy_from_user+0x94/0xb0
[  119.641427][ T6846]  do_arpt_set_ctl+0xa2a/0xf10
[  119.641454][ T6846]  ? __mutex_trylock_common+0x153/0x260
[  119.641489][ T6846]  ? __pfx_do_arpt_set_ctl+0x10/0x10
[  119.641517][ T6846]  ? rcu_is_watching+0x15/0xb0
[  119.641561][ T6846]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  119.641597][ T6846]  ? __pfx___mutex_lock+0x10/0x10
[  119.641628][ T6846]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  119.641657][ T6846]  ? aa_sk_perm+0x81e/0x950
[  119.641696][ T6846]  ? __pfx_aa_sk_perm+0x10/0x10
[  119.641735][ T6846]  nf_setsockopt+0x26c/0x290
[  119.641773][ T6846]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  119.641805][ T6846]  do_sock_setsockopt+0x257/0x3e0
[  119.641853][ T6846]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  119.641894][ T6846]  ? __fget_files+0x2a/0x420
[  119.641936][ T6846]  __x64_sys_setsockopt+0x18b/0x220
[  119.641979][ T6846]  do_syscall_64+0xfa/0x3b0
[  119.642009][ T6846]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.642036][ T6846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.642059][ T6846]  ? clear_bhb_loop+0x60/0xb0
[  119.642086][ T6846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.642108][ T6846] RIP: 0033:0x7fa5d938e929
[  119.642135][ T6846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.642155][ T6846] RSP: 002b:00007fa5d71f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  119.642179][ T6846] RAX: ffffffffffffffda RBX: 00007fa5d95b6160 RCX: 00007fa5d938e929
[  119.642196][ T6846] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003
[  119.642209][ T6846] RBP: 00007fa5d9410b39 R08: 0000000000000068 R09: 0000000000000000
[  119.642223][ T6846] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  119.642237][ T6846] R13: 0000000000000000 R14: 00007fa5d95b6160 R15: 00007ffd052914e8
[  119.642272][ T6846]  </TASK>
[  119.642293][ T6846] Mem-Info:
[  119.987836][ T6846] active_anon:7391 inactive_anon:0 isolated_anon:0
[  119.987836][ T6846]  active_file:1339 inactive_file:39837 isolated_file:0
[  119.987836][ T6846]  unevictable:768 dirty:28 writeback:0
[  119.987836][ T6846]  slab_reclaimable:10546 slab_unreclaimable:112802
[  119.987836][ T6846]  mapped:38089 shmem:4231 pagetables:1149
[  119.987836][ T6846]  sec_pagetables:0 bounce:0
[  119.987836][ T6846]  kernel_misc_reclaimable:0
[  119.987836][ T6846]  free:1306560 free_pcp:13196 free_cma:0
[  120.034129][ T6846] Node 0 active_anon:29664kB inactive_anon:0kB active_file:5356kB inactive_file:159144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152356kB dirty:104kB writeback:0kB shmem:15388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12264kB pagetables:4436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  120.068349][ T6933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.230'.
[  120.084820][ T6846] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  120.134772][ T6846] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  120.166038][ T6846] lowmem_reserve[]: 0 2498 2499 2499 2499
[  120.171967][ T6846] Node 0 DMA32 free:1312532kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29616kB inactive_anon:0kB active_file:5356kB inactive_file:157568kB unevictable:1536kB writepending:104kB present:3129332kB managed:2558316kB mlocked:0kB bounce:0kB free_pcp:31088kB local_pcp:8776kB free_cma:0kB
[  120.207033][ T6846] lowmem_reserve[]: 0 0 1 1 1
[  120.213649][ T6846] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  120.245410][ T6846] lowmem_reserve[]: 0 0 0 0 0
[  120.250283][ T6846] Node 1 Normal free:3897632kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20168kB local_pcp:12196kB free_cma:0kB
[  120.281759][ T6846] lowmem_reserve[]: 0 0 0 0 0
[  120.287361][ T6917] syzkaller0: entered promiscuous mode
[  120.288910][ T6846] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  120.296618][ T6917] syzkaller0: entered allmulticast mode
[  120.306241][ T6846] Node 0 DMA32: 3*4kB (UME) 3*8kB (UME) 1*16kB (E) 75*32kB (UE) 124*64kB (UM) 58*128kB (UME) 27*256kB (UM) 13*512kB (UM) 7*1024kB (ME) 2*2048kB (UM) 310*4096kB (M) = 1312404kB
[  120.334577][ T6846] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  120.387484][ T6846] Node 1 Normal: 214*4kB (UE) 51*8kB (UME) 35*16kB (UME) 56*32kB (UME) 24*64kB (UM) 4*128kB (UME) 7*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (UM) = 3897632kB
[  120.420763][ T6846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  120.430361][ T6846] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  120.440569][ T6930] bond1: entered promiscuous mode
[  120.454645][ T6930] bond1: entered allmulticast mode
[  120.473056][ T6930] 8021q: adding VLAN 0 to HW filter on device bond1
[  120.476004][ T6846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  120.490322][ T6846] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  120.497290][ T6152] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 44147 - 0
[  120.500682][ T6846] 45403 total pagecache pages
[  120.513466][ T6846] 0 pages in swap cache
[  120.517649][ T6846] Free swap  = 124996kB
[  120.524729][ T6846] Total swap = 124996kB
[  120.528912][ T6846] 2097051 pages RAM
[  120.562637][ T6846] 0 pages HighMem/MovableOnly
[  120.588171][ T6846] 425430 pages reserved
[  120.608482][ T6846] 0 pages cma reserved
[  122.332262][ T6942] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.344885][ T6942] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 44147 - 0
[  122.526882][ T6942] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.576717][ T6942] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 44147 - 0
[  122.764670][ T6942] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.797109][ T6942] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 44147 - 0
[  122.835330][ T7007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.242'.
[  123.004893][ T7000] netlink: 248 bytes leftover after parsing attributes in process `syz.2.240'.
[  123.064200][ T6942] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.084399][ T6942] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 44147 - 0
[  123.115620][ T7017] Bluetooth: MGMT ver 1.23
[  123.229922][ T7013] ip6gre1: entered allmulticast mode
[  123.496817][ T7030] IPVS: length: 24 != 10680
[  123.515973][   T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 44147 - 0
[  123.542331][   T37] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  123.568109][   T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 44147 - 0
[  123.576723][   T37] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  123.606453][ T7032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.247'.
[  123.631532][ T7032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.247'.
[  123.675102][ T7034] warning: `syz.3.248' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  123.706566][ T7032] dummy0: entered promiscuous mode
[  123.737398][ T7032] team0: entered promiscuous mode
[  123.766011][ T7032] team_slave_0: entered promiscuous mode
[  123.774052][ T7032] team_slave_1: entered promiscuous mode
[  123.807800][ T2953] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 44147 - 0
[  123.819768][ T2953] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  123.907058][  T522] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 44147 - 0
[  123.938294][  T522] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  123.963092][ T7045] veth1_macvtap: left promiscuous mode
[  124.275595][ T7055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.254'.
[  124.565021][ T7072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.259'.
[  124.610463][ T7076] netlink: 20 bytes leftover after parsing attributes in process `syz.0.258'.
[  125.179182][ T7110] netlink: 'syz.4.266': attribute type 1 has an invalid length.
[  125.257703][ T7117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.268'.
[  125.359578][   T44] IPVS: starting estimator thread 0...
[  125.471458][ T7126] IPVS: using max 28 ests per chain, 67200 per kthread
[  125.652753][ T7140] dvmrp0: entered allmulticast mode
[  125.969817][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'.
[  126.163869][ T7170] netlink: 'syz.3.278': attribute type 2 has an invalid length.
[  126.227494][ T7171] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.280'.
[  126.403857][ T7181] syz.4.281 uses old SIOCAX25GETINFO
[  126.548786][ T7184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.283'.
[  126.918827][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'.
[  126.998457][ T7211] Bluetooth: MGMT ver 1.23
[  127.015763][ T7208] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.116375][ T7208] bridge_slave_1 (unregistering): left allmulticast mode
[  127.126132][ T7208] bridge_slave_1 (unregistering): left promiscuous mode
[  127.140008][ T7208] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.483674][ T7234] tipc: Started in network mode
[  127.492775][ T7234] tipc: Node identity ff, cluster identity 4711
[  127.499160][ T7234] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  127.895661][ T7248] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  128.058373][ T7257] netlink: 'syz.2.304': attribute type 21 has an invalid length.
[  128.159050][ T7257] netlink: 'syz.2.304': attribute type 6 has an invalid length.
[  128.607714][ T7278] vlan3: entered promiscuous mode
[  128.655182][ T7278] vlan3: entered allmulticast mode
[  128.695588][ T7278] hsr_slave_1: entered allmulticast mode
[  128.833979][ T7281] __nla_validate_parse: 9 callbacks suppressed
[  128.833998][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'.
[  129.091384][ T7293] netlink: 'syz.4.314': attribute type 1 has an invalid length.
[  129.122079][ T7293] netlink: 'syz.4.314': attribute type 4 has an invalid length.
[  129.166803][ T7293] netlink: 192 bytes leftover after parsing attributes in process `syz.4.314'.
[  129.479766][ T7307] : entered promiscuous mode
[  129.833567][ T7328] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  129.893334][ T7328] netlink: 'syz.4.325': attribute type 84 has an invalid length.
[  130.258745][ T7342] netlink: 'syz.3.328': attribute type 21 has an invalid length.
[  130.374297][ T7342] netlink: 'syz.3.328': attribute type 6 has an invalid length.
[  130.402685][ T7342] netlink: 64 bytes leftover after parsing attributes in process `syz.3.328'.
[  130.405174][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'.
[  130.518249][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'.
[  130.594188][ T7342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.328'.
[  130.840964][ T7363] netlink: 'syz.2.333': attribute type 9 has an invalid length.
[  130.973865][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'.
[  131.121390][ T7374] netlink: 'syz.3.334': attribute type 1 has an invalid length.
[  131.130148][ T7374] netlink: 600 bytes leftover after parsing attributes in process `syz.3.334'.
[  131.151876][ T7374] netlink: 'syz.3.334': attribute type 1 has an invalid length.
[  131.336536][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'.
[  131.378781][ T7379] netlink: 71 bytes leftover after parsing attributes in process `syz.3.337'.
[  132.292028][ T7420] nbd: device at index 64 is going down
[  132.509368][ T7422] netlink: 'syz.0.351': attribute type 1 has an invalid length.
[  132.534492][ T7422] netlink: 'syz.0.351': attribute type 5 has an invalid length.
[  132.581438][ T7422] ip6erspan0: entered promiscuous mode
[  132.663597][ T7427] netlink: 'syz.3.353': attribute type 11 has an invalid length.
[  132.708361][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  132.718695][ T7429] netlink: 'syz.4.354': attribute type 1 has an invalid length.
[  132.720660][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  132.754838][ T7429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.888280][ T7434] netlink: 'syz.2.356': attribute type 10 has an invalid length.
[  133.254661][ T7444] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  133.713514][ T7457] : entered promiscuous mode
[  133.806275][ T7462] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  133.841826][ T7464] __nla_validate_parse: 9 callbacks suppressed
[  133.841845][ T7464] netlink: 20 bytes leftover after parsing attributes in process `syz.3.367'.
[  134.756318][ T7498] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999
[  134.768883][ T5853] IPVS: starting estimator thread 0...
[  134.864442][ T7498] vlan2: entered promiscuous mode
[  134.887697][ T7498] bridge0: entered promiscuous mode
[  134.911213][ T7500] IPVS: using max 30 ests per chain, 72000 per kthread
[  134.921241][ T7498] vlan2: entered allmulticast mode
[  134.926392][ T7498] bridge0: entered allmulticast mode
[  135.015919][ T7511] netlink: 120 bytes leftover after parsing attributes in process `syz.4.376'.
[  135.148383][ T7516] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.378'.
[  135.169384][ T7513] netlink: 224 bytes leftover after parsing attributes in process `syz.1.377'.
[  135.325028][ T7524] netlink: 240 bytes leftover after parsing attributes in process `syz.3.380'.
[  135.401935][ T7527] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.382'.
[  135.525813][ T7531] validate_nla: 2 callbacks suppressed
[  135.525832][ T7531] netlink: 'syz.3.384': attribute type 2 has an invalid length.
[  135.560290][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'.
[  135.571968][ T7531] netlink: 'syz.3.384': attribute type 1 has an invalid length.
[  135.606061][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'.
[  135.698260][ T7531] netlink: 24 bytes leftover after parsing attributes in process `syz.3.384'.
[  135.877653][ T7531] netlink: 48 bytes leftover after parsing attributes in process `syz.3.384'.
[  135.939438][ T7549] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  135.947238][  T981] IPVS: starting estimator thread 0...
[  135.973211][ T7555] xt_hashlimit: size too large, truncated to 1048576
[  136.071507][ T7556] IPVS: using max 34 ests per chain, 81600 per kthread
[  136.389194][ T7559] 8021q: adding VLAN 0 to HW filter on device bond1
[  136.475220][ T7562] 8021q: adding VLAN 0 to HW filter on device bond1
[  136.485786][ T7562] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  136.502513][ T7562] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  137.075041][ T7591] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  137.133858][ T7593] batman_adv: batadv0: Adding interface: ipvlan2
[  137.140835][ T7593] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.194569][ T7593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.213867][ T7597] netlink: 'syz.2.402': attribute type 2 has an invalid length.
[  137.220768][ T7593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.261242][ T7593] batman_adv: batadv0: Interface activated: ipvlan2
[  137.811421][ T7613] syzkaller0: entered promiscuous mode
[  137.816969][ T7613] syzkaller0: entered allmulticast mode
[  138.180345][ T7632] netlink: 'syz.3.412': attribute type 1 has an invalid length.
[  139.909968][ T7640] syzkaller1: entered promiscuous mode
[  139.926789][ T7640] syzkaller1: entered allmulticast mode
[  140.306086][ T7691] __nla_validate_parse: 10 callbacks suppressed
[  140.306105][ T7691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.420'.
[  140.393023][ T7691] bond2: entered promiscuous mode
[  140.399378][ T7691] 8021q: adding VLAN 0 to HW filter on device bond2
[  140.431611][ T7697] netlink: 'syz.4.422': attribute type 2 has an invalid length.
[  140.536484][ T7690] xt_CT: No such helper "syz0"
[  140.713680][ T7713] netlink: 'syz.3.429': attribute type 1 has an invalid length.
[  140.920318][ T7724] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  140.973644][ T7713] 8021q: adding VLAN 0 to HW filter on device bond2
[  140.981540][   T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  141.132575][   T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  141.552183][ T7760] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  141.885627][ T7777] ipvlan1: entered allmulticast mode
[  141.911090][ T7777] veth0_vlan: entered allmulticast mode
[  142.041720][ T7786] x_tables: duplicate underflow at hook 1
[  142.121202][ T7788] netlink: 16 bytes leftover after parsing attributes in process `syz.4.444'.
[  142.257002][ T7795] lo speed is unknown, defaulting to 1000
[  142.287351][ T7795] lo speed is unknown, defaulting to 1000
[  142.320227][ T7801] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.374272][ T7795] lo speed is unknown, defaulting to 1000
[  142.407656][ T7803] netlink: 'syz.4.449': attribute type 21 has an invalid length.
[  142.465371][ T7809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.449'.
[  142.568589][ T7813] netlink: 'syz.2.451': attribute type 4 has an invalid length.
[  143.030545][ T7826] netlink: 32 bytes leftover after parsing attributes in process `syz.4.455'.
[  143.108478][ T7795] infiniband syz0: set down
[  143.114784][ T7795] infiniband syz0: added lo
[  143.119413][  T981] lo speed is unknown, defaulting to 1000
[  143.134233][ T7795] syz0: rxe_create_cq: returned err = -12
[  143.162175][ T7795] infiniband syz0: Couldn't create ib_mad CQ
[  143.168504][ T7795] infiniband syz0: Couldn't open port 1
[  143.237667][ T7795] RDS/IB: syz0: added
[  143.247194][ T7795] smc: adding ib device syz0 with port count 1
[  143.256089][ T7795] smc:    ib device syz0 port 1 has pnetid 
[  143.405612][ T7795] lo speed is unknown, defaulting to 1000
[  143.468266][  T981] lo speed is unknown, defaulting to 1000
[  143.475263][ T7841] netlink: 92 bytes leftover after parsing attributes in process `syz.0.459'.
[  143.499909][ T7841] tc_dump_action: action bad kind
[  143.790054][ T7850] netlink: 348 bytes leftover after parsing attributes in process `syz.4.461'.
[  143.812061][ T7851] netlink: 348 bytes leftover after parsing attributes in process `syz.4.461'.
[  144.010254][ T7860] xt_ecn: cannot match TCP bits for non-tcp packets
[  144.112378][ T7830] lo speed is unknown, defaulting to 1000
[  144.153916][ T7866] netlink: 'syz.2.465': attribute type 39 has an invalid length.
[  144.162880][ T7862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.466'.
[  144.879471][ T7795] lo speed is unknown, defaulting to 1000
[  145.313837][ T7908] netlink: 40 bytes leftover after parsing attributes in process `syz.2.481'.
[  145.588735][ T7795] lo speed is unknown, defaulting to 1000
[  145.718300][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'.
[  145.879613][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'.
[  146.016633][ T7795] lo speed is unknown, defaulting to 1000
[  146.092767][ T7945] netlink: 52 bytes leftover after parsing attributes in process `syz.4.491'.
[  146.970390][ T7795] lo speed is unknown, defaulting to 1000
[  147.113711][   T30] audit: type=1804 audit(1751759450.856:2): pid=7980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.499" name="/newroot/113/memory.events" dev="tmpfs" ino=595 res=1 errno=0
[  147.160613][   T30] audit: type=1800 audit(1751759450.866:3): pid=7980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.499" name="memory.events" dev="tmpfs" ino=595 res=0 errno=0
[  147.267728][ T7983] netlink: 40 bytes leftover after parsing attributes in process `syz.2.500'.
[  147.284628][ T7983] netlink: 84 bytes leftover after parsing attributes in process `syz.2.500'.
[  147.427396][ T7795] lo speed is unknown, defaulting to 1000
[  147.633003][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'.
[  147.722267][ T7994] syzkaller0: entered promiscuous mode
[  147.728806][ T7994] syzkaller0: entered allmulticast mode
[  148.271215][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.504'.
[  148.315899][ T8021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.504'.
[  149.981945][ T8037] syzkaller1: entered allmulticast mode
[  150.168819][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'.
[  150.384164][ T8059] __nla_validate_parse: 1 callbacks suppressed
[  150.384186][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.517'.
[  150.930463][ T8085] C: renamed from team_slave_0 (while UP)
[  150.974206][ T8085] netlink: 'syz.4.523': attribute type 3 has an invalid length.
[  151.026621][ T8088] netlink: 92 bytes leftover after parsing attributes in process `syz.1.524'.
[  151.049869][ T8085] netlink: 116 bytes leftover after parsing attributes in process `syz.4.523'.
[  151.090732][ T8085] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  151.315412][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'.
[  151.628217][ T8115] lo speed is unknown, defaulting to 1000
[  152.091825][ T8128] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  152.098583][ T8128] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  152.488698][ T8139] netlink: 'syz.0.540': attribute type 39 has an invalid length.
[  152.577102][ T8144] bridge_slave_1: left allmulticast mode
[  152.584451][ T8144] bridge_slave_1: left promiscuous mode
[  152.600222][ T8144] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.670793][ T8144] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  153.058016][ T8167] netlink: 'syz.4.547': attribute type 1 has an invalid length.
[  153.401222][ T8182] bridge_slave_0: invalid flags given to default FDB implementation
[  153.504584][ T8183] netlink: 48 bytes leftover after parsing attributes in process `syz.0.550'.
[  154.307023][ T8208] 8021q: adding VLAN 0 to HW filter on device bond2
[  154.659801][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'.
[  154.694340][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.560'.
[  154.795017][ T8234] lo speed is unknown, defaulting to 1000
[  155.961310][ T8263] lo speed is unknown, defaulting to 1000
[  156.096812][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'.
[  156.130439][ T8273] netlink: 36 bytes leftover after parsing attributes in process `syz.1.574'.
[  156.196669][ T8273] netlink: 'syz.1.574': attribute type 30 has an invalid length.
[  156.212810][ T8273] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  156.230941][ T8273] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  156.487578][ T8282] netlink: 'syz.0.576': attribute type 10 has an invalid length.
[  156.517643][ T8282] netlink: 40 bytes leftover after parsing attributes in process `syz.0.576'.
[  156.540138][ T8284] syz.1.577: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  156.562382][ T8284] CPU: 0 UID: 0 PID: 8284 Comm: syz.1.577 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) 
[  156.562414][ T8284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  156.562427][ T8284] Call Trace:
[  156.562436][ T8284]  <TASK>
[  156.562445][ T8284]  dump_stack_lvl+0x189/0x250
[  156.562482][ T8284]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.562509][ T8284]  ? __pfx__printk+0x10/0x10
[  156.562540][ T8284]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  156.562571][ T8284]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  156.562604][ T8284]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  156.562638][ T8284]  warn_alloc+0x214/0x310
[  156.562669][ T8284]  ? stack_depot_save_flags+0x40/0x900
[  156.562706][ T8284]  ? __pfx_warn_alloc+0x10/0x10
[  156.562739][ T8284]  ? kasan_save_track+0x4f/0x80
[  156.562764][ T8284]  ? xskq_create+0x56/0x170
[  156.562788][ T8284]  ? xsk_init_queue+0xb0/0x110
[  156.562810][ T8284]  ? xsk_setsockopt+0x43f/0x710
[  156.562831][ T8284]  ? do_sock_setsockopt+0x257/0x3e0
[  156.562862][ T8284]  ? __x64_sys_setsockopt+0x18b/0x220
[  156.562891][ T8284]  ? do_syscall_64+0xfa/0x3b0
[  156.562918][ T8284]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.562948][ T8284]  __vmalloc_node_range_noprof+0x125/0x12f0
[  156.563011][ T8284]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  156.563049][ T8284]  ? __kasan_kmalloc+0x93/0xb0
[  156.563086][ T8284]  vmalloc_user_noprof+0xad/0xf0
[  156.563116][ T8284]  ? xskq_create+0xbf/0x170
[  156.563143][ T8284]  xskq_create+0xbf/0x170
[  156.563173][ T8284]  xsk_init_queue+0xb0/0x110
[  156.563201][ T8284]  xsk_setsockopt+0x43f/0x710
[  156.563248][ T8284]  ? __pfx_xsk_setsockopt+0x10/0x10
[  156.563272][ T8284]  ? __lock_acquire+0xab9/0xd20
[  156.563320][ T8284]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  156.563339][ T8284]  ? __pfx_xsk_setsockopt+0x10/0x10
[  156.563365][ T8284]  do_sock_setsockopt+0x257/0x3e0
[  156.563401][ T8284]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  156.563439][ T8284]  ? __fget_files+0x2a/0x420
[  156.563478][ T8284]  __x64_sys_setsockopt+0x18b/0x220
[  156.563518][ T8284]  do_syscall_64+0xfa/0x3b0
[  156.563548][ T8284]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.563567][ T8284]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  156.563589][ T8284]  ? clear_bhb_loop+0x60/0xb0
[  156.563615][ T8284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.563636][ T8284] RIP: 0033:0x7f5b8298e929
[  156.563655][ T8284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.563673][ T8284] RSP: 002b:00007f5b83872038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  156.563695][ T8284] RAX: ffffffffffffffda RBX: 00007f5b82bb5fa0 RCX: 00007f5b8298e929
[  156.563710][ T8284] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  156.563722][ T8284] RBP: 00007f5b82a10b39 R08: 0000000000000004 R09: 0000000000000000
[  156.563735][ T8284] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.563748][ T8284] R13: 0000000000000000 R14: 00007f5b82bb5fa0 R15: 00007ffc88ef9ed8
[  156.563782][ T8284]  </TASK>
[  156.563790][ T8284] Mem-Info:
[  156.707158][ T8282] geneve0: entered promiscuous mode
[  156.772635][ T8284] active_anon:4472 inactive_anon:0 isolated_anon:0
[  156.772635][ T8284]  active_file:1356 inactive_file:39854 isolated_file:0
[  156.772635][ T8284]  unevictable:768 dirty:42 writeback:0
[  156.772635][ T8284]  slab_reclaimable:11198 slab_unreclaimable:115949
[  156.772635][ T8284]  mapped:29056 shmem:1372 pagetables:1057
[  156.772635][ T8284]  sec_pagetables:0 bounce:0
[  156.772635][ T8284]  kernel_misc_reclaimable:0
[  156.772635][ T8284]  free:1309619 free_pcp:16782 free_cma:0
[  156.787646][ T8282] team0: Failed to send port change of device geneve0 via netlink (err -105)
[  156.874473][ T8284] Node 0 active_anon:18140kB inactive_anon:0kB active_file:5424kB inactive_file:159212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116260kB dirty:172kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12492kB pagetables:4196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  156.887700][ T8282] team0: Failed to send options change via netlink (err -105)
[  156.985974][ T8282] team0: Port device geneve0 added
[  156.997765][ T8284] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  157.085187][ T8284] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  157.139265][ T8284] lowmem_reserve[]: 0 2498 2499 2499 2499
[  157.150449][ T8284] Node 0 DMA32 free:1325984kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18092kB inactive_anon:0kB active_file:5424kB inactive_file:157636kB unevictable:1536kB writepending:172kB present:3129332kB managed:2558316kB mlocked:0kB bounce:0kB free_pcp:45248kB local_pcp:24664kB free_cma:0kB
[  157.163595][ T8301] netlink: 'syz.2.580': attribute type 1 has an invalid length.
[  157.196090][ T8284] lowmem_reserve[]: 0 0 1 1 1
[  157.202730][ T8284] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  157.222881][ T8302] netlink: 3 bytes leftover after parsing attributes in process `syz.2.580'.
[  157.241036][ T8284] lowmem_reserve[]: 0 0 0 0 0
[  157.253347][ T8284] Node 1 Normal free:3898956kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19008kB local_pcp:11744kB free_cma:0kB
[  157.296342][ T8284] lowmem_reserve[]: 0 0 0 0 0
[  157.302338][ T8284] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  157.317421][ T8284] Node 0 DMA32: 938*4kB (UM) 921*8kB (UM) 270*16kB (UME) 541*32kB (UME) 209*64kB (UME) 93*128kB (UM) 49*256kB (UM) 28*512kB (UME) 12*1024kB (UM) 8*2048kB (UM) 296*4096kB (UM) = 1326000kB
[  157.339117][ T8284] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  157.359026][ T8284] Node 1 Normal: 217*4kB (UE) 51*8kB (UME) 35*16kB (UME) 73*32kB (UME) 34*64kB (UM) 5*128kB (UME) 7*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (UM) = 3898956kB
[  157.379638][ T8284] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  157.396596][ T8284] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  157.407191][ T8284] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  157.425209][ T8284] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  157.435881][ T8284] 42567 total pagecache pages
[  157.441387][ T8284] 0 pages in swap cache
[  157.445575][ T8284] Free swap  = 124996kB
[  157.450336][ T8284] Total swap = 124996kB
[  157.454979][ T8284] 2097051 pages RAM
[  157.458806][ T8284] 0 pages HighMem/MovableOnly
[  157.464607][ T8284] 425430 pages reserved
[  157.468796][ T8284] 0 pages cma reserved
[  157.469415][ T8312] netlink: 48 bytes leftover after parsing attributes in process `syz.2.580'.
[  157.497228][ T8301] bond3: entered promiscuous mode
[  157.503271][ T8301] 8021q: adding VLAN 0 to HW filter on device bond3
[  157.528747][ T8302] batadv1: entered promiscuous mode
[  157.535147][ T8302] batadv1: entered allmulticast mode
[  157.543190][ T8302] 8021q: adding VLAN 0 to HW filter on device batadv1
[  157.573018][ T8302] bond3: (slave batadv1): making interface the new active one
[  157.614328][ T8302] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  157.812712][ T8319] xt_limit: Overflow, try lower: 262144/524288
[  157.971711][ T8325] netlink: 'syz.1.584': attribute type 1 has an invalid length.
[  157.992158][ T8326] netlink: 'syz.3.585': attribute type 29 has an invalid length.
[  158.007266][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'.
[  158.049392][ T8330] netlink: 'syz.3.585': attribute type 29 has an invalid length.
[  158.110585][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'.
[  158.269740][ T8336] netlink: 'syz.2.588': attribute type 4 has an invalid length.
[  158.324748][ T8336] netlink: 'syz.2.588': attribute type 4 has an invalid length.
[  158.375120][ T8338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.589'.
[  158.379896][ T8341] netlink: 'syz.2.588': attribute type 4 has an invalid length.
[  158.416923][ T8336] netlink: 'syz.2.588': attribute type 4 has an invalid length.
[  158.759703][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'.
[  158.815589][ T8360] netlink: 32 bytes leftover after parsing attributes in process `syz.4.594'.
[  159.131637][ T8377] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  159.653914][ T8408] bridge_slave_0: left allmulticast mode
[  159.659657][ T8408] bridge_slave_0: left promiscuous mode
[  159.669150][ T8405] can: request_module (can-proto-5) failed.
[  159.683016][ T8408] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.699273][ T8408] bridge_slave_1: left allmulticast mode
[  159.724840][ T8408] bridge_slave_1: left promiscuous mode
[  159.735870][ T8408] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.791360][ T8408] bond0: (slave bond_slave_0): Releasing backup interface
[  159.807429][ T8408] bond0: (slave bond_slave_1): Releasing backup interface
[  159.826061][ T8408] team0: Port device team_slave_0 removed
[  159.843622][ T8408] team0: Port device team_slave_1 removed
[  159.855563][ T8408] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.873724][ T8408] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.888364][ T8408] bond2: (slave ip6gretap1): Removing an active aggregator
[  159.899990][   T13] bond2: Warning: Found an uninitialized port
[  159.909790][ T8408] bond2: (slave ip6gretap1): Releasing backup interface
[  159.932741][ T8415] bridge0: entered promiscuous mode
[  160.021411][ T8413] ip6gretap0: entered promiscuous mode
[  160.033187][ T8413] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.040851][ T8413] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  160.073665][ T6016] lo speed is unknown, defaulting to 1000
[  160.079736][ T6016] syz0: Port: 1 Link ACTIVE
[  160.106961][    T9] lo speed is unknown, defaulting to 1000
[  160.133472][ T8425] batadv0: entered promiscuous mode
[  160.151893][ T8425] batadv0: entered allmulticast mode
[  160.158048][ T8425] bridge0: port 2(batadv0) entered blocking state
[  160.189524][ T8425] bridge0: port 2(batadv0) entered disabled state
[  160.346398][ T8435] lo speed is unknown, defaulting to 1000
[  160.393844][ T8438] GUP no longer grows the stack in syz.1.617 (8438): 200000006000-20000000a000 (200000005000)
[  160.430684][ T8438] CPU: 1 UID: 0 PID: 8438 Comm: syz.1.617 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) 
[  160.430716][ T8438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  160.430729][ T8438] Call Trace:
[  160.430737][ T8438]  <TASK>
[  160.430747][ T8438]  dump_stack_lvl+0x189/0x250
[  160.430784][ T8438]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.430813][ T8438]  ? __pfx__printk+0x10/0x10
[  160.430852][ T8438]  ? find_vma+0xe7/0x160
[  160.430901][ T8438]  __get_user_pages+0x2a60/0x30b0
[  160.430965][ T8438]  ? __pfx___get_user_pages+0x10/0x10
[  160.431001][ T8438]  ? __gup_longterm_locked+0xbf7/0x15b0
[  160.431024][ T8438]  ? down_read_killable+0x1d1/0x350
[  160.431053][ T8438]  ? try_get_folio+0x633/0x660
[  160.431080][ T8438]  __gup_longterm_locked+0xd66/0x15b0
[  160.431109][ T8438]  ? try_grab_folio_fast+0x1be/0x4f0
[  160.431144][ T8438]  ? gup_fast_fallback+0x1afc/0x2260
[  160.431170][ T8438]  gup_fast_fallback+0x1cd4/0x2260
[  160.431231][ T8438]  ? __pfx_gup_fast_fallback+0x10/0x10
[  160.431252][ T8438]  ? trace_contention_end+0x39/0x120
[  160.431280][ T8438]  ? __mutex_lock+0x330/0xe80
[  160.431312][ T8438]  ? is_valid_gup_args+0x11f/0x200
[  160.431336][ T8438]  ? get_user_pages_fast+0x4d/0xb0
[  160.431362][ T8438]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  160.431394][ T8438]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  160.431423][ T8438]  ? wait_for_space+0x24d/0x2d0
[  160.431452][ T8438]  iov_iter_get_pages2+0x5e/0xa0
[  160.431480][ T8438]  __se_sys_vmsplice+0x548/0x10d0
[  160.431529][ T8438]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  160.431556][ T8438]  ? __lock_acquire+0xab9/0xd20
[  160.431578][ T8438]  ? __pfx_futex_wake+0x10/0x10
[  160.431608][ T8438]  ? __lock_acquire+0xab9/0xd20
[  160.431671][ T8438]  ? rcu_is_watching+0x15/0xb0
[  160.431702][ T8438]  ? do_syscall_64+0xbe/0x3b0
[  160.431734][ T8438]  do_syscall_64+0xfa/0x3b0
[  160.431759][ T8438]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.431784][ T8438]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.431804][ T8438]  ? clear_bhb_loop+0x60/0xb0
[  160.431829][ T8438]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.431848][ T8438] RIP: 0033:0x7f5b8298e929
[  160.431866][ T8438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.431889][ T8438] RSP: 002b:00007f5b83872038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  160.431910][ T8438] RAX: ffffffffffffffda RBX: 00007f5b82bb5fa0 RCX: 00007f5b8298e929
[  160.431925][ T8438] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009
[  160.431937][ T8438] RBP: 00007f5b82a10b39 R08: 0000000000000000 R09: 0000000000000000
[  160.431949][ T8438] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  160.431961][ T8438] R13: 0000000000000000 R14: 00007f5b82bb5fa0 R15: 00007ffc88ef9ed8
[  160.431992][ T8438]  </TASK>
[  160.478549][ T6150] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  160.726148][ T6150] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  160.733365][ T8438] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  161.087554][ T8451] Cannot find del_set index 286 as target
[  161.540372][ T8441] validate_nla: 1 callbacks suppressed
[  161.540392][ T8441] netlink: 'syz.3.615': attribute type 4 has an invalid length.
[  161.579159][    T9] lo speed is unknown, defaulting to 1000
[  161.596275][    T9] syz0: Port: 1 Link DOWN
[  161.621582][ T6016] lo speed is unknown, defaulting to 1000
[  161.775375][ T8474] tipc: Can't bind to reserved service type 1
[  161.970421][ T8479] __nla_validate_parse: 11 callbacks suppressed
[  161.970441][ T8479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.627'.
[  162.478031][ T8488] can: request_module (can-proto-4) failed.
[  162.493864][ T8495] lo speed is unknown, defaulting to 1000
[  163.046984][ T8520] netlink: 'syz.3.635': attribute type 29 has an invalid length.
[  163.070545][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.635'.
[  163.080631][ T8525] netlink: 'syz.0.636': attribute type 29 has an invalid length.
[  163.096278][ T8525] netlink: 'syz.0.636': attribute type 29 has an invalid length.
[  163.118520][ T8525] netlink: 500 bytes leftover after parsing attributes in process `syz.0.636'.
[  163.138779][ T8525] unsupported nla_type 58
[  163.413492][ T8535] xt_CT: You must specify a L4 protocol and not use inversions on it
[  163.906306][ T8559] sctp: [Deprecated]: syz.0.646 (pid 8559) Use of int in max_burst socket option deprecated.
[  163.906306][ T8559] Use struct sctp_assoc_value instead
[  164.503166][ T8579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.650'.
[  164.578213][ T8578] netlink: 'syz.2.650': attribute type 13 has an invalid length.
[  165.138182][ T8595] lo speed is unknown, defaulting to 1000
[  165.212634][ T8602] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004
[  165.699158][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'.
[  165.803194][ T8632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.910302][ T8628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.936789][ T8630] tipc: MTU too low for tipc bearer
[  165.936817][ T8626] lo speed is unknown, defaulting to 1000
[  165.945949][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'.
[  166.087395][ T8628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  166.294709][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'.
[  166.535383][ T8654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.671'.
[  166.596154][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'.
[  167.272632][ T8672] netlink: 24 bytes leftover after parsing attributes in process `syz.1.677'.
[  167.679872][ T8687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.680'.
[  167.724546][ T8687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.680'.
[  168.071477][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'.
[  168.318972][ T8722] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  168.544059][ T8734] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.695'.
[  168.552115][ T8736] team0: Port device ip6tnl3 added
[  168.554989][ T8737] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  168.981710][ T8761] netlink: 52 bytes leftover after parsing attributes in process `syz.1.708'.
[  169.296045][ T8776] netlink: 'syz.3.712': attribute type 5 has an invalid length.
[  169.325796][ T8776] netlink: 40 bytes leftover after parsing attributes in process `syz.3.712'.
[  169.384219][ T8784] openvswitch: netlink: Flow key attr not present in new flow.
[  169.423234][ T8784] netlink: 'syz.0.714': attribute type 5 has an invalid length.
[  169.449427][ T8783] netlink: zone id is out of range
[  169.459243][ T8783] netlink: zone id is out of range
[  169.481279][ T8783] netlink: zone id is out of range
[  169.487492][ T8783] netlink: zone id is out of range
[  169.513521][ T8783] netlink: zone id is out of range
[  169.518770][ T8783] netlink: zone id is out of range
[  169.537688][ T8783] netlink: zone id is out of range
[  169.571245][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'.
[  169.679627][ T8783] netlink: set zone limit has 4 unknown bytes
[  169.691016][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'.
[  169.732060][ T8801] netlink: 'syz.4.720': attribute type 1 has an invalid length.
[  169.758946][ T8805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.719'.
[  169.842106][ T8797] bridge_slave_1: left allmulticast mode
[  169.848555][ T8797] bridge_slave_1: left promiscuous mode
[  169.854812][ T8797] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.868137][ T8797] bridge_slave_0: left allmulticast mode
[  169.875958][ T8797] bridge_slave_0: left promiscuous mode
[  169.882856][ T8797] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.047290][ T8801] 8021q: adding VLAN 0 to HW filter on device bond2
[  170.107134][ T8808] bond2: (slave gretap1): making interface the new active one
[  170.127783][ T8808] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  170.362917][ T8824] lo speed is unknown, defaulting to 1000
[  170.618036][ T8845] sock: sock_set_timeout: `syz.1.729' (pid 8845) tries to set negative timeout
[  170.887302][ T8859] Cannot find add_set index 2 as target
[  171.129545][ T8868] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  172.687157][ T8919] IPVS: set_ctl: invalid protocol: 108 10.1.1.2:0
[  172.789143][ T8920] 8021q: adding VLAN 0 to HW filter on device bond2
[  172.837967][ T8920] bridge0: port 3(bond2) entered blocking state
[  172.865135][ T8920] bridge0: port 3(bond2) entered disabled state
[  172.886526][ T8920] bond2: entered allmulticast mode
[  172.911432][ T8920] bond2: entered promiscuous mode
[  172.929113][ T8920] bridge0: port 3(bond2) entered blocking state
[  172.935792][ T8920] bridge0: port 3(bond2) entered forwarding state
[  172.965150][ T6152] bridge0: port 3(bond2) entered disabled state
[  173.060085][ T8935] __nla_validate_parse: 5 callbacks suppressed
[  173.060105][ T8935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.753'.
[  173.413741][ T8947] netlink: 244 bytes leftover after parsing attributes in process `syz.4.755'.
[  173.496574][ T8949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.756'.
[  173.508450][ T8949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.756'.
[  173.525433][ T8949] block nbd0: Unsupported socket: shutdown callout must be supported.
[  173.638361][ T8957] Cannot find set identified by id 1 to match
[  173.676651][ T8957] xt_hashlimit: size too large, truncated to 1048576
[  173.774347][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'.
[  173.787525][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'.
[  173.814664][ T8968] xt_ecn: cannot match TCP bits for non-tcp packets
[  173.943201][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'.
[  174.093533][ T8980] netlink: 'syz.4.763': attribute type 1 has an invalid length.
[  174.112208][ T8979] xt_HMARK: proto mask must be zero with L3 mode
[  174.493634][ T8989] netlink: 'syz.1.765': attribute type 1 has an invalid length.
[  174.519705][ T8989] netlink: 224 bytes leftover after parsing attributes in process `syz.1.765'.
[  175.205478][ T9009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.768'.
[  175.394969][ T9017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.772'.
[  175.987934][ T9035] syzkaller0: entered promiscuous mode
[  176.019967][ T9035] syzkaller0: entered allmulticast mode
[  176.106302][ T9049] netlink: 'syz.4.780': attribute type 1 has an invalid length.
[  176.235873][ T9055] netlink: 'syz.2.782': attribute type 1 has an invalid length.
[  176.285137][ T9055] netlink: 'syz.2.782': attribute type 1 has an invalid length.
[  178.287155][ T9097] __nla_validate_parse: 5 callbacks suppressed
[  178.287175][ T9097] netlink: 20 bytes leftover after parsing attributes in process `syz.4.790'.
[  178.379371][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.793'.
[  178.715385][ T9125] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  178.721235][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'.
[  178.768140][ T9125] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  178.827799][ T9125] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  179.047769][ T9145] netlink: 'syz.3.802': attribute type 1 has an invalid length.
[  179.068361][ T9144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.803'.
[  179.175176][ T9152] netlink: 20 bytes leftover after parsing attributes in process `syz.2.805'.
[  179.689264][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.811'.
[  179.783292][ T9185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.814'.
[  179.842184][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.814'.
[  179.870608][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.814'.
[  179.954345][ T9184] delete_channel: no stack
[  180.045506][ T9197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.817'.
[  180.093767][ T9195] netlink: 'syz.3.818': attribute type 30 has an invalid length.
[  180.267586][ T9205] net_ratelimit: 2 callbacks suppressed
[  180.267608][ T9205] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.504130][ T9212] lo speed is unknown, defaulting to 1000
[  180.539231][ T9218] netlink: 'syz.1.824': attribute type 4 has an invalid length.
[  180.933348][ T9240] netlink: 'syz.2.828': attribute type 1 has an invalid length.
[  181.742868][   T51] Bluetooth: hci4: link tx timeout
[  181.748732][   T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  181.811496][ T9276] netlink: 'syz.0.836': attribute type 1 has an invalid length.
[  182.179297][ T9284] lo speed is unknown, defaulting to 1000
[  182.210205][ T9296] netlink: 'syz.4.842': attribute type 1 has an invalid length.
[  182.286945][ T9295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.453700][ T9295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.501336][ T9303] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  182.564305][ T9301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.625632][ T9303] bond0: (slave bond_slave_0): Releasing backup interface
[  182.664944][ T9303] bond0: (slave bond_slave_1): Releasing backup interface
[  182.732562][ T9303] team_slave_0: left promiscuous mode
[  182.782848][ T9303] team0: Port device team_slave_0 removed
[  182.789499][ T9314] netlink: 'syz.0.843': attribute type 10 has an invalid length.
[  182.834452][ T9303] team_slave_1: left promiscuous mode
[  182.914565][ T9303] team0: Port device team_slave_1 removed
[  182.991841][ T9303] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.999282][ T9303] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.135906][ T9303] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.175263][ T9303] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.211427][ T9303] geneve0: left promiscuous mode
[  183.255234][ T9303] team0: Port device geneve0 removed
[  183.314656][ T9314] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  183.347605][ T9314] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.377652][ T9314] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  183.427897][ T9342] __nla_validate_parse: 7 callbacks suppressed
[  183.427918][ T9342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.848'.
[  183.444970][ T9342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.848'.
[  183.454311][ T9342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.848'.
[  183.469645][ T9317] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  183.480434][ T9317] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  183.490248][ T9317] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  183.691526][ T9346] lo speed is unknown, defaulting to 1000
[  183.821627][ T5854] Bluetooth: hci4: command 0x0405 tx timeout
[  184.159585][ T9369] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.190743][ T9369] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.256128][ T9355] lo speed is unknown, defaulting to 1000
[  184.379801][ T9369] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.393202][ T9369] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.597073][ T9369] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.609430][ T9369] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.722555][ T9385] netlink: 'syz.3.858': attribute type 1 has an invalid length.
[  184.746489][ T9369] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.761122][ T9369] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.861227][ T9377] lo speed is unknown, defaulting to 1000
[  185.086631][ T6152] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  185.100786][ T6152] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.239099][ T6152] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  185.257717][ T6152] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.305499][ T6160] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  185.334264][ T6160] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.385559][ T6158] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  185.399868][ T6158] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.561730][ T9399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.859'.
[  185.709627][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.860'.
[  185.770376][ T9404] netlink: 'syz.3.860': attribute type 1 has an invalid length.
[  185.872111][ T9403] gretap1: entered promiscuous mode
[  186.742400][ T9434] netlink: 'syz.3.870': attribute type 1 has an invalid length.
[  186.870202][ T9441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.872'.
[  187.154755][ T9457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.875'.
[  187.307455][ T6150] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  187.338526][ T6150] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  187.366457][ T6150] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  187.391548][ T6150] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  187.521835][ T9471] netlink: 'syz.4.878': attribute type 30 has an invalid length.
[  187.747098][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.879'.
[  187.866541][ T9476] bridge0: entered promiscuous mode
[  187.910223][ T9476] bridge0: port 1(macvlan3) entered blocking state
[  187.917299][ T9476] bridge0: port 1(macvlan3) entered disabled state
[  187.926090][ T9476] macvlan3: entered allmulticast mode
[  187.943557][ T9476] bridge0: entered allmulticast mode
[  187.968426][ T9476] macvlan3: left allmulticast mode
[  187.993104][ T9476] bridge0: left allmulticast mode
[  188.018652][ T9476] bridge0: left promiscuous mode
[  188.142675][ T9480] netlink: 17 bytes leftover after parsing attributes in process `syz.3.879'.
[  188.234442][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'.
[  188.292433][ T9487] IPVS: Error joining to the multicast group
[  188.516640][ T9496] __nla_validate_parse: 1 callbacks suppressed
[  188.516661][ T9496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.885'.
[  188.520999][ T9506] netlink: 'syz.4.887': attribute type 35 has an invalid length.
[  188.584748][ T9509] netlink: 'syz.0.889': attribute type 1 has an invalid length.
[  188.636978][ T9515] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  188.652890][ T9515] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  188.669249][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'.
[  188.787751][ T9519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.890'.
[  188.894309][ T9526] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  189.292438][ T9542] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  189.358880][ T9542] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  189.399543][ T9535] lo speed is unknown, defaulting to 1000
[  190.534924][ T9561] lo speed is unknown, defaulting to 1000
[  190.648759][ T9568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.898'.
[  190.744087][ T9571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.904'.
[  190.926400][ T9577] netlink: 'syz.1.905': attribute type 11 has an invalid length.
[  190.980640][ T9577] netlink: 224 bytes leftover after parsing attributes in process `syz.1.905'.
[  191.153360][ T9585] netlink: 64 bytes leftover after parsing attributes in process `syz.4.900'.
[  191.327109][ T9594] lo speed is unknown, defaulting to 1000
[  191.416641][ T9599] netlink: 'syz.2.909': attribute type 1 has an invalid length.
[  191.985207][ T9595] lo speed is unknown, defaulting to 1000
[  192.015144][ T9617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.913'.
[  192.489703][ T9641] 8021q: VLANs not supported on nlmon0
[  192.656617][ T9644] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.669253][ T9646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.919'.
[  192.745004][ T9643] macsec0: entered promiscuous mode
[  192.750661][ T9643] macsec0: entered allmulticast mode
[  192.756114][ T9643] veth1_macvtap: entered allmulticast mode
[  192.766839][ T9643] tipc: Resetting bearer <eth:syzkaller0>
[  192.807392][ T9642] tipc: Disabling bearer <eth:syzkaller0>
[  193.093852][ T9659] gretap0: entered promiscuous mode
[  193.105936][ T9659] batman_adv: batadv0: Adding interface: macvlan3
[  193.124244][ T9659] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.152393][ T9659] batman_adv: batadv0: Interface activated: macvlan3
[  193.254982][ T9670] netlink: 'syz.3.926': attribute type 4 has an invalid length.
[  193.582002][ T9679] netlink: 'syz.4.929': attribute type 1 has an invalid length.
[  193.594737][ T9682] netlink: 'syz.3.927': attribute type 1 has an invalid length.
[  193.896031][ T9688] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.936270][ T9685] syzkaller0: entered promiscuous mode
[  193.959119][ T9685] syzkaller0: entered allmulticast mode
[  194.017167][ T9684] tipc: Resetting bearer <eth:syzkaller0>
[  194.079325][ T9684] tipc: Disabling bearer <eth:syzkaller0>
[  194.145826][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  194.251341][ T9703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.934'.
[  194.409498][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.935'.
[  194.490595][ T9712] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.517079][ T9712] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.554639][ T9712] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.591324][ T9712] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.623352][ T9712] bridge0: port 2(batadv0) entered disabled state
[  195.067189][ T9737] netlink: 20 bytes leftover after parsing attributes in process `syz.0.942'.
[  195.293147][ T9752] netlink: 'syz.4.946': attribute type 10 has an invalid length.
[  195.296070][ T9750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.947'.
[  195.311021][ T9752] netlink: 40 bytes leftover after parsing attributes in process `syz.4.946'.
[  195.323951][ T9753] netlink: 'syz.1.945': attribute type 10 has an invalid length.
[  195.336825][ T9753] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.344618][ T9753] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.408228][ T9753] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.415486][ T9753] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.423077][ T9753] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.430275][ T9753] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.455101][ T9753] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  195.505171][ T9752] bridge0: port 2(dummy0) entered blocking state
[  195.512279][ T9752] bridge0: port 2(dummy0) entered disabled state
[  195.515985][ T9765] netlink: 'syz.3.949': attribute type 1 has an invalid length.
[  195.519165][ T9752] dummy0: entered allmulticast mode
[  195.544265][ T9752] dummy0: entered promiscuous mode
[  195.652655][ T9766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'.
[  195.743021][ T9764] lo speed is unknown, defaulting to 1000
[  196.096927][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'.
[  196.731356][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'.
[  196.766458][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'.
[  196.771575][ T9807] lo speed is unknown, defaulting to 1000
[  196.816604][ T9814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.959'.
[  196.838338][ T9816] xt_SECMARK: invalid mode: 0
[  196.999964][ T9820] nbd: device at index 64 is going down
[  197.434230][ T9836] netlink: 'syz.3.966': attribute type 1 has an invalid length.
[  198.310920][ T9865] veth1_macvtap: left allmulticast mode
[  198.336337][ T9865] veth1_macvtap: left promiscuous mode
[  198.762821][ T9884] netlink: 'syz.2.978': attribute type 1 has an invalid length.
[  198.828528][ T9882] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.930920][ T9887] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  198.969922][ T9887] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  199.002564][ T9887] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  199.079028][ T9884] 8021q: adding VLAN 0 to HW filter on device bond4
[  199.108676][ T9882] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.151390][ T9904] netlink: 'syz.1.986': attribute type 1 has an invalid length.
[  199.254587][ T9882] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.363272][ T9882] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.566374][   T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.598297][ T9924] __nla_validate_parse: 2 callbacks suppressed
[  199.598316][ T9924] netlink: 20 bytes leftover after parsing attributes in process `syz.3.991'.
[  199.614745][ T6152] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.652968][   T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.712212][ T6158] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.741336][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'.
[  199.894274][ T9931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1003'.
[  200.061179][ T9942] x_tables: duplicate underflow at hook 2
[  200.490413][ T9959] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  200.692660][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'.
[  200.702162][ T9966] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1005'.
[  200.731371][ T9975] netlink: 'syz.3.1006': attribute type 1 has an invalid length.
[  201.306157][ T9999] lo speed is unknown, defaulting to 1000
[  202.542397][T10001] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1014'.
[  202.814763][T10063] netlink: 'syz.0.1028': attribute type 1 has an invalid length.
[  202.848538][T10061] lo speed is unknown, defaulting to 1000
[  202.983293][T10071] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1030'.
[  203.284658][T10080] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1032'.
[  203.559719][T10071] lo speed is unknown, defaulting to 1000
[  203.632594][T10084] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1034'.
[  204.100265][T10101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1040'.
[  204.225289][T10101] xt_CT: You must specify a L4 protocol and not use inversions on it
[  204.235332][T10103] netlink: 'syz.2.1041': attribute type 1 has an invalid length.
[  204.927869][T10120] syzkaller1: entered promiscuous mode
[  204.942429][T10120] syzkaller1: entered allmulticast mode
[  204.961142][T10119] lo speed is unknown, defaulting to 1000
[  205.058413][T10125] netlink: 'syz.4.1048': attribute type 13 has an invalid length.
[  205.076410][T10125] netlink: 'syz.4.1048': attribute type 17 has an invalid length.
[  205.254816][T10125] bridge0: port 2(dummy0) entered blocking state
[  205.261404][T10125] bridge0: port 2(dummy0) entered listening state
[  205.268122][T10125] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.275381][T10125] bridge0: port 1(bridge_slave_0) entered listening state
[  205.321216][T10125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  205.514487][T10134] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1050'.
[  205.606815][T10130] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.631125][T10123] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1045'.
[  206.155443][T10130] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.269954][T10130] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.646752][T10130] batman_adv: batadv0: Interface deactivated: ipvlan2
[  206.667857][T10130] bond3: left promiscuous mode
[  206.689115][T10130] batadv1: left promiscuous mode
[  206.694525][T10130] batadv1: left allmulticast mode
[  206.777430][ T6152] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  206.788335][ T6152] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  206.797262][ T6152] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  206.805997][ T6152] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  206.853422][ T6152] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  206.880957][ T6152] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  206.904345][ T6152] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  206.930015][ T6152] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  207.007938][T10170] netlink: 'syz.2.1054': attribute type 1 has an invalid length.
[  207.306672][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'.
[  207.382559][T10181] netlink: 'syz.4.1059': attribute type 32 has an invalid length.
[  207.410688][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1059'.
[  207.430194][T10181] (unnamed net_device) (uninitialized): option coupled_control: invalid value (64)
[  207.496814][T10188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1062'.
[  207.638558][T10194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1063'.
[  208.037112][T10206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'.
[  208.081518][T10206] macsec0: entered allmulticast mode
[  208.094125][T10206] bond0: entered allmulticast mode
[  208.121871][T10206] bond_slave_0: entered allmulticast mode
[  208.137182][T10208] netlink: 'syz.0.1068': attribute type 1 has an invalid length.
[  208.150751][T10206] bond_slave_1: entered allmulticast mode
[  208.167522][T10206] bond0: left allmulticast mode
[  208.225356][T10206] bond_slave_0: left allmulticast mode
[  208.235023][T10206] bond_slave_1: left allmulticast mode
[  208.543270][T10225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1075'.
[  208.789357][T10238] vlan1: entered promiscuous mode
[  208.795324][T10238] vlan1: entered allmulticast mode
[  208.805332][T10238] hsr_slave_1: entered allmulticast mode
[  208.995967][T10248] netlink: 'syz.1.1083': attribute type 1 has an invalid length.
[  209.033091][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1079'.
[  209.599202][T10279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1090'.
[  209.845121][T10294] lo speed is unknown, defaulting to 1000
[  210.175362][T10311] netlink: 'syz.3.1097': attribute type 1 has an invalid length.
[  210.480427][T10321] netlink: 'syz.3.1101': attribute type 1 has an invalid length.
[  210.492332][T10327] x_tables: duplicate underflow at hook 3
[  210.776568][T10336] __nla_validate_parse: 3 callbacks suppressed
[  210.776671][T10336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1106'.
[  210.800919][T10336] nbd: couldn't find a device at index 64
[  210.890783][T10348] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1109'.
[  211.165113][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1111'.
[  211.313294][T10362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1114'.
[  211.322725][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1111'.
[  211.323315][T10364] netlink: 'syz.2.1112': attribute type 1 has an invalid length.
[  211.332605][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1111'.
[  211.351325][T10363] netlink: 'syz.0.1113': attribute type 1 has an invalid length.
[  211.362333][T10363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  211.398298][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1111'.
[  211.410289][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1111'.
[  211.429940][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1111'.
[  211.449769][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1113'.
[  211.580613][ T5849] Bluetooth: hci3: command 0x0406 tx timeout
[  211.580857][ T5866] Bluetooth: hci1: command 0x0406 tx timeout
[  211.587395][ T5849] Bluetooth: hci2: command 0x0406 tx timeout
[  211.673323][T10371] netlink: 'syz.1.1115': attribute type 8 has an invalid length.
[  212.404687][T10411] netlink: 'syz.2.1125': attribute type 10 has an invalid length.
[  212.433077][T10411] team0: Device ipvlan1 failed to register rx_handler
[  212.507320][T10421] netlink: 'syz.0.1126': attribute type 3 has an invalid length.
[  212.808311][T10439] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20000
[  213.082944][T10448] netlink: 'syz.3.1135': attribute type 1 has an invalid length.
[  214.741885][T10526] netlink: 'syz.3.1154': attribute type 1 has an invalid length.
[  215.900866][ T5861] Bluetooth: hci4: command 0x0405 tx timeout
[  215.965910][T10584] __nla_validate_parse: 70 callbacks suppressed
[  215.965928][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1166'.
[  216.001796][T10580] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1166'.
[  216.103470][T10589] netlink: 'syz.2.1169': attribute type 1 has an invalid length.
[  216.249591][T10594] Â: renamed from pim6reg1
[  216.393868][T10602] netlink: 'syz.0.1174': attribute type 1 has an invalid length.
[  216.651175][T10608] vlan2: entered allmulticast mode
[  217.043892][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1182'.
[  217.054093][T10628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1182'.
[  217.147509][T10634] xt_hashlimit: size too large, truncated to 1048576
[  217.202785][T10636] 
: renamed from bridge_slave_0 (while UP)
[  217.495690][T10648] netlink: 'syz.1.1188': attribute type 1 has an invalid length.
[  217.860429][T10656] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1190'.
[  218.527149][T10690] netlink: 'syz.3.1200': attribute type 1 has an invalid length.
[  218.606482][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1202'.
[  218.814264][T10704] netlink: 'syz.2.1206': attribute type 1 has an invalid length.
[  218.933748][T10714] netlink: 'syz.4.1207': attribute type 1 has an invalid length.
[  219.478761][T10741] 
@ÿ: renamed from veth0_vlan
[  219.708744][T10750] netlink: 'syz.4.1219': attribute type 10 has an invalid length.
[  219.719700][T10750] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1219'.
[  219.755269][T10750] team0: Failed to send port change of device geneve0 via netlink (err -105)
[  219.766233][T10750] team0: Failed to send options change via netlink (err -105)
[  219.784120][T10750] team0: Port device geneve0 added
[  219.947192][T10762] netlink: 'syz.3.1223': attribute type 4 has an invalid length.
[  220.109029][T10771] batadv0: entered promiscuous mode
[  220.117077][T10775] netlink: 'syz.0.1229': attribute type 1 has an invalid length.
[  220.128187][T10774] xt_hashlimit: size too large, truncated to 1048576
[  221.027210][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1242'.
[  221.061642][T10818] netlink: 'syz.3.1242': attribute type 1 has an invalid length.
[  221.075759][T10820] netlink: 'syz.0.1243': attribute type 1 has an invalid length.
[  221.315751][T10828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1246'.
[  221.522841][T10840] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1251'.
[  221.755916][T10852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1255'.
[  221.918360][T10859] lo speed is unknown, defaulting to 1000
[  222.020164][T10866] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1259'.
[  222.061110][T10866] nbd: must specify at least one socket
[  222.338215][T10880] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.503720][T10882] vlan2: entered promiscuous mode
[  222.519033][T10882] bridge0: entered promiscuous mode
[  223.081071][T10906] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1272'.
[  223.105189][T10906] nbd: must specify at least one socket
[  224.631808][T10956] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1282'.
[  224.817140][T10960] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1284'.
[  224.858218][T10960] nbd: must specify at least one socket
[  224.880814][T10964] netlink: 'syz.2.1286': attribute type 9 has an invalid length.
[  224.889102][T10964] netlink: 'syz.2.1286': attribute type 6 has an invalid length.
[  224.937753][T10962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  225.086584][T10968] netlink: zone id is out of range
[  225.093120][T10973] netlink: zone id is out of range
[  225.199258][T10968] netlink: zone id is out of range
[  225.208600][T10973] netlink: zone id is out of range
[  225.217150][T10968] netlink: zone id is out of range
[  225.258612][T10973] netlink: zone id is out of range
[  225.284825][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1291'.
[  225.287880][T10968] netlink: zone id is out of range
[  225.300848][T10973] netlink: zone id is out of range
[  225.322770][T10981] nbd: couldn't find a device at index 65546
[  225.473603][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'.
[  225.530283][ T6160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.539287][ T6160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.689954][T11001] FAULT_INJECTION: forcing a failure.
[  225.689954][T11001] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  225.705028][T11001] CPU: 0 UID: 0 PID: 11001 Comm: syz.1.1298 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) 
[  225.705059][T11001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  225.705072][T11001] Call Trace:
[  225.705081][T11001]  <TASK>
[  225.705089][T11001]  dump_stack_lvl+0x189/0x250
[  225.705122][T11001]  ? __pfx____ratelimit+0x10/0x10
[  225.705168][T11001]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.705192][T11001]  ? __pfx__printk+0x10/0x10
[  225.705231][T11001]  should_fail_ex+0x414/0x560
[  225.705266][T11001]  _copy_to_user+0x31/0xb0
[  225.705292][T11001]  simple_read_from_buffer+0xe1/0x170
[  225.705324][T11001]  proc_fail_nth_read+0x1df/0x250
[  225.705356][T11001]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  225.705388][T11001]  ? rw_verify_area+0x258/0x650
[  225.705409][T11001]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  225.705440][T11001]  vfs_read+0x200/0x980
[  225.705468][T11001]  ? __pfx___mutex_lock+0x10/0x10
[  225.705494][T11001]  ? __pfx_vfs_read+0x10/0x10
[  225.705519][T11001]  ? __fget_files+0x2a/0x420
[  225.705550][T11001]  ? __fget_files+0x3a0/0x420
[  225.705576][T11001]  ? __fget_files+0x2a/0x420
[  225.705612][T11001]  ksys_read+0x145/0x250
[  225.705633][T11001]  ? __fget_files+0x3a0/0x420
[  225.705661][T11001]  ? __pfx_ksys_read+0x10/0x10
[  225.705689][T11001]  ? do_syscall_64+0xbe/0x3b0
[  225.705719][T11001]  do_syscall_64+0xfa/0x3b0
[  225.705743][T11001]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.705767][T11001]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.705787][T11001]  ? clear_bhb_loop+0x60/0xb0
[  225.705811][T11001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.705830][T11001] RIP: 0033:0x7f5b8298d33c
[  225.705847][T11001] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  225.705863][T11001] RSP: 002b:00007f5b83872030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  225.705884][T11001] RAX: ffffffffffffffda RBX: 00007f5b82bb5fa0 RCX: 00007f5b8298d33c
[  225.705897][T11001] RDX: 000000000000000f RSI: 00007f5b838720a0 RDI: 0000000000000003
[  225.705909][T11001] RBP: 00007f5b83872090 R08: 0000000000000000 R09: 0000000000000000
[  225.705920][T11001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.705931][T11001] R13: 0000000000000000 R14: 00007f5b82bb5fa0 R15: 00007ffc88ef9ed8
[  225.705962][T11001]  </TASK>
[  226.359997][T11023] netlink: 'syz.1.1308': attribute type 7 has an invalid length.
[  226.472535][T11029] netlink: 'syz.4.1307': attribute type 1 has an invalid length.
[  226.507225][T11029] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1307'.
[  226.601060][T11036] block nbd0: server does not support multiple connections per device.
[  226.614363][T11042] bridge0: entered allmulticast mode
[  226.620898][T11042] bridge_slave_0: left allmulticast mode
[  226.626906][T11036] block nbd0: shutting down sockets
[  226.626918][T11042] bridge_slave_0: left promiscuous mode
[  226.639839][T11042] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.756106][T11049] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  226.884373][T11055] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1315'.
[  227.024754][T11065] xt_policy: neither incoming nor outgoing policy selected
[  227.130969][T11073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1324'.
[  227.220632][   T30] audit: type=1800 audit(1751759530.966:4): pid=11081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1326" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1392 res=0 errno=0
[  227.270611][   T30] audit: type=1800 audit(1751759530.996:5): pid=11081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1326" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1392 res=0 errno=0
[  227.752762][T11086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  227.776148][T11086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  227.786600][T11100] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1332'.
[  227.797651][T11086] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  227.806822][T11086] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.814037][T11086] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.835910][T11086] bond0 (unregistering): Released all slaves
[  227.883591][T11096] ipvlan2: entered promiscuous mode
[  227.889602][T11096] bridge0: port 3(ipvlan2) entered blocking state
[  227.896481][T11096] bridge0: port 3(ipvlan2) entered disabled state
[  227.904649][T11096] ipvlan2: entered allmulticast mode
[  227.910152][T11096] bridge0: entered allmulticast mode
[  227.924187][T11096] ipvlan2: left allmulticast mode
[  227.940795][T11096] bridge0: left allmulticast mode
[  227.997134][T11097] ipvlan2: entered promiscuous mode
[  228.003599][T11097] bridge0: port 3(ipvlan2) entered blocking state
[  228.011658][T11097] bridge0: port 3(ipvlan2) entered disabled state
[  228.021282][T11097] ipvlan2: entered allmulticast mode
[  228.027447][T11097] bridge0: entered allmulticast mode
[  228.036944][T11097] ipvlan2: left allmulticast mode
[  228.042227][T11097] bridge0: left allmulticast mode
[  228.177247][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1336'.
[  228.245439][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'.
[  228.256774][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'.
[  228.313766][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'.
[  228.344134][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'.
[  228.381290][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'.
[  228.395817][T11123] netlink: 'syz.2.1339': attribute type 13 has an invalid length.
[  228.446299][T11123] gretap0: refused to change device tx_queue_len
[  228.458197][T11123] net_ratelimit: 491 callbacks suppressed
[  228.458219][T11123] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  228.692828][T11138] netlink: 'syz.1.1343': attribute type 3 has an invalid length.
[  228.713975][T11138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  229.305559][T11175] netlink: 'syz.2.1353': attribute type 18 has an invalid length.
[  229.395171][T11181] netlink: 'syz.2.1353': attribute type 6 has an invalid length.
[  229.604528][T11185] netlink: 'syz.2.1356': attribute type 1 has an invalid length.
[  229.920097][T11202] netlink: 'syz.4.1361': attribute type 2 has an invalid length.
[  229.934050][T11197] batadv_slave_0: entered promiscuous mode
[  230.098279][T11211] IPVS: Error connecting to the multicast addr
[  230.475035][T11225] netlink: zone id is out of range
[  230.490442][T11225] netlink: zone id is out of range
[  230.496155][T11225] netlink: zone id is out of range
[  230.505616][T11225] netlink: zone id is out of range
[  230.530675][T11225] netlink: zone id is out of range
[  230.535843][T11225] netlink: zone id is out of range
[  230.551994][T11225] netlink: zone id is out of range
[  230.567027][T11231] xt_TCPMSS: Only works on TCP SYN packets
[  230.578330][T11225] netlink: zone id is out of range
[  230.610845][T11231] bridge0: entered promiscuous mode
[  230.616267][T11231] bridge0: entered allmulticast mode
[  230.650405][T11231] team0: Port device bridge0 added
[  230.907733][T11252] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:1
[  231.145829][T11238] infiniband syz1: set active
[  231.172121][T11238] infiniband syz1: added macvlan1
[  231.337591][T11238] RDS/IB: syz1: added
[  231.349119][T11238] smc: adding ib device syz1 with port count 1
[  231.356207][T11238] smc:    ib device syz1 port 1 has pnetid 
[  231.536689][T11279] netlink: 'syz.4.1387': attribute type 1 has an invalid length.
[  231.641605][T11282] netlink: 'syz.2.1388': attribute type 1 has an invalid length.
[  231.780400][T11292] __nla_validate_parse: 17 callbacks suppressed
[  231.780420][T11292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1392'.
[  231.996206][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1393'.
[  232.307915][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'.
[  232.587921][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1400'.
[  232.629718][T11320] veth0: entered allmulticast mode
[  232.648299][T11320] veth1: entered promiscuous mode
[  232.738752][T11324] lo speed is unknown, defaulting to 1000
[  232.811684][T11330] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1403'.
[  232.827804][T11323] ipvlan2: entered promiscuous mode
[  232.846093][T11323] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  233.083082][T11335] Bluetooth: hci1: Opcode 0x080f failed: -4
[  233.197618][T11337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1406'.
[  233.438555][T11342] netlink: 'syz.3.1408': attribute type 1 has an invalid length.
[  233.622516][T11348] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  233.783691][T11351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1412'.
[  233.802939][T11355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1413'.
[  234.010000][T11365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1417'.
[  234.089530][T11370] raw_sendmsg: syz.2.1418 forgot to set AF_INET. Fix it!
[  234.155152][T11370] pim6reg: entered allmulticast mode
[  234.155415][T11373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1419'.
[  234.190953][T11373] syzkaller1: tun_chr_ioctl cmd 1074025677
[  234.201046][T11373] syzkaller1: linktype set to 780
[  234.229843][T11374] syzkaller1: tun_chr_ioctl cmd 1074025673
[  234.240681][T11375] syzkaller1: tun_chr_ioctl cmd 1074025677
[  234.250870][T11375] syzkaller1: linktype set to 780
[  234.502850][T11381] lo speed is unknown, defaulting to 1000
[  234.670229][T11385] veth0: left allmulticast mode
[  234.677056][T11385] veth1: left promiscuous mode
[  234.809362][T11389] bond0: invalid ARP target 0.0.0.0 specified for addition
[  234.823433][T11389] bond0: option arp_ip_target: invalid value (0)
[  235.105149][ T5861] Bluetooth: hci1: command 0x0406 tx timeout
[  235.520052][T11402] lo speed is unknown, defaulting to 1000
[  235.660951][ T5861] Bluetooth: hci0: command tx timeout
[  235.742512][    C0] bridge0: port 1(
) entered learning state
[  235.749454][    C0] bridge0: port 2(dummy0) entered learning state
[  236.016932][T11420] syzkaller0: entered allmulticast mode
[  236.017412][T11423] netlink: 'syz.0.1434': attribute type 11 has an invalid length.
[  236.185318][T11424] netlink: 'syz.0.1434': attribute type 11 has an invalid length.
[  236.407156][T11431] ip6t_srh: unknown srh invflags 4449
[  236.582456][T11437] netlink: 'syz.0.1438': attribute type 3 has an invalid length.
[  237.007549][T11455] __nla_validate_parse: 88 callbacks suppressed
[  237.007598][T11455] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1444'.
[  237.159555][T11458] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1445'.
[  237.179867][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1445'.
[  237.426960][T11470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1447'.
[  237.551619][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1449'.
[  237.561168][T11474] smc: net device bond0 applied user defined pnetid SYZ
[  237.877884][T11489] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  238.069884][   T30] audit: type=1800 audit(1751759541.816:6): pid=11486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1450" name="memory.events" dev="tmpfs" ino=1494 res=0 errno=0
[  238.237604][T11505] tipc: Failed to remove unknown binding: 66,1,1/0:3333468232/3333468234
[  238.296094][T11506] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1459'.
[  238.491792][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'.
[  238.546686][T11512] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1461'.
[  238.599160][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'.
[  238.714842][T11519] netlink: 'syz.3.1463': attribute type 39 has an invalid length.
[  238.968440][T11530] netlink: 'syz.0.1466': attribute type 1 has an invalid length.
[  238.978924][T11531] netlink: 'syz.3.1467': attribute type 1 has an invalid length.
[  239.000105][T11533] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1468'.
[  239.259802][T11554] ip6t_srh: unknown srh invflags 4000
[  239.571786][T11569] netlink: 'syz.3.1473': attribute type 16 has an invalid length.
[  239.620680][T11569] netlink: 'syz.3.1473': attribute type 17 has an invalid length.
[  239.705370][T11569] 8021q: adding VLAN 0 to HW filter on device team0
[  239.787038][T11569] net_ratelimit: 75 callbacks suppressed
[  239.787053][T11569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  239.817237][   T44] lo speed is unknown, defaulting to 1000
[  239.823363][   T44] syz0: Port: 1 Link ACTIVE
[  239.828202][   T44] lo speed is unknown, defaulting to 1000
[  239.871280][T11575] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  239.895605][T11575] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  240.035016][T11588] netlink: 'syz.0.1481': attribute type 1 has an invalid length.
[  240.137680][T11594] netlink: 'syz.1.1482': attribute type 8 has an invalid length.
[  240.604863][T11606] lo speed is unknown, defaulting to 1000
[  240.770823][T11625] netlink: 'syz.4.1491': attribute type 10 has an invalid length.
[  240.880393][T11625] veth0_vlan: left promiscuous mode
[  240.904830][T11625] veth0_vlan: entered promiscuous mode
[  240.946139][T11625] team0: Device veth0_vlan failed to register rx_handler
[  241.017025][T11635] !
: renamed from dummy0 (while UP)
[  241.083390][T11637] 8021q: adding VLAN 0 to HW filter on device bond5
[  241.133350][T11637] team0: Port device bond5 added
[  241.380435][T11641] lo speed is unknown, defaulting to 1000
[  241.479471][T11655] nbd: socks must be embedded in a SOCK_ITEM attr
[  241.501776][T11655] block nbd0: shutting down sockets
[  242.215030][T11683] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[  242.276478][T11683] __nla_validate_parse: 16 callbacks suppressed
[  242.276499][T11683] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1502'.
[  242.313903][T11683] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  242.951424][T11694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1504'.
[  243.198534][T11697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1505'.
[  244.254306][T11727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1512'.
[  244.517967][T11732] lo speed is unknown, defaulting to 1000
[  244.632364][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1514'.
[  245.365233][T11742] syzkaller1: entered promiscuous mode
[  245.370924][T11742] syzkaller1: entered allmulticast mode
[  246.477922][T11770] xt_hashlimit: size too large, truncated to 1048576
[  246.816005][T11781] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1527'.
[  247.101427][T11787] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1531'.
[  247.117256][T11785] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1530'.
[  247.345690][T11796] netlink: 'syz.1.1534': attribute type 1 has an invalid length.
[  247.367085][T11796] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1534'.
[  247.492967][T11800] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1536'.
[  247.529702][T11801] netpci0: tun_chr_ioctl cmd 1074025681
[  247.552337][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1536'.
[  247.872861][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'.
[  247.885674][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'.
[  247.894774][T11807] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1538'.
[  248.259996][T11817] lo speed is unknown, defaulting to 1000
[  248.528118][T11831] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1545'.
[  248.909190][T11813] lo speed is unknown, defaulting to 1000
[  249.287581][T11632] Set syz1 is full, maxelem 65536 reached
[  249.386951][T11853] bridge1: entered allmulticast mode
[  249.593718][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1556'.
[  249.750721][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1556'.
[  249.814752][T11868] netlink: 'syz.1.1557': attribute type 29 has an invalid length.
[  249.835622][T11866] lo speed is unknown, defaulting to 1000
[  249.849168][T11868] netlink: 'syz.1.1557': attribute type 29 has an invalid length.
[  249.904940][T11868] netlink: 488 bytes leftover after parsing attributes in process `syz.1.1557'.
[  251.211273][T11898] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  251.401556][T11905] syzkaller0: entered promiscuous mode
[  251.412147][T11905] syzkaller0: entered allmulticast mode
[  251.445168][T11905] tipc: Started in network mode
[  251.494352][T11905] tipc: Node identity f60b31c161e, cluster identity 4711
[  251.525309][T11905] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.557857][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  251.573140][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  251.582547][T10138] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  251.632111][T11904] tipc: Resetting bearer <eth:syzkaller0>
[  251.644522][T10138] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  251.721859][T11904] tipc: Disabling bearer <eth:syzkaller0>
[  252.377661][T11923] netlink: 'syz.4.1573': attribute type 10 has an invalid length.
[  252.441416][T11923] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  252.541852][T10138] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  252.624106][   T30] audit: type=1804 audit(1751759556.376:7): pid=11932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1575" name="/newroot/325/cgroup.controllers" dev="tmpfs" ino=1679 res=1 errno=0
[  252.698018][   T30] audit: type=1800 audit(1751759556.376:8): pid=11932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1575" name="cgroup.controllers" dev="tmpfs" ino=1679 res=0 errno=0
[  252.750718][T11935] __nla_validate_parse: 6 callbacks suppressed
[  252.750752][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'.
[  252.863348][T11935] hsr_slave_0: left promiscuous mode
[  253.112487][T11933] lo speed is unknown, defaulting to 1000
[  254.140816][T11965] lo speed is unknown, defaulting to 1000
[  254.338097][T11980] openvswitch: netlink: Message has 20 unknown bytes.
[  254.345991][T11980] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.665698][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1591'.
[  255.558333][T12008] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1597'.
[  255.585857][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  255.606383][T12008] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1597'.
[  255.621695][T12008] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1597'.
[  255.661330][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  255.812523][T12017] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1600'.
[  255.894048][T12024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1602'.
[  256.113717][T12033] netlink: 'syz.1.1605': attribute type 5 has an invalid length.
[  256.134307][T12033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1605'.
[  256.267393][T12041] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1605'.
[  256.288507][T12041] vlan4: entered allmulticast mode
[  256.310885][T12041] syz_tun: entered allmulticast mode
[  256.401817][T12045] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1609'.
[  256.738943][T12047] lo speed is unknown, defaulting to 1000
[  256.928324][T12065] netlink: 'syz.3.1615': attribute type 11 has an invalid length.
[  264.137487][T12099] lo speed is unknown, defaulting to 1000
[  264.545922][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  265.827227][    C0] bridge0: port 2(dummy0) entered forwarding state
[  265.837531][    C0] bridge0: topology change detected, propagating
[  265.848949][    C0] bridge0: port 1(
) entered forwarding state
[  265.857832][    C0] bridge0: topology change detected, propagating
[  272.810408][T12113] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  281.188478][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  294.458126][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  294.558025][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  294.999500][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  295.348101][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  295.570418][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  296.718074][   T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  296.875109][   T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  296.978092][   T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  297.188845][   T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  297.349754][   T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  298.009596][   T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  298.388373][   T51] Bluetooth: hci5: command tx timeout
[  298.567067][   T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  298.659936][   T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  299.068259][   T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  299.838781][   T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  300.308836][   T51] Bluetooth: hci6: command tx timeout
[  300.478096][ T5854] Bluetooth: hci5: command tx timeout
[  302.414756][ T5861] Bluetooth: hci6: command tx timeout
[  302.546537][ T5861] Bluetooth: hci5: command tx timeout
[  302.887122][ T5861] Bluetooth: hci7: command tx timeout
[  304.468158][ T5861] Bluetooth: hci6: command tx timeout
[  304.638273][ T5861] Bluetooth: hci5: command tx timeout
[  304.967677][ T5861] Bluetooth: hci7: command tx timeout
[  305.220292][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  305.369769][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  305.558914][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  305.710067][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  305.838549][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  306.567411][ T5854] Bluetooth: hci6: command tx timeout
[  307.047302][ T5854] Bluetooth: hci7: command tx timeout
[  308.558879][ T5854] Bluetooth: hci1: command tx timeout
[  308.718388][ T5861] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  308.809630][ T5861] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  309.000119][ T5861] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  309.129664][   T51] Bluetooth: hci7: command tx timeout
[  309.269892][   T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  309.488615][   T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  310.628996][   T51] Bluetooth: hci1: command tx timeout
[  311.988169][   T51] Bluetooth: hci8: command tx timeout
[  312.709767][   T51] Bluetooth: hci1: command tx timeout
[  314.069802][   T51] Bluetooth: hci8: command tx timeout
[  314.799442][   T51] Bluetooth: hci1: command tx timeout
[  315.118499][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  316.146648][   T51] Bluetooth: hci8: command tx timeout
[  317.069966][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  318.228509][   T51] Bluetooth: hci8: command tx timeout
[  342.348245][ T5856] syz1: Port: 1 Link DOWN
[  342.448895][ T6158] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  342.736923][ T6158] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  343.048839][ T6158] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  343.279953][ T6158] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  343.639418][ T6158] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  343.847893][ T6158] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  344.700129][T12112] lo speed is unknown, defaulting to 1000
[  345.078007][ T6158] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.289451][ T6158] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.557667][ T6158] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  345.879163][ T6158] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  346.159913][ T6158] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  346.617649][ T6158] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  360.197898][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  360.707553][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  360.869237][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  361.409171][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  361.669334][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  365.024629][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  365.107441][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  365.223674][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  365.809000][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  365.988963][   T51] Bluetooth: hci2: command tx timeout
[  366.228986][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  367.569651][T12136] lo speed is unknown, defaulting to 1000
[  368.078552][   T51] Bluetooth: hci2: command tx timeout
[  369.038688][   T51] Bluetooth: hci3: command tx timeout
[  369.898903][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  370.078203][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  370.163871][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  370.188947][ T5861] Bluetooth: hci2: command tx timeout
[  370.479869][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  370.670330][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  371.108481][ T5854] Bluetooth: hci3: command tx timeout
[  372.228413][   T51] Bluetooth: hci2: command tx timeout
[  373.208515][   T51] Bluetooth: hci3: command tx timeout
[  373.596247][   T51] Bluetooth: hci5: command tx timeout
[  375.277676][   T51] Bluetooth: hci3: command tx timeout
[  375.667645][ T5854] Bluetooth: hci5: command tx timeout
[  375.879737][ T5854] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  375.976938][ T5854] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  376.058150][ T5854] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  376.398613][ T5854] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  376.789607][ T5854] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  377.777423][ T5854] Bluetooth: hci5: command tx timeout
[  378.507476][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  379.828535][ T5854] Bluetooth: hci5: command tx timeout
[  380.475381][ T5854] Bluetooth: hci7: command tx timeout
[  381.149095][   T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  381.270042][   T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  381.388326][   T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  381.569287][   T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  381.978973][   T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  382.557346][ T5854] Bluetooth: hci7: command tx timeout
[  384.649765][   T51] Bluetooth: hci7: command tx timeout
[  385.278806][   T51] Bluetooth: hci9: command tx timeout
[  386.708827][   T51] Bluetooth: hci7: command tx timeout
[  387.349978][   T51] Bluetooth: hci9: command tx timeout
[  389.458394][   T51] Bluetooth: hci9: command tx timeout
[  391.508013][   T51] Bluetooth: hci9: command tx timeout
[  401.298848][T12143] lo speed is unknown, defaulting to 1000
[  403.116924][   T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 44147 - 0
[  403.320262][   T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  406.039935][   T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 44147 - 0
[  406.257989][   T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  409.100338][   T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 44147 - 0
[  409.469368][   T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  414.880235][   T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 44147 - 0
[  415.127987][   T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  416.669414][ T5854] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  416.818260][ T5854] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  416.899267][ T5854] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  417.249205][ T5854] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  417.410302][ T5854] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  417.899834][T12141] lo speed is unknown, defaulting to 1000
[  420.070266][   T51] Bluetooth: hci10: command tx timeout
[  421.538304][   T51] Bluetooth: hci6: command 0x0406 tx timeout
[  422.158820][   T51] Bluetooth: hci10: command tx timeout
[  422.209939][   T13] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.997995][ T5861] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  424.190119][ T5861] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  424.237408][ T5861] Bluetooth: hci10: command tx timeout
[  424.538385][ T5861] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  424.787902][ T5861] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  424.887950][ T5861] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  424.909051][ T5849] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  425.197945][ T5849] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  425.340163][ T5861] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  425.478778][ T5861] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  425.638165][   T13] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.866561][   T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  426.309293][   T51] Bluetooth: hci10: command tx timeout
[  428.229591][ T5854] Bluetooth: hci12: command tx timeout
[  428.249644][   T13] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.640160][ T5854] Bluetooth: hci11: command tx timeout
[  430.318947][   T51] Bluetooth: hci12: command tx timeout
[  430.735102][   T51] Bluetooth: hci11: command tx timeout
[  431.120241][   T13] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.825333][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  432.409922][   T51] Bluetooth: hci12: command tx timeout
[  432.868055][ T5854] Bluetooth: hci11: command tx timeout
[  434.467625][ T5854] Bluetooth: hci12: command tx timeout
[  434.568084][T12149] lo speed is unknown, defaulting to 1000
[  434.947055][ T5854] Bluetooth: hci11: command tx timeout
[  436.688513][   T13] bond2: left allmulticast mode
[  436.827596][   T13] bond2: left promiscuous mode
[  436.877738][ T5854] Bluetooth: hci8: command 0x0406 tx timeout
[  436.957743][   T13] bridge0: port 3(bond2) entered disabled state
[  437.769677][   T13] bridge_slave_1: left allmulticast mode
[  437.907851][   T13] bridge_slave_1: left promiscuous mode
[  438.058377][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.288692][ T5854] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  438.378870][ T5854] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  438.518463][ T5854] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  438.789783][ T5854] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  439.199560][ T5854] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  439.589755][   T13] bridge_slave_0: left allmulticast mode
[  439.900327][   T13] bridge_slave_0: left promiscuous mode
[  439.988265][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  440.046713][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.259723][ T5849] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  440.348696][ T5849] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  440.420131][ T5849] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  440.769293][ T5849] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  440.959622][ T5849] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  441.418572][   T13] dummy0: left allmulticast mode
[  441.509150][ T5849] Bluetooth: hci13: command tx timeout
[  441.579157][   T13] dummy0: left promiscuous mode
[  441.828895][   T13] bridge0: port 2(dummy0) entered disabled state
[  442.509543][   T13] 
: left allmulticast mode
[  442.648104][   T13] 
: left promiscuous mode
[  442.759740][   T13] bridge0: port 1(
) entered disabled state
[  443.599139][ T5849] Bluetooth: hci13: command tx timeout
[  443.678199][ T5849] Bluetooth: hci14: command tx timeout
[  445.679601][ T5849] Bluetooth: hci13: command tx timeout
[  445.760063][ T5849] Bluetooth: hci14: command tx timeout
[  447.750314][ T5849] Bluetooth: hci13: command tx timeout
[  447.829381][ T5849] Bluetooth: hci14: command tx timeout
[  449.916688][ T5849] Bluetooth: hci14: command tx timeout
[  467.587155][ T5854] Bluetooth: hci4: command 0x0405 tx timeout
[  471.799155][   T13] dvmrp0 (unregistering): left allmulticast mode
[  476.897619][ T5854] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  476.978611][ T5854] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  477.089355][ T5854] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  477.517913][ T5854] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  477.710106][ T5854] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  480.647397][ T5854] Bluetooth: hci15: command tx timeout
[  481.706635][ T5849] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  481.798989][ T5849] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  482.129262][   T51] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  482.259123][   T51] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  482.460172][   T51] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  482.619036][   T51] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  482.727920][   T51] Bluetooth: hci15: command tx timeout
[  482.787819][ T5861] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  482.900135][ T5861] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  483.389027][ T5854] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  483.759485][ T5854] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  484.788392][ T5849] Bluetooth: hci15: command tx timeout
[  485.449660][ T5849] Bluetooth: hci16: command tx timeout
[  486.399096][ T5854] Bluetooth: hci17: command tx timeout
[  486.879330][ T5854] Bluetooth: hci15: command tx timeout
[  487.527502][ T5854] Bluetooth: hci16: command tx timeout
[  487.608982][   T13] bond1 (unregistering): Released all slaves
[  488.068019][ T5854] Bluetooth: hci2: command 0x0406 tx timeout
[  488.477994][ T5854] Bluetooth: hci17: command tx timeout
[  489.598404][ T5849] Bluetooth: hci16: command tx timeout
[  490.557382][ T5849] Bluetooth: hci17: command tx timeout
[  491.459402][   T51] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  491.548668][   T51] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  491.677161][   T51] Bluetooth: hci16: command tx timeout
[  491.698097][   T51] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  492.079088][ T5861] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  492.238167][ T5861] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  492.626900][ T5854] Bluetooth: hci17: command tx timeout
[  493.228187][ T5861] Bluetooth: hci3: command 0x0406 tx timeout
[  494.796390][ T5849] Bluetooth: hci18: command tx timeout
[  496.359525][   T13] bond2 (unregistering): Released all slaves
[  496.868620][ T5861] Bluetooth: hci18: command tx timeout
[  498.307355][ T5861] Bluetooth: hci5: command 0x0406 tx timeout
[  498.647680][ T5854] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  498.708384][ T5854] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  498.928827][ T5854] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  498.958252][ T5854] Bluetooth: hci18: command tx timeout
[  499.165295][ T5854] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  499.379820][ T5854] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  501.028351][ T5854] Bluetooth: hci18: command tx timeout
[  501.357504][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  501.988742][ T5861] Bluetooth: hci19: command tx timeout
[  503.438176][ T5861] Bluetooth: hci7: command 0x0406 tx timeout
[  504.083925][ T5854] Bluetooth: hci19: command tx timeout
[  504.167752][   T13] bond2 (unregistering): (slave gretap1): Releasing active interface
[  506.147676][ T5854] Bluetooth: hci19: command tx timeout
[  506.580324][   T13] team0: Port device geneve0 removed
[  508.228256][ T5861] Bluetooth: hci19: command tx timeout
[  508.559632][ T5861] Bluetooth: hci9: command 0x0406 tx timeout
[  519.776458][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  520.448515][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  521.088394][   T13] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  523.179599][   T13] bond0 (unregistering): Released all slaves
[  524.149438][   T13] bond1 (unregistering): Released all slaves
[  531.739685][   T13] bond2 (unregistering): Released all slaves
[  532.592510][   T13] bond3 (unregistering): Released all slaves
[  533.457414][   T31] INFO: task syz-executor:12154 blocked for more than 143 seconds.
[  533.649123][   T31]       Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0
[  533.757590][T12152] lo speed is unknown, defaulting to 1000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  534.019757][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  534.388385][   T31] task:syz-executor    state:D stack:24928 pid:12154 tgid:12154 ppid:1      task_flags:0x400140 flags:0x00004006
[  534.687369][   T31] Call Trace:
[  534.837608][   T31]  <TASK>
[  534.949933][   T31]  __schedule+0x16f5/0x4d00
[  535.226831][   T31]  ? __kasan_slab_free+0x62/0x70
[  535.378270][   T31]  ? rdma_nl_net_init+0xcc/0x180
[  535.477011][   T31]  ? rdma_dev_init_net+0x95/0x270
[  535.579642][   T31]  ? __lock_acquire+0xab9/0xd20
[  535.867603][   T31]  ? schedule+0x165/0x360
[  535.997825][   T31]  ? __pfx___schedule+0x10/0x10
[  536.097959][   T31]  ? schedule+0x91/0x360
[  536.187189][   T31]  schedule+0x165/0x360
[  536.288244][   T31]  schedule_preempt_disabled+0x13/0x30
[  536.468014][   T31]  __mutex_lock+0x724/0xe80
[  536.626869][   T31]  ? __mutex_lock+0x51b/0xe80
[  537.089520][   T31]  ? add_one_compat_dev+0xee/0x5c0
[  537.189032][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  537.309517][   T31]  ? rdma_dev_init_net+0x1d2/0x270
[  537.449151][   T31]  add_one_compat_dev+0xee/0x5c0
[  537.649726][   T31]  rdma_dev_init_net+0x1dd/0x270
[  537.839897][   T31]  ? __pfx_rdma_dev_init_net+0x10/0x10
[  537.947206][   T31]  ops_init+0x35c/0x5c0
[  538.029672][   T31]  setup_net+0x10c/0x320
[  538.088644][   T31]  ? __pfx_setup_net+0x10/0x10
[  538.125855][   T31]  ? copy_net_ns+0x304/0x4d0
[  538.132944][   T31]  ? down_read_killable+0x1d1/0x350
[  538.138173][   T31]  copy_net_ns+0x31b/0x4d0
[  538.179036][   T31]  create_new_namespaces+0x3f3/0x720
[  538.237708][   T31]  ? security_capable+0x7e/0x2e0
[  538.289911][   T31]  unshare_nsproxy_namespaces+0x11c/0x170
[  538.348400][   T31]  ksys_unshare+0x4c8/0x8c0
[  538.407776][   T31]  ? __pfx_ksys_unshare+0x10/0x10
[  538.489246][   T31]  __x64_sys_unshare+0x38/0x50
[  538.566861][   T31]  do_syscall_64+0xfa/0x3b0
[  538.628989][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  538.726368][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.848863][   T31]  ? clear_bhb_loop+0x60/0xb0
[  538.928395][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.009280][   T31] RIP: 0033:0x7f38ff790127
[  539.167513][   T31] RSP: 002b:00007ffdff6ec188 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[  539.288856][   T31] RAX: ffffffffffffffda RBX: 00007f38ff9b5f40 RCX: 00007f38ff790127
[  539.437446][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  539.528055][   T31] RBP: 00007f38ff9b6738 R08: 0000000000000000 R09: 0000000000000000
[  539.647838][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  539.738886][   T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  539.948271][   T31]  </TASK>
[  539.997118][   T31] INFO: task syz-executor:12158 blocked for more than 149 seconds.
[  540.117364][   T31]       Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0
[  540.240103][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  540.348652][   T31] task:syz-executor    state:D stack:25376 pid:12158 tgid:12158 ppid:1      task_flags:0x400140 flags:0x00004006
[  540.559483][   T31] Call Trace:
[  540.598595][   T31]  <TASK>
[  540.668239][   T31]  __schedule+0x16f5/0x4d00
[  540.736819][   T31]  ? __kasan_slab_free+0x62/0x70
[  540.819889][   T31]  ? rdma_nl_net_init+0xcc/0x180
[  540.887091][   T31]  ? rdma_dev_init_net+0x95/0x270
[  540.959360][   T31]  ? __lock_acquire+0xab9/0xd20
[  541.089353][   T31]  ? schedule+0x165/0x360
[  541.208423][   T31]  ? __pfx___schedule+0x10/0x10
[  541.308795][   T31]  ? schedule+0x91/0x360
[  541.397538][   T31]  schedule+0x165/0x360
[  541.550001][   T31]  schedule_preempt_disabled+0x13/0x30
[  541.718316][   T31]  __mutex_lock+0x724/0xe80
[  541.769820][   T31]  ? __mutex_lock+0x51b/0xe80
[  541.838298][   T31]  ? add_one_compat_dev+0xee/0x5c0
[  541.977702][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  542.058064][   T31]  ? rdma_dev_init_net+0x1d2/0x270
[  542.128157][   T31]  add_one_compat_dev+0xee/0x5c0
[  542.237883][   T31]  rdma_dev_init_net+0x1dd/0x270
[  542.328117][   T31]  ? __pfx_rdma_dev_init_net+0x10/0x10
[  542.506319][   T31]  ops_init+0x35c/0x5c0
[  542.718703][   T31]  setup_net+0x10c/0x320
[  542.777152][   T31]  ? __pfx_setup_net+0x10/0x10
[  542.830259][   T31]  ? copy_net_ns+0x304/0x4d0
[  542.909093][   T31]  ? down_read_killable+0x1d1/0x350
[  542.986236][   T31]  copy_net_ns+0x31b/0x4d0
[  543.077017][   T31]  create_new_namespaces+0x3f3/0x720
[  543.158438][T12154] lo speed is unknown, defaulting to 1000