last executing test programs:

1.906543523s ago: executing program 0 (id=1773):
r0 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f00000013c0)=0xc7f)
recvmmsg(r3, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x8, &(0x7f0000000040)=0xfffffffa, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0xa8, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10001}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_REPLY={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8040}, 0x20040800)
recvmsg$can_raw(r3, &(0x7f00000002c0)={&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="17000000210001"], 0x28}, 0x1, 0x0, 0x0, 0x4040814}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYRES8=r0], 0x3c}}, 0x4040000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

406.350888ms ago: executing program 1 (id=1800):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x1000000, 0x6011, r0, 0x4000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x44, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)='%+9llu \x00'}, 0x20)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)

337.488671ms ago: executing program 2 (id=1802):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r3=>0x0}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0200b20400000d0008000000"], 0xfffffd2c}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r3, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008001500000000000600270000000000831a3a81e768e73d61d151d79d6749640b4f8d3aca3ffeeefe43df3d30260645e26f05fa96da56bdb0f536ee78fb7de2f1ba7abf09da54e0461f409a760c6ad5e590bbf68cebf3ad8eda96659210ce51e13068d119952e48a6715fdfa4b333af9d3694b522f1bedd57f3f4f3405ffaecce0a8943ea0ebf1be4e4b46e8286c97b937cbcef449fa8df14824ca0ffc38b329286d440", @ANYRES16=r1], 0x44}}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10)
r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00 \x00'/28], 0x50)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="2a1004000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) (async)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1800005, 0x12, r10, 0x0) (async)
pipe(&(0x7f0000002740)) (async)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r5, &(0x7f00000002c0)={0x10})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f00000000c0), &(0x7f0000000100)=r7}, 0x20)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7000002, 0x13, r6, 0x4636b000) (async)
syz_emit_ethernet(0x7a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a8460081001b000800450000640000000000019078ac1e0001ac1414aa0b009078030000004000000000000000002f0000ac14140ae00000014424cef3e00000020000000464010102ac1414aa000007ffac1e0001000000099404000007035d00040086dd0000ffff730bf86b3064cfd3c6369f529f3f6763047038a7758b75ac3958163b2be96ac83245829e6795895e46cf981162a99422c506aece237834700d80e912ab1f3cd0c2b5c4dcf68eb01d"], 0x0) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x1ff) (async)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r11, &(0x7f0000000440)='devices.allow\x00', 0x2, 0x0) (async)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef40900c13832c99c7ef1bf00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf43951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc0f00d6e4edef3d93452a", 0xd8}], 0x1}, 0x800) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)

337.128293ms ago: executing program 0 (id=1803):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x0, 0xb63e}, 0xc)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x4e22, 0x8993, @dev={0xfe, 0x80, '\x00', 0x26}, 0x80}, {0xa, 0x4e24, 0xfffffffc, @mcast2, 0xc}, 0x1, {[0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc]}}, 0xfffffffffffffd9e)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, 0x0, &(0x7f0000000200))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000003f00), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f00000043c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmmsg$inet6(r2, &(0x7f0000004000)=[{{&(0x7f0000000980)={0xa, 0x4e21, 0x7fffffff, @mcast2, 0x6}, 0x1c, 0x0}}], 0x1, 0x0)

335.778411ms ago: executing program 1 (id=1804):
r0 = socket(0x25, 0x6, 0x2c91)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xef}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x26a}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, 0x20})
r3 = socket$nl_audit(0x10, 0x3, 0x9)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000400)=@get={0x1, &(0x7f0000000300)=""/209, 0xfffffffffffff000})
bind$bt_hci(r0, &(0x7f0000000440), 0x6)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x10)
sendfile(r0, r0, 0x0, 0x4)
getsockname$packet(r0, &(0x7f00000006c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14)
r6 = openat$cgroup_ro(r4, &(0x7f0000000740)='blkio.bfq.time\x00', 0x0, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0xffffffffffffffff, 0x8, 0x8}, 0xc)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0xfff80000, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x5, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x4}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x98, &(0x7f0000000600)=""/152, 0xe2a80, 0x22, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000780)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x8, 0x4, 0x10001}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000009c0)=[r7, r8, r9, r10, 0x1], &(0x7f0000000a00)=[{0x4, 0x3, 0x2, 0x1}, {0x2, 0x3, 0xc}, {0x3, 0x1, 0x4, 0x5}, {0x4, 0x3, 0x4, 0xa}, {0x4, 0x4, 0x7, 0xc}], 0x10, 0x3}, 0x94)
splice(0xffffffffffffffff, &(0x7f0000000b40)=0x4, r0, &(0x7f0000000b80)=0x81, 0x7, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000bc0)={@random="abe9cb38e1c5", @broadcast, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "0800e9", 0x4c, 0x6c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, {[@hopopts={0x33, 0x3, '\x00', [@ra={0x5, 0x2, 0x4}, @pad1, @ra={0x5, 0x2, 0x4c}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x38}}]}], "11141230c80d9e0126f8d354c16d6f9f29fdba38354eb3eb7b6c504f9428b32f0afd33d9"}}}}}, &(0x7f0000000c80)={0x1, 0x3, [0x899, 0xc03, 0xf91, 0x511]})
ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f0000000cc0)=0x4)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), r6)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xfc, r11, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x21}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1e53}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x2000840}, 0x1)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000f00)='./cgroup/syz1\x00', 0x200002, 0x0)
close(r8)
socket$inet6(0xa, 0x3, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002100)={{0x1, <r12=>0xffffffffffffffff}, &(0x7f0000002080), &(0x7f00000020c0)=r6}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x18, 0x9, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x3, 0x1, 0xa, 0xa, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401}, @jmp={0x5, 0x0, 0x1, 0x0, 0x8, 0x67, 0x4}]}, &(0x7f0000000fc0)='GPL\x00', 0x44, 0x1000, &(0x7f0000001000)=""/4096, 0x41100, 0x4, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000002000)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000002040)={0x5, 0x0, 0x43a7, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002140)=[r12, r8, r6, r7, r7, r7], &(0x7f0000002180)=[{0x3, 0x5, 0x8, 0xa}, {0x1, 0x2, 0xb}, {0x1, 0x5, 0x5, 0xb}, {0x5, 0x1, 0x9, 0x1}], 0x10, 0x6}, 0x94)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x28, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x28}}, 0x40880)

335.322935ms ago: executing program 2 (id=1805):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r2, 0x88, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x51e5, 0xd78, 0x9a, 0x1, 0x268], 0x0, 0x0}, 0x78)
r3 = socket$netlink(0x10, 0x3, 0x0)
socket(0x22, 0x2, 0x2)
r4 = socket(0x22, 0x2, 0x1)
close(r4)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg(r5, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0xf}}], 0x1, 0x24008000)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r7=>0x0})
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14)
close(0x3)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af8000000060a0b04000000000000000002000000cc00048024000180090001006d65746100000000140002800800024000000020080001400000000c940001800a00010072616e676500000084000280380004803400028008000340000000080900020073797a320000000009000200"], 0x120}}, 0x0)
r9 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)={'team0\x00', <r10=>0x0})
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x490, 0x220, 0x310, 0xffffffff, 0x310, 0xf0, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@remote, @icmp_id=0x64, @gre_key=0x4}}}, {{@ipv6={@dev, @loopback, [0x0, 0xff], [0x0, 0xffffffff], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @port=0x4e23, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @gre_key, @gre_key}}}, {{@ipv6={@local, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0xffffff00], 'syzkaller0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x10, @ipv4=@private=0xa010101, @ipv6=@empty, @port=0x4e23, @gre_key=0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000085000000230000008500000011000000950000000000220003442b0fa560f1675bb5a92e35c2a9cb64d4c758d8a5e5c8177db1488c1cb54d61f478c909c84fa2c8ac2d72a2ea0e22e22088a5332107721bfdd02fc80e2627c3e08b1d9009b92f4313dce2098db5c25f5b2304a17818d17f132faee0de8ac056856d87b9ebbfb36f70ef000a514bb305b852ac97a2479d47032d0b024fead36d2effbf760d9eabe477d3453507348766263597e8a856"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='pwc_handler_exit\x00', r12, 0x0, 0x9}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa8, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {}, {0x2, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffe, 0x1], [0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x3}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4c080}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a0001010900000000000000000000000000000008000a0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)

278.172422ms ago: executing program 1 (id=1806):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="040300000900000000000000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x44}}, 0x40890) (async)
r3 = socket$packet(0x11, 0x2, 0x300) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000950000001ba46ad7190432572b6ce6166ae23419b5ab2309cf368e3324c4af5b8ea1b69358d1befb862a1a397da92927c70b59a587563ef48567a4fcfeb3aa831c1d0f92badce913a49c6359b674c4daedc90fcd8a5a99d18dd9cc2f044be00036159266f09c63916c66cb3b8f4efa25a04acd912c8182bd4f8d34b247a4ecc60ac95431a3094621789cfadad563f3057600"/172], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000100)=ANY=[], 0x8) (async, rerun: 64)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (rerun: 64)
sendmmsg(r6, &(0x7f0000000200)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0xfffffffe}, 0x80, 0x0}, 0x5b4}], 0x1, 0x8d0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a0001"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) (async)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r3, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r8}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

193.931496ms ago: executing program 0 (id=1807):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0)
recvfrom(r4, 0x0, 0x0, 0x20, 0x0, 0x0)
ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000080))
r6 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xf, 0x6}, [@TCA_NETEM_DELAY_DIST={0x10, 0x2, "97c6838bcc63f8acb7e18081"}, @TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x300, 0x3, 0x9}}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

193.81532ms ago: executing program 1 (id=1808):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
ioctl$SIOCSIFHWADDR(r0, 0x8910, &(0x7f0000002280)={'wg1\x00', @local})

193.453796ms ago: executing program 2 (id=1809):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x8000000}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10)
write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r4=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x65, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x65, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000200)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) (async)
ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000200)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="3e0102000000000014001280040001"], 0x44}, 0x1, 0xba01}, 0x810)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x700, 0x7, 0xfffffffe, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x23, 0x0, 0x2b, 0x2f, 0x0, @remote, @local}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x700, 0x7, 0xfffffffe, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x23, 0x0, 0x2b, 0x2f, 0x0, @remote, @local}}}})
splice(r2, &(0x7f0000000080)=0x1, r2, &(0x7f0000000100)=0x7, 0x9, 0x2)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, 0x4100}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4008000)

120.197339ms ago: executing program 1 (id=1810):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', <r1=>0x0}) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000140)=0x8, 0x4) (async, rerun: 32)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async, rerun: 32)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async, rerun: 64)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x8000, @mcast2, 0x2}, 0x1c) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd3b, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}}, 0x800)

119.975462ms ago: executing program 0 (id=1811):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r4 = socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000180)="8ec6b1ee58ca706c1650eb9a56cb55897a498e6841bedf1145bb9b3a049dc5f35a05b9fc944a17802af0a89c28db4d911720f368d3ed2d2ed06396b7d4db9619ee1eac8fedc33624e74db8132c9ee4b5604686bd73df8ade2e4b9f", &(0x7f0000000740)=""/4096}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @generic={0x66, 0x8, 0x0, 0x0, 0xff000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000001, 0x0, 0x0, 0x0, 0x200}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)

118.410417ms ago: executing program 2 (id=1812):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60040}, 0x0)

48.225633ms ago: executing program 0 (id=1813):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=@delchain={0x40, 0x2c, 0xf31, 0x74bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x40}}, 0x4010)

47.935944ms ago: executing program 2 (id=1814):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd4804000000000080002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e0000000018ef02800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x77)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$inet_sctp(r3, &(0x7f0000000ac0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="8724e1ea98c8c1c22eef2d69e4c945c97ae6ca83d3c7112117e256226a7dbb31af1eb627914dbfe2a95d641a9c8db3d9fdd0a377dcc86c8cdea04573949d8976b5c8b11dae72b660c4c28b0a101fb14adef8539295f6617ea456abb74bbe4c93e20598511056328fa8982b0919", 0x6d}, {&(0x7f0000000380)="f775cf8b00b542ed0955ddb7935c96d13ae711add5749aed65", 0x19}], 0x2}], 0x1, 0x20040090)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000780), r4)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x14, r5, 0x305, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8050)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x68, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x4, 0xa8, @random}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24004080}, 0x20004091)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r6, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_linger(r8, 0x1, 0x3d, &(0x7f0000000080), 0x8)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

47.61647ms ago: executing program 1 (id=1815):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = getpid()
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc2112ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847060079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0xffffffffffffff3d)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r5, r5, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r5, r7, 0x2f, 0x18, 0x4, @void, @value=r7}, 0x20)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r8], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r4, {0xffe0}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

3.41301ms ago: executing program 0 (id=1816):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004500080067907800000000ffffffff2100907812000228250000090000000000000000e0000002e00000000000000000"], 0x0)

0s ago: executing program 2 (id=1817):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x6c}}, 0x800)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = epoll_create1(0x80000)
r2 = socket$unix(0x1, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
unshare(0x2c020400)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa0028000})
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xc54, @any, 0x0, 0x1}, 0xe)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f00000000c0)=0x2, 0x12)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r9)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r9)
pipe(0xfffffffffffffffd)
sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, r10, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x16}, 0x300048c0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:10719' (ED25519) to the list of known hosts.
syzkaller login: [   41.173798][ T5765] cgroup: Unknown subsys name 'net'
[   41.278975][ T5765] cgroup: Unknown subsys name 'cpuset'
[   41.283017][ T5765] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.679036][ T5765] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.143418][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.147426][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.150435][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.153214][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.156030][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.173876][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.177236][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.179994][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.183095][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.186297][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.235913][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.239251][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.241951][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.244688][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.247615][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.414255][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   46.424733][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   46.465447][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   46.531181][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.533986][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.537623][ T5825] bridge_slave_0: entered allmulticast mode
[   46.540398][ T5825] bridge_slave_0: entered promiscuous mode
[   46.562823][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.565216][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.567974][ T5825] bridge_slave_1: entered allmulticast mode
[   46.570634][ T5825] bridge_slave_1: entered promiscuous mode
[   46.587543][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.590108][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.592464][ T5829] bridge_slave_0: entered allmulticast mode
[   46.595386][ T5829] bridge_slave_0: entered promiscuous mode
[   46.610194][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.612523][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.614731][ T5829] bridge_slave_1: entered allmulticast mode
[   46.617684][ T5829] bridge_slave_1: entered promiscuous mode
[   46.637534][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.657467][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.661729][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.664637][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.667328][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.669601][ T5833] bridge_slave_0: entered allmulticast mode
[   46.672201][ T5833] bridge_slave_0: entered promiscuous mode
[   46.676428][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.687676][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.689972][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.692256][ T5833] bridge_slave_1: entered allmulticast mode
[   46.694886][ T5833] bridge_slave_1: entered promiscuous mode
[   46.733887][ T5829] team0: Port device team_slave_0 added
[   46.739073][ T5829] team0: Port device team_slave_1 added
[   46.755411][ T5825] team0: Port device team_slave_0 added
[   46.760340][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.765061][ T5825] team0: Port device team_slave_1 added
[   46.769678][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.783940][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.786835][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.796892][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.815001][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.817343][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.827893][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.849976][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.852294][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.860502][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.866936][ T5833] team0: Port device team_slave_0 added
[   46.870386][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.872864][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.881869][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.894121][ T5833] team0: Port device team_slave_1 added
[   46.911057][ T5829] hsr_slave_0: entered promiscuous mode
[   46.913416][ T5829] hsr_slave_1: entered promiscuous mode
[   46.932393][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.934564][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.943363][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.955444][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.957700][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.965772][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.997752][ T5825] hsr_slave_0: entered promiscuous mode
[   46.999989][ T5825] hsr_slave_1: entered promiscuous mode
[   47.002034][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.004479][ T5825] Cannot create hsr debugfs directory
[   47.085550][ T5833] hsr_slave_0: entered promiscuous mode
[   47.087981][ T5833] hsr_slave_1: entered promiscuous mode
[   47.090055][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.092414][ T5833] Cannot create hsr debugfs directory
[   47.221077][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.227349][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.245452][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.258217][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.290196][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.292490][ T5829] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.295166][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.297481][ T5829] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.311375][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.321230][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.326672][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.331885][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.379549][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.384021][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.388651][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.397334][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.400935][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.413928][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.437071][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.464498][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   47.495218][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.497654][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.501420][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.503645][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.539821][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.564806][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.573321][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   47.588760][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.591080][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.607981][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   47.618642][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.621012][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.624367][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.626765][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.639320][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.641612][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.699474][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.711773][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.740709][ T5829] veth0_vlan: entered promiscuous mode
[   47.745498][ T5829] veth1_vlan: entered promiscuous mode
[   47.775379][ T5829] veth0_macvtap: entered promiscuous mode
[   47.787124][ T5829] veth1_macvtap: entered promiscuous mode
[   47.803582][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.808288][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.814369][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.817428][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.820294][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.823041][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.857061][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.871821][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.933690][ T5833] veth0_vlan: entered promiscuous mode
[   47.943811][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.949612][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.960245][ T5833] veth1_vlan: entered promiscuous mode
[   47.975411][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.977222][ T5825] veth0_vlan: entered promiscuous mode
[   47.979765][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.994858][ T5833] veth0_macvtap: entered promiscuous mode
[   48.002422][ T5825] veth1_vlan: entered promiscuous mode
[   48.008261][ T5833] veth1_macvtap: entered promiscuous mode
[   48.019185][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.028841][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.029419][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.033396][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.040610][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.043278][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.047015][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.060192][ T5825] veth0_macvtap: entered promiscuous mode
[   48.066317][ T5825] veth1_macvtap: entered promiscuous mode
[   48.097215][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.116717][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.142487][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.145213][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.158495][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.161259][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.185419][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.188725][   T54] Bluetooth: hci0: command tx timeout
[   48.193440][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.215509][ T3048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.220301][ T3048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.261575][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.264027][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.267395][   T54] Bluetooth: hci2: command tx timeout
[   48.269283][   T54] Bluetooth: hci1: command tx timeout
[   48.308048][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.310606][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.381292][ T5906] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.8'.
[   48.384302][ T5906] openvswitch: netlink: Message has 5 unknown bytes.
[   48.435658][ T5912] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET)
[   48.618953][ T5929] syzkaller0: entered allmulticast mode
[   48.697235][ T5935] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.779267][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'.
[   49.204669][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'.
[   49.379167][ T5989] netlink: 'syz.0.45': attribute type 2 has an invalid length.
[   49.384514][ T5989] netlink: 'syz.0.45': attribute type 1 has an invalid length.
[   49.393332][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'.
[   49.401971][ T5991] Zero length message leads to an empty skb
[   49.432010][ T5993] team0: No ports can be present during mode change
[   49.628834][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'.
[   49.781626][ T6029] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.60'.
[   49.987012][ T6045] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   49.989479][ T6045] IPv6: NLM_F_CREATE should be set when creating new route
[   50.267375][ T5827] Bluetooth: hci0: command tx timeout
[   50.271042][ T6061] af_packet: tpacket_rcv: packet too big, clamped from 59478 to 4294967272. macoff=96
[   50.281393][ T6063] geneve2: entered promiscuous mode
[   50.347015][ T5827] Bluetooth: hci1: command tx timeout
[   50.347951][   T54] Bluetooth: hci2: command tx timeout
[   50.434304][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'.
[   50.583048][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.585672][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.676403][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.684452][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.812903][ T6094] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.817219][ T6094] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.820068][ T6094] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.822910][ T6094] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.827726][ T6094] geneve2: left promiscuous mode
[   50.932830][ T6121] netlink: 'syz.1.97': attribute type 1 has an invalid length.
[   50.935360][ T6121] netlink: 224 bytes leftover after parsing attributes in process `syz.1.97'.
[   51.587204][ T6172] Driver unsupported XDP return value 0 on prog  (id 22) dev N/A, expect packet loss!
[   51.789601][ T6190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.130'.
[   51.927606][ T6205] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   51.930888][ T6205] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   51.933702][ T6205] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   51.937885][ T6205] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   51.941429][ T6205] geneve2: entered promiscuous mode
[   52.151659][ T6225] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.155177][ T6225] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   52.158181][ T6228] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   52.240617][ T6225] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.246608][ T6225] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   52.295497][ T6225] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.298929][ T6225] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   52.347018][   T54] Bluetooth: hci0: command tx timeout
[   52.351314][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'.
[   52.357658][ T6225] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.360868][ T6225] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   52.425870][   T54] Bluetooth: hci2: command tx timeout
[   52.436112][   T54] Bluetooth: hci1: command tx timeout
[   52.444797][ T6225] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   52.448486][ T6225] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   52.455263][ T6225] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   52.459442][ T6225] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   52.466393][ T6225] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   52.468980][ T6225] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   52.476862][ T6225] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   52.479461][ T6225] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   52.669087][ T6252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   52.717485][ T6260] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   53.099445][ T5888] IPVS: starting estimator thread 0...
[   53.200076][ T6298] IPVS: using max 79 ests per chain, 189600 per kthread
[   53.244518][ T6306] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[   53.517846][ T6341] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[   53.568897][ T6346] warning: `syz.2.194' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   53.571867][ T6349] netlink: 'syz.1.196': attribute type 1 has an invalid length.
[   54.372543][ T6431] tipc: Started in network mode
[   54.374415][ T6431] tipc: Node identity 9a84a84394, cluster identity 4711
[   54.379052][ T6431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   54.387640][ T6433] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.390578][ T6433] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.393339][ T6433] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.396718][ T6433] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.425899][   T54] Bluetooth: hci0: command tx timeout
[   54.447849][ T6431] syzkaller0: entered promiscuous mode
[   54.449744][ T6431] syzkaller0: entered allmulticast mode
[   54.461886][ T6431] tipc: Resetting bearer <eth:syzkaller0>
[   54.467188][ T6430] tipc: Resetting bearer <eth:syzkaller0>
[   54.490897][ T6430] tipc: Disabling bearer <eth:syzkaller0>
[   54.506015][   T54] Bluetooth: hci1: command tx timeout
[   54.507811][ T5827] Bluetooth: hci2: command tx timeout
[   55.171171][ T6501] __nla_validate_parse: 2 callbacks suppressed
[   55.171180][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'.
[   55.180082][ T6501] netlink: 7 bytes leftover after parsing attributes in process `syz.0.254'.
[   55.329380][ T6517] netlink: 'syz.1.262': attribute type 10 has an invalid length.
[   55.415332][ T6525] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   56.342109][ T6548] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   56.386388][ T6552] netlink: 'syz.2.278': attribute type 10 has an invalid length.
[   56.389238][ T6552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.278'.
[   56.394489][ T6552] bridge0: port 3(dummy0) entered blocking state
[   56.398894][ T6552] bridge0: port 3(dummy0) entered disabled state
[   56.401296][ T6552] dummy0: entered allmulticast mode
[   56.404254][ T6552] dummy0: entered promiscuous mode
[   56.407837][ T6552] bridge0: port 3(dummy0) entered blocking state
[   56.409968][ T6552] bridge0: port 3(dummy0) entered forwarding state
[   56.542577][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.283'.
[   56.648275][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'.
[   56.754468][ T6585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.292'.
[   56.769609][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.292'.
[   56.838485][ T6593] netlink: 32 bytes leftover after parsing attributes in process `syz.1.296'.
[   56.872059][ T6595] netlink: 'syz.1.297': attribute type 21 has an invalid length.
[   56.874664][ T6595] netlink: 'syz.1.297': attribute type 6 has an invalid length.
[   56.877702][ T6595] netlink: 64 bytes leftover after parsing attributes in process `syz.1.297'.
[   56.981841][ T6609] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   57.015037][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'.
[   57.239298][ T6557] syz.2.278 (6557) used greatest stack depth: 20848 bytes left
[   57.658745][ T6683] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[   57.754609][ T6693] hsr_slave_0: left promiscuous mode
[   57.762244][ T6693] hsr_slave_1: left promiscuous mode
[   57.956774][ T6715] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[   58.129318][ T6734] Cannot find del_set index 0 as target
[   58.348831][ T6765] vlan0: entered promiscuous mode
[   58.399691][ T6770] netlink: 'syz.1.376': attribute type 4 has an invalid length.
[   58.559276][ T6792] netlink: 'syz.2.386': attribute type 2 has an invalid length.
[   58.599758][ T6796] team0: entered promiscuous mode
[   58.601414][ T6796] team_slave_0: entered promiscuous mode
[   58.603471][ T6796] team_slave_1: entered promiscuous mode
[   58.616167][ T6796] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   58.619016][ T6796] team0: left promiscuous mode
[   58.626022][ T6796] team_slave_0: left promiscuous mode
[   58.627931][ T6796] team_slave_1: left promiscuous mode
[   58.676821][ T6806]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   59.892376][ T6861] netlink: 'syz.0.415': attribute type 10 has an invalid length.
[   59.912087][ T6861] veth0_vlan: left promiscuous mode
[   59.915187][ T6861] veth0_vlan: entered promiscuous mode
[   59.924174][ T6861] team0: Device veth0_vlan failed to register rx_handler
[   59.933061][ T6863] syz_tun: entered allmulticast mode
[   59.939708][ T6862] syz_tun: left allmulticast mode
[   59.952928][ T6861] syz.0.415 (6861) used greatest stack depth: 19256 bytes left
[   61.002245][ T6914] __nla_validate_parse: 15 callbacks suppressed
[   61.002255][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.440'.
[   61.263342][ T6949] syz.0.455 uses old SIOCAX25GETINFO
[   61.339289][ T6961] nbd: socks must be embedded in a SOCK_ITEM attr
[   61.364872][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'.
[   61.367825][ T6965] netlink: 'syz.0.463': attribute type 1 has an invalid length.
[   61.370276][ T6965] netlink: 'syz.0.463': attribute type 1 has an invalid length.
[   61.535662][ T6987] netlink: 'syz.2.473': attribute type 39 has an invalid length.
[   61.540798][ T6987] veth0_macvtap: left promiscuous mode
[   62.052554][ T7011] netlink: 164 bytes leftover after parsing attributes in process `syz.2.485'.
[   62.328187][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'.
[   62.445402][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.509'.
[   62.650438][ T7086] vlan2: entered promiscuous mode
[   62.652136][ T7086] hsr_slave_1: entered promiscuous mode
[   62.653937][ T7086] vlan2: entered allmulticast mode
[   62.655671][ T7086] hsr_slave_1: entered allmulticast mode
[   62.717807][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.521'.
[   62.811973][ T7096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.526'.
[   62.957052][ T7118] netlink: 'syz.1.537': attribute type 1 has an invalid length.
[   62.959921][ T7118] netlink: 224 bytes leftover after parsing attributes in process `syz.1.537'.
[   62.962839][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'.
[   63.907192][ T7184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.959357][ T7190] Bluetooth: MGMT ver 1.23
[   64.179212][ T7225] netlink: 224 bytes leftover after parsing attributes in process `syz.0.585'.
[   64.240839][ T7236] netlink: 'syz.0.589': attribute type 3 has an invalid length.
[   65.050375][ T7320] netlink: 'syz.2.627': attribute type 12 has an invalid length.
[   65.299833][ T7337] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   65.655309][ T7389] netlink: 'syz.0.656': attribute type 1 has an invalid length.
[   66.385555][ T7396] __nla_validate_parse: 5 callbacks suppressed
[   66.385565][ T7396] netlink: 332 bytes leftover after parsing attributes in process `syz.1.659'.
[   66.392018][ T7396] netlink: 104 bytes leftover after parsing attributes in process `syz.1.659'.
[   66.395004][ T7396] netlink: 32 bytes leftover after parsing attributes in process `syz.1.659'.
[   67.289257][ T7429] netlink: 20 bytes leftover after parsing attributes in process `syz.0.674'.
[   67.369608][ T7441] netlink: 26 bytes leftover after parsing attributes in process `syz.2.681'.
[   67.417337][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'.
[   67.662182][ T7474] netlink: 'syz.2.696': attribute type 14 has an invalid length.
[   67.710057][ T7484] netlink: 'syz.0.700': attribute type 15 has an invalid length.
[   67.754074][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.703'.
[   67.761370][ T7489] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   67.838763][ T7499] netlink: 'syz.1.701': attribute type 13 has an invalid length.
[   67.842313][ T7499] netlink: 'syz.1.701': attribute type 17 has an invalid length.
[   67.909769][ T7499] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.912986][ T7499] 8021q: adding VLAN 0 to HW filter on device team0
[   67.919049][ T7499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.970782][ T7514] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   68.015375][ T7499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.077178][ T7499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.132768][ T7499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.180583][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'.
[   68.365392][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'.
[   69.640578][ T7678] !: renamed from dummy0 (while UP)
[   70.257510][ T7738] netlink: 120 bytes leftover after parsing attributes in process `syz.1.796'.
[   70.828974][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.831467][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.319405][ T7832] netlink: 'syz.1.822': attribute type 11 has an invalid length.
[   71.900662][ T7891] vcan0: tx drop: invalid sa for name 0x0000000000000003
[   71.928664][ T7893] sctp: [Deprecated]: syz.0.851 (pid 7893) Use of int in maxseg socket option.
[   71.928664][ T7893] Use struct sctp_assoc_value instead
[   72.325666][ T7925] __nla_validate_parse: 4 callbacks suppressed
[   72.325676][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'.
[   72.354776][ T7927] lo: entered promiscuous mode
[   72.357865][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'.
[   72.467708][ T7931] openvswitch: netlink: IP tunnel dst address not specified
[   72.497011][ T7926] lo: left promiscuous mode
[   72.623184][ T7953] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.628408][ T7953] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.632547][ T7953] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.636594][ T7953] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   72.717972][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.883'.
[   72.964204][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'.
[   72.969901][ T7994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.898'.
[   73.137290][ T8012] openvswitch: netlink: Missing valid actions attribute.
[   73.140372][ T8012] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.272553][ T8034] netlink: 'syz.1.918': attribute type 1 has an invalid length.
[   73.275143][ T8034] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.918'.
[   73.511716][ T8068] netlink: 72 bytes leftover after parsing attributes in process `syz.2.934'.
[   73.624733][ T8072] netlink: 136 bytes leftover after parsing attributes in process `syz.1.936'.
[   73.627985][ T8072] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   73.728690][ T8079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.848200][ T8088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.944'.
[   73.957743][ T8097] netlink: 'syz.1.948': attribute type 1 has an invalid length.
[   73.959522][ T8099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.949'.
[   73.960202][ T8097] netlink: 'syz.1.948': attribute type 1 has an invalid length.
[   73.966828][ T8099] gretap0: entered promiscuous mode
[   73.970319][ T8099] gretap0: left promiscuous mode
[   74.259263][ T8118] netlink: 'syz.1.958': attribute type 4 has an invalid length.
[   74.260087][ T8120] netlink: 'syz.2.959': attribute type 1 has an invalid length.
[   74.314594][ T8126] netlink: zone id is out of range
[   74.316525][ T8126] netlink: get zone limit has 8 unknown bytes
[   74.373036][ T8134] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.386351][ T8134] syzkaller0: entered promiscuous mode
[   74.388156][ T8134] syzkaller0: entered allmulticast mode
[   74.400123][ T8134] tipc: Resetting bearer <eth:syzkaller0>
[   74.403725][ T8131] tipc: Resetting bearer <eth:syzkaller0>
[   74.413612][ T8131] tipc: Disabling bearer <eth:syzkaller0>
[   74.727798][ T8179] netlink: 'syz.2.987': attribute type 10 has an invalid length.
[   74.760655][ T8184] netlink: 'syz.2.988': attribute type 29 has an invalid length.
[   74.764229][ T8184] netlink: 'syz.2.988': attribute type 29 has an invalid length.
[   74.805178][ T8186] netlink: del zone limit has 4 unknown bytes
[   75.718323][ T8243] openvswitch: netlink: Missing key (keys=40, expected=80)
[   75.997766][ T8268] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.006730][ T8268] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   76.216941][ T8304] netlink: 'syz.1.1039': attribute type 13 has an invalid length.
[   76.219534][ T8304] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[   76.308819][ T8315] netlink: 'syz.1.1044': attribute type 3 has an invalid length.
[   76.331181][ T8317] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.333932][ T8317] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.337466][ T8317] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.340127][ T8317] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.352800][ T8317] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[   77.189981][ T8426] bond0: option lp_interval: invalid value (18446744073709551604)
[   77.192570][ T8426] bond0: option lp_interval: allowed values 1 - 2147483647
[   77.640725][ T8467] __nla_validate_parse: 17 callbacks suppressed
[   77.640735][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1103'.
[   77.768462][ T8476] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1107'.
[   77.841658][ T8479] xt_CT: No such helper "snmp"
[   78.093842][ T8498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1114'.
[   78.097658][ T8498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1114'.
[   78.123663][ T8502] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[   78.181590][ T8507] gretap1: entered promiscuous mode
[   78.183325][ T8507] gretap1: entered allmulticast mode
[   78.464747][ T8539] syzkaller0: entered promiscuous mode
[   78.466632][ T8539] syzkaller0: entered allmulticast mode
[   78.979331][ T8575] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1147'.
[   79.247828][   T33] audit: type=1800 audit(1752307055.237:2): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1151" name="cgroup.controllers" dev="tmpfs" ino=2054 res=0 errno=0
[   79.335065][ T8596] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1159'.
[   79.430318][ T8604] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1163'.
[   79.433238][ T8604] tc_dump_action: action bad kind
[   79.794914][ T8657] validate_nla: 4 callbacks suppressed
[   79.794923][ T8657] netlink: 'syz.1.1189': attribute type 4 has an invalid length.
[   79.807045][ T8657] netlink: 'syz.1.1189': attribute type 4 has an invalid length.
[   79.985344][ T8679] netlink: 'syz.0.1199': attribute type 10 has an invalid length.
[   79.988183][ T8679] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1199'.
[   79.991387][ T8679] dummy0: entered promiscuous mode
[   79.993705][ T8679] bridge0: port 3(dummy0) entered blocking state
[   79.999075][ T8679] bridge0: port 3(dummy0) entered disabled state
[   80.001624][ T8679] dummy0: entered allmulticast mode
[   80.004885][ T8679] bridge0: port 3(dummy0) entered blocking state
[   80.007354][ T8679] bridge0: port 3(dummy0) entered forwarding state
[   80.183887][ T8700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1209'.
[   80.187227][ T8700] netlink: 'syz.2.1209': attribute type 6 has an invalid length.
[   80.189778][ T8700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1209'.
[   80.216711][ T8702] netlink: 'syz.2.1210': attribute type 9 has an invalid length.
[   80.219380][ T8702] netlink: 'syz.2.1210': attribute type 7 has an invalid length.
[   80.222041][ T8702] netlink: 'syz.2.1210': attribute type 8 has an invalid length.
[   80.276303][ T8709] netlink: 'syz.2.1212': attribute type 8 has an invalid length.
[   80.729033][ T8741] xt_TCPMSS: Only works on TCP SYN packets
[   81.080033][  T790] cfg80211: failed to load regulatory.db
[   81.494983][ T8826] netlink: 'syz.0.1262': attribute type 1 has an invalid length.
[   81.661294][ T8838] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.668978][ T8838] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.671986][ T8838] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.674926][ T8838] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.695247][ T8838] gretap1: left promiscuous mode
[   81.697331][ T8838] gretap1: left allmulticast mode
[   81.708809][ T8844] netlink: zone id is out of range
[   81.710561][ T8844] netlink: zone id is out of range
[   81.712259][ T8844] netlink: zone id is out of range
[   81.713925][ T8844] netlink: zone id is out of range
[   81.715552][ T8844] netlink: zone id is out of range
[   81.723044][ T8844] netlink: zone id is out of range
[   81.724743][ T8844] netlink: zone id is out of range
[   81.728252][ T8844] netlink: zone id is out of range
[   81.730327][ T8844] netlink: zone id is out of range
[   81.732029][ T8844] netlink: zone id is out of range
[   81.884693][ T8861] team0: No ports can be present during mode change
[   81.916711][ T5825] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[   81.920852][ T5825] CPU: 1 UID: 0 PID: 5825 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   81.920863][ T5825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.920867][ T5825] Call Trace:
[   81.920870][ T5825]  <TASK>
[   81.920873][ T5825]  dump_stack_lvl+0x189/0x250
[   81.920887][ T5825]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.920914][ T5825]  ? __pfx__printk+0x10/0x10
[   81.920930][ T5825]  dump_header+0xd3/0x480
[   81.920942][ T5825]  oom_kill_process+0x3b6/0x950
[   81.920954][ T5825]  out_of_memory+0xf09/0x12a0
[   81.920968][ T5825]  ? __pfx_out_of_memory+0x10/0x10
[   81.920982][ T5825]  mem_cgroup_out_of_memory+0x145/0x240
[   81.920993][ T5825]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   81.921008][ T5825]  ? _raw_spin_unlock+0x28/0x50
[   81.921019][ T5825]  ? memcg1_oom_prepare+0x37f/0x450
[   81.921028][ T5825]  try_charge_memcg+0xdff/0x1290
[   81.921043][ T5825]  ? __pfx_try_charge_memcg+0x10/0x10
[   81.921059][ T5825]  charge_memcg+0x9f/0x180
[   81.921068][ T5825]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[   81.921076][ T5825]  mem_cgroup_swapin_charge_folio+0x262/0x390
[   81.921107][ T5825]  __read_swap_cache_async+0x28c/0x510
[   81.921124][ T5825]  swap_cluster_readahead+0x305/0x5f0
[   81.921137][ T5825]  ? __pfx_swap_cluster_readahead+0x10/0x10
[   81.921153][ T5825]  ? get_vma_policy+0x27c/0x3c0
[   81.921163][ T5825]  swapin_readahead+0x17d/0xb50
[   81.921174][ T5825]  ? __pfx_filemap_get_entry+0x10/0x10
[   81.921188][ T5825]  ? __pfx_swapin_readahead+0x10/0x10
[   81.921200][ T5825]  ? __filemap_get_folio+0x9a6/0xaf0
[   81.921213][ T5825]  ? swap_cache_get_folio+0xae/0x3b0
[   81.921225][ T5825]  do_swap_page+0x525/0x5ac0
[   81.921235][ T5825]  ? __lock_acquire+0xab9/0xd20
[   81.921247][ T5825]  ? do_swap_page+0x184/0x5ac0
[   81.921254][ T5825]  ? __pfx_do_swap_page+0x10/0x10
[   81.921262][ T5825]  ? __pfx_default_wake_function+0x10/0x10
[   81.921270][ T5825]  ? ___pte_offset_map+0x21f/0x2c0
[   81.921280][ T5825]  ? pte_offset_map_rw_nolock+0xea/0x160
[   81.921289][ T5825]  __handle_mm_fault+0xf3e/0x5620
[   81.921296][ T5825]  ? __lock_acquire+0xab9/0xd20
[   81.921310][ T5825]  ? __pfx___handle_mm_fault+0x10/0x10
[   81.921318][ T5825]  ? lock_vma_under_rcu+0xf8/0x710
[   81.921331][ T5825]  ? lock_vma_under_rcu+0xf8/0x710
[   81.921340][ T5825]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[   81.921351][ T5825]  handle_mm_fault+0x40a/0x8e0
[   81.921363][ T5825]  do_user_addr_fault+0xa81/0x1390
[   81.921373][ T5825]  ? rcu_is_watching+0x15/0xb0
[   81.921382][ T5825]  ? trace_page_fault_user+0x84/0x1e0
[   81.921389][ T5825]  exc_page_fault+0x76/0xf0
[   81.921401][ T5825]  asm_exc_page_fault+0x26/0x30
[   81.921408][ T5825] RIP: 0033:0x7f5ea5fc11e8
[   81.921415][ T5825] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[   81.921421][ T5825] RSP: 002b:00007ffdcc44d230 EFLAGS: 00010293
[   81.921429][ T5825] RAX: 0000000000000000 RBX: 000000000000036a RCX: 00007f5ea5fc11e5
[   81.921434][ T5825] RDX: 00007ffdcc44d270 RSI: 0000000000000000 RDI: 0000000000000000
[   81.921438][ T5825] RBP: 00007ffdcc44d2dc R08: 0000000000000000 R09: 0000000000000000
[   81.921442][ T5825] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[   81.921446][ T5825] R13: 00000000000927c0 R14: 0000000000013eff R15: 00007ffdcc44d330
[   81.921458][ T5825]  </TASK>
[   81.921644][ T5825] memory: usage 307200kB, limit 307200kB, failcnt 178
[   82.033167][ T5825] memory+swap: usage 274648kB, limit 9007199254740988kB, failcnt 0
[   82.036016][ T5825] kmem: usage 273520kB, limit 9007199254740988kB, failcnt 0
[   82.038785][ T5825] Memory cgroup stats for /syz2:
[   82.039167][ T5825] cache 0
[   82.042027][ T5825] rss 0
[   82.042970][ T5825] rss_huge 0
[   82.044046][ T5825] shmem 0
[   82.045027][ T5825] mapped_file 0
[   82.046421][ T5825] dirty 0
[   82.047609][ T5825] writeback 0
[   82.048712][ T5825] workingset_refault_anon 0
[   82.050232][ T5825] workingset_refault_file 0
[   82.051737][ T5825] swap 212992
[   82.052863][ T5825] swapcached 0
[   82.054001][ T5825] pgpgin 27564
[   82.055134][ T5825] pgpgout 27564
[   82.056367][ T5825] pgfault 63754
[   82.057537][ T5825] pgmajfault 3
[   82.058701][ T5825] inactive_anon 0
[   82.059920][ T5825] active_anon 0
[   82.061442][ T5825] inactive_file 0
[   82.062615][ T5825] active_file 0
[   82.063779][ T5825] unevictable 0
[   82.064925][ T5825] hierarchical_memory_limit 314572800
[   82.066804][ T5825] hierarchical_memsw_limit 9223372036854771712
[   82.069287][ T5825] total_cache 0
[   82.072907][ T5825] total_rss 0
[   82.074046][ T5825] total_rss_huge 0
[   82.076461][ T5825] total_shmem 0
[   82.077686][ T5825] total_mapped_file 0
[   82.079761][ T5825] total_dirty 0
[   82.080971][ T5825] total_writeback 0
[   82.082253][ T5825] total_workingset_refault_anon 0
[   82.083905][ T5825] total_workingset_refault_file 0
[   82.085541][ T5825] total_swap 212992
[   82.087371][ T5825] total_swapcached 0
[   82.088731][ T5825] total_pgpgin 27564
[   82.090068][ T5825] total_pgpgout 27564
[   82.091420][ T5825] total_pgfault 63754
[   82.092754][ T5825] total_pgmajfault 3
[   82.094104][ T5825] total_inactive_anon 0
[   82.095484][ T5825] total_active_anon 0
[   82.096915][ T5825] total_inactive_file 0
[   82.098323][ T5825] total_active_file 0
[   82.101195][ T5825] total_unevictable 0
[   82.102639][ T5825] anon_cost 0
[   82.104357][ T5825] file_cost 0
[   82.105490][ T5825] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1240,pid=8773,uid=0
[   82.110582][ T5825] Memory cgroup out of memory: Killed process 8774 (syz.2.1240) total-vm:101880kB, anon-rss:944kB, file-rss:22816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[   82.245160][ T8880] netlink: 'syz.0.1286': attribute type 1 has an invalid length.
[   82.422445][ T8894] veth0_to_bond: entered allmulticast mode
[   82.744967][ T8921] __nla_validate_parse: 7 callbacks suppressed
[   82.744977][ T8921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1303'.
[   82.764319][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'.
[   82.830173][ T8929] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1306'.
[   82.893612][ T8933] bond2: (slave ip6gretap1): making interface the new active one
[   82.915070][ T8933] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[   82.921950][ T8933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1308'.
[   82.927392][ T8933] 8021q: adding VLAN 0 to HW filter on device bond2
[   82.934248][ T8938] ieee802154 phy1 wpan1: encryption failed: -22
[   83.085624][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'.
[   84.338011][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1339'.
[   84.341000][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1339'.
[   84.756918][ T9051] hsr0: entered promiscuous mode
[   84.759308][ T9051] macsec1: entered allmulticast mode
[   84.760966][ T9051] hsr0: entered allmulticast mode
[   84.762544][ T9051] hsr_slave_0: entered allmulticast mode
[   84.764303][ T9051] hsr_slave_1: entered allmulticast mode
[   84.771697][ T9051] hsr0: left allmulticast mode
[   84.773194][ T9051] hsr_slave_0: left allmulticast mode
[   84.774828][ T9051] hsr_slave_1: left allmulticast mode
[   85.013147][ T9066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1365'.
[   85.016244][ T9066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1365'.
[   85.019176][ T9066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1365'.
[   85.049407][ T9070] xt_hashlimit: size too large, truncated to 1048576
[   85.107658][ T9075] : renamed from bridge_slave_0 (while UP)
[   85.312483][ T9092] validate_nla: 1 callbacks suppressed
[   85.312494][ T9092] netlink: 'syz.1.1375': attribute type 1 has an invalid length.
[   85.515295][ T9109] trusted_key: syz.1.1381 sent an empty control message without MSG_MORE.
[   85.528790][ T9111] xt_hashlimit: size too large, truncated to 1048576
[   85.531109][ T9111] xt_hashlimit: max too large, truncated to 1048576
[   85.568485][ T9116] dummy0: entered promiscuous mode
[   85.570696][ T9115] dummy0: left promiscuous mode
[   86.230572][ T9145] erspan0: entered promiscuous mode
[   86.233980][ T9145] batman_adv: batadv0: Adding interface: macvlan2
[   86.237941][ T9145] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.245818][ T9145] batman_adv: batadv0: Interface activated: macvlan2
[   86.369660][ T9150] xt_CT: No such helper "pptp"
[   86.624696][ T9167] netlink: 'syz.2.1407': attribute type 1 has an invalid length.
[   86.642567][ T9167] 8021q: adding VLAN 0 to HW filter on device bond3
[   86.653650][ T9167] 8021q: adding VLAN 0 to HW filter on device bond3
[   86.657028][ T9167] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   86.661275][ T9167] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   86.700856][ T9170] gretap1: entered promiscuous mode
[   86.704113][ T9170] bond3: (slave gretap1): making interface the new active one
[   86.707792][ T9170] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   87.281275][ T9173] vlan2: entered promiscuous mode
[   87.283312][ T9173] bridge0: entered promiscuous mode
[   87.461235][ T9189] bridge_slave_0: left allmulticast mode
[   87.463544][ T9189] bridge_slave_0: left promiscuous mode
[   87.469939][ T9189] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.484244][ T9189] bridge_slave_1: left allmulticast mode
[   87.486837][ T9189] bridge_slave_1: left promiscuous mode
[   87.489237][ T9189] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.496467][ T9189] bond0: (slave bond_slave_0): Releasing backup interface
[   87.502400][ T9189] bond0: (slave bond_slave_1): Releasing backup interface
[   87.510641][ T9189] team0: Port device team_slave_0 removed
[   87.520609][ T9189] team0: Port device team_slave_1 removed
[   87.523670][ T9189] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.527855][ T9189] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.538263][ T9189] bond1: (slave ip6gretap1): Releasing backup interface
[   87.575604][ T9201] netlink: 'syz.0.1413': attribute type 39 has an invalid length.
[   87.612663][ T9209] netlink: 'syz.2.1414': attribute type 1 has an invalid length.
[   87.629285][ T9209] 8021q: adding VLAN 0 to HW filter on device bond4
[   87.690707][ T9219] netlink: 'syz.0.1418': attribute type 1 has an invalid length.
[   87.703034][ T9219] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.711502][ T9220] gretap1: entered promiscuous mode
[   87.715014][ T9220] bond1: (slave gretap1): making interface the new active one
[   87.719918][ T9220] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   87.750876][ T9229] netlink: 'syz.0.1420': attribute type 4 has an invalid length.
[   87.784961][ T9232] IPv6: NLM_F_REPLACE set, but no existing node found!
[   87.843989][ T9237] xt_hashlimit: size too large, truncated to 1048576
[   87.962636][ T9243] netlink: 'syz.2.1422': attribute type 16 has an invalid length.
[   87.965148][ T9243] netlink: 'syz.2.1422': attribute type 17 has an invalid length.
[   87.981667][ T9243] net_ratelimit: 4052 callbacks suppressed
[   87.981672][ T9243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.543294][ T9245] syzkaller0: entered promiscuous mode
[   88.545229][ T9245] syzkaller0: entered allmulticast mode
[   88.652950][ T9247] tipc: Started in network mode
[   88.654600][ T9247] tipc: Node identity 92d5b28333a, cluster identity 4711
[   88.657726][ T9247] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.660377][ T9247] syzkaller0: entered promiscuous mode
[   88.662104][ T9247] syzkaller0: entered allmulticast mode
[   88.697663][ T9249] bridge0: port 3(0!) entered disabled state
[   88.699703][ T9249] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.702575][ T9249] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.747027][ T9249] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.753203][ T9249] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.766472][ T9249] hsr0: left promiscuous mode
[   88.782292][ T9249] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[   88.784996][ T9249] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[   88.788148][ T9249] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[   88.790821][ T9249] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[   88.803431][ T9249] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[   88.807413][ T9249] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[   88.810169][ T9249] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[   88.812892][ T9249] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[   88.816476][ T9249] geneve2: left promiscuous mode
[   88.843621][ T9249] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   88.846596][ T9249] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   88.849301][ T9249] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   88.851986][ T9249] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   88.858898][ T9249] gretap1: left promiscuous mode
[   88.866098][ T9251] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   88.876728][ T9254] tipc: Resetting bearer <eth:syzkaller0>
[   88.884472][ T9246] tipc: Resetting bearer <eth:syzkaller0>
[   88.898368][ T9246] tipc: Disabling bearer <eth:syzkaller0>
[   88.907812][ T9258] __nla_validate_parse: 3 callbacks suppressed
[   88.907822][ T9258] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1427'.
[   88.936906][ T9262] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1429'.
[   88.996647][ T9272] netlink: 'syz.1.1432': attribute type 1 has an invalid length.
[   89.014873][ T9272] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.025560][ T9272] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.027923][ T9272] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   89.032215][ T9272] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   89.139191][ T9282] ip6tnl0: entered promiscuous mode
[   89.139343][ T9272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1432'.
[   89.144147][ T9272] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.176318][ T9289] ip6tnl0: left promiscuous mode
[   89.370160][ T9311] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.373802][ T9311] syzkaller0: entered promiscuous mode
[   89.379984][ T9311] syzkaller0: entered allmulticast mode
[   89.393497][ T9310] tipc: Resetting bearer <eth:syzkaller0>
[   89.403123][ T9310] tipc: Disabling bearer <eth:syzkaller0>
[   89.417418][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1441'.
[   89.421194][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1441'.
[   89.580183][ T9326] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1444'.
[   89.587514][ T9327] netlink: 'syz.1.1443': attribute type 13 has an invalid length.
[   89.740302][ T9326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   89.759867][ T9326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   89.764126][ T9326] bond0 (unregistering): Released all slaves
[   89.803887][ T9327] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.810136][ T9327] 8021q: adding VLAN 0 to HW filter on device team0
[   89.814197][ T9327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.830309][ T9330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.885523][ T9331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.900193][ T9340] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1447'.
[   89.948716][ T9330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.950904][ T9345] ip6erspan0: entered allmulticast mode
[   89.971916][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'.
[   90.133542][ T9370] ip6gretap0: entered promiscuous mode
[   90.135601][ T9370] macsec0: entered promiscuous mode
[   90.138119][ T9370] macsec0: entered allmulticast mode
[   90.139932][ T9370] ip6gretap0: entered allmulticast mode
[   90.164253][ T9372] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1454'.
[   90.183489][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1455'.
[   90.189985][ T9372] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[   90.251383][ T9384] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   90.323933][ T9392] bridge0: port 1(vlan3) entered blocking state
[   90.326277][ T9392] bridge0: port 1(vlan3) entered disabled state
[   90.328599][ T9392] vlan3: entered allmulticast mode
[   90.330246][ T9392] bond0: entered allmulticast mode
[   90.333050][ T9392] vlan3: entered promiscuous mode
[   90.334683][ T9392] bond0: entered promiscuous mode
[   90.563130][  T789] IPVS: starting estimator thread 0...
[   90.563156][ T9417] vlan3: entered promiscuous mode
[   90.568342][ T9417] vlan3: entered allmulticast mode
[   90.570031][ T9417] bridge0: entered allmulticast mode
[   90.647724][ T9431] validate_nla: 1 callbacks suppressed
[   90.647735][ T9431] netlink: 'syz.2.1468': attribute type 9 has an invalid length.
[   90.665940][ T9423] IPVS: using max 79 ests per chain, 189600 per kthread
[   90.707455][ T9427] team0 (unregistering): Port device team_slave_0 removed
[   90.715247][ T9427] team0 (unregistering): Port device team_slave_1 removed
[   90.736273][ T9434] netlink: 'syz.0.1466': attribute type 10 has an invalid length.
[   90.805464][ T9439] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   90.859896][ T9444] netlink: 'syz.1.1472': attribute type 21 has an invalid length.
[   90.924897][ T9449] netlink: 'syz.1.1474': attribute type 2 has an invalid length.
[   90.940297][ T9449] : entered promiscuous mode
[   90.953404][ T9447] pim6reg1: entered allmulticast mode
[   90.992871][ T9453] dummy0: entered promiscuous mode
[   90.995452][ T9453] batadv0: entered promiscuous mode
[   90.997991][ T9453] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   91.002549][ T9453] dummy0: left promiscuous mode
[   91.004728][ T9453] batadv0: left promiscuous mode
[   91.113545][ T9461] IPv6: sit1: Disabled Multicast RS
[   91.197909][ T9465] tipc: Started in network mode
[   91.199684][ T9465] tipc: Node identity 62e854c9f9c4, cluster identity 4711
[   91.202032][ T9465] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.204693][ T9465] syzkaller0: entered promiscuous mode
[   91.207281][ T9465] syzkaller0: entered allmulticast mode
[   91.217373][ T9464] tipc: Resetting bearer <eth:syzkaller0>
[   91.222376][ T9463] tipc: Resetting bearer <eth:syzkaller0>
[   91.229849][ T9463] tipc: Disabling bearer <eth:syzkaller0>
[   91.331566][ T9472] netlink: 'syz.1.1480': attribute type 3 has an invalid length.
[   91.565299][ T9480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.667360][ T9488] netlink: 'syz.2.1485': attribute type 1 has an invalid length.
[   91.755051][ T9494] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   91.789248][ T9498] delete_channel: no stack
[   91.850154][ T9509] syzkaller0: entered promiscuous mode
[   91.851965][ T9509] syzkaller0: entered allmulticast mode
[   91.931115][ T9517] netlink: 'syz.0.1495': attribute type 11 has an invalid length.
[   92.095612][ T9528] netlink: 'syz.0.1497': attribute type 1 has an invalid length.
[   92.100982][ T9528] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[   92.318477][ T9540] xt_ecn: cannot match TCP bits for non-tcp packets
[   92.374214][ T9542] bridge5: entered promiscuous mode
[   92.377145][ T9542] bridge5: entered allmulticast mode
[   92.424243][ T9544] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.427051][ T9544] batadv_slave_1: entered promiscuous mode
[   92.757499][ T9559] hsr0: entered allmulticast mode
[   92.759377][ T9559] hsr_slave_0: entered allmulticast mode
[   92.761375][ T9559] hsr_slave_1: entered allmulticast mode
[   92.793949][ T9564] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[   92.851805][ T9574] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.854145][ T9574] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[   92.856493][ T9574] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[   92.860130][ T9574] tipc: Resetting bearer <eth:syzkaller0>
[   92.998065][ T9596] can: request_module (can-proto-0) failed.
[   93.142521][ T9607] netlink: 'syz.2.1522': attribute type 1 has an invalid length.
[   93.786716][ T9610] veth0_to_bridge: entered promiscuous mode
[   93.871273][ T9611] veth0_to_bridge: left promiscuous mode
[   93.987590][ T5863] tipc: Node number set to 2708845187
[   94.020099][ T9617] netlink: 'syz.2.1525': attribute type 23 has an invalid length.
[   94.061342][   T54] Bluetooth: hci2: link tx timeout
[   94.063171][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   94.223484][ T9625] ip6erspan0: entered allmulticast mode
[   94.653332][ T9627] __nla_validate_parse: 14 callbacks suppressed
[   94.653346][ T9627] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1526'.
[   94.660220][ T9627] tc_dump_action: action bad kind
[   94.673703][ T9627] dummy0: left allmulticast mode
[   94.677674][ T9627] bridge0: port 3(dummy0) entered disabled state
[   94.687723][ T9627] : left allmulticast mode
[   94.689626][ T9627] : left promiscuous mode
[   94.691791][ T9627] bridge0: port 1() entered disabled state
[   94.699511][ T9627] bridge_slave_1: left allmulticast mode
[   94.702024][ T9627] bridge_slave_1: left promiscuous mode
[   94.704410][ T9627] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.714953][ T9627] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.718717][ T9627] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.723221][ T9627] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.732178][ T9627] batman_adv: batadv0: Interface deactivated: macvlan2
[   94.734435][ T9627] batman_adv: batadv0: Removing interface: macvlan2
[   94.739115][ T9627] bond1: (slave gretap1): Releasing active interface
[   94.804891][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1527'.
[   94.853657][ T9624] netlink: 'syz.2.1525': attribute type 2 has an invalid length.
[   94.856228][ T9624] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1525'.
[   94.903277][ T9637] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.915386][ T9637] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   94.998015][ T9646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1531'.
[   95.034126][ T9650] dvmrp8: entered allmulticast mode
[   95.042268][ T9652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.045055][ T9651] syzkaller0: entered promiscuous mode
[   95.047116][ T9651] syzkaller0: entered allmulticast mode
[   95.073187][ T9651] tipc: Resetting bearer <eth:syzkaller0>
[   95.077596][ T9649] tipc: Resetting bearer <eth:syzkaller0>
[   95.083815][ T9649] tipc: Disabling bearer <eth:syzkaller0>
[   95.088127][ T9643] dvmrp8: left allmulticast mode
[   95.161758][   T24] IPVS: starting estimator thread 0...
[   95.168058][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1534'.
[   95.222191][ T9659] netlink: zone id is out of range
[   95.223918][ T9659] netlink: zone id is out of range
[   95.225538][ T9659] netlink: zone id is out of range
[   95.228630][ T9659] netlink: zone id is out of range
[   95.230529][ T9659] netlink: zone id is out of range
[   95.232406][ T9659] netlink: zone id is out of range
[   95.234133][ T9659] netlink: zone id is out of range
[   95.235934][ T9659] netlink: zone id is out of range
[   95.237814][ T9659] netlink: zone id is out of range
[   95.276055][ T9657] IPVS: using max 79 ests per chain, 189600 per kthread
[   95.292879][ T9667] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1537'.
[   95.303389][ T9664] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   95.309241][ T9667] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1537'.
[   95.314603][ T9667] bridge0: port 3(0!) entered blocking state
[   95.316821][ T9667] bridge0: port 3(0!) entered forwarding state
[   95.325306][ T9664] 8021q: adding VLAN 0 to HW filter on device bond3
[   95.352370][ T9669] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1538'.
[   95.359613][ T9664] veth3: entered promiscuous mode
[   95.364685][ T9664] bond3: (slave veth3): Enslaving as a backup interface with a down link
[   95.371807][ T9664] vlan3: left allmulticast mode
[   95.373787][ T9664] bond0: left allmulticast mode
[   95.375521][ T9664] vlan3: left promiscuous mode
[   95.378284][ T9664] bond0: left promiscuous mode
[   95.380000][ T9664] bridge0: port 1(vlan3) entered disabled state
[   95.384914][ T9664] bond3: (slave ip6gretap2): Removing an active aggregator
[   95.388691][ T9664] bond3: (slave ip6gretap2): Releasing backup interface
[   95.390827][ T9664] bond3: (slave ip6gretap2): the permanent HWaddr of slave - 72:95:05:42:2c:77 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   95.399686][ T9664] bond3: (slave veth3): Releasing backup interface
[   95.433978][ T9669] syzkaller0: entered promiscuous mode
[   95.437427][ T9669] syzkaller0: entered allmulticast mode
[   95.472133][ T9671] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1539'.
[   95.494456][ T9671] xt_CT: No such helper "snmp"
[   96.106799][ T5827] Bluetooth: hci2: command 0x0406 tx timeout
[   96.522871][ T9705] team0 (unregistering): Port device team_slave_0 removed
[   96.526768][ T9705] team0 (unregistering): Port device team_slave_1 removed
[   96.577999][ T9709] veth5: entered promiscuous mode
[   96.598202][ T9711] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1549'.
[   96.601179][ T9711] 0: renamed from hsr_slave_1
[   96.654930][ T9721] validate_nla: 7 callbacks suppressed
[   96.654941][ T9721] netlink: 'syz.2.1551': attribute type 15 has an invalid length.
[   96.659633][ T9721] netlink: 'syz.2.1551': attribute type 18 has an invalid length.
[   96.724774][ T9725] netlink: 'syz.1.1548': attribute type 1 has an invalid length.
[   97.311760][ T9729] netlink: 'syz.0.1553': attribute type 10 has an invalid length.
[   97.332948][ T9729] netlink: 'syz.0.1553': attribute type 1 has an invalid length.
[   97.364389][ T9729] bond2: (slave bridge7): making interface the new active one
[   97.367532][ T9729] bond2: (slave bridge7): Enslaving as an active interface with an up link
[   97.418840][ T9732] netlink: 'syz.0.1554': attribute type 1 has an invalid length.
[   97.434392][ T9732] 8021q: adding VLAN 0 to HW filter on device bond3
[   97.479202][ T9732] 8021q: adding VLAN 0 to HW filter on device bond3
[   97.482166][ T9732] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[   97.487717][ T9732] bond3: (slave vcan1): Error -95 calling set_mac_address
[   97.524962][ T9736] macvlan3: entered promiscuous mode
[   97.530520][ T9736] macvlan3: entered allmulticast mode
[   97.532688][ T9736] bond3: entered promiscuous mode
[   97.534770][ T9736] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   97.539712][ T9736] bond3: left promiscuous mode
[   97.676856][ T9747] vlan4: entered allmulticast mode
[   97.767842][ T9750] netlink: 'syz.2.1559': attribute type 39 has an invalid length.
[   97.937572][ T9762] bridge0: port 3(0!) entered disabled state
[   97.949185][ T9762] hsr0: left allmulticast mode
[   97.951041][ T9762] hsr_slave_0: left allmulticast mode
[   97.953051][ T9762] 0: left allmulticast mode
[   97.960924][ T9762] ip6erspan0: left allmulticast mode
[   98.460420][ T9794] veth1: entered promiscuous mode
[   98.463530][ T9794] veth1: left promiscuous mode
[   98.585936][ T5827] Bluetooth: hci2: command 0x0406 tx timeout
[   98.880425][ T9802] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0
[   98.883030][ T9802] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.886905][ T9802] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.889842][ T9802] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.919306][ T9802] netdevsim netdevsim0 : unset [0, 0] type 1 family 0 port 8472 - 0
[   98.921951][ T9802] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.924617][ T9802] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.927732][ T9802] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   99.770052][ T9830] netlink: 'syz.2.1582': attribute type 25 has an invalid length.
[   99.804176][ T9830] __nla_validate_parse: 11 callbacks suppressed
[   99.804186][ T9830] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1582'.
[   99.895236][ T9839] IPv6: sit1: Disabled Multicast RS
[   99.977328][ T9842] net_ratelimit: 165 callbacks suppressed
[   99.977344][ T9842] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  100.058445][ T9848] netlink: 380 bytes leftover after parsing attributes in process `syz.0.1587'.
[  100.076354][ T9848] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1587'.
[  100.083874][ T9854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1589'.
[  100.162781][ T9856] netlink: 'syz.2.1589': attribute type 2 has an invalid length.
[  100.174741][ T9859] set match dimension is over the limit!
[  100.189049][ T9856] : entered promiscuous mode
[  100.399084][ T9880] IPv6: sit2: Disabled Multicast RS
[  100.625492][ T9898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1597'.
[  100.666324][ T5827] Bluetooth: hci2: command 0x0406 tx timeout
[  100.690295][ T9906] netlink: 'syz.1.1598': attribute type 16 has an invalid length.
[  100.823370][ T9923] netlink: 720 bytes leftover after parsing attributes in process `syz.2.1602'.
[  100.831982][ T9921] pimreg: entered allmulticast mode
[  100.841811][ T9923] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (5001287)
[  100.848537][ T9923] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  100.853182][ T9921] pimreg: left allmulticast mode
[  101.293873][ T9956] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  101.298525][ T9956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1605'.
[  101.385488][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1607'.
[  101.392608][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1607'.
[  101.415622][ T9960] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.426998][ T9960] bond0: (slave rose0): Enslaving as an active interface with an up link
[  101.739851][ T9989] lo speed is unknown, defaulting to 1000
[  101.741753][ T9989] lo speed is unknown, defaulting to 1000
[  101.761268][ T9989] lo speed is unknown, defaulting to 1000
[  101.767688][ T9989] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  101.773992][ T9989] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  101.784702][ T9993] 8021q: adding VLAN 0 to HW filter on device bond5
[  101.791960][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'.
[  101.828335][ T9989] lo speed is unknown, defaulting to 1000
[  101.831841][ T9989] lo speed is unknown, defaulting to 1000
[  101.834884][ T9989] lo speed is unknown, defaulting to 1000
[  101.873493][ T9993] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  102.017664][T10014] pim6reg1: entered allmulticast mode
[  102.080042][T10020] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  102.178225][T10027] : entered promiscuous mode
[  102.222575][T10035] validate_nla: 3 callbacks suppressed
[  102.222584][T10035] netlink: 'syz.2.1619': attribute type 11 has an invalid length.
[  102.300464][T10031] netlink: 'syz.0.1618': attribute type 11 has an invalid length.
[  102.381375][T10046] netlink: 'syz.0.1622': attribute type 1 has an invalid length.
[  102.395179][T10046] bond4: entered promiscuous mode
[  102.397316][T10046] 8021q: adding VLAN 0 to HW filter on device bond4
[  102.404482][T10046] batadv1: entered promiscuous mode
[  102.406822][T10046] batadv1: entered allmulticast mode
[  102.409548][T10046] 8021q: adding VLAN 0 to HW filter on device batadv1
[  102.412969][T10046] bond4: (slave batadv1): making interface the new active one
[  102.423639][T10046] bond4: (slave batadv1): Enslaving as an active interface with an up link
[  102.453021][T10049] vlan0: entered promiscuous mode
[  102.454832][T10049] bridge0: entered promiscuous mode
[  102.457549][T10049] vlan0: entered allmulticast mode
[  102.459506][T10049] bridge0: entered allmulticast mode
[  102.504884][T10049] !: left allmulticast mode
[  102.508307][T10049] !: left promiscuous mode
[  102.509938][T10049] bridge0: port 3(0!) entered disabled state
[  102.513358][T10049] bridge_slave_0: left allmulticast mode
[  102.515143][T10049] bridge_slave_0: left promiscuous mode
[  102.517430][T10049] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.521337][T10049] bridge_slave_1: left allmulticast mode
[  102.523142][T10049] bridge_slave_1: left promiscuous mode
[  102.524981][T10049] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.527815][T10057] netlink: 'syz.0.1625': attribute type 1 has an invalid length.
[  102.531951][T10049] bond0: (slave bond_slave_0): Releasing backup interface
[  102.535405][T10049] bond0: (slave bond_slave_1): Releasing backup interface
[  102.539576][T10049] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.543264][T10049] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.546951][T10049] bond0: (slave wlan1): Releasing backup interface
[  102.552678][T10049] bond0: (slave vxlan0): Releasing backup interface
[  102.557086][T10049] bond2: (slave ip6gretap1): Releasing active interface
[  102.560379][T10049] bond3: (slave gretap1): Releasing active interface
[  102.574495][T10057] 8021q: adding VLAN 0 to HW filter on device bond5
[  102.682188][T10061] netlink: 'syz.2.1626': attribute type 16 has an invalid length.
[  102.690477][T10061] netlink: 'syz.2.1626': attribute type 4 has an invalid length.
[  102.694775][T10059] veth7: entered promiscuous mode
[  102.776109][T10064] netlink: 'syz.2.1627': attribute type 49 has an invalid length.
[  102.779734][T10064] netlink: 'syz.2.1627': attribute type 12 has an invalid length.
[  102.909381][T10069] hsr_slave_0: left promiscuous mode
[  102.912984][T10069] 0: left promiscuous mode
[  102.941339][T10070] bridge0: port 1(veth5) entered blocking state
[  102.943419][T10070] bridge0: port 1(veth5) entered disabled state
[  102.945636][T10070] veth5: entered allmulticast mode
[  102.949917][T10070] veth5: entered promiscuous mode
[  102.962928][T10070] netlink: 'syz.1.1629': attribute type 1 has an invalid length.
[  102.967296][T10070] netlink: 'syz.1.1629': attribute type 1 has an invalid length.
[  102.979331][T10070] bridge0: port 2(veth0_to_bond) entered blocking state
[  102.981724][T10070] bridge0: port 2(veth0_to_bond) entered disabled state
[  102.984019][T10070] veth0_to_bond: entered allmulticast mode
[  102.991396][T10070] veth0_to_bond: entered promiscuous mode
[  103.004707][T10070] vlan0: entered allmulticast mode
[  103.007792][T10070] veth1: entered allmulticast mode
[  103.009599][T10067] lo speed is unknown, defaulting to 1000
[  103.011875][T10070] bridge0: port 3(vlan0) entered blocking state
[  103.014047][T10070] bridge0: port 3(vlan0) entered disabled state
[  103.018678][T10070] vlan0: entered promiscuous mode
[  103.020462][T10070] veth1: entered promiscuous mode
[  103.031570][T10069] lo speed is unknown, defaulting to 1000
[  103.200344][T10076] netlink: 'syz.1.1631': attribute type 1 has an invalid length.
[  103.245256][T10076] bond6: (slave bridge3): making interface the new active one
[  103.250152][T10076] bond6: (slave bridge3): Enslaving as an active interface with an up link
[  103.477343][T10090] bridge_slave_0: entered promiscuous mode
[  103.565690][T10098] sock: sock_set_timeout: `syz.0.1638' (pid 10098) tries to set negative timeout
[  103.664149][T10107] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  103.742930][T10111] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.915487][T10131] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  103.949415][T10136] bridge0: port 1(gretap0) entered blocking state
[  103.951550][T10136] bridge0: port 1(gretap0) entered disabled state
[  103.953646][T10136] gretap0: entered allmulticast mode
[  103.956603][T10136] gretap0: entered promiscuous mode
[  103.974083][T10141] dvmrp0: entered allmulticast mode
[  104.197698][   T24] lo speed is unknown, defaulting to 1000
[  104.200005][   T24] syz1: Port: 1 Link ACTIVE
[  104.222189][   T24] lo speed is unknown, defaulting to 1000
[  104.230547][   T24] syz1: Port: 1 Link DOWN
[  104.250659][T10165] : entered promiscuous mode
[  104.318433][T10169] veth0_to_bond: left allmulticast mode
[  104.325878][T10169] veth0_to_bond: left promiscuous mode
[  104.328628][T10169] bridge0: port 2(veth0_to_bond) entered disabled state
[  104.348623][T10169] bond5: (slave gretap2): Releasing backup interface
[  104.358237][T10169] veth5: left allmulticast mode
[  104.360722][T10169] veth5: left promiscuous mode
[  104.363090][T10169] bridge0: port 1(veth5) entered disabled state
[  104.381391][T10169] vlan0: left promiscuous mode
[  104.383503][T10169] veth1: left promiscuous mode
[  104.385331][T10169] bridge0: port 3(vlan0) entered disabled state
[  104.393998][T10169] bond6: (slave bridge3): Releasing active interface
[  104.420324][T10185] dummy0: left promiscuous mode
[  104.423205][T10185] bridge0: port 2(dummy0) entered blocking state
[  104.427169][T10185] bridge0: port 2(dummy0) entered disabled state
[  104.429946][T10185] dummy0: entered allmulticast mode
[  104.435129][T10185] dummy0: entered promiscuous mode
[  104.469011][T10180] lo speed is unknown, defaulting to 1000
[  104.476719][T10181] lo speed is unknown, defaulting to 1000
[  104.535015][T10197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  104.537368][T10197] IPv6: NLM_F_CREATE should be set when creating new route
[  104.844260][T10223] __nla_validate_parse: 26 callbacks suppressed
[  104.844269][T10223] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1673'.
[  104.891156][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1671'.
[  104.909974][T10224] lo speed is unknown, defaulting to 1000
[  104.966868][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'.
[  105.019794][T10238] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  105.024511][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'.
[  105.047560][T10238] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  105.051841][T10238] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  105.173947][T10252] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1682'.
[  105.486416][T10266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1685'.
[  105.494514][ T5854] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  105.502380][ T5854] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  105.515921][  T789] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  105.535331][T10268] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  105.705920][  T789] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  105.745374][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'.
[  105.750086][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1691'.
[  105.849467][  T789] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  105.991677][T10294] 8021q: adding VLAN 0 to HW filter on device bond6
[  106.019377][T10294] bond6: (slave veth7): Enslaving as an active interface with a down link
[  106.030199][T10294] vlan4: entered allmulticast mode
[  106.031959][T10294] bond6: entered allmulticast mode
[  106.042708][T10294] bond6: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  106.132731][T10305] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.141381][T10305] 8021q: adding VLAN 0 to HW filter on device team0
[  106.150585][T10305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.226087][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'.
[  106.246204][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1702'.
[  106.355203][T10326] : entered promiscuous mode
[  106.370762][T10330] wlan1: mtu greater than device maximum
[  106.402709][T10313] gretap0: left allmulticast mode
[  106.404469][T10313] gretap0: left promiscuous mode
[  106.408035][T10313] bridge0: port 1(gretap0) entered disabled state
[  106.418320][T10313] dummy0: left allmulticast mode
[  106.420127][T10313] dummy0: left promiscuous mode
[  106.421944][T10313] bridge0: port 2(dummy0) entered disabled state
[  106.427700][T10313] bond2: (slave bridge7): Releasing active interface
[  106.431688][T10313] bond4: (slave batadv1): Releasing active interface
[  106.438818][T10313] bond6: (slave veth7): Releasing active interface
[  106.467642][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  106.806288][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  106.903081][T10370] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.929772][T10371] lo speed is unknown, defaulting to 1000
[  107.772639][T10392] validate_nla: 16 callbacks suppressed
[  107.772650][T10392] netlink: 'syz.1.1721': attribute type 4 has an invalid length.
[  107.778861][T10392] netlink: 'syz.1.1721': attribute type 1 has an invalid length.
[  107.819247][T10392] 8021q: adding VLAN 0 to HW filter on device bond7
[  107.880116][T10402] netlink: 'syz.2.1724': attribute type 1 has an invalid length.
[  108.117717][T10434] caif0: Master is either lo or non-ether device
[  108.122449][T10436] netlink: 'syz.0.1733': attribute type 1 has an invalid length.
[  108.158855][T10434] dummy0: entered allmulticast mode
[  108.160884][T10433] dummy0: left allmulticast mode
[  108.195685][T10440] lo speed is unknown, defaulting to 1000
[  108.221280][T10443] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  108.228328][T10447] pim6reg: entered allmulticast mode
[  108.255098][T10447] pim6reg: left allmulticast mode
[  108.331409][T10452] netlink: 'syz.0.1738': attribute type 4 has an invalid length.
[  108.497499][T10467] netlink: 'syz.1.1742': attribute type 1 has an invalid length.
[  108.519536][T10467] 8021q: adding VLAN 0 to HW filter on device bond8
[  108.748636][T10492] bond0 (unregistering): Released all slaves
[  108.762622][T10470] macsec2: entered allmulticast mode
[  108.764837][T10470] batadv0: entered allmulticast mode
[  108.769316][T10470] batadv0: left allmulticast mode
[  108.785540][T10495] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  108.837233][T10499] lo speed is unknown, defaulting to 1000
[  108.870994][T10499] sctp: [Deprecated]: syz.1.1748 (pid 10499) Use of int in max_burst socket option.
[  108.870994][T10499] Use struct sctp_assoc_value instead
[  108.891603][T10499] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:0
[  108.986672][T10510] netlink: 'syz.1.1749': attribute type 1 has an invalid length.
[  109.001439][T10510] xt_l2tp: v2 doesn't support IP mode
[  109.052114][T10514] IPv6: syztnl1: Disabled Multicast RS
[  109.248854][T10533] tipc: New replicast peer: 255.255.255.255
[  109.251135][T10533] tipc: Enabled bearer <udp:syz2>, priority 10
[  109.308528][T10539] caif0: Master is either lo or non-ether device
[  109.420976][T10545] vxcan2: entered promiscuous mode
[  109.562677][T10560] netlink: 'syz.0.1764': attribute type 1 has an invalid length.
[  109.590164][T10560] bond8: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  109.595222][ T5854] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  109.600592][T10560] 8021q: adding VLAN 0 to HW filter on device bond8
[  109.606844][T10564] netlink: 'syz.2.1765': attribute type 1 has an invalid length.
[  109.615418][T10560] veth9: entered promiscuous mode
[  109.618958][T10560] bond8: (slave veth9): Enslaving as a backup interface with a down link
[  109.682370][T10573] netlink: 'syz.0.1768': attribute type 1 has an invalid length.
[  109.706033][ T6051] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  109.717754][T10573] 8021q: adding VLAN 0 to HW filter on device bond10
[  109.721045][T10573] bond9: (slave bond10): making interface the new active one
[  109.724538][T10573] bond9: (slave bond10): Enslaving as an active interface with an up link
[  109.735082][T10573] bond9: (slave gretap3): Enslaving as a backup interface with an up link
[  109.740759][T10573] 8021q: adding VLAN 0 to HW filter on device bond9
[  109.792244][T10582] lo speed is unknown, defaulting to 1000
[  109.911175][T10592] __nla_validate_parse: 23 callbacks suppressed
[  109.911186][T10592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1773'.
[  109.945968][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  109.980319][T10592] bond11 (unregistering): Released all slaves
[  109.986614][T10596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1773'.
[  110.003096][T10593] veth0: entered promiscuous mode
[  110.006295][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1774'.
[  110.037786][T10590] veth0 (unregistering): left promiscuous mode
[  110.384083][T10610] pim6reg: entered allmulticast mode
[  110.469941][T10618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1781'.
[  110.566278][    T9] tipc: Node number set to 2603373769
[  110.578605][T10622] team0: Device ipvlan1 failed to register rx_handler
[  110.674275][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1782'.
[  110.694784][T10627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1784'.
[  110.819905][T10631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1786'.
[  110.913398][T10633] macsec2: entered promiscuous mode
[  110.915366][T10633] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  110.918930][T10633] macsec2: entered allmulticast mode
[  110.920632][T10633] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  111.070366][T10648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1793'.
[  111.091543][T10651] sctp: [Deprecated]: syz.1.1794 (pid 10651) Use of int in max_burst socket option deprecated.
[  111.091543][T10651] Use struct sctp_assoc_value instead
[  111.114921][T10648] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1793'.
[  111.131028][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1795'.
[  111.231682][T10666] bond0: (slave wlan1): Releasing backup interface
[  111.301176][T10675] team0: Cannot enslave team device to itself
[  111.372022][T10681] pim6reg: entered allmulticast mode
[  111.391941][T10679] pim6reg: left allmulticast mode
[  111.490901][T10699] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.504577][T10699] tipc: Resetting bearer <eth:syzkaller0>
[  111.653429][T10729] _Z`Ԁ@: entered promiscuous mode
[  111.667946][T10729] bridge6: entered promiscuous mode
[  111.671797][T10729] bridge6: entered allmulticast mode
Connection to localhost closed by remote host.
[  111.848382][T10747] 8021q: adding VLAN 0 to HW filter on device bond5
[  112.038718][ T1089] tipc: Resetting bearer <eth:syzkaller0>
[  112.043741][T10024] ==================================================================
[  112.046390][T10024] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  112.048839][T10024] Read of size 8 at addr ffff8881070ec0a0 by task khidpd_16c05505/10024
[  112.052198][T10024] 
[  112.052996][T10024] CPU: 1 UID: 0 PID: 10024 Comm: khidpd_16c05505 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  112.053006][T10024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  112.053010][T10024] Call Trace:
[  112.053014][T10024]  <TASK>
[  112.053018][T10024]  dump_stack_lvl+0x189/0x250
[  112.053028][T10024]  ? __virt_addr_valid+0x1c8/0x5c0
[  112.053038][T10024]  ? rcu_is_watching+0x15/0xb0
[  112.053046][T10024]  ? __kasan_check_byte+0x12/0x40
[  112.053075][T10024]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.053082][T10024]  ? rcu_is_watching+0x15/0xb0
[  112.053090][T10024]  ? lock_release+0x4b/0x3e0
[  112.053098][T10024]  ? __virt_addr_valid+0x1c8/0x5c0
[  112.053107][T10024]  ? __virt_addr_valid+0x4a5/0x5c0
[  112.053115][T10024]  print_report+0xd2/0x2b0
[  112.053122][T10024]  ? __mutex_lock+0x738/0xe80
[  112.053129][T10024]  kasan_report+0x118/0x150
[  112.053137][T10024]  ? __mutex_lock+0x738/0xe80
[  112.053145][T10024]  __mutex_lock+0x738/0xe80
[  112.053152][T10024]  ? __mutex_lock+0x51b/0xe80
[  112.053159][T10024]  ? l2cap_unregister_user+0x6a/0x1b0
[  112.053166][T10024]  ? __pfx___mutex_lock+0x10/0x10
[  112.053173][T10024]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  112.053186][T10024]  l2cap_unregister_user+0x6a/0x1b0
[  112.053193][T10024]  hidp_session_thread+0x3c9/0x410
[  112.053201][T10024]  ? __pfx_hidp_session_thread+0x10/0x10
[  112.053207][T10024]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  112.053217][T10024]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  112.053224][T10024]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  112.053231][T10024]  ? __kthread_parkme+0x7b/0x200
[  112.053239][T10024]  ? __kthread_parkme+0x1a1/0x200
[  112.053248][T10024]  kthread+0x711/0x8a0
[  112.053258][T10024]  ? __pfx_hidp_session_thread+0x10/0x10
[  112.053264][T10024]  ? __pfx_kthread+0x10/0x10
[  112.053274][T10024]  ? _raw_spin_unlock_irq+0x23/0x50
[  112.053283][T10024]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.053292][T10024]  ? __pfx_kthread+0x10/0x10
[  112.053301][T10024]  ret_from_fork+0x3fc/0x770
[  112.053310][T10024]  ? __pfx_ret_from_fork+0x10/0x10
[  112.053317][T10024]  ? __switch_to_asm+0x39/0x70
[  112.053326][T10024]  ? __switch_to_asm+0x33/0x70
[  112.053334][T10024]  ? __pfx_kthread+0x10/0x10
[  112.053343][T10024]  ret_from_fork_asm+0x1a/0x30
[  112.053355][T10024]  </TASK>
[  112.053357][T10024] 
[  112.124407][T10024] Allocated by task 5833:
[  112.125837][T10024]  kasan_save_track+0x3e/0x80
[  112.127388][T10024]  __kasan_kmalloc+0x93/0xb0
[  112.128883][T10024]  __kmalloc_noprof+0x27a/0x4f0
[  112.130434][T10024]  hci_alloc_dev_priv+0x28/0x2040
[  112.132040][T10024]  vhci_create_device+0x120/0x6e0
[  112.133655][T10024]  vhci_write+0x3ce/0x4a0
[  112.135030][T10024]  vfs_write+0x54b/0xa90
[  112.136396][T10024]  ksys_write+0x145/0x250
[  112.137776][T10024]  do_syscall_64+0xfa/0x3b0
[  112.139226][T10024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.141070][T10024] 
[  112.141838][T10024] Freed by task 10745:
[  112.143184][T10024]  kasan_save_track+0x3e/0x80
[  112.144687][T10024]  kasan_save_free_info+0x46/0x50
[  112.146300][T10024]  __kasan_slab_free+0x62/0x70
[  112.147982][T10024]  kfree+0x18e/0x440
[  112.149265][T10024]  bt_host_release+0x82/0x90
[  112.150755][T10024]  device_release+0x9c/0x1c0
[  112.152272][T10024]  kobject_put+0x22b/0x480
[  112.153737][T10024]  vhci_release+0x88/0xd0
[  112.155139][T10024]  __fput+0x44c/0xa70
[  112.156453][T10024]  task_work_run+0x1d4/0x260
[  112.158101][T10024]  do_exit+0x6b5/0x22e0
[  112.159426][T10024]  do_group_exit+0x21c/0x2d0
[  112.160912][T10024]  get_signal+0x1286/0x1340
[  112.162352][T10024]  arch_do_signal_or_restart+0x9a/0x750
[  112.164094][T10024]  exit_to_user_mode_loop+0x75/0x110
[  112.165754][T10024]  do_syscall_64+0x2bd/0x3b0
[  112.167213][T10024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.169074][T10024] 
[  112.169852][T10024] Last potentially related work creation:
[  112.171654][T10024]  kasan_save_stack+0x3e/0x60
[  112.173265][T10024]  kasan_record_aux_stack+0xbd/0xd0
[  112.174977][T10024]  insert_work+0x3d/0x330
[  112.176556][T10024]  __queue_work+0xcfc/0xfe0
[  112.178036][T10024]  queue_work_on+0x181/0x270
[  112.179553][T10024]  l2cap_start_connection+0x20e/0x310
[  112.181281][T10024]  l2cap_chan_connect+0xa7f/0xe30
[  112.182860][T10024]  l2cap_sock_connect+0x5c5/0x7a0
[  112.184508][T10024]  __sys_connect+0x316/0x440
[  112.185971][T10024]  __x64_sys_connect+0x7a/0x90
[  112.187548][T10024]  do_syscall_64+0xfa/0x3b0
[  112.189156][T10024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.191295][T10024] 
[  112.192098][T10024] Second to last potentially related work creation:
[  112.194206][T10024]  kasan_save_stack+0x3e/0x60
[  112.195720][T10024]  kasan_record_aux_stack+0xbd/0xd0
[  112.197404][T10024]  insert_work+0x3d/0x330
[  112.198921][T10024]  __queue_work+0xbd9/0xfe0
[  112.200431][T10024]  queue_work_on+0x181/0x270
[  112.201928][T10024]  process_scheduled_works+0xae1/0x17b0
[  112.203653][T10024]  worker_thread+0x8a0/0xda0
[  112.205103][T10024]  kthread+0x711/0x8a0
[  112.206354][T10024]  ret_from_fork+0x3fc/0x770
[  112.207779][T10024]  ret_from_fork_asm+0x1a/0x30
[  112.209250][T10024] 
[  112.210004][T10024] The buggy address belongs to the object at ffff8881070ec000
[  112.210004][T10024]  which belongs to the cache kmalloc-8k of size 8192
[  112.214306][T10024] The buggy address is located 160 bytes inside of
[  112.214306][T10024]  freed 8192-byte region [ffff8881070ec000, ffff8881070ee000)
[  112.218435][T10024] 
[  112.219180][T10024] The buggy address belongs to the physical page:
[  112.221226][T10024] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1070e8
[  112.224096][T10024] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  112.226752][T10024] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  112.229209][T10024] page_type: f5(slab)
[  112.230523][T10024] raw: 057ff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[  112.233284][T10024] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  112.236070][T10024] head: 057ff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[  112.238816][T10024] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  112.241512][T10024] head: 057ff00000000003 ffffea00041c3a01 00000000ffffffff 00000000ffffffff
[  112.244157][T10024] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  112.246923][T10024] page dumped because: kasan: bad access detected
[  112.248999][T10024] page_owner tracks the page as allocated
[  112.250703][T10024] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5014991672, free_ts 0
[  112.256774][T10024]  post_alloc_hook+0x240/0x2a0
[  112.258348][T10024]  get_page_from_freelist+0x21e4/0x22c0
[  112.260139][T10024]  __alloc_frozen_pages_noprof+0x181/0x370
[  112.261913][T10024]  alloc_pages_mpol+0x232/0x4a0
[  112.263424][T10024]  allocate_slab+0x8a/0x3b0
[  112.264840][T10024]  ___slab_alloc+0xbfc/0x1480
[  112.266314][T10024]  __kmalloc_cache_noprof+0x296/0x3d0
[  112.268072][T10024]  register_framebuffer+0x484/0x8b0
[  112.269768][T10024]  __drm_fb_helper_initial_config_and_unlock+0x1307/0x18a0
[  112.272070][T10024]  drm_fbdev_client_hotplug+0x16c/0x230
[  112.273817][T10024]  drm_client_register+0x172/0x210
[  112.275413][T10024]  drm_fbdev_client_setup+0x19f/0x3f0
[  112.277075][T10024]  drm_client_setup+0x60/0x120
[  112.278637][T10024]  vkms_init+0x587/0x670
[  112.280025][T10024]  do_one_initcall+0x236/0x820
[  112.281594][T10024]  do_initcall_level+0x137/0x1f0
[  112.283216][T10024] page_owner free stack trace missing
[  112.284952][T10024] 
[  112.285755][T10024] Memory state around the buggy address:
[  112.287604][T10024]  ffff8881070ebf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  112.290167][T10024]  ffff8881070ec000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  112.292652][T10024] >ffff8881070ec080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  112.295154][T10024]                                ^
[  112.296737][T10024]  ffff8881070ec100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  112.299189][T10024]  ffff8881070ec180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  112.301662][T10024] ==================================================================
[  112.304529][T10024] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  112.306831][T10024] CPU: 1 UID: 0 PID: 10024 Comm: khidpd_16c05505 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  112.311285][T10024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  112.314649][T10024] Call Trace:
[  112.315672][T10024]  <TASK>
[  112.316595][T10024]  dump_stack_lvl+0x99/0x250
[  112.318017][T10024]  ? __asan_memcpy+0x40/0x70
[  112.319478][T10024]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.321146][T10024]  ? __pfx__printk+0x10/0x10
[  112.322617][T10024]  panic+0x2db/0x790
[  112.323847][T10024]  ? __pfx_panic+0x10/0x10
[  112.325230][T10024]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  112.327067][T10024]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  112.329077][T10024]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  112.331080][T10024]  ? print_memory_metadata+0x314/0x400
[  112.332834][T10024]  ? __mutex_lock+0x738/0xe80
[  112.334303][T10024]  check_panic_on_warn+0x89/0xb0
[  112.335851][T10024]  ? __mutex_lock+0x738/0xe80
[  112.337421][T10024]  end_report+0x78/0x160
[  112.338850][T10024]  kasan_report+0x129/0x150
[  112.340359][T10024]  ? __mutex_lock+0x738/0xe80
[  112.341902][T10024]  __mutex_lock+0x738/0xe80
[  112.343358][T10024]  ? __mutex_lock+0x51b/0xe80
[  112.344830][T10024]  ? l2cap_unregister_user+0x6a/0x1b0
[  112.346470][T10024]  ? __pfx___mutex_lock+0x10/0x10
[  112.348026][T10024]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  112.349847][T10024]  l2cap_unregister_user+0x6a/0x1b0
[  112.351455][T10024]  hidp_session_thread+0x3c9/0x410
[  112.353017][T10024]  ? __pfx_hidp_session_thread+0x10/0x10
[  112.354720][T10024]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  112.356606][T10024]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  112.358616][T10024]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  112.360567][T10024]  ? __kthread_parkme+0x7b/0x200
[  112.362195][T10024]  ? __kthread_parkme+0x1a1/0x200
[  112.363837][T10024]  kthread+0x711/0x8a0
[  112.365181][T10024]  ? __pfx_hidp_session_thread+0x10/0x10
[  112.367004][T10024]  ? __pfx_kthread+0x10/0x10
[  112.368503][T10024]  ? _raw_spin_unlock_irq+0x23/0x50
[  112.370188][T10024]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.371887][T10024]  ? __pfx_kthread+0x10/0x10
[  112.373402][T10024]  ret_from_fork+0x3fc/0x770
[  112.374880][T10024]  ? __pfx_ret_from_fork+0x10/0x10
[  112.376548][T10024]  ? __switch_to_asm+0x39/0x70
[  112.378133][T10024]  ? __switch_to_asm+0x33/0x70
[  112.379694][T10024]  ? __pfx_kthread+0x10/0x10
[  112.381228][T10024]  ret_from_fork_asm+0x1a/0x30
[  112.382729][T10024]  </TASK>
[  112.384342][T10024] Kernel Offset: disabled
[  112.385748][T10024] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:58:08  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff8c95e107 RBX=dffffc0000000000 RCX=1ffffffff192bc20 RDX=000000008c95e103
RSI=ffffffff8c95e100 RDI=ffffffff8c95e100 RBP=000000000000006f RSP=ffffc90007067608
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=ffff88802aad2298 R13=ffffffff96292a18 R14=0000000000000007 R15=ffffffff934f2f78
RIP=ffffffff8b6b153c RFL=00000803 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c315700 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ff000000 0000000000000000 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004e2f370
R8 =ffff888021418237 R9 =1ffff11004283046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98c2 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=000000ffff000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
