last executing test programs:

1m17.409702303s ago: executing program 0 (id=595):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000001d80f030000000000003404000001ed0a0014040000170000803c40ff80000000007b0a00fe000000004e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd493ba2482c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f00000004c0), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

1m10.340113928s ago: executing program 0 (id=595):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f00000004c0), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

1m3.676541768s ago: executing program 0 (id=595):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f00000004c0), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

56.947713701s ago: executing program 0 (id=595):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f00000004c0), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

50.349984837s ago: executing program 0 (id=595):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000001d80f030000000000003404000001ed0a0014040000170000803c40ff80000000007b0a00fe000000004e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd493ba2482c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f00000004c0), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

43.833614815s ago: executing program 0 (id=595):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f00000004c0), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

1.535757294s ago: executing program 1 (id=1272):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x0, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10048804}, 0x4048800)

1.534421039s ago: executing program 1 (id=1273):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0}) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) (async)
sendto$inet6(r3, &(0x7f0000000280)='S', 0x1, 0x8880, 0x0, 0x0) (async)
unshare(0x68040200) (async)
writev(r1, &(0x7f0000000100), 0x0)
close(r3) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES16=r1, @ANYRES16=r2, @ANYBLOB="080d5341af20a1485e30452b5c76ee329cf81eb0b15aea18d220", @ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x448c5}, 0xc084)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
socket$packet(0x11, 0x2, 0x300)
unshare(0x400)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r4, &(0x7f00000000c0), 0x18) (async, rerun: 32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000100)=""/209, 0x0, 0xd1, 0x1}, 0x28) (rerun: 32)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRES32=r7, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES64=r6], 0x48}}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r8, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (async, rerun: 64)
r9 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64)
setsockopt$inet_int(r9, 0x0, 0xa, &(0x7f00000010c0)=0xd, 0x3)

1.094417557s ago: executing program 1 (id=1274):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000980)="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", 0x28f}], 0x1}}], 0x1, 0x800)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e)
socket$packet(0x11, 0x3, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x0, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x41, 0x0, 0x10820, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x4084)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000000f240fa200", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

606.894612ms ago: executing program 2 (id=1278):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x6c, 0x0, &(0x7f00000000c0))
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0xc4, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x88, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7fff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x49}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000085)

605.357525ms ago: executing program 2 (id=1279):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x12)
close(0x4)
socket$kcm(0x29, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r3, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(r2, 0x0, 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400})
writev(r4, &(0x7f0000000080), 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, 0x0, 0xf03a0005)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000791064080000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffe}, 0x10}, 0x94)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x9, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x4044004)
getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000080)=<r7=>0x0, &(0x7f00000000c0)=0x4)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000380)={0x0, 0x0, 0x7f, 0x6, @vifc_lcl_ifindex=r7, @broadcast}, 0x10)
socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00'})

266.404929ms ago: executing program 2 (id=1280):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000780080006400000000311000300686173683a6e650a00000005000100070000000900020073797a310000000005000400"/88], 0x58}}, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4, 0xfffffffe}}, 0x2e)
setsockopt(r0, 0x7fff, 0x9, &(0x7f0000000180)="032ef023dbb63fcbdf261ee9888c5c76e53cf8bcdf600e8bd916bb7e86c2c55dd748fe6bbfa525edd7b33e0c1db926e76ddccf026062a83f1ea2e6f23a9dde5c6b594178480f5a5e83d74d84185d34c055c59f3cf4c3f3bf883598d76edb607a24cebdbabaf6ed1dd711a513d84a4bda836f961926d04e", 0x77)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbdaf69417010fddbdf9ffcc4bcfdf7ffdc447125050000000a0000060001001600000008000b0002000000ed83b371b3b05571fe31133c0000000000000000000000000009f276472ce5d185854975c88ebef5ac61beadfdcb3313b35e1dd3c7f39e2bbb6eb20441149bf44e4aec595b4a928e7cef5c0ed1a84ce4b80e3c7faffa3d3ef64f9d8080ba187624827ee447f0bd73e14129aa04c8284899e0314ace573f5e3b3ccd7aef26f90271a86a92ed7feaffb24951f5e808cc5518dc29088b74947b055a43abd86d1697404ba7a2ae4075defd42b3eef280d3f243d98a3de31fae847149428f"], 0x40}}, 0x20000034)

229.027623ms ago: executing program 1 (id=1281):
socket$kcm(0x11, 0xa, 0x300)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000080)=0x5, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r1, 0x0, 0x80000000000}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)

227.397111ms ago: executing program 2 (id=1282):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x0, 0xff, 0x4, 0xdb, 0x7}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x2, 0x9, 0x9}}}}]}, 0x48}}, 0x44080)

5.238672ms ago: executing program 2 (id=1283):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3adc90b4938cb2e9}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "0e4ac2b356c43bed723d7faa3d54b1b8"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4810)
r3 = socket$inet6(0xa, 0x6, 0x474)
close(r3)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x82008810}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x89a}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '@'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x40000)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4008001)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), r0)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x94, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ff8c8af}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36dae027}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54730728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe9e5ce6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b5fbde2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x24004050}, 0x24002000)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x80)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff)
r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r6, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private0}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x30}, 0x1, 0x0, 0x0, 0x8011}, 0x80)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_START_POLL(r8, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xc4}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x56}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x10}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20004000)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000900))
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pS    \x00'}, 0x20)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4b, 0x4b, 0x8, [@datasec={0x6, 0x5, 0x0, 0xf, 0x3, [{0x3, 0x4, 0x9}, {0x5, 0x79, 0x4}, {0x2, 0x7, 0xc}, {0x1, 0x2, 0x3}, {0x4, 0x1, 0x6}], "d942ab"}]}, {0x0, [0x0, 0x2e, 0x2e, 0x61, 0x0, 0x30]}}, &(0x7f0000000c00)=""/18, 0x6c, 0x12, 0x1, 0x37800000}, 0x28)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x8, 0x4}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{0x1, <r13=>0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)='%+9llu \x00'}, 0x20)
r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f40)=@o_path={&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4010, r3}, 0x18)
r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000fc0)=@generic={&(0x7f0000000f80)='./file0\x00', 0x0, 0x18}, 0x18)
pipe(&(0x7f0000001000)={<r16=>0xffffffffffffffff})
r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001140)={{0xffffffffffffffff, <r18=>0xffffffffffffffff}, &(0x7f00000010c0), &(0x7f0000001100)='%+9llu \x00'}, 0x20)
r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000011c0)=@o_path={&(0x7f0000001180)='./file0\x00', 0x0, 0x0, r7}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x7, &(0x7f0000000a80)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @map_val={0x18, 0x2, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x1}, @ldst={0x3, 0x1, 0x4, 0x7, 0x6, 0xfffffffffffffff0}, @map_val={0x18, 0x8, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000ac0)='syzkaller\x00', 0x4, 0x7d, &(0x7f0000000b00)=""/125, 0x41000, 0x5b, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c80)={0x5, 0xf, 0xbd47, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001200)=[r12, r13, r14, r15, r3, r16, r17, r18, r19], &(0x7f0000001240)=[{0x4, 0x5, 0x5}, {0x4, 0x4, 0xc, 0x5}, {0x3, 0x2, 0x1, 0xa21e95691ae3e87b}, {0x2, 0x5, 0xb, 0x7}, {0x4, 0x3, 0x5, 0x2}], 0x10, 0x9}, 0x94)

4.700348ms ago: executing program 1 (id=1284):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$alg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@iv={0x18}, @op={0x18, 0x114}], 0x30}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0xd1383000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0xfffff000)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_OIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'macsec0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006080)=@delchain={0x24, 0x64, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x804d}, 0x20004804)
r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r10, @ANYBLOB="01e700000000000000000100000014000200776731000000000000000000000000eb4b00088073f1ff802400010000000000000000209ee7812523c23c62f53c57cdbf691c200009801c000080060001000200000008493f000000000005000300ff0000000800070003000000060006004e210000"], 0x84}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)

1.352506ms ago: executing program 2 (id=1285):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0}) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030b46bd7000000000100a00000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x4) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@newtaction={0x178, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x164, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}, @m_skbmod={0x114, 0xc, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x5, 0x10000000, 0x286f, 0x2}, 0x2}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x40}]}, {0xb0, 0x6, "c49e3fb1369209f6b02b211e4efa9f0c8f4fb2c0b69778c1031d92d1b21e0c5f8126bc9e5678b7f188075bd2495d83c13623e26dece006fa4ffcb3a9c5993bb44be4797c7f37ccffc1e2e962db8ea3e2ab91fbc2e381005b4c156b29fe7698d30170c1029ce9698edb3a092618fed31f8f0be8b2d201e0401dad983c3f948070dd6a50b8bf4e68fe43665e8766180969edc6f29300ee82853b27ffc6a5d480aeb7b8ee2b8c5c35b4c24434a4"}, {0xc}, {0xc, 0x8, {0x0, 0x6}}}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000))
r5 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@mcast1, 0x0, r6}) (async)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) (async)
socket$nl_audit(0x10, 0x3, 0x9)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4000000000000007911b0000000000006600001000000009500000c00000000a3853b1563e965c128ba84ecf0eba7f1bc2bc3afe1ee6de496bbbe217e8996cd9caaecf5056526c137c4"], &(0x7f0000000740)='syzkaller\x00', 0x2, 0xcc, &(0x7f0000000780)=""/204, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x7800, 0xfffffffd, 0xfffffffd, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x4, 0x0, 0xfe, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101}}}})
bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81})
write$bt_hci(r9, &(0x7f0000000080)=ANY=[], 0x6)
r11 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000880)=@req={0x5, 0x667, 0x280}, 0x10) (async)
recvmsg$unix(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async)
r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000004000000070000007f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000002d1763bf280d78998ac3ff9360f4aee8970614c70d9799553a46fd5c86ef183e78e4e8c9265dfe918d028f91e2ef540c3af2c0adb3df86fb557fe0d7530f675d91b7687d628254e4df", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="18036c65d39dfa64d08931992b2ec17a7100000026afe07054cfb43a5e73260c593a567fbc044c6127aa841eaaee88e88cc03a3854ba38b84ad9ba00aa30ee7d7c4fd723679a4918b1fe25fc969ba1d205aa81fc2a2191faecbb4a81c6477bcb172f08329bb83610d5dcbf06ba44dee287638b3597546054270fe8121e0f248d404986c5ce1da470ee6e72717be7e2a5", @ANYRES32=r12, @ANYBLOB="0000000000000000850000001b0000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) (async)
sendmmsg(r11, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r11, 0x10f, 0x83, &(0x7f0000000280), &(0x7f0000000300)=0x4) (async)
sendmsg$NL80211_CMD_GET_WOWLAN(r11, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYRES8=r8, @ANYRESOCT=r8, @ANYBLOB="00032bbd7000ffdbdf2549000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8001)

0s ago: executing program 1 (id=1286):
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000000)="3f000000010040", 0x7)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r4 = socket$kcm(0x1e, 0x4, 0x0)
close(r0)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4008, r0}, 0x18)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=r5, 0x4)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef)

kernel console output (not intermixed with test programs):

 unknown, defaulting to 1000
[  111.639503][ T8283] 8021q: adding VLAN 0 to HW filter on device bond2
[  112.295608][ T5220] Bluetooth: hci1: command tx timeout
[  113.566438][   T13] hsr_slave_0: left promiscuous mode
[  113.568839][   T13] hsr_slave_1: left promiscuous mode
[  114.009749][   T26] smc: removing ib device syz1
[  114.058871][ T5297] lo speed is unknown, defaulting to 1000
[  114.063010][ T5297] syz1: Port: 1 Link DOWN
[  114.141354][ T8252] chnl_net:caif_netlink_parms(): no params data found
[  114.372700][ T5220] Bluetooth: hci1: command tx timeout
[  114.536841][ T8252] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.549098][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.555246][ T8252] bridge_slave_0: entered allmulticast mode
[  114.560727][ T8252] bridge_slave_0: entered promiscuous mode
[  114.592780][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.595736][ T8252] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.598687][ T8252] bridge_slave_1: entered allmulticast mode
[  114.623311][ T8252] bridge_slave_1: entered promiscuous mode
[  114.821531][ T8337] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.844213][ T8252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.860383][ T8252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.877220][ T8332] syzkaller0: entered promiscuous mode
[  114.879622][ T8332] syzkaller0: entered allmulticast mode
[  114.937798][ T8332] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  115.011150][ T8252] team0: Port device team_slave_0 added
[  115.030454][ T8252] team0: Port device team_slave_1 added
[  115.051721][ T8332] sch_fq: defrate 411 ignored.
[  115.100444][ T8331] tipc: Resetting bearer <eth:syzkaller0>
[  115.146346][ T8331] tipc: Disabling bearer <eth:syzkaller0>
[  115.168639][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.171357][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.184229][ T8252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.195098][ T8350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.198284][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.200534][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.211185][ T8252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.278218][ T8252] hsr_slave_0: entered promiscuous mode
[  115.280735][ T8252] hsr_slave_1: entered promiscuous mode
[  115.293185][ T8252] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  115.295752][ T8252] Cannot create hsr debugfs directory
[  115.362484][   T13] IPVS: stop unused estimator thread 0...
[  115.619873][ T8365] xt_cgroup: xt_cgroup: no path or classid specified
[  115.681570][ T8372] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.690990][ T8372] syzkaller0: entered promiscuous mode
[  115.694075][ T8372] syzkaller0: entered allmulticast mode
[  115.797201][ T8374] tipc: Resetting bearer <eth:syzkaller0>
[  116.058562][ T8252] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  116.069659][ T8252] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  116.080611][ T8252] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  116.090500][ T8252] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  116.207103][ T8252] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.236641][ T8252] 8021q: adding VLAN 0 to HW filter on device team0
[  116.249170][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.251392][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.266001][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.269643][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.289159][ T8400] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.621'.
[  116.452675][ T5220] Bluetooth: hci1: command tx timeout
[  116.479223][ T8252] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.506626][ T8371] tipc: Resetting bearer <eth:syzkaller0>
[  116.522544][ T8371] tipc: Disabling bearer <eth:syzkaller0>
[  116.533967][ T8412] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  116.552083][ T8252] veth0_vlan: entered promiscuous mode
[  116.576723][ T8252] veth1_vlan: entered promiscuous mode
[  116.650763][ T8252] veth0_macvtap: entered promiscuous mode
[  116.660164][ T8252] veth1_macvtap: entered promiscuous mode
[  116.691915][ T8252] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.711253][ T8252] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.721409][ T8252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.728262][ T8252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.731680][ T8252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.737834][ T8252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.893524][  T956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.896584][  T956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.976550][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.979654][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.565596][ T1088] wlan0: Trigger new scan to find an IBSS to join
[  117.833985][ T8455] pim6reg1: entered promiscuous mode
[  117.835849][ T8455] pim6reg1: entered allmulticast mode
[  117.919659][ T8457] bridge0: port 1(syz_tun) entered blocking state
[  117.922459][ T8457] bridge0: port 1(syz_tun) entered disabled state
[  117.924849][ T8457] syz_tun: entered allmulticast mode
[  117.927484][ T8457] syz_tun: entered promiscuous mode
[  117.931395][ T8457] bridge0: port 1(syz_tun) entered blocking state
[  117.934412][ T8457] bridge0: port 1(syz_tun) entered forwarding state
[  118.186020][ T8467] syzkaller1: entered promiscuous mode
[  118.188270][ T8467] syzkaller1: entered allmulticast mode
[  118.429645][ T8472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.635'.
[  118.469602][ T8471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.635'.
[  118.680714][ T5842] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.768071][ T8482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.637'.
[  118.912850][ T8486] netlink: 44 bytes leftover after parsing attributes in process `syz.2.639'.
[  118.973650][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  118.981203][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  118.986311][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  118.990384][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  118.995447][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  118.996791][ T8491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.640'.
[  119.031139][ T8488] lo speed is unknown, defaulting to 1000
[  119.190212][ T8488] chnl_net:caif_netlink_parms(): no params data found
[  119.287739][ T8488] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.290525][ T8488] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.295459][ T8488] bridge_slave_0: entered allmulticast mode
[  119.299256][ T8488] bridge_slave_0: entered promiscuous mode
[  119.313337][ T8488] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.315687][ T8488] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.318445][ T8488] bridge_slave_1: entered allmulticast mode
[  119.321310][ T8488] bridge_slave_1: entered promiscuous mode
[  119.389144][ T8488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.402546][ T8488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.466146][ T8488] team0: Port device team_slave_0 added
[  119.470811][ T8488] team0: Port device team_slave_1 added
[  119.506722][ T8513] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  119.529551][ T8488] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.532052][ T8488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.553722][ T8488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.559200][ T8488] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.561850][ T8488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.570931][ T8488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.576681][ T8510] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  119.628594][ T8488] hsr_slave_0: entered promiscuous mode
[  119.631272][ T8488] hsr_slave_1: entered promiscuous mode
[  119.643285][ T8488] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  119.645657][ T8488] Cannot create hsr debugfs directory
[  119.651083][ T8510] lo speed is unknown, defaulting to 1000
[  119.730079][ T8491] lo speed is unknown, defaulting to 1000
[  120.151388][ T8540] netlink: 'syz.2.645': attribute type 14 has an invalid length.
[  120.245062][ T8549] netlink: 168 bytes leftover after parsing attributes in process `syz.2.646'.
[  120.306536][ T8567] lo: entered allmulticast mode
[  120.528630][ T5842] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.533664][ T8570] wlan0: Trigger new scan to find an IBSS to join
[  120.561033][ T8566] lo: left allmulticast mode
[  120.639446][ T5842] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.728487][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.651'.
[  120.749330][ T5842] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.845975][ T8614] xt_CT: You must specify a L4 protocol and not use inversions on it
[  120.890592][ T5842] bridge_slave_1: left allmulticast mode
[  120.894102][ T5842] bridge_slave_1: left promiscuous mode
[  120.898062][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.906173][ T8618] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.654'.
[  120.911413][ T5842] bridge_slave_0: left allmulticast mode
[  120.915177][ T5842] bridge_slave_0: left promiscuous mode
[  120.919607][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.082873][ T5832] Bluetooth: hci1: command tx timeout
[  121.314843][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.321266][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.327544][ T5842] bond0 (unregistering): Released all slaves
[  121.656238][ T5842] hsr_slave_0: left promiscuous mode
[  121.659408][ T5842] hsr_slave_1: left promiscuous mode
[  121.667072][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.675220][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.683794][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.686448][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.726387][ T5842] veth1_macvtap: left promiscuous mode
[  121.734840][ T5842] veth0_macvtap: left promiscuous mode
[  121.737902][ T5842] veth1_vlan: left promiscuous mode
[  121.740144][ T5842] veth0_vlan: left promiscuous mode
[  121.816172][ T8639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'.
[  121.828943][ T8639] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  122.091476][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  122.119489][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  122.701238][ T8653] !: left allmulticast mode
[  122.705336][ T8653] !: left promiscuous mode
[  122.707848][ T8653] bridge0: port 3(0!) entered disabled state
[  122.718900][ T8653] bridge_slave_0: left allmulticast mode
[  122.721175][ T8653] bridge_slave_0: left promiscuous mode
[  122.724022][ T8653] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.740159][ T8653] bridge_slave_1: left allmulticast mode
[  122.750162][ T8653] bridge_slave_1: left promiscuous mode
[  122.752137][ T8653] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.770735][ T8653] : (slave bond_slave_0): Releasing backup interface
[  122.803295][ T8653] : (slave bond_slave_1): Releasing backup interface
[  122.810363][ T8653] team0: Port device team_slave_0 removed
[  122.817456][ T8653] team0: Port device team_slave_1 removed
[  122.823754][ T8653] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.827799][ T8653] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.841186][ T8653] : (slave bond1): Releasing backup interface
[  122.851029][ T8653] batman_adv: batadv0: Removing interface: macvlan2
[  122.855700][ T8653] batman_adv: batadv0: Removing interface: macvlan3
[  122.872118][ T8488] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  122.880744][ T8488] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  122.903814][ T8488] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  122.924144][ T8660] erspan0: left promiscuous mode
[  122.947716][ T8660] 8021q: adding VLAN 0 to HW filter on device 
[  122.951041][ T8660] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  122.961782][ T8488] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  122.981434][ T8671] netlink: 'syz.1.663': attribute type 6 has an invalid length.
[  123.058250][ T8680] netlink: 48 bytes leftover after parsing attributes in process `syz.2.664'.
[  123.068552][ T8680] netlink: 'syz.2.664': attribute type 11 has an invalid length.
[  123.078999][ T8680] netlink: 'syz.2.664': attribute type 39 has an invalid length.
[  123.163391][ T5832] Bluetooth: hci1: command tx timeout
[  123.164686][ T8488] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.228386][ T8488] 8021q: adding VLAN 0 to HW filter on device team0
[  123.237646][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.239927][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.283968][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.286416][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.547208][ T8700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.667'.
[  123.550892][ T8700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.667'.
[  123.559127][ T8488] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.576011][ T8570] wlan0: Trigger new scan to find an IBSS to join
[  123.615116][ T8488] veth0_vlan: entered promiscuous mode
[  123.625271][ T8488] veth1_vlan: entered promiscuous mode
[  123.648179][ T8488] veth0_macvtap: entered promiscuous mode
[  123.658682][ T8488] veth1_macvtap: entered promiscuous mode
[  123.682870][ T8488] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.697233][ T8488] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.715356][ T8488] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.720003][ T8488] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.732483][ T8488] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.735614][ T8488] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.820299][ T6194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.827600][ T6194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.854647][ T6194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.860067][ T6194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.956005][ T8717] xt_CT: You must specify a L4 protocol and not use inversions on it
[  124.016891][ T8717] netlink: 36 bytes leftover after parsing attributes in process `syz.1.671'.
[  124.503672][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.530967][ T8732] netlink: 'syz.2.674': attribute type 1 has an invalid length.
[  124.560227][ T8732] 8021q: adding VLAN 0 to HW filter on device bond2
[  125.246569][ T8765] netlink: 9 bytes leftover after parsing attributes in process `syz.1.682'.
[  125.250919][ T8765] 0: renamed from hsr0
[  125.268529][ T8765] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  125.274190][ T8765] 0: entered allmulticast mode
[  125.276434][ T8765] hsr_slave_0: entered allmulticast mode
[  125.280296][ T8765] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  125.486122][ T8769] netlink: 'syz.1.684': attribute type 18 has an invalid length.
[  125.680491][ T8776] netlink: 'syz.1.687': attribute type 10 has an invalid length.
[  125.685147][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.980565][ T8791] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.690'.
[  126.030060][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  126.034071][ T8796] netlink: 'syz.2.691': attribute type 1 has an invalid length.
[  126.037955][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  126.041043][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  126.051940][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  126.056565][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  126.093199][ T8793] lo speed is unknown, defaulting to 1000
[  126.192922][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'.
[  126.219791][ T8793] chnl_net:caif_netlink_parms(): no params data found
[  126.282994][ T5828] Bluetooth: hci2: command 0x0405 tx timeout
[  126.329789][ T8793] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.334197][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.336961][ T8793] bridge_slave_0: entered allmulticast mode
[  126.340657][ T8793] bridge_slave_0: entered promiscuous mode
[  126.346076][ T8793] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.349327][ T8793] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.352877][ T8793] bridge_slave_1: entered allmulticast mode
[  126.356050][ T8793] bridge_slave_1: entered promiscuous mode
[  126.382772][ T8793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.387275][ T8793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.421057][ T8793] team0: Port device team_slave_0 added
[  126.426564][ T8793] team0: Port device team_slave_1 added
[  126.455171][ T8793] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.457640][ T8793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.468991][ T8793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.476092][ T8793] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.478256][ T8793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.486654][ T8793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.528348][ T8793] hsr_slave_0: entered promiscuous mode
[  126.531217][ T8793] hsr_slave_1: entered promiscuous mode
[  126.997527][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.158074][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.224084][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.360249][   T13] bridge_slave_1: left allmulticast mode
[  127.363359][   T13] bridge_slave_1: left promiscuous mode
[  127.365688][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.375295][   T13] bridge_slave_0: left allmulticast mode
[  127.377586][   T13] bridge_slave_0: left promiscuous mode
[  127.379990][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.728434][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  127.739424][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  127.745094][   T13] bond0 (unregistering): Released all slaves
[  128.020245][ T8860] lo: entered allmulticast mode
[  128.034685][ T8863] lo: left allmulticast mode
[  128.122610][ T8860] xt_CT: No such helper "syz0"
[  128.138546][ T5832] Bluetooth: hci1: command tx timeout
[  128.142757][   T13] hsr_slave_0: left promiscuous mode
[  128.145115][   T13] hsr_slave_1: left promiscuous mode
[  128.147220][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.149560][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.165324][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.175674][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.199261][   T13] veth1_macvtap: left promiscuous mode
[  128.201070][   T13] veth0_macvtap: left promiscuous mode
[  128.208964][   T13] veth1_vlan: left promiscuous mode
[  128.210678][   T13] veth0_vlan: left promiscuous mode
[  128.331619][ T8875] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa:0:ffff:ffff, load rds_tcp or rds_rdma?
[  128.689295][   T13] team0 (unregistering): Port device team_slave_1 removed
[  128.721590][   T13] team0 (unregistering): Port device team_slave_0 removed
[  129.333150][ T8883] netlink: 'syz.2.705': attribute type 10 has an invalid length.
[  129.356835][ T8883] team0: Cannot enslave team device to itself
[  129.359092][ T8793] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  129.400257][ T8793] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  129.431588][ T8793] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  129.449491][ T8793] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  129.596830][ T8793] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.606554][ T8793] 8021q: adding VLAN 0 to HW filter on device team0
[  129.618046][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.620332][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.653659][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.656394][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.795769][ T8923] netlink: 44 bytes leftover after parsing attributes in process `syz.2.712'.
[  129.807403][ T8926] netlink: 'syz.1.711': attribute type 39 has an invalid length.
[  129.852182][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.712'.
[  129.877865][ T8793] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.015323][ T8793] veth0_vlan: entered promiscuous mode
[  130.021868][ T8793] veth1_vlan: entered promiscuous mode
[  130.061910][ T8793] veth0_macvtap: entered promiscuous mode
[  130.076764][ T8793] veth1_macvtap: entered promiscuous mode
[  130.094319][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.105236][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.114839][ T8793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.117519][ T8793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.120111][ T8793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.134603][ T8793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.204467][ T5832] Bluetooth: hci1: command tx timeout
[  130.218254][ T6194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.225435][ T6194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.253897][ T6194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.256395][ T6194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.465727][ T8943] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  130.465753][ T8943] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  130.470221][ T8943] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  130.571868][ T8949] netlink: 'syz.2.718': attribute type 1 has an invalid length.
[  130.619042][ T8949] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  130.846228][ T8956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.719'.
[  131.266958][ T5832] Bluetooth: hci2: link tx timeout
[  131.269022][ T5832] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  131.274594][ T5828] Bluetooth: hci2: link tx timeout
[  131.276774][ T5828] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  131.340405][ T5828] Bluetooth: hci2: link tx timeout
[  131.342075][ T5828] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  131.352852][ T5828] Bluetooth: hci2: link tx timeout
[  131.356615][ T5828] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  131.364212][ T5828] Bluetooth: hci2: link tx timeout
[  131.366150][ T5828] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  131.733450][ T8987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.724'.
[  131.773284][ T5828] Bluetooth: hci2: link tx timeout
[  131.776697][ T5828] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  132.154296][ T8973] delete_channel: no stack
[  132.188307][ T8993] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  132.193854][ T8993] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  132.257241][ T8993] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  132.260558][ T8993] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  132.299007][ T8993] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  132.305646][ T8993] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  132.363920][ T5828] Bluetooth: hci2: link tx timeout
[  132.365307][ T5842] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.366132][ T5828] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  132.385214][ T8993] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  132.389188][ T8993] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  132.413639][ T5828] Bluetooth: hci2: link tx timeout
[  132.415975][ T5828] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  132.419289][ T5828] Bluetooth: hci2: link tx timeout
[  132.421368][ T5828] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  132.471822][ T8993] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  132.476696][ T8993] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  132.485918][ T8993] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  132.489140][ T8993] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  132.501171][ T8993] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  132.505937][ T8993] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  132.514572][ T5828] Bluetooth: hci2: link tx timeout
[  132.516676][ T5828] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  132.523773][ T8993] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  132.527534][ T8993] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  132.535423][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.247723][ T5220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  133.256618][ T5220] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  133.260946][ T5220] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  133.265708][ T5220] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  133.269223][ T5220] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  133.305349][ T9012] lo speed is unknown, defaulting to 1000
[  133.324143][ T5828] Bluetooth: hci2: command 0x0405 tx timeout
[  133.430799][ T9012] chnl_net:caif_netlink_parms(): no params data found
[  133.498399][ T9012] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.500842][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.503148][ T9012] bridge_slave_0: entered allmulticast mode
[  133.506232][ T9012] bridge_slave_0: entered promiscuous mode
[  133.519983][ T9012] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.522353][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.524658][ T9012] bridge_slave_1: entered allmulticast mode
[  133.527430][ T9012] bridge_slave_1: entered promiscuous mode
[  133.553840][ T9012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.559844][ T9012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.597845][ T9012] team0: Port device team_slave_0 added
[  133.601270][ T9012] team0: Port device team_slave_1 added
[  133.620338][ T9012] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.623824][ T9012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.631338][ T9012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.636535][ T9012] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.638729][ T9012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.647396][ T9012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  133.678152][ T9012] hsr_slave_0: entered promiscuous mode
[  133.680486][ T9012] hsr_slave_1: entered promiscuous mode
[  133.682666][ T9012] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  133.685848][ T9012] Cannot create hsr debugfs directory
[  133.789900][ T9031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.732'.
[  133.934561][ T9039] lo speed is unknown, defaulting to 1000
[  133.949170][ T9037] warn_alloc: 1 callbacks suppressed
[  133.949182][ T9037] syz.2.735: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  133.958058][ T9037] CPU: 1 UID: 0 PID: 9037 Comm: syz.2.735 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  133.958072][ T9037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.958077][ T9037] Call Trace:
[  133.958082][ T9037]  <TASK>
[  133.958087][ T9037]  dump_stack_lvl+0x189/0x250
[  133.958105][ T9037]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.958117][ T9037]  ? __pfx__printk+0x10/0x10
[  133.958130][ T9037]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  133.958142][ T9037]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  133.958154][ T9037]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  133.958166][ T9037]  warn_alloc+0x214/0x310
[  133.958178][ T9037]  ? stack_depot_save_flags+0x40/0x900
[  133.958192][ T9037]  ? __pfx_warn_alloc+0x10/0x10
[  133.958204][ T9037]  ? kasan_save_track+0x4f/0x80
[  133.958213][ T9037]  ? xskq_create+0x56/0x170
[  133.958221][ T9037]  ? xsk_init_queue+0xb0/0x110
[  133.958231][ T9037]  ? xsk_setsockopt+0x43f/0x710
[  133.958241][ T9037]  ? do_sock_setsockopt+0x25a/0x3e0
[  133.958251][ T9037]  ? __x64_sys_setsockopt+0x18b/0x220
[  133.958261][ T9037]  ? do_syscall_64+0xfa/0x3b0
[  133.958269][ T9037]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.958282][ T9037]  __vmalloc_node_range_noprof+0x125/0x12f0
[  133.958307][ T9037]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  133.958321][ T9037]  ? __kasan_kmalloc+0x93/0xb0
[  133.958332][ T9037]  vmalloc_user_noprof+0xad/0xf0
[  133.958343][ T9037]  ? xskq_create+0xbf/0x170
[  133.958350][ T9037]  xskq_create+0xbf/0x170
[  133.958359][ T9037]  xsk_init_queue+0xb0/0x110
[  133.958371][ T9037]  xsk_setsockopt+0x43f/0x710
[  133.958384][ T9037]  ? __pfx_xsk_setsockopt+0x10/0x10
[  133.958394][ T9037]  ? __lock_acquire+0xab9/0xd20
[  133.958408][ T9037]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  133.958415][ T9037]  ? __pfx_xsk_setsockopt+0x10/0x10
[  133.958427][ T9037]  do_sock_setsockopt+0x25a/0x3e0
[  133.958438][ T9037]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  133.958450][ T9037]  ? __fget_files+0x2a/0x420
[  133.958465][ T9037]  __x64_sys_setsockopt+0x18b/0x220
[  133.958478][ T9037]  do_syscall_64+0xfa/0x3b0
[  133.958485][ T9037]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.958493][ T9037]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.958500][ T9037]  ? exc_page_fault+0x9f/0xf0
[  133.958513][ T9037]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.958521][ T9037] RIP: 0033:0x7f99b778e929
[  133.958530][ T9037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.958538][ T9037] RSP: 002b:00007f99b86cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  133.958549][ T9037] RAX: ffffffffffffffda RBX: 00007f99b79b5fa0 RCX: 00007f99b778e929
[  133.958554][ T9037] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  133.958559][ T9037] RBP: 00007f99b7810b39 R08: 0000000000000004 R09: 0000000000000000
[  133.958563][ T9037] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.958568][ T9037] R13: 0000000000000000 R14: 00007f99b79b5fa0 R15: 00007fffac3a99c8
[  133.958581][ T9037]  </TASK>
[  133.958585][ T9037] Mem-Info:
[  134.082570][ T5842] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.093011][ T9037] active_anon:8653 inactive_anon:0 isolated_anon:0
[  134.093011][ T9037]  active_file:1144 inactive_file:38241 isolated_file:0
[  134.093011][ T9037]  unevictable:1768 dirty:85 writeback:0
[  134.093011][ T9037]  slab_reclaimable:9763 slab_unreclaimable:70643
[  134.093011][ T9037]  mapped:21072 shmem:5128 pagetables:1073
[  134.093011][ T9037]  sec_pagetables:0 bounce:0
[  134.093011][ T9037]  kernel_misc_reclaimable:0
[  134.093011][ T9037]  free:276260 free_pcp:18327 free_cma:0
[  134.108603][ T9037] Node 0 active_anon:24388kB inactive_anon:0kB active_file:3544kB inactive_file:133636kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30448kB dirty:132kB writeback:0kB shmem:15660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7716kB pagetables:2184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  134.133683][ T9037] Node 1 active_anon:10360kB inactive_anon:0kB active_file:1032kB inactive_file:19328kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:53908kB dirty:208kB writeback:0kB shmem:4920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4612kB pagetables:2108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  134.147369][ T9039] x_tables: duplicate underflow at hook 1
[  134.166327][ T5842] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.176365][ T9037] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  134.213105][ T9037] lowmem_reserve[]: 0 812 812 812 812
[  134.215237][ T9037] Node 0 DMA32 free:270072kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17588kB inactive_anon:0kB active_file:3544kB inactive_file:133636kB unevictable:3536kB writepending:132kB present:1556484kB managed:831900kB mlocked:0kB bounce:0kB free_pcp:35028kB local_pcp:14412kB free_cma:0kB
[  134.255688][ T9037] lowmem_reserve[]: 0 0 0 0 0
[  134.257011][ T5842] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.258432][ T9037] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  134.271510][ T9037] lowmem_reserve[]: 0 0 854 854 854
[  134.273821][ T9037] Node 1 Normal free:360404kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10292kB inactive_anon:0kB active_file:1032kB inactive_file:19328kB unevictable:3536kB writepending:208kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:45924kB local_pcp:20816kB free_cma:0kB
[  134.286630][ T9037] lowmem_reserve[]: 0 0 0 0 0
[  134.288661][ T9037] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  134.294517][ T9037] Node 0 DMA32: 428*4kB (UE) 354*8kB (UE) 134*16kB (UE) 28*32kB (UM) 213*64kB (UM) 142*128kB (UME) 69*256kB (UME) 38*512kB (UM) 31*1024kB (UM) 7*2048kB (UME) 36*4096kB (UM) = 270048kB
[  134.302180][ T9037] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  134.307521][ T9037] Node 1 Normal: 53*4kB (UME) 26*8kB (ME) 13*16kB (UME) 271*32kB (UME) 258*64kB (UME) 50*128kB (UME) 94*256kB (UME) 106*512kB (UME) 58*1024kB (UM) 9*2048kB (UME) 42*4096kB (UM) = 360404kB
[  134.314042][ T9037] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  134.316982][ T9037] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  134.320278][ T9037] 41844 total pagecache pages
[  134.321924][ T9037] 0 pages in swap cache
[  134.323564][ T9037] Free swap  = 124996kB
[  134.325247][ T9037] Total swap = 124996kB
[  134.326675][ T9037] 786301 pages RAM
[  134.327836][ T9037] 0 pages HighMem/MovableOnly
[  134.329396][ T9037] 241078 pages reserved
[  134.331010][ T9037] 0 pages cma reserved
[  134.527904][ T5842] bridge_slave_1: left allmulticast mode
[  134.529945][ T5842] bridge_slave_1: left promiscuous mode
[  134.531722][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.538617][ T5842] bridge_slave_0: left allmulticast mode
[  134.540398][ T5842] bridge_slave_0: left promiscuous mode
[  134.542650][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.585866][ T9060] netlink: 146828 bytes leftover after parsing attributes in process `syz.2.740'.
[  134.588759][ T9060] openvswitch: netlink: Message has 5 unknown bytes.
[  134.876255][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  134.880510][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.884879][ T5842] bond0 (unregistering): Released all slaves
[  135.196707][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'.
[  135.206172][ T9069] netlink: 'syz.1.741': attribute type 5 has an invalid length.
[  135.216540][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'.
[  135.322518][ T5832] Bluetooth: hci1: command tx timeout
[  135.389224][ T9080] netlink: 720 bytes leftover after parsing attributes in process `syz.1.743'.
[  135.393488][ T5842] hsr_slave_0: left promiscuous mode
[  135.407441][ T5842] hsr_slave_1: left promiscuous mode
[  135.410271][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.416071][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.420003][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.423388][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.441780][ T5842] veth1_macvtap: left promiscuous mode
[  135.444254][ T5842] veth0_macvtap: left promiscuous mode
[  135.446496][ T5842] veth1_vlan: left promiscuous mode
[  135.448603][ T5842] veth0_vlan: left promiscuous mode
[  135.873027][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  135.900672][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  136.290512][ T9093] netlink: 'syz.2.747': attribute type 21 has an invalid length.
[  136.301058][ T9093] netlink: 128 bytes leftover after parsing attributes in process `syz.2.747'.
[  136.315996][ T9093] netlink: 'syz.2.747': attribute type 4 has an invalid length.
[  136.318431][ T9093] netlink: 'syz.2.747': attribute type 3 has an invalid length.
[  136.334132][ T9093] netlink: 3 bytes leftover after parsing attributes in process `syz.2.747'.
[  136.397208][ T9012] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  136.419257][ T9012] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  136.435498][ T9012] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  136.449244][ T9012] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  136.612161][ T9111] netlink: 'syz.1.751': attribute type 5 has an invalid length.
[  136.621569][ T9111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.751'.
[  136.626499][ T9012] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.650277][ T9115] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  136.745682][ T9012] 8021q: adding VLAN 0 to HW filter on device team0
[  136.788147][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'.
[  136.802351][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.805384][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.824144][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.827157][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.930327][ T9134] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  136.940803][ T9134] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  137.119972][ T9144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.756'.
[  137.124503][ T9144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.756'.
[  137.131961][ T9012] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.138047][ T9144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.756'.
[  137.183847][ T9012] veth0_vlan: entered promiscuous mode
[  137.208026][ T9012] veth1_vlan: entered promiscuous mode
[  137.278837][ T9012] veth0_macvtap: entered promiscuous mode
[  137.290239][ T9012] veth1_macvtap: entered promiscuous mode
[  137.309294][ T9012] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.321846][ T9012] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.329181][ T9012] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.336639][ T9012] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.340267][ T9012] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.346786][ T9012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.402543][ T5832] Bluetooth: hci1: command tx timeout
[  137.470367][ T6198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.482855][ T6198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.515966][ T6198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.519501][ T6198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.729025][ T9176] netlink: 'syz.2.762': attribute type 11 has an invalid length.
[  137.753469][ T9170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.821064][ T9170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.906175][ T9189] vlan0: entered promiscuous mode
[  137.908352][ T9189] bond0: entered promiscuous mode
[  137.910108][ T9189] vlan0: entered allmulticast mode
[  137.911768][ T9189] bond0: entered allmulticast mode
[  137.935318][ T9178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.978735][ T9192] netlink: 'syz.2.764': attribute type 1 has an invalid length.
[  138.017564][ T9192] bond3: (slave bridge4): making interface the new active one
[  138.021395][ T9192] bond3: (slave bridge4): Enslaving as an active interface with an up link
[  138.138852][ T9200] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.138888][ T9201] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.194286][ T9203] netlink: 'syz.2.767': attribute type 1 has an invalid length.
[  138.226341][ T9203] 8021q: adding VLAN 0 to HW filter on device bond4
[  138.246546][ T9203] bond4: (slave gretap3): making interface the new active one
[  138.250712][ T9203] bond4: (slave gretap3): Enslaving as an active interface with an up link
[  138.289690][ T9203] syz.2.767 (9203) used greatest stack depth: 19592 bytes left
[  139.167986][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.917148][ T9228] 8021q: adding VLAN 0 to HW filter on device bond5
[  140.008459][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  140.012665][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  140.016432][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  140.022604][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  140.026969][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  140.105011][ T9233] lo speed is unknown, defaulting to 1000
[  140.251797][ T9233] chnl_net:caif_netlink_parms(): no params data found
[  140.283774][ T9247] netlink: 'syz.2.776': attribute type 72 has an invalid length.
[  140.302773][ T9247] __nla_validate_parse: 7 callbacks suppressed
[  140.302794][ T9247] netlink: 1016 bytes leftover after parsing attributes in process `syz.2.776'.
[  140.389086][ T9233] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.391426][ T9233] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.394794][ T9233] bridge_slave_0: entered allmulticast mode
[  140.398953][ T9233] bridge_slave_0: entered promiscuous mode
[  140.404086][ T9233] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.407137][ T9233] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.409747][ T9233] bridge_slave_1: entered allmulticast mode
[  140.413214][ T9233] bridge_slave_1: entered promiscuous mode
[  140.439631][ T9233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.444800][ T9233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.477544][ T9233] team0: Port device team_slave_0 added
[  140.482907][ T9233] team0: Port device team_slave_1 added
[  140.507957][ T9233] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.510040][ T9233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.518126][ T9233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.524079][ T9233] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.526244][ T9233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.535151][ T9233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.565245][ T9233] hsr_slave_0: entered promiscuous mode
[  140.567649][ T9233] hsr_slave_1: entered promiscuous mode
[  140.801379][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.879222][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.960944][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.997703][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'.
[  141.001194][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'.
[  141.234277][   T12] bridge_slave_1: left allmulticast mode
[  141.240079][   T12] bridge_slave_1: left promiscuous mode
[  141.262557][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.267023][   T12] bridge_slave_0: left allmulticast mode
[  141.268793][   T12] bridge_slave_0: left promiscuous mode
[  141.270988][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.589313][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.600694][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.606349][   T12] bond0 (unregistering): Released all slaves
[  141.726123][ T9276] netlink: 'syz.1.780': attribute type 32 has an invalid length.
[  141.962744][   T12] hsr_slave_0: left promiscuous mode
[  141.968406][   T12] hsr_slave_1: left promiscuous mode
[  141.975513][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.982920][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.989067][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.995608][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.059744][   T12] veth1_macvtap: left promiscuous mode
[  142.086966][   T12] veth0_macvtap: left promiscuous mode
[  142.089353][   T12] veth1_vlan: left promiscuous mode
[  142.091508][   T12] veth0_vlan: left promiscuous mode
[  142.116297][ T9290] netlink: 36 bytes leftover after parsing attributes in process `syz.1.784'.
[  142.123336][ T5828] Bluetooth: hci1: command tx timeout
[  142.182353][ T9292] block nbd0: server does not support multiple connections per device.
[  142.187737][ T9292] block nbd0: shutting down sockets
[  142.487098][   T12] team0 (unregistering): Port device team_slave_1 removed
[  142.528181][   T12] team0 (unregistering): Port device team_slave_0 removed
[  142.843752][ T9290] netlink: 36 bytes leftover after parsing attributes in process `syz.1.784'.
[  142.852435][ T9290] netlink: 36 bytes leftover after parsing attributes in process `syz.1.784'.
[  142.855354][ T9290] netlink: 36 bytes leftover after parsing attributes in process `syz.1.784'.
[  142.873768][ T9290] netlink: 36 bytes leftover after parsing attributes in process `syz.1.784'.
[  142.882768][ T9290] netlink: 36 bytes leftover after parsing attributes in process `syz.1.784'.
[  142.890195][ T9290] netlink: 36 bytes leftover after parsing attributes in process `syz.1.784'.
[  142.914895][ T9297] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.027793][ T9233] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  143.035724][ T9233] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  143.061576][ T9233] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  143.090390][ T9233] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  143.249305][ T9233] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.266923][ T9233] 8021q: adding VLAN 0 to HW filter on device team0
[  143.273615][ T6194] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.275878][ T6194] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.291548][ T6194] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.293903][ T6194] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.383428][ T9327] netlink: 'syz.1.791': attribute type 13 has an invalid length.
[  143.390810][ T9327] netlink: 'syz.1.791': attribute type 17 has an invalid length.
[  143.416886][ T9327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  143.442445][ T9233] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.480778][ T9327] lo speed is unknown, defaulting to 1000
[  143.498950][ T9334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.553963][ T9334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.563758][ T9233] veth0_vlan: entered promiscuous mode
[  143.576508][ T9233] veth1_vlan: entered promiscuous mode
[  143.611875][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.614673][ T9233] veth0_macvtap: entered promiscuous mode
[  143.629043][ T9233] veth1_macvtap: entered promiscuous mode
[  143.648101][ T9233] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.655953][ T9233] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.661223][ T9233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.664647][ T9233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.667931][ T9233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.670813][ T9233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.738895][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.741288][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.771549][ T6194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.775126][ T6194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.962077][ T9351] pim6reg9: entered allmulticast mode
[  144.191682][ T9369] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  144.256358][ T9369] vxcan3: entered allmulticast mode
[  145.108599][ T9409] netlink: 'syz.2.803': attribute type 12 has an invalid length.
[  145.119786][ T9409] netlink: 'syz.2.803': attribute type 1 has an invalid length.
[  145.179168][ T9409] gretap4: entered promiscuous mode
[  145.717532][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.591189][ T9430] __nla_validate_parse: 66 callbacks suppressed
[  146.591206][ T9430] netlink: 36 bytes leftover after parsing attributes in process `syz.2.810'.
[  146.726688][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  146.731642][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  146.741234][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  146.745433][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  146.748989][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  146.787402][ T9435] lo speed is unknown, defaulting to 1000
[  146.789378][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.813'.
[  146.916324][ T9447] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  146.996246][ T9435] chnl_net:caif_netlink_parms(): no params data found
[  147.052394][ T9435] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.054688][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.057004][ T9435] bridge_slave_0: entered allmulticast mode
[  147.059612][ T9435] bridge_slave_0: entered promiscuous mode
[  147.077429][ T9435] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.080183][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.083091][ T9435] bridge_slave_1: entered allmulticast mode
[  147.086095][ T9435] bridge_slave_1: entered promiscuous mode
[  147.115878][ T9435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.123037][ T9435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.155421][ T9435] team0: Port device team_slave_0 added
[  147.159494][ T9435] team0: Port device team_slave_1 added
[  147.181916][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.184296][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.192119][ T9435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.196796][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.198907][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.207992][ T9435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.245653][ T9435] hsr_slave_0: entered promiscuous mode
[  147.248298][ T9435] hsr_slave_1: entered promiscuous mode
[  147.250852][ T9435] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  147.256276][ T9435] Cannot create hsr debugfs directory
[  147.295203][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.331717][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'.
[  147.342747][ T9465] netlink: 'syz.1.819': attribute type 30 has an invalid length.
[  147.366950][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.409407][ T9465] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  147.414184][ T9465] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  147.417382][ T9465] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  147.420687][ T9465] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  147.426334][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'.
[  147.429018][ T9465] netlink: 'syz.1.819': attribute type 30 has an invalid length.
[  147.492503][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.639137][ T9475] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001
[  147.686878][   T12] bridge_slave_1: left allmulticast mode
[  147.689479][   T12] bridge_slave_1: left promiscuous mode
[  147.692349][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.706489][   T12] bridge_slave_0: left allmulticast mode
[  147.708745][   T12] bridge_slave_0: left promiscuous mode
[  147.713362][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.724156][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.823'.
[  147.725272][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.823'.
[  147.836255][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'.
[  148.082057][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.087511][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.091393][   T12] bond0 (unregistering): Released all slaves
[  148.188316][ T9487] netlink: 'syz.2.825': attribute type 3 has an invalid length.
[  148.191336][ T9487] netlink: 666 bytes leftover after parsing attributes in process `syz.2.825'.
[  148.525556][   T12] hsr_slave_0: left promiscuous mode
[  148.528249][   T12] hsr_slave_1: left promiscuous mode
[  148.530328][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.533059][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.536641][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.538969][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.551631][   T12] veth1_macvtap: left promiscuous mode
[  148.554301][   T12] veth0_macvtap: left promiscuous mode
[  148.556462][   T12] veth1_vlan: left promiscuous mode
[  148.558148][   T12] veth0_vlan: left promiscuous mode
[  148.844524][ T5832] Bluetooth: hci1: command tx timeout
[  148.929861][   T12] team0 (unregistering): Port device team_slave_1 removed
[  148.960396][   T12] team0 (unregistering): Port device team_slave_0 removed
[  149.418778][ T9435] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  149.435626][ T9435] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  149.463538][ T9435] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  149.495687][ T9517] Bluetooth: MGMT ver 1.23
[  149.511400][ T9513] veth6: entered allmulticast mode
[  149.531932][ T9435] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  149.758355][ T9435] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.766767][ T9534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.833'.
[  149.787307][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'.
[  149.794840][ T9435] 8021q: adding VLAN 0 to HW filter on device team0
[  149.817799][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.820647][ T6198] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.848034][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.850441][ T6198] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.877407][ T9536] netlink: 'syz.2.834': attribute type 29 has an invalid length.
[  149.891876][ T9435] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  149.895527][ T9435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  150.021566][ T9552] netlink: 'syz.2.837': attribute type 1 has an invalid length.
[  150.177563][ T9435] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.234629][ T9435] veth0_vlan: entered promiscuous mode
[  150.241023][ T9435] veth1_vlan: entered promiscuous mode
[  150.264900][ T9435] veth0_macvtap: entered promiscuous mode
[  150.270272][ T9435] veth1_macvtap: entered promiscuous mode
[  150.287462][ T9435] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.296975][ T9435] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.302977][ T9435] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.306277][ T9435] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.309052][ T9435] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.312081][ T9435] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.376908][ T6198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.377036][ T9572] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.379255][ T6198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.405637][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.408050][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.061007][ T9581] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  151.258535][ T9600] netlink: 'syz.1.847': attribute type 7 has an invalid length.
[  151.788991][ T9630] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  151.792180][ T9630] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  151.795740][ T9630] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  151.798898][ T9630] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  151.813875][ T9630] vlan0: left promiscuous mode
[  151.815491][ T9630] bond0: left promiscuous mode
[  151.817329][ T9630] vlan0: left allmulticast mode
[  151.819169][ T9630] bond0: left allmulticast mode
[  151.881663][ T9635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.906596][ T9640] __nla_validate_parse: 6 callbacks suppressed
[  151.906613][ T9640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.857'.
[  151.943371][ T9642] xt_CT: You must specify a L4 protocol and not use inversions on it
[  152.086237][ T9650] tipc: Enabled bearer <udp:syz2>, priority 10
[  152.098185][ T9652] netlink: 'syz.1.861': attribute type 11 has an invalid length.
[  152.101077][ T9652] netlink: 96 bytes leftover after parsing attributes in process `syz.1.861'.
[  152.179228][ T9659] netlink: 'syz.2.864': attribute type 6 has an invalid length.
[  152.236948][ T5842] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.062776][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'.
[  153.066636][ T9667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.866'.
[  153.069850][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'.
[  153.092505][ T5297] tipc: Node number set to 76489895
[  153.153078][ T9672] bridge0: port 1(gretap0) entered blocking state
[  153.157954][ T9672] bridge0: port 1(gretap0) entered disabled state
[  153.160566][ T9672] gretap0: entered allmulticast mode
[  153.173819][ T9672] gretap0: entered promiscuous mode
[  153.237439][ T9680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.868'.
[  153.306073][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  153.310607][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  153.314952][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  153.318038][ T9688] netlink: 'syz.1.870': attribute type 1 has an invalid length.
[  153.322580][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  153.332005][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  153.395920][ T9688] 8021q: adding VLAN 0 to HW filter on device bond4
[  153.402077][ T9688] bond3: (slave bond4): making interface the new active one
[  153.406105][ T9688] bond3: (slave bond4): Enslaving as an active interface with an up link
[  153.430082][ T9688] bond3: (slave gretap2): Enslaving as a backup interface with an up link
[  153.434193][ T9685] lo speed is unknown, defaulting to 1000
[  153.525563][ T9695] lo speed is unknown, defaulting to 1000
[  153.559903][ T9698] pim6reg: entered allmulticast mode
[  153.656231][ T9685] chnl_net:caif_netlink_parms(): no params data found
[  153.752871][ T9696] pim6reg: left allmulticast mode
[  153.791877][ T9685] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.795551][ T9685] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.798451][ T9685] bridge_slave_0: entered allmulticast mode
[  153.802419][ T9685] bridge_slave_0: entered promiscuous mode
[  153.807116][ T9685] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.810074][ T9685] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.813304][ T9685] bridge_slave_1: entered allmulticast mode
[  153.817421][ T9685] bridge_slave_1: entered promiscuous mode
[  153.847252][ T5842] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.933998][ T5842] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.945201][ T9685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.952626][ T9685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.970676][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.874'.
[  153.981940][ T9685] team0: Port device team_slave_0 added
[  154.007190][ T5842] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.021045][ T9685] team0: Port device team_slave_1 added
[  154.058557][ T9685] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.062096][ T9685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.072455][ T9685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.078163][ T9685] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.080962][ T9685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.094040][ T9685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.153896][ T9685] hsr_slave_0: entered promiscuous mode
[  154.156951][ T9685] hsr_slave_1: entered promiscuous mode
[  154.219680][ T5842] bridge_slave_1: left allmulticast mode
[  154.224443][ T5842] bridge_slave_1: left promiscuous mode
[  154.227339][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.243385][ T5842] bridge_slave_0: left allmulticast mode
[  154.245506][ T5842] bridge_slave_0: left promiscuous mode
[  154.247667][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.488771][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'.
[  154.571219][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  154.577217][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  154.581105][ T5842] bond0 (unregistering): Released all slaves
[  154.608982][ T9716] wireguard0: entered promiscuous mode
[  154.610821][ T9716] wireguard0: entered allmulticast mode
[  154.660367][ T9717] wg2: entered promiscuous mode
[  154.898733][ T5842] hsr_slave_0: left promiscuous mode
[  154.901124][ T5842] hsr_slave_1: left promiscuous mode
[  154.904260][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.909956][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.918080][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.920606][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.933152][ T5842] veth1_macvtap: left promiscuous mode
[  154.935182][ T5842] veth0_macvtap: left promiscuous mode
[  154.937526][ T5842] veth1_vlan: left promiscuous mode
[  154.939505][ T5842] veth0_vlan: left promiscuous mode
[  155.293619][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  155.320441][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  155.408847][ T5832] Bluetooth: hci1: command tx timeout
[  155.651496][ T9728] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.656242][ T9728] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.658762][ T9728] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.661357][ T9728] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.722424][ T9732] lo speed is unknown, defaulting to 1000
[  155.826835][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'.
[  155.830295][ T9745] netlink: 32 bytes leftover after parsing attributes in process `syz.2.881'.
[  155.976638][ T9752] dvmrp0: entered allmulticast mode
[  156.068393][ T9756] netlink: 'syz.2.883': attribute type 2 has an invalid length.
[  156.071504][ T9756] netlink: 'syz.2.883': attribute type 8 has an invalid length.
[  156.133853][ T9685] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  156.142171][ T9685] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  156.195008][ T9685] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  156.215189][ T9685] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  156.260863][ T9759] lo speed is unknown, defaulting to 1000
[  156.329189][ T9763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.438894][ T9758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.478981][ T9685] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.504811][ T9685] 8021q: adding VLAN 0 to HW filter on device team0
[  156.518417][ T9759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.519351][ T9758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.531291][ T8570] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.534721][ T8570] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.544223][ T8570] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.547365][ T8570] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.746289][ T9685] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.780429][ T9685] veth0_vlan: entered promiscuous mode
[  156.789908][ T9685] veth1_vlan: entered promiscuous mode
[  156.810782][ T9685] veth0_macvtap: entered promiscuous mode
[  156.817320][ T9685] veth1_macvtap: entered promiscuous mode
[  156.827813][ T9685] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.836913][ T9685] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.842985][ T9685] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.845967][ T9685] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.849211][ T9685] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.852582][ T9685] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.920787][ T8570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.932312][ T8570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.956482][ T8573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.959283][ T8573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.105991][ T9789] __nla_validate_parse: 2 callbacks suppressed
[  157.106003][ T9789] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.886'.
[  157.485714][ T5828] Bluetooth: hci1: command tx timeout
[  157.489901][ T9799] netlink: 'syz.1.890': attribute type 1 has an invalid length.
[  157.519024][ T9799] bond5: entered promiscuous mode
[  157.521308][ T9799] bond5: entered allmulticast mode
[  157.524748][ T9799] 8021q: adding VLAN 0 to HW filter on device bond5
[  157.534871][ T9799] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  157.601854][ T9801] tipc: Resetting bearer <eth:gre0>
[  157.659644][ T9801] bridge0: port 1(syz_tun) entered disabled state
[  157.711369][ T9801] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  157.717751][ T9801] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  157.721175][ T9801] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  157.725375][ T9801] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  157.756647][ T9801] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  157.760085][ T9801] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  157.767076][ T9801] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  157.770248][ T9801] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  157.780222][ T9801] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  157.783756][ T9801] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  157.786514][ T9801] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  157.789044][ T9801] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  157.820844][ T5879] lo speed is unknown, defaulting to 1000
[  157.832519][ T5879] syz2: Port: 1 Link DOWN
[  157.939142][ T9805] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  157.943199][ T9805] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  158.025337][ T9814] syz_tun: left allmulticast mode
[  158.027432][ T9814] syz_tun: left promiscuous mode
[  158.030691][ T9814] bridge0: port 1(syz_tun) entered disabled state
[  158.052985][ T9814] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  158.105146][ T9816] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  158.108793][ T9816] netlink: 'syz.1.894': attribute type 4 has an invalid length.
[  158.120427][ T9816] netlink: 'syz.1.894': attribute type 4 has an invalid length.
[  158.129781][ T5954] lo speed is unknown, defaulting to 1000
[  158.135472][ T5954] syz2: Port: 1 Link ACTIVE
[  158.184265][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'.
[  158.188117][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'.
[  158.199512][ T9818] ip6tnl3: entered promiscuous mode
[  158.201663][ T9818] ip6tnl3: entered allmulticast mode
[  158.219830][ T9818] netlink: 572 bytes leftover after parsing attributes in process `syz.1.895'.
[  158.399597][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.897'.
[  158.755902][ T9825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.898'.
[  159.349769][ T9841] x_tables: duplicate underflow at hook 1
[  159.355089][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'.
[  159.411323][ T9846] netlink: 'syz.1.905': attribute type 1 has an invalid length.
[  159.419201][ T9846] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  159.469017][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'.
[  159.587960][ T9861] netlink: 36 bytes leftover after parsing attributes in process `syz.1.908'.
[  159.763575][ T9869] x_tables: duplicate underflow at hook 1
[  159.858040][ T9879] netlink: 248 bytes leftover after parsing attributes in process `syz.1.913'.
[  160.064151][ T9891] lo speed is unknown, defaulting to 1000
[  160.123733][ T9898] xt_limit: Overflow, try lower: 0/0
[  160.370205][ T9904] syz.1.918: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  160.383952][ T9904] CPU: 1 UID: 0 PID: 9904 Comm: syz.1.918 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  160.383965][ T9904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  160.383971][ T9904] Call Trace:
[  160.383975][ T9904]  <TASK>
[  160.383994][ T9904]  dump_stack_lvl+0x189/0x250
[  160.384015][ T9904]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.384025][ T9904]  ? __pfx__printk+0x10/0x10
[  160.384038][ T9904]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  160.384051][ T9904]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  160.384062][ T9904]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  160.384074][ T9904]  warn_alloc+0x214/0x310
[  160.384089][ T9904]  ? __pfx_warn_alloc+0x10/0x10
[  160.384104][ T9904]  ? __get_vm_area_node+0x28f/0x300
[  160.384116][ T9904]  ? xskq_create+0xbf/0x170
[  160.384126][ T9904]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  160.384151][ T9904]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  160.384165][ T9904]  ? __kasan_kmalloc+0x93/0xb0
[  160.384177][ T9904]  vmalloc_user_noprof+0xad/0xf0
[  160.384188][ T9904]  ? xskq_create+0xbf/0x170
[  160.384195][ T9904]  xskq_create+0xbf/0x170
[  160.384204][ T9904]  xsk_init_queue+0xb0/0x110
[  160.384217][ T9904]  xsk_setsockopt+0x4de/0x710
[  160.384229][ T9904]  ? __pfx_xsk_setsockopt+0x10/0x10
[  160.384243][ T9904]  ? aa_sock_opt_perm+0x74/0x110
[  160.384259][ T9904]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  160.384267][ T9904]  ? __pfx_xsk_setsockopt+0x10/0x10
[  160.384284][ T9904]  do_sock_setsockopt+0x25a/0x3e0
[  160.384305][ T9904]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  160.384322][ T9904]  ? __fget_files+0x2a/0x420
[  160.384338][ T9904]  __x64_sys_setsockopt+0x18b/0x220
[  160.384351][ T9904]  do_syscall_64+0xfa/0x3b0
[  160.384360][ T9904]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.384368][ T9904]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.384376][ T9904]  ? exc_page_fault+0x9f/0xf0
[  160.384388][ T9904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.384395][ T9904] RIP: 0033:0x7fce3218e929
[  160.384405][ T9904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.384412][ T9904] RSP: 002b:00007fce33018038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  160.384422][ T9904] RAX: ffffffffffffffda RBX: 00007fce323b6160 RCX: 00007fce3218e929
[  160.384428][ T9904] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004
[  160.384433][ T9904] RBP: 00007fce32210b39 R08: 0000000000000004 R09: 0000000000000000
[  160.384438][ T9904] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000
[  160.384443][ T9904] R13: 0000000000000001 R14: 00007fce323b6160 R15: 00007fff6fc840c8
[  160.384464][ T9904]  </TASK>
[  160.387934][ T9904] Mem-Info:
[  160.492335][ T9904] active_anon:10569 inactive_anon:0 isolated_anon:0
[  160.492335][ T9904]  active_file:1246 inactive_file:38259 isolated_file:0
[  160.492335][ T9904]  unevictable:1768 dirty:128 writeback:0
[  160.492335][ T9904]  slab_reclaimable:9923 slab_unreclaimable:71997
[  160.492335][ T9904]  mapped:22414 shmem:5326 pagetables:1132
[  160.492335][ T9904]  sec_pagetables:0 bounce:0
[  160.492335][ T9904]  kernel_misc_reclaimable:0
[  160.492335][ T9904]  free:270926 free_pcp:19904 free_cma:0
[  160.534369][ T9904] Node 0 active_anon:25572kB inactive_anon:0kB active_file:3884kB inactive_file:133656kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30312kB dirty:380kB writeback:0kB shmem:13844kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7724kB pagetables:2304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  160.551438][ T9904] Node 1 active_anon:19656kB inactive_anon:0kB active_file:1100kB inactive_file:19380kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:59344kB dirty:132kB writeback:0kB shmem:7508kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4800kB pagetables:2112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  160.568334][ T9904] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  160.582035][ T9904] lowmem_reserve[]: 0 812 812 812 812
[  160.588475][ T9904] Node 0 DMA32 free:267204kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25368kB inactive_anon:0kB active_file:3884kB inactive_file:133656kB unevictable:3536kB writepending:380kB present:1556484kB managed:831900kB mlocked:0kB bounce:0kB free_pcp:36936kB local_pcp:18840kB free_cma:0kB
[  160.606406][ T9904] lowmem_reserve[]: 0 0 0 0 0
[  160.608867][ T9904] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  160.620404][ T9904] lowmem_reserve[]: 0 0 854 854 854
[  160.625804][ T9904] Node 1 Normal free:343540kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19904kB inactive_anon:0kB active_file:1100kB inactive_file:19380kB unevictable:3536kB writepending:132kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:39712kB local_pcp:20304kB free_cma:0kB
[  160.639280][ T9904] lowmem_reserve[]: 0 0 0 0 0
[  160.647574][ T9904] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  160.653995][ T9904] Node 0 DMA32: 3*4kB (UME) 53*8kB (UME) 361*16kB (UME) 238*32kB (UE) 217*64kB (U) 161*128kB (UM) 73*256kB (UME) 25*512kB (UME) 31*1024kB (UME) 6*2048kB (UM) 35*4096kB (UM) = 267204kB
[  160.665500][ T9904] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  160.673331][ T9904] Node 1 Normal: 11*4kB (UME) 169*8kB (UME) 106*16kB (M) 0*32kB 88*64kB (UM) 64*128kB (UME) 83*256kB (UM) 102*512kB (UME) 63*1024kB (UM) 8*2048kB (UME) 42*4096kB (UM) = 343316kB
[  160.680280][ T9904] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  160.690411][ T9904] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  160.694782][ T9904] 44861 total pagecache pages
[  160.696831][ T9904] 0 pages in swap cache
[  160.698659][ T9904] Free swap  = 124996kB
[  160.700348][ T9904] Total swap = 124996kB
[  160.702155][ T9904] 786301 pages RAM
[  160.706651][ T9904] 0 pages HighMem/MovableOnly
[  160.708668][ T9904] 241078 pages reserved
[  160.710478][ T9904] 0 pages cma reserved
[  160.909544][ T9920] batman_adv: batadv0: Adding interface: macvlan0
[  160.911922][ T9920] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.923951][ T9920] batman_adv: batadv0: Interface activated: macvlan0
[  161.001084][ T9925] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  161.018364][ T9925] netlink: 'syz.2.921': attribute type 4 has an invalid length.
[  161.525731][ T9940] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  161.649429][ T9948] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  161.716318][ T9953] Set syz0 is full, maxelem 0 reached
[  162.118216][ T9983] netlink: 'syz.1.931': attribute type 10 has an invalid length.
[  162.131230][ T9983] netlink: 'syz.1.931': attribute type 10 has an invalid length.
[  162.135430][ T9983] __nla_validate_parse: 5 callbacks suppressed
[  162.135511][ T9983] netlink: 2 bytes leftover after parsing attributes in process `syz.1.931'.
[  162.141343][ T9984] netlink: 'syz.1.931': attribute type 10 has an invalid length.
[  162.148921][ T9984] netlink: 2 bytes leftover after parsing attributes in process `syz.1.931'.
[  162.176144][ T9989] netlink: 48 bytes leftover after parsing attributes in process `syz.2.932'.
[  162.185673][ T9989] netlink: 100 bytes leftover after parsing attributes in process `syz.2.932'.
[  162.284389][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'.
[  162.392478][T10006] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  162.414734][T10008] netlink: 'syz.2.936': attribute type 10 has an invalid length.
[  162.418734][T10008] batman_adv: batadv0: Adding interface: team0
[  162.421207][T10008] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.432804][T10008] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  162.438132][T10008] netlink: 'syz.2.936': attribute type 10 has an invalid length.
[  162.441107][T10008] netlink: 2 bytes leftover after parsing attributes in process `syz.2.936'.
[  162.445246][T10008] team0: entered promiscuous mode
[  162.449431][T10009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.935'.
[  162.449443][T10008] 8021q: adding VLAN 0 to HW filter on device team0
[  162.449627][T10008] batman_adv: batadv0: Interface activated: team0
[  162.457750][T10008] batman_adv: batadv0: Interface deactivated: team0
[  162.460259][T10008] batman_adv: batadv0: Removing interface: team0
[  162.463809][T10008] bridge0: port 2(team0) entered blocking state
[  162.466396][T10008] bridge0: port 2(team0) entered disabled state
[  162.468959][T10008] team0: entered allmulticast mode
[  162.473344][T10008] team0: left allmulticast mode
[  162.475917][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'.
[  162.478152][T10008] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.936'.
[  162.552884][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'.
[  162.714035][T10020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  163.303322][T10050] lo speed is unknown, defaulting to 1000
[  163.395183][T10052] bridge0: failed insert local address into bridge forwarding table
[  163.755533][T10075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.049327][T10090] xt_CT: No such helper "pptp"
[  164.168432][T10102] netlink: 'syz.1.964': attribute type 21 has an invalid length.
[  164.235532][T10111] bridge0: entered promiscuous mode
[  164.350140][T10117] netlink: 'syz.1.966': attribute type 3 has an invalid length.
[  166.106665][T10223] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  166.197160][T10229] batadv2: entered promiscuous mode
[  166.199839][T10229] batadv2: entered allmulticast mode
[  166.305306][T10236] erspan0: entered promiscuous mode
[  166.328332][T10236] bridge0: port 1(gretap0) entered blocking state
[  166.331190][T10236] bridge0: port 1(gretap0) entered forwarding state
[  166.336707][T10236] 8021q: adding VLAN 0 to HW filter on device 
[  166.339928][T10236] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  166.495732][T10249] syzkaller1: entered promiscuous mode
[  166.497864][T10249] syzkaller1: entered allmulticast mode
[  166.511110][T10252] 8021q: VLANs not supported on gre0
[  166.876408][T10266] lo speed is unknown, defaulting to 1000
[  166.880640][T10266] lo speed is unknown, defaulting to 1000
[  166.894782][T10266] lo speed is unknown, defaulting to 1000
[  166.967395][T10262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.062452][   T10] lo speed is unknown, defaulting to 1000
[  167.064845][T10266] infiniband syz0: set active
[  167.066569][T10266] infiniband syz0: added lo
[  167.069554][T10266] syz0: rxe_create_cq: returned err = -12
[  167.071803][T10266] infiniband syz0: Couldn't create ib_mad CQ
[  167.075278][T10266] infiniband syz0: Couldn't open port 1
[  167.091466][T10266] RDS/IB: syz0: added
[  167.095173][T10266] smc: adding ib device syz0 with port count 1
[  167.097321][T10266] smc:    ib device syz0 port 1 has pnetid 
[  167.100643][ T9633] lo speed is unknown, defaulting to 1000
[  167.103429][T10266] lo speed is unknown, defaulting to 1000
[  167.221061][T10266] lo speed is unknown, defaulting to 1000
[  167.323142][T10266] lo speed is unknown, defaulting to 1000
[  167.980368][T10291] tipc: Invalid UDP bearer configuration
[  167.980428][T10291] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  167.989142][T10291] tipc: Invalid UDP bearer configuration
[  167.989190][T10291] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  167.994864][T10291] tipc: Invalid UDP bearer configuration
[  167.994907][T10291] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  168.000074][T10291] tipc: Invalid UDP bearer configuration
[  168.000099][T10291] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  168.008790][T10291] tipc: Invalid UDP bearer configuration
[  168.008835][T10291] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  168.014923][T10291] tipc: Invalid UDP bearer configuration
[  168.014951][T10291] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  168.019591][T10291] tipc: Invalid UDP bearer configuration
[  168.019630][T10291] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  168.025008][T10291] tipc: Invalid UDP bearer configuration
[  168.025035][T10291] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  168.029317][T10291] tipc: Invalid UDP bearer configuration
[  168.029342][T10291] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  168.187917][T10295] __nla_validate_parse: 33 callbacks suppressed
[  168.187936][T10295] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1007'.
[  168.472150][T10311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1010'.
[  168.479835][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1010'.
[  168.529537][T10313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1011'.
[  168.581251][T10316] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1012'.
[  168.585810][T10315] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1012'.
[  168.587718][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'.
[  168.589399][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'.
[  169.251877][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1015'.
[  169.481463][   T33] audit: type=1800 audit(1752205704.822:3): pid=10343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1017" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2106 res=0 errno=0
[  169.901620][T10363] syzkaller0: entered promiscuous mode
[  169.904877][T10363] syzkaller0: entered allmulticast mode
[  169.919296][T10372] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  169.926637][   T10] lo speed is unknown, defaulting to 1000
[  171.989317][T10399] veth1_to_bond: entered allmulticast mode
[  172.008945][T10399] veth1_to_bond: left allmulticast mode
[  172.038615][T10405] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  172.042964][T10405] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  172.096543][T10410] macvlan0: left promiscuous mode
[  172.098801][T10410] netlink: 'syz.1.1025': attribute type 1 has an invalid length.
[  172.101378][T10410] netlink: 'syz.1.1025': attribute type 2 has an invalid length.
[  172.105291][T10410] netlink: 'syz.1.1025': attribute type 1 has an invalid length.
[  172.107790][T10410] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1025'.
[  172.114892][T10410] gtp1: entered promiscuous mode
[  172.116584][T10410] gtp1: entered allmulticast mode
[  172.213082][T10417] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.242496][T10417] syzkaller0: entered promiscuous mode
[  172.244854][T10417] syzkaller0: entered allmulticast mode
[  172.247576][T10417] tipc: Resetting bearer <eth:syzkaller0>
[  172.253814][T10416] tipc: Resetting bearer <eth:syzkaller0>
[  173.570268][T10416] tipc: Disabling bearer <eth:syzkaller0>
[  173.605120][T10423] veth7: entered promiscuous mode
[  173.607771][T10423] bridge7: port 1(veth7) entered blocking state
[  173.610472][T10423] bridge7: port 1(veth7) entered disabled state
[  173.614694][T10423] veth7: entered allmulticast mode
[  173.657295][T10426] __nla_validate_parse: 2 callbacks suppressed
[  173.657307][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'.
[  173.661838][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'.
[  173.700767][T10429] bridge0: port 1(gretap0) entered disabled state
[  173.728653][T10431] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1031'.
[  173.741910][T10429] bridge0: port 1(gretap0) entered disabled state
[  173.824721][T10429] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.827393][T10429] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.832544][T10429] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.837526][T10429] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.850110][T10429] batman_adv: batadv0: Interface deactivated: macvlan0
[  173.897554][T10438] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.900116][T10438] syzkaller0: entered promiscuous mode
[  173.910292][T10438] syzkaller0: entered allmulticast mode
[  173.928860][T10438] tipc: Resetting bearer <eth:syzkaller0>
[  173.932113][T10437] tipc: Resetting bearer <eth:syzkaller0>
[  173.945409][T10437] tipc: Disabling bearer <eth:syzkaller0>
[  174.038544][T10446] IPVS: set_ctl: invalid protocol: 238 100.1.1.1:20001
[  174.786217][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1035'.
[  174.788988][T10448] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1035'.
[  174.798610][T10448] vlan1: entered allmulticast mode
[  174.800292][T10448] veth1: entered allmulticast mode
[  174.851461][T10453] netlink: 'syz.2.1036': attribute type 13 has an invalid length.
[  174.912047][T10456] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1037'.
[  175.188499][T10483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'.
[  175.394913][T10496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.398718][T10496] syzkaller0: entered promiscuous mode
[  175.401044][T10496] syzkaller0: entered allmulticast mode
[  175.425370][T10496] tipc: Resetting bearer <eth:syzkaller0>
[  175.431748][T10459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.431751][T10495] tipc: Resetting bearer <eth:syzkaller0>
[  175.458909][T10495] tipc: Disabling bearer <eth:syzkaller0>
[  175.550615][T10503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1049'.
[  175.556789][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'.
[  175.604509][T10507] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.607024][T10507] syzkaller0: entered promiscuous mode
[  175.608689][T10507] syzkaller0: entered allmulticast mode
[  175.615000][T10507] ieee802154 phy1 wpan1: encryption failed: -22
[  175.633372][T10507] tipc: Resetting bearer <eth:syzkaller0>
[  175.639648][T10506] tipc: Resetting bearer <eth:syzkaller0>
[  175.656790][T10506] tipc: Disabling bearer <eth:syzkaller0>
[  175.738947][T10515] tipc: Resetting bearer <eth:gre0>
[  175.789837][T10515] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  175.802719][ T9633] lo speed is unknown, defaulting to 1000
[  175.805514][ T9633] syz0: Port: 1 Link DOWN
[  175.806920][ T9633] lo speed is unknown, defaulting to 1000
[  176.703252][T10547] lo: entered allmulticast mode
[  176.705714][T10547] lo: left allmulticast mode
[  176.777435][T10551] lo speed is unknown, defaulting to 1000
[  176.783044][T10551] lo speed is unknown, defaulting to 1000
[  176.864055][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'.
[  176.867021][T10557] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  176.872603][T10557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.016173][T10553] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.019391][T10553] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.023985][T10553] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.026624][T10553] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.029314][T10553] geneve4: entered promiscuous mode
[  177.089334][T10567] batadv_slave_1: entered promiscuous mode
[  177.177449][T10572] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (5001287)
[  177.180516][T10572] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  177.187483][T10572] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  177.189968][T10572] CPU: 0 UID: 0 PID: 10572 Comm: syz.2.1067 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  177.189981][T10572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  177.189987][T10572] Call Trace:
[  177.189993][T10572]  <TASK>
[  177.189998][T10572]  dump_stack_lvl+0x189/0x250
[  177.190016][T10572]  ? __pfx_dump_stack_lvl+0x10/0x10
[  177.190026][T10572]  ? __pfx__printk+0x10/0x10
[  177.190040][T10572]  ? kernfs_path_from_node+0x2c/0x260
[  177.190054][T10572]  ? kernfs_path_from_node+0x2c/0x260
[  177.190065][T10572]  ? kernfs_path_from_node+0x2c/0x260
[  177.190076][T10572]  ? kernfs_path_from_node+0x22c/0x260
[  177.190087][T10572]  ? kernfs_path_from_node+0x2c/0x260
[  177.190099][T10572]  sysfs_warn_dup+0x8e/0xa0
[  177.190110][T10572]  sysfs_do_create_link_sd+0xc0/0x110
[  177.190123][T10572]  device_add_class_symlinks+0x1cf/0x240
[  177.190138][T10572]  device_add+0x475/0xb50
[  177.190152][T10572]  wiphy_register+0x199a/0x26b0
[  177.190172][T10572]  ? __pfx_wiphy_register+0x10/0x10
[  177.190182][T10572]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  177.190197][T10572]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  177.190210][T10572]  ieee80211_register_hw+0x33e1/0x4120
[  177.190231][T10572]  ? ieee80211_register_hw+0x1481/0x4120
[  177.190246][T10572]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  177.190260][T10572]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  177.190277][T10572]  ? __hrtimer_setup+0x187/0x210
[  177.190286][T10572]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  177.190301][T10572]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  177.190327][T10572]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  177.190337][T10572]  ? trace_kmalloc+0x1f/0xd0
[  177.190346][T10572]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  177.190356][T10572]  ? kstrndup+0xbf/0x160
[  177.190373][T10572]  hwsim_new_radio_nl+0xea4/0x1b10
[  177.190384][T10572]  ? __pfx___nla_validate_parse+0x10/0x10
[  177.190401][T10572]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  177.190417][T10572]  ? __nla_parse+0x40/0x60
[  177.190428][T10572]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  177.190440][T10572]  genl_family_rcv_msg_doit+0x215/0x300
[  177.190456][T10572]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  177.190475][T10572]  ? bpf_lsm_capable+0x9/0x20
[  177.190486][T10572]  ? security_capable+0x7e/0x2e0
[  177.190503][T10572]  genl_rcv_msg+0x60e/0x790
[  177.190518][T10572]  ? __pfx_genl_rcv_msg+0x10/0x10
[  177.190529][T10572]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  177.190546][T10572]  netlink_rcv_skb+0x208/0x470
[  177.190557][T10572]  ? __pfx_genl_rcv_msg+0x10/0x10
[  177.190569][T10572]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  177.190588][T10572]  ? down_read+0x1ad/0x2e0
[  177.190627][T10572]  genl_rcv+0x28/0x40
[  177.190639][T10572]  netlink_unicast+0x75b/0x8d0
[  177.190654][T10572]  netlink_sendmsg+0x805/0xb30
[  177.190670][T10572]  ? __pfx_netlink_sendmsg+0x10/0x10
[  177.190682][T10572]  ? aa_sock_msg_perm+0x94/0x160
[  177.190696][T10572]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  177.190704][T10572]  ? __pfx_netlink_sendmsg+0x10/0x10
[  177.190714][T10572]  __sock_sendmsg+0x21c/0x270
[  177.190725][T10572]  ____sys_sendmsg+0x505/0x830
[  177.190744][T10572]  ? __pfx_____sys_sendmsg+0x10/0x10
[  177.190761][T10572]  ? import_iovec+0x74/0xa0
[  177.190773][T10572]  ___sys_sendmsg+0x21f/0x2a0
[  177.190786][T10572]  ? __pfx____sys_sendmsg+0x10/0x10
[  177.190816][T10572]  ? __fget_files+0x2a/0x420
[  177.190830][T10572]  ? __fget_files+0x3a0/0x420
[  177.190846][T10572]  __x64_sys_sendmsg+0x19b/0x260
[  177.190859][T10572]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  177.190875][T10572]  ? rcu_is_watching+0x15/0xb0
[  177.190888][T10572]  ? do_syscall_64+0xbe/0x3b0
[  177.190900][T10572]  do_syscall_64+0xfa/0x3b0
[  177.190907][T10572]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.190915][T10572]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.190923][T10572]  ? exc_page_fault+0x9f/0xf0
[  177.190935][T10572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.190943][T10572] RIP: 0033:0x7f99b778e929
[  177.190953][T10572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.190962][T10572] RSP: 002b:00007f99b86cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  177.190974][T10572] RAX: ffffffffffffffda RBX: 00007f99b79b5fa0 RCX: 00007f99b778e929
[  177.190980][T10572] RDX: 000000002000c800 RSI: 0000200000000040 RDI: 0000000000000006
[  177.190986][T10572] RBP: 00007f99b7810b39 R08: 0000000000000000 R09: 0000000000000000
[  177.190991][T10572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.190996][T10572] R13: 0000000000000000 R14: 00007f99b79b5fa0 R15: 00007fffac3a99c8
[  177.191011][T10572]  </TASK>
[  177.586849][T10587] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.591135][T10587] syzkaller0: entered promiscuous mode
[  177.593326][T10587] syzkaller0: entered allmulticast mode
[  177.607765][T10587] syzkaller0: mtu greater than device maximum
[  177.610640][T10586] tipc: Resetting bearer <eth:syzkaller0>
[  177.626021][T10586] tipc: Disabling bearer <eth:syzkaller0>
[  178.096069][T10608] dvmrp0: entered allmulticast mode
[  178.369983][T10622] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.381692][T10622] syzkaller0: entered promiscuous mode
[  178.385811][T10622] syzkaller0: entered allmulticast mode
[  178.412708][T10622] tipc: Resetting bearer <eth:syzkaller0>
[  178.456525][T10636] xt_limit: Overflow, try lower: 0/0
[  178.612612][T10641] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  179.030548][T10620] tipc: Resetting bearer <eth:syzkaller0>
[  179.048321][T10620] tipc: Disabling bearer <eth:syzkaller0>
[  179.187350][T10643] __nla_validate_parse: 3 callbacks suppressed
[  179.187363][T10643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1085'.
[  179.595993][T10656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1088'.
[  179.600109][T10656] IPv6: Can't replace route, no match found
[  179.609556][T10656] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.612644][T10656] syzkaller0: entered promiscuous mode
[  179.614989][T10656] syzkaller0: entered allmulticast mode
[  179.636032][T10656] tipc: Resetting bearer <eth:syzkaller0>
[  179.645476][T10655] tipc: Resetting bearer <eth:syzkaller0>
[  179.663194][T10655] tipc: Disabling bearer <eth:syzkaller0>
[  179.930249][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'.
[  179.966592][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1091'.
[  180.075114][T10667] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20001
[  180.208206][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'.
[  180.379225][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'.
[  180.444234][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1102'.
[  180.447686][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1102'.
[  180.488885][T10709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1104'.
[  180.577175][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'.
[  180.610178][T10715] netlink: 'syz.1.1106': attribute type 1 has an invalid length.
[  180.628089][T10715] bond6: entered promiscuous mode
[  180.629656][T10715] bond6: entered allmulticast mode
[  180.631483][T10715] 8021q: adding VLAN 0 to HW filter on device bond6
[  181.064412][T10734] tipc: Resetting bearer <eth:gre0>
[  181.242507][T10749] lo speed is unknown, defaulting to 1000
[  181.245111][T10749] lo speed is unknown, defaulting to 1000
[  181.760703][T10770] netlink: 'syz.1.1121': attribute type 1 has an invalid length.
[  181.859046][T10775] x_tables: unsorted underflow at hook 2
[  182.360385][ T6194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.370239][ T6194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.377827][T10811] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.446558][T10811] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.505795][T10811] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.547443][T10811] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.645235][T10811] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.661176][T10811] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.677008][T10811] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.689932][T10811] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.760078][T10823] netlink: 'syz.1.1133': attribute type 11 has an invalid length.
[  183.852583][   T33] audit: type=1804 audit(1752205719.192:4): pid=10848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1140" name="/newroot/459/cgroup.controllers" dev="tmpfs" ino=2358 res=1 errno=0
[  183.861533][   T33] audit: type=1800 audit(1752205719.202:5): pid=10848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1140" name="cgroup.controllers" dev="tmpfs" ino=2358 res=0 errno=0
[  184.025495][T10858] lo speed is unknown, defaulting to 1000
[  184.028726][T10858] lo speed is unknown, defaulting to 1000
[  184.076151][T10860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.130963][T10860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.201146][T10860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.214854][T10864] netlink: 'syz.1.1145': attribute type 9 has an invalid length.
[  184.338900][T10872] xt_ecn: cannot match TCP bits for non-tcp packets
[  184.934755][T10875] bond7: entered promiscuous mode
[  184.936377][T10875] bond7: entered allmulticast mode
[  184.938245][T10875] 8021q: adding VLAN 0 to HW filter on device bond7
[  185.068849][T10879] __nla_validate_parse: 7 callbacks suppressed
[  185.068861][T10879] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1150'.
[  185.216259][T10882] netlink: 'syz.1.1151': attribute type 10 has an invalid length.
[  185.750323][T10882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.914662][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1154'.
[  186.038071][T10898] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1156'.
[  186.068571][T10903] openvswitch: netlink: Unknown key attributes 2
[  186.160222][T10909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1159'.
[  186.180289][T10909] caif0: Master is either lo or non-ether device
[  186.228438][T10907] syz.1.1158: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  186.233497][T10907] CPU: 0 UID: 0 PID: 10907 Comm: syz.1.1158 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  186.233512][T10907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  186.233519][T10907] Call Trace:
[  186.233524][T10907]  <TASK>
[  186.233529][T10907]  dump_stack_lvl+0x189/0x250
[  186.233549][T10907]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.233563][T10907]  ? __pfx__printk+0x10/0x10
[  186.233582][T10907]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  186.233603][T10907]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  186.233620][T10907]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  186.233634][T10907]  warn_alloc+0x214/0x310
[  186.233648][T10907]  ? stack_depot_save_flags+0x40/0x900
[  186.233666][T10907]  ? __pfx_warn_alloc+0x10/0x10
[  186.233679][T10907]  ? kasan_save_track+0x4f/0x80
[  186.233690][T10907]  ? xskq_create+0x56/0x170
[  186.233698][T10907]  ? xsk_init_queue+0xb0/0x110
[  186.233709][T10907]  ? xsk_setsockopt+0x43f/0x710
[  186.233719][T10907]  ? do_sock_setsockopt+0x25a/0x3e0
[  186.233729][T10907]  ? __x64_sys_setsockopt+0x18b/0x220
[  186.233738][T10907]  ? do_syscall_64+0xfa/0x3b0
[  186.233747][T10907]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.233759][T10907]  __vmalloc_node_range_noprof+0x125/0x12f0
[  186.233784][T10907]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  186.233800][T10907]  ? __kasan_kmalloc+0x93/0xb0
[  186.233817][T10907]  vmalloc_user_noprof+0xad/0xf0
[  186.233837][T10907]  ? xskq_create+0xbf/0x170
[  186.233845][T10907]  xskq_create+0xbf/0x170
[  186.233854][T10907]  xsk_init_queue+0xb0/0x110
[  186.233867][T10907]  xsk_setsockopt+0x43f/0x710
[  186.233880][T10907]  ? __pfx_xsk_setsockopt+0x10/0x10
[  186.233891][T10907]  ? __lock_acquire+0xab9/0xd20
[  186.233907][T10907]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  186.233915][T10907]  ? __pfx_xsk_setsockopt+0x10/0x10
[  186.233955][T10907]  do_sock_setsockopt+0x25a/0x3e0
[  186.233970][T10907]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  186.233987][T10907]  ? __fget_files+0x2a/0x420
[  186.234010][T10907]  __x64_sys_setsockopt+0x18b/0x220
[  186.234033][T10907]  do_syscall_64+0xfa/0x3b0
[  186.234043][T10907]  ? lockdep_hardirqs_on+0x9c/0x150
[  186.234051][T10907]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.234059][T10907]  ? exc_page_fault+0x9f/0xf0
[  186.234075][T10907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.234093][T10907] RIP: 0033:0x7fce3218e929
[  186.234105][T10907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.234119][T10907] RSP: 002b:00007fce3305a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  186.234138][T10907] RAX: ffffffffffffffda RBX: 00007fce323b5fa0 RCX: 00007fce3218e929
[  186.234151][T10907] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[  186.234160][T10907] RBP: 00007fce32210b39 R08: 0000000000000004 R09: 0000000000000000
[  186.234167][T10907] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  186.234173][T10907] R13: 0000000000000000 R14: 00007fce323b5fa0 R15: 00007fff6fc840c8
[  186.234189][T10907]  </TASK>
[  186.234192][T10907] Mem-Info:
[  186.285710][T10915] xt_hashlimit: size too large, truncated to 1048576
[  186.333251][T10907] active_anon:6219 inactive_anon:0 isolated_anon:0
[  186.333251][T10907]  active_file:1257 inactive_file:38269 isolated_file:0
[  186.333251][T10907]  unevictable:1768 dirty:102 writeback:0
[  186.333251][T10907]  slab_reclaimable:10108 slab_unreclaimable:73588
[  186.333251][T10907]  mapped:18271 shmem:2447 pagetables:1059
[  186.333251][T10907]  sec_pagetables:0 bounce:0
[  186.333251][T10907]  kernel_misc_reclaimable:0
[  186.333251][T10907]  free:274118 free_pcp:17375 free_cma:0
[  186.347676][T10907] Node 0 active_anon:14004kB inactive_anon:0kB active_file:3876kB inactive_file:133680kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:21132kB dirty:340kB writeback:0kB shmem:4804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7572kB pagetables:2188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  186.360580][T10907] Node 1 active_anon:10940kB inactive_anon:0kB active_file:1152kB inactive_file:19396kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:51952kB dirty:68kB writeback:0kB shmem:4984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4876kB pagetables:2048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  186.375129][T10907] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  186.406037][T10907] lowmem_reserve[]: 0 812 812 812 812
[  186.407740][T10907] Node 0 DMA32 free:286476kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14004kB inactive_anon:0kB active_file:3876kB inactive_file:133680kB unevictable:3536kB writepending:340kB present:1556484kB managed:831900kB mlocked:0kB bounce:0kB free_pcp:27988kB local_pcp:10864kB free_cma:0kB
[  186.418726][T10907] lowmem_reserve[]: 0 0 0 0 0
[  186.429243][T10907] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  186.439570][T10907] lowmem_reserve[]: 0 0 854 854 854
[  186.441298][T10907] Node 1 Normal free:352208kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10804kB inactive_anon:0kB active_file:1152kB inactive_file:19396kB unevictable:3536kB writepending:68kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:34988kB local_pcp:15336kB free_cma:0kB
[  186.451614][T10907] lowmem_reserve[]: 0 0 0 0 0
[  186.453564][T10907] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  186.457478][T10907] Node 0 DMA32: 509*4kB (UME) 631*8kB (UME) 648*16kB (UME) 304*32kB (UME) 267*64kB (UM) 178*128kB (UM) 73*256kB (UME) 26*512kB (UME) 31*1024kB (UME) 6*2048kB (UM) 35*4096kB (UM) = 286444kB
[  186.463798][T10907] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  186.469454][T10907] Node 1 Normal: 672*4kB (UME) 76*8kB (UME) 33*16kB (UME) 322*32kB (UM) 64*64kB (UME) 37*128kB (UME) 82*256kB (UME) 96*512kB (UM) 63*1024kB (UM) 11*2048kB (UME) 42*4096kB (UM) = 352176kB
[  186.475641][T10907] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  186.478533][T10907] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  186.481470][T10907] 41973 total pagecache pages
[  186.483536][T10907] 0 pages in swap cache
[  186.484899][T10907] Free swap  = 124996kB
[  186.486228][T10907] Total swap = 124996kB
[  186.487555][T10907] 786301 pages RAM
[  186.488676][T10907] 0 pages HighMem/MovableOnly
[  186.490211][T10907] 241078 pages reserved
[  186.491514][T10907] 0 pages cma reserved
[  186.957768][T10939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1169'.
[  186.989983][T10939] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1169'.
[  186.997428][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'.
[  187.000669][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1169'.
[  187.087577][T10949] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1173'.
[  187.090785][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1173'.
[  187.099165][T10949] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  187.515009][T10985] IPv6: sit2: Disabled Multicast RS
[  187.669580][T11001] lo speed is unknown, defaulting to 1000
[  187.672170][T11001] lo speed is unknown, defaulting to 1000
[  188.088303][T11028] netlink: 'syz.1.1191': attribute type 1 has an invalid length.
[  188.147944][T11028] 8021q: adding VLAN 0 to HW filter on device bond8
[  188.150663][T11031] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.153726][T11032] syzkaller0: entered promiscuous mode
[  188.155822][T11032] syzkaller0: entered allmulticast mode
[  188.176046][T11032] tipc: Resetting bearer <eth:syzkaller0>
[  188.179087][T11029] tipc: Resetting bearer <eth:syzkaller0>
[  188.192062][T11029] tipc: Disabling bearer <eth:syzkaller0>
[  188.346004][T11038] netlink: 'syz.2.1195': attribute type 32 has an invalid length.
[  188.349351][T11038] netlink: 'syz.2.1195': attribute type 2 has an invalid length.
[  188.353468][T11038] netlink: 'syz.2.1195': attribute type 1 has an invalid length.
[  188.788304][T11057] 8021q: VLANs not supported on caif0
[  189.049344][T11071] lo speed is unknown, defaulting to 1000
[  189.055347][T11071] lo speed is unknown, defaulting to 1000
[  189.256175][T11071] netlink: 'syz.2.1205': attribute type 1 has an invalid length.
[  189.708339][T11112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.710910][T11112] syzkaller0: entered promiscuous mode
[  189.713117][T11112] syzkaller0: entered allmulticast mode
[  189.731198][T11112] tipc: Resetting bearer <eth:syzkaller0>
[  189.738128][T11111] tipc: Resetting bearer <eth:syzkaller0>
[  189.751134][T11111] tipc: Disabling bearer <eth:syzkaller0>
[  189.895901][T11115] netlink: 'syz.1.1219': attribute type 21 has an invalid length.
[  190.060099][T11130] veth0: entered promiscuous mode
[  190.429797][T11142] __nla_validate_parse: 13 callbacks suppressed
[  190.429811][T11142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1228'.
[  190.629193][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'.
[  190.638483][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1232'.
[  190.641407][T11151] team0: Device is already in use.
[  190.646945][T11151] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1232'.
[  190.699639][T11153] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.1233'.
[  190.888341][T11129] veth0: left promiscuous mode
[  190.914279][T11163] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1236'.
[  190.968932][T11165] lo speed is unknown, defaulting to 1000
[  190.971664][T11165] lo speed is unknown, defaulting to 1000
[  191.008154][T11168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1237'.
[  191.016918][T11168] xt_CT: You must specify a L4 protocol and not use inversions on it
[  191.098662][T11175] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.109022][T11175] syzkaller0: entered promiscuous mode
[  191.111383][T11175] syzkaller0: entered allmulticast mode
[  191.126674][T11175] tipc: Resetting bearer <eth:syzkaller0>
[  191.135348][T11174] tipc: Resetting bearer <eth:syzkaller0>
[  191.150500][T11174] tipc: Disabling bearer <eth:syzkaller0>
[  191.205754][ T5828] Bluetooth: hci2: link tx timeout
[  191.207803][ T5828] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  191.302088][ T5954] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  191.321186][T11178] netlink: 'syz.1.1241': attribute type 1 has an invalid length.
[  191.322850][ T5954] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  191.326003][T11178] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1241'.
[  191.327135][ T5954] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  191.343383][ T5954] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  191.346384][ T5954] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  191.349242][ T5954] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x3
[  191.433626][ T5954] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  191.464277][T11189] x_tables: duplicate underflow at hook 1
[  191.593576][T11194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1247'.
[  191.616910][T11195] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  191.867550][T11213] netlink: 'syz.1.1252': attribute type 2 has an invalid length.
[  191.984232][T11213] syzkaller0: entered allmulticast mode
[  192.008558][T11212] syzkaller0: left allmulticast mode
[  192.579548][T11221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.584269][T11221] syzkaller0: entered promiscuous mode
[  192.586400][T11221] syzkaller0: entered allmulticast mode
[  192.611654][T11221] tipc: Resetting bearer <eth:syzkaller0>
[  192.618084][T11220] tipc: Resetting bearer <eth:syzkaller0>
[  192.636909][T11220] tipc: Disabling bearer <eth:syzkaller0>
[  192.776261][T11225] lo speed is unknown, defaulting to 1000
[  192.779069][T11225] lo speed is unknown, defaulting to 1000
[  193.196198][T11239] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  193.242654][ T5220] Bluetooth: hci2: command 0x0405 tx timeout
[  193.358833][T11239] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.421389][T11247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1261'.
[  193.536773][T11251] netlink: 'syz.2.1262': attribute type 21 has an invalid length.
[  193.540869][T11251] netlink: 'syz.2.1262': attribute type 1 has an invalid length.
[  193.547550][T11251] netlink: 'syz.2.1262': attribute type 7 has an invalid length.
[  193.631902][T11259] netlink: 'syz.2.1264': attribute type 10 has an invalid length.
[  193.640528][T11259] bridge0: port 2(team0) entered blocking state
[  193.643337][T11259] bridge0: port 2(team0) entered disabled state
[  193.645452][T11259] team0: entered allmulticast mode
[  193.648478][T11259] team0: left allmulticast mode
[  193.756637][T11271] netlink: 'syz.2.1265': attribute type 9 has an invalid length.
[  193.761268][T11271] netlink: 'syz.2.1265': attribute type 6 has an invalid length.
[  193.895776][T11276] netlink: 'syz.1.1267': attribute type 1 has an invalid length.
[  194.425846][T11306] netlink: 'syz.1.1272': attribute type 1 has an invalid length.
[  194.529614][T11310] lo speed is unknown, defaulting to 1000
[  194.537549][T11310] lo speed is unknown, defaulting to 1000
[  194.890665][T11322] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  195.291030][T11343] : (slave vlan2): Opening slave failed
[  195.726007][T11356] __nla_validate_parse: 5 callbacks suppressed
[  195.726022][T11356] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1280'.
[  196.523630][   T96] ------------[ cut here ]------------
[  196.526533][   T96] workqueue: cannot queue hci_conn_timeout on wq hci1
[  196.528693][   T96] WARNING: CPU: 0 PID: 96 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0
[  196.531390][   T96] Modules linked in:
[  196.533210][   T96] CPU: 0 UID: 0 PID: 96 Comm: kworker/0:2 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  196.537759][   T96] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  196.541224][   T96] Workqueue: events l2cap_chan_timeout
[  196.543237][   T96] RIP: 0010:__queue_work+0xd62/0xfe0
[  196.545095][   T96] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  196.551138][   T96] RSP: 0018:ffffc90001bff7a8 EFLAGS: 00010046
[  196.553377][   T96] RAX: 4e4c66d6c02d5300 RBX: 0000000000000020 RCX: ffff88801eadd640
[  196.555844][   T96] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  196.558232][   T96] RBP: 1ffff11023600538 R08: 0000000000000003 R09: 0000000000000004
[  196.561000][   T96] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: dffffc0000000000
[  196.563959][   T96] R13: ffff8881073e4960 R14: ffff88801a494008 R15: ffff88811b002978
[  196.566916][   T96] FS:  0000000000000000(0000) GS:ffff8880b861d000(0000) knlGS:0000000000000000
[  196.570316][   T96] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  196.572797][   T96] CR2: 000000110c246346 CR3: 000000011f4d8000 CR4: 00000000000006f0
[  196.575805][   T96] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  196.578853][   T96] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  196.581886][   T96] Call Trace:
[  196.583318][   T96]  <TASK>
[  196.584481][   T96]  ? __queue_delayed_work+0xe1/0x2d0
[  196.586563][   T96]  queue_delayed_work_on+0x18b/0x280
[  196.588610][   T96]  ? __pfx___cancel_work+0x10/0x10
[  196.590640][   T96]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  196.592895][   T96]  ? hci_conn_drop+0x14d/0x280
[  196.594766][   T96]  l2cap_chan_del+0x285/0x5e0
[  196.596615][   T96]  l2cap_chan_close+0x597/0x980
[  196.598517][   T96]  ? __pfx_l2cap_chan_close+0x10/0x10
[  196.600612][   T96]  ? process_scheduled_works+0x9ef/0x17b0
[  196.602807][   T96]  l2cap_chan_timeout+0x158/0x390
[  196.604772][   T96]  ? process_scheduled_works+0x9ef/0x17b0
[  196.606911][   T96]  process_scheduled_works+0xae1/0x17b0
[  196.609091][   T96]  ? __pfx_process_scheduled_works+0x10/0x10
[  196.611446][   T96]  worker_thread+0x8a0/0xda0
[  196.613253][   T96]  kthread+0x711/0x8a0
[  196.614852][   T96]  ? __pfx_worker_thread+0x10/0x10
[  196.616842][   T96]  ? __pfx_kthread+0x10/0x10
[  196.618663][   T96]  ? _raw_spin_unlock_irq+0x23/0x50
[  196.620700][   T96]  ? lockdep_hardirqs_on+0x9c/0x150
[  196.622733][   T96]  ? __pfx_kthread+0x10/0x10
[  196.624546][   T96]  ret_from_fork+0x3fc/0x770
[  196.626413][   T96]  ? __pfx_ret_from_fork+0x10/0x10
[  196.628376][   T96]  ? __switch_to_asm+0x39/0x70
[  196.630199][   T96]  ? __switch_to_asm+0x33/0x70
[  196.632053][   T96]  ? __pfx_kthread+0x10/0x10
[  196.633837][   T96]  ret_from_fork_asm+0x1a/0x30
[  196.635695][   T96]  </TASK>
[  196.636890][   T96] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  196.639700][   T96] CPU: 0 UID: 0 PID: 96 Comm: kworker/0:2 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  196.644463][   T96] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  196.648288][   T96] Workqueue: events l2cap_chan_timeout
[  196.650436][   T96] Call Trace:
[  196.651755][   T96]  <TASK>
[  196.652926][   T96]  dump_stack_lvl+0x99/0x250
[  196.654742][   T96]  ? __asan_memcpy+0x40/0x70
[  196.656573][   T96]  ? __pfx_dump_stack_lvl+0x10/0x10
[  196.658493][   T96]  ? __pfx__printk+0x10/0x10
[  196.660076][   T96]  panic+0x2db/0x790
[  196.661383][   T96]  ? __pfx_panic+0x10/0x10
[  196.662776][   T96]  ? show_trace_log_lvl+0x4fb/0x550
[  196.664387][   T96]  ? ret_from_fork_asm+0x1a/0x30
[  196.665937][   T96]  __warn+0x31b/0x4b0
[  196.667194][   T96]  ? __queue_work+0xd62/0xfe0
[  196.668676][   T96]  ? __queue_work+0xd62/0xfe0
[  196.670444][   T96]  report_bug+0x2be/0x4f0
[  196.672118][   T96]  ? __queue_work+0xd62/0xfe0
[  196.673918][   T96]  ? __queue_work+0xd62/0xfe0
[  196.675709][   T96]  ? __queue_work+0xd64/0xfe0
[  196.677521][   T96]  handle_bug+0x84/0x160
[  196.679133][   T96]  exc_invalid_op+0x1a/0x50
[  196.680739][   T96]  asm_exc_invalid_op+0x1a/0x20
[  196.682243][   T96] RIP: 0010:__queue_work+0xd62/0xfe0
[  196.683874][   T96] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  196.690074][   T96] RSP: 0018:ffffc90001bff7a8 EFLAGS: 00010046
[  196.692029][   T96] RAX: 4e4c66d6c02d5300 RBX: 0000000000000020 RCX: ffff88801eadd640
[  196.694434][   T96] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  196.696949][   T96] RBP: 1ffff11023600538 R08: 0000000000000003 R09: 0000000000000004
[  196.699455][   T96] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: dffffc0000000000
[  196.702554][   T96] R13: ffff8881073e4960 R14: ffff88801a494008 R15: ffff88811b002978
[  196.705621][   T96]  ? __queue_work+0xd61/0xfe0
[  196.707471][   T96]  ? __queue_delayed_work+0xe1/0x2d0
[  196.709522][   T96]  queue_delayed_work_on+0x18b/0x280
[  196.711587][   T96]  ? __pfx___cancel_work+0x10/0x10
[  196.713597][   T96]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  196.715847][   T96]  ? hci_conn_drop+0x14d/0x280
[  196.717704][   T96]  l2cap_chan_del+0x285/0x5e0
[  196.719527][   T96]  l2cap_chan_close+0x597/0x980
[  196.721436][   T96]  ? __pfx_l2cap_chan_close+0x10/0x10
[  196.723539][   T96]  ? process_scheduled_works+0x9ef/0x17b0
[  196.725776][   T96]  l2cap_chan_timeout+0x158/0x390
[  196.727744][   T96]  ? process_scheduled_works+0x9ef/0x17b0
[  196.729951][   T96]  process_scheduled_works+0xae1/0x17b0
[  196.732122][   T96]  ? __pfx_process_scheduled_works+0x10/0x10
[  196.734405][   T96]  worker_thread+0x8a0/0xda0
[  196.736216][   T96]  kthread+0x711/0x8a0
[  196.737785][   T96]  ? __pfx_worker_thread+0x10/0x10
[  196.739724][   T96]  ? __pfx_kthread+0x10/0x10
[  196.741503][   T96]  ? _raw_spin_unlock_irq+0x23/0x50
[  196.743473][   T96]  ? lockdep_hardirqs_on+0x9c/0x150
[  196.745452][   T96]  ? __pfx_kthread+0x10/0x10
[  196.747272][   T96]  ret_from_fork+0x3fc/0x770
[  196.749000][   T96]  ? __pfx_ret_from_fork+0x10/0x10
[  196.750896][   T96]  ? __switch_to_asm+0x39/0x70
[  196.752739][   T96]  ? __switch_to_asm+0x33/0x70
[  196.754568][   T96]  ? __pfx_kthread+0x10/0x10
[  196.756376][   T96]  ret_from_fork_asm+0x1a/0x30
[  196.758237][   T96]  </TASK>
[  196.760148][   T96] Kernel Offset: disabled
[  196.761829][   T96] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:48:52  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006c RBX=000000000000006c RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90001bfef50
R8 =ffff888021a58237 R9 =1ffff1100434b046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af791d R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c246346 CR3=000000011f4d8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81ed4529 ffffffff81686ddf
XMM02=ffffffff894b9410 ffffffff81686ddf XMM03=ffffffff823d07e4 ffffffff823d067d
XMM04=00007fce32eed100 00007fce32385440 XMM05=00007fce32385458 00007fce323854a0
XMM06=00007fce32385498 00007fce32385490 XMM07=00007fce32385488 00007fce32385480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fce32211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff88813663b1c0 RCX=ffff888100abb980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000060f800 RSP=ffffc9000060f6a0
R8 =ffffffff8fa1def7 R9 =1ffffffff1f43bde R10=dffffc0000000000 R11=fffffbfff1f43bdf
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4e90e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fce33038fc8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=e888eeaa1e84aa27 614c04bc7f563a59 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=a5e2e77b71726eee 70a41dcec5864940
XMM06=8d240f1e12e80f27 54605497358b6387 XMM07=e2de44ba06bfdcd5 1036b89b32082f17
XMM08=cb7b47c6814abbec fa91212afc81aa05 XMM09=0000000000000000 00007f99b7811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
