last executing test programs:

1.650736432s ago: executing program 1 (id=720):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
socket$packet(0x11, 0xa, 0x300)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0xb8}}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000140)=0x63, 0x2)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f00000000c0)=0x800003, 0x4)
bind$inet(r3, 0x0, 0x0)
ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f00000002c0)={'caif0\x00', 0x9, 0x4})
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2)
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x8044)
setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280)=0x7, 0x4)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x400000000010, 0x7, 0x5)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x26}, 0xa, 0x0, 0xff, 0x7, 0xab01, 0xa001}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r4, 0x8b32, &(0x7f0000000400)="6b5014a79e2856e15e581a2a979160933ec09f7b20cedcd5efe74bdfb95425b3d52c77828ce40b0c276469862b3a99965d6addbbe766c7b8f5bd0b443575e10065766223bdf98de10d159027edac5687940e9b9abefe4c2afc11620f0f2fefab142d84872c6907cc4ee1e2dde63af40d9e0e1d18c65be91481844305996ae861e33f40bc4b9da8e808293e2d19fe02b1d6306a8b01c8876caa3a1fc120c9cf0f75b71cb5c62080542b0581e6c57b071f4649ab41256a00"/198)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010374daeb7c9080f9132e88dadf90001", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b00000000000800040000050000"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r3, &(0x7f0000000080), 0xffffffffffffffa3, 0xb, 0x0, 0x0)

1.589327495s ago: executing program 1 (id=721):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x86}, 0x4e040) (async)
socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800090001000000fedbdf250a80200004030007"], 0x1c}}, 0x0) (rerun: 64)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x28) (async)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r3, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, 0x0, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r5 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r5, 0x0, &(0x7f0000000500)) (async)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="6400000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028006000f000200000014000200fe8000000000000000000000000000aa0400130006000f000200000008000a00", @ANYRES32, @ANYBLOB="1eaa5f834b82a405d311e732d3b0ad87da9727902361c0560ed137740bf0fd"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000040ed0000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) (async)
sendto$inet6(r6, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) (async)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x3}}}, 0x32) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, 0x0, &(0x7f0000001400)) (rerun: 32)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r8, &(0x7f00000014c0)=@ll={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', r9}, 0x94)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="de26591dcb22c5526c7acf9d5891d8056cf9767a6550c2b5577f2e0f2261ae5ed4629921f48b0782bee89d59f4a30fd55280cab639f2806cb38d0fd2e3282e715f6efd0bb5cdae361f175f592972e83bd127ca1cff2b79a99327185064b5356d762c3ae1f88fe0", @ANYRES32=0x0, @ANYRES8=r2, @ANYRESDEC=r10], 0xc4}}, 0x4c050) (async, rerun: 32)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32)

1.548980692s ago: executing program 1 (id=724):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45)
bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)

1.548659504s ago: executing program 1 (id=725):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8)
r1 = socket$kcm(0x23, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000210001002cbd7000f7dbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x408c0}, 0x8014)
listen(r1, 0x800)
accept4(r1, 0x0, 0x0, 0x80000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0xac, 0x0, 0x0, 0x3}, {0x6}]})
r5 = socket$kcm(0x2, 0xa, 0x2)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
getsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000180)=0x4)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)="06000000750d08c4daf10a7742e39e31ceefb1fcd2e5bc", 0x17}], 0x1)
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f00000001c0), &(0x7f0000000400)=0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}}, 0x0)

1.542120323s ago: executing program 0 (id=726):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x181000, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x20040, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'pimreg0\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000165a5d6a0c95b6700"/35], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r2, 0xc040583f, &(0x7f00000005c0)={{@_ha_fsid={[0x80000001, 0x6]}, {0xf9f2, 0x2, 0x8, 0x7}}, {{[0x3, 0x4, 0x6, 0x9]}, 0x0, 0x2, 0xca3, 0x0, &(0x7f0000000500)=[{{@align, {0x1ff, 0x68, 0x2, 0x6}}, 0x101, 0x0, '[{*\x00'}, {{@_ha_fsid={[0x0, 0xe]}, {0xfff, 0x7, 0x8, 0x6}}, 0x69a, 0x0, 'vcan0\x00'}, {{@align=0x154c, {0x3, 0x4, 0xfffffcf1, 0x400}}, 0x6, 0x0, '\\\xa1\\#\x00'}, {{@align=0x6, {0x529, 0x0, 0x8000, 0x8}}, 0x3, 0x0, '#'}, {{@align=0x6, {0x9, 0x7, 0x2, 0xfffffffffffffffe}}, 0x5, 0x0, '/)-\x00'}]}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r7, r6, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r8=>0x0})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0)
sendmsg$802154_raw(r9, &(0x7f0000000400)={&(0x7f0000000040)={0x24, @long={0x3, 0x1}}, 0x14, &(0x7f0000000380)={&(0x7f0000000200)="8596d47f36f6348417518b83a6a001a5de90c006c1c1344692eab9286df00a8fb36d8b2cbcf16bd45270b719cd5c65296658049692f5c902033a31a63beaeddfc0214e5ab934922d02011464d2d78ee2a7be674882d2b14ffd5a7b50d3b7c7cc3cb8a5b26f8ebec104b789ae6d1b78ae5d109c61ef2f1bab6a6b3caf181421985f9701fe44379e388e66fdc592e0a228ec005ec62fdebe15ae9516106f1f15fbcd61fe55000b7e16", 0xa8}, 0x1, 0x0, 0x0, 0xd69bf925c855bb26}, 0x40000)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@RTM_GETMDB={0x18, 0x56, 0x40d, 0x70bd2d, 0x25dfdbfb, {0x7, r8}}, 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x880)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})

1.430876361s ago: executing program 0 (id=727):
r0 = socket(0x22, 0x2, 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f0000000002000000000000000000000000140020"], 0x64}}, 0x0)
recvmsg$unix(r0, &(0x7f0000000600)={&(0x7f0000000000), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000140)=""/158, 0x9e}, {&(0x7f0000000080)=""/128, 0x80}, {&(0x7f00000002c0)=""/102, 0x66}, {&(0x7f0000000340)=""/48, 0x30}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/227, 0xe3}], 0x7, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x12000)
accept4(r0, 0x0, &(0x7f0000000100), 0x800)

1.169515009s ago: executing program 2 (id=728):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x4, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', <r1=>0x0})
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110)
setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108)
setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x8002, @multicast2}}}, 0x108)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000100003042bbd7000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="3028040012800b0001006d61637365630097536c66800500030001000000050007000000000005000900000000a40d000500faffffff00"/66], 0x54}, 0x1, 0x0, 0x0, 0x20000851}, 0x80)

1.169082953s ago: executing program 2 (id=729):
socket$can_raw(0x1d, 0x3, 0x1)
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0xf6, 0x0, 0x1, 0x5bd7, '\x00', 0x0, r1, 0x4, 0x5}, 0x50)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', <r4=>0x0}) (async, rerun: 64)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r6, r4, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r2, 0x0, '\x00', r4}, 0x50) (async, rerun: 32)
r8 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1000, 0x1000, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, 0x0, 0x0) (async)
setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async)
r9 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
r10 = socket$inet6(0xa, 0x800000000000002, 0xfffffffd)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x270, 0x5c, 0x160, 0x0, 0x3e0, 0x270, 0x228, 0x25a, 0x270, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0x0, 0xff, 0xff], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a, 0x1}, 0x5002, 0xf8, 0x160, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x0, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x1, 0x9, 0x10, '\x00', 'syz0\x00', {0x4}}}}, {{@ipv6={@local, @empty, [0xffffffff, 0x0, 0xffffffff], [0xffffff00], 'veth1_to_hsr\x00', 'dummy0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x9f, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x29}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r11, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000100000000300000a6e000000", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 32)
r14 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r13, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES16=r0], 0x50}}, 0x4000040)
r15 = socket(0x1, 0x2, 0x0) (async)
r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r16, &(0x7f0000000100), &(0x7f00000000c0)=@tcp6=r15, 0x3}, 0x20)

1.090598549s ago: executing program 2 (id=730):
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000001c0)=0x5)
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getpeername$netrom(r3, &(0x7f0000000340)={{0x3, @rose}, [@bcast, @default, @remote, @remote, @default, @rose, @remote, @netrom]}, &(0x7f00000003c0)=0x48)

570.260427ms ago: executing program 0 (id=731):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000300)=ANY=[@ANYBLOB="300099814d564386af2f424cff039b74460de640c295be78baf2bde31802270b003eaf000000000000000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf250c000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000200000002000000"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r8, 0x913e0000)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r9, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r8, 0x0)
mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8fbc0e6f77c18ed3, 0x11, r10, 0x1000)
ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})
sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048045)
socket$kcm(0x10, 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x1010, 0xffffffffffffffff, 0x0)

209.822058ms ago: executing program 2 (id=732):
socket$kcm(0x2, 0x5, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x4, 0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x0, 0x81, 0x3, 0x9, 0x2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x10, 0x1339, 0x9}})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c00010062"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="000007000000000028001280090001007665746800000000180002801400010000000700", @ANYRES32=0x0, @ANYBLOB="400401000000000008000a00", @ANYRES32=r4, @ANYBLOB], 0x50}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES16=r6, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRESHEX=r2, @ANYBLOB="04005e801c005e800800dddce48f000030005e00000002000300000008000249cd0700100c000100000000000000e20000000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r8, @ANYBLOB="0600eb000100000006009800090000006c002d800a000000020202020202000005009500320000020000000002020202020200000a00000002020202020200000a00000001010101010100000a00000001010101010100000a00000002020202020200000a00000001010101010100000a00010100000600f70008080000d8618d26fa150b5ae75c608005cf519650cc97b8f189c934867658977e162f46cccc48ed0eab166a34115c49f0487f2e3ef8c6d1275deacfc37eafcac68178cecd2c422b72617ddffa9eeeab1b9eef876513642b922cee96f7ce166aaadd"], 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="040029bd7000fcdbdf253a00000008000300", @ANYRES32=r8, @ANYBLOB="060065e8cb0000000600650007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
syz_emit_ethernet(0xb5, &(0x7f00000003c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo={0x8, 0x0, 0x0, 0xfff, 0x7fff, "68ed368662699e279b3820e8ea675000a867c42c96191ddea871d28b08b227dd450e5048180c1904883097e083955fe4fca7a230238127b0d30b943de5a64b961065ab8ba14a9f239aac7887b0111e8d3bee67ada55bb307c8038fa95035a14b126c568b96954ab125f15abfb746407fe39ce0c0862ae7b14868fa004e5fe4a70ac9c84a94b5a14f9abd0a"}}}}}, 0x0)

209.549949ms ago: executing program 0 (id=733):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) (async, rerun: 64)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1)

120.395908ms ago: executing program 0 (id=734):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x70}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x11c, 0x2, {{0x80000001, 0x5, 0x3, 0xfffffff7, 0x1, 0x26d6}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}, @TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x401, 0x100, 0xae33}}, @TCA_NETEM_LOSS={0xa8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x460, 0x5, 0x0, 0x0, 0x8}}, @NETEM_LOSS_GE={0x9, 0x2, {0x7fff, 0x6, 0x2, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x8, 0x8, 0x4, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0xd, 0x1, 0xfffffff9, 0x6, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x8, 0xfffffffb, 0x401, 0x10001}}, @NETEM_LOSS_GI={0x18, 0x1, {0xe9f, 0x5, 0x5da, 0x80000001, 0xd58c}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x4, 0x8, 0x35bb, 0x400}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xa7d, 0x0, 0x1, 0x3, 0x4}}]}}}]}, 0x14c}}, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
close(0x3)

69.754362ms ago: executing program 1 (id=735):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x104000)

69.536527ms ago: executing program 2 (id=736):
r0 = socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x181000, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x20040, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'pimreg0\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000165a5d6a0c95b6700"/35], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, &(0x7f00000005c0)={{@_ha_fsid={[0x80000001, 0x6]}, {0xf9f2, 0x2, 0x8, 0x7}}, {{[0x3, 0x4, 0x6, 0x9]}, 0x0, 0x2, 0xca3, 0x0, &(0x7f0000000500)=[{{@align, {0x1ff, 0x68, 0x2, 0x6}}, 0x101, 0x0, '[{*\x00'}, {{@_ha_fsid={[0x0, 0xe]}, {0xfff, 0x7, 0x8, 0x6}}, 0x69a, 0x0, 'vcan0\x00'}, {{@align=0x154c, {0x3, 0x4, 0xfffffcf1, 0x400}}, 0x6, 0x0, '\\\xa1\\#\x00'}, {{@align=0x6, {0x529, 0x0, 0x8000, 0x8}}, 0x3, 0x0, '#'}, {{@align=0x6, {0x9, 0x7, 0x2, 0xfffffffffffffffe}}, 0x5, 0x0, '/)-\x00'}]}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r6, r5, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0)
sendmsg$802154_raw(r7, &(0x7f0000000400)={&(0x7f0000000040)={0x24, @long={0x3, 0x1}}, 0x14, &(0x7f0000000380)={&(0x7f0000000200)="8596d47f36f6348417518b83a6a001a5de90c006c1c1344692eab9286df00a8fb36d8b2cbcf16bd45270b719cd5c65296658049692f5c902033a31a63beaeddfc0214e5ab934922d02011464d2d78ee2a7be674882d2b14ffd5a7b50d3b7c7cc3cb8a5b26f8ebec104b789ae6d1b78ae5d109c61ef2f1bab6a6b3caf181421985f9701fe44379e388e66fdc592e0a228ec005ec62fdebe15ae9516106f1f15fbcd61fe55000b7e16", 0xa8}, 0x1, 0x0, 0x0, 0xd69bf925c855bb26}, 0x40000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})

68.32651ms ago: executing program 1 (id=737):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
connect$inet(r1, &(0x7f0000000240)={0x2, 0x8, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10)
sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac141410bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x800c)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMRRU(r7, 0x4004743c, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10, <r11=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r9}, 0x20)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @val=@iter={&(0x7f00000001c0)=@map_fd=r11, 0x10}}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r11, &(0x7f00000001c0), 0x0}, 0x20)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c900000014003100fc01000000bf06cffa887d0000000000000000000001ef948c95c530b78d405e13e70f8c004507df7200ccf002d2b87459afe968b1615070db6d58f2a45b89f70631a569c8aa967c896faea9929fecc4f188a871b2ca6ed36f479037b685fc0657f5a18a5202beb92193b4e8b4824bff2a0759fd4d817ead03fe1f9e"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x30, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xffffffffffffff1f)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)

417.894µs ago: executing program 0 (id=738):
r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14, 0x180000)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', <r1=>0x0, 0x4, 0x5, 0x5, 0x8, 0x8, @loopback, @empty, 0x20, 0x40, 0xab6, 0x9}})
connect$packet(r0, &(0x7f0000000340)={0x11, 0x1c, r1, 0x1, 0xc, 0x6, @random="a7f7e9e19af9"}, 0x14)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="eb7e7a", @ANYRES16=r7, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c009900410000006000000008002600a309000008009f0007000000"], 0x38}}, 0x440c0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x2}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x4}, @TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_INTERVAL={0x8}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x5}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8041}, 0x20008850)
sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x2, 0x1, {0xfff3, 0xfff2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
socket(0x22, 0x2, 0x4)
close(0x3)

0s ago: executing program 2 (id=739):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) (async, rerun: 64)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x80000000}, 0x48)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) (async)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x94}], 0x2}, 0x200}], 0x1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:26533' (ED25519) to the list of known hosts.
syzkaller login: [   49.360445][ T5752] cgroup: Unknown subsys name 'net'
[   49.467862][ T5752] cgroup: Unknown subsys name 'cpuset'
[   49.471713][ T5752] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.696794][ T5752] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.848907][ T5199] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.852112][ T5199] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.854895][ T5199] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.857744][ T5199] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.860161][ T5199] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.872109][ T5199] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.882059][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.884923][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.887658][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.890389][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.895523][ T5199] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.900148][ T5199] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.902628][ T5199] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.906260][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.909663][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.109108][ T5810] chnl_net:caif_netlink_parms(): no params data found
[   54.145611][ T5815] chnl_net:caif_netlink_parms(): no params data found
[   54.158059][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   54.245569][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.248141][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.250529][ T5810] bridge_slave_0: entered allmulticast mode
[   54.253348][ T5810] bridge_slave_0: entered promiscuous mode
[   54.277045][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.279217][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.281377][ T5810] bridge_slave_1: entered allmulticast mode
[   54.284094][ T5810] bridge_slave_1: entered promiscuous mode
[   54.328667][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.331523][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.334585][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.336995][ T5815] bridge_slave_0: entered allmulticast mode
[   54.339682][ T5815] bridge_slave_0: entered promiscuous mode
[   54.342308][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.344716][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.347172][ T5814] bridge_slave_0: entered allmulticast mode
[   54.349930][ T5814] bridge_slave_0: entered promiscuous mode
[   54.353341][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.355819][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.358313][ T5814] bridge_slave_1: entered allmulticast mode
[   54.361169][ T5814] bridge_slave_1: entered promiscuous mode
[   54.365266][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.374921][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.377146][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.379352][ T5815] bridge_slave_1: entered allmulticast mode
[   54.381947][ T5815] bridge_slave_1: entered promiscuous mode
[   54.415537][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.420188][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.425402][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.429369][ T5810] team0: Port device team_slave_0 added
[   54.432363][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.455295][ T5810] team0: Port device team_slave_1 added
[   54.475572][ T5815] team0: Port device team_slave_0 added
[   54.492330][ T5814] team0: Port device team_slave_0 added
[   54.495249][ T5815] team0: Port device team_slave_1 added
[   54.497904][ T5814] team0: Port device team_slave_1 added
[   54.500036][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.502097][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.509868][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.525560][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.527651][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.535248][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.556368][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.558661][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.567036][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.570982][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.573985][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.582079][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.586963][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.589154][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.597726][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.607469][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.609718][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.618199][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.635280][ T5810] hsr_slave_0: entered promiscuous mode
[   54.637507][ T5810] hsr_slave_1: entered promiscuous mode
[   54.685353][ T5815] hsr_slave_0: entered promiscuous mode
[   54.687683][ T5815] hsr_slave_1: entered promiscuous mode
[   54.690058][ T5815] debugfs: 'hsr0' already exists in 'hsr'
[   54.691907][ T5815] Cannot create hsr debugfs directory
[   54.701092][ T5814] hsr_slave_0: entered promiscuous mode
[   54.703603][ T5814] hsr_slave_1: entered promiscuous mode
[   54.705719][ T5814] debugfs: 'hsr0' already exists in 'hsr'
[   54.707523][ T5814] Cannot create hsr debugfs directory
[   54.887978][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.893460][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.897088][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.905736][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.940669][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.948245][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.950529][ T5810] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.952971][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.955258][ T5810] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.960193][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.965172][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.975822][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.009003][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.013561][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.017350][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.025212][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.034446][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.036604][ T5815] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.038827][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.040978][ T5815] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.074130][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.076519][ T5814] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.078847][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.081003][ T5814] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.087663][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.098638][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.101487][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.105657][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.108288][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.111008][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.116480][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.131467][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[   55.147825][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.150176][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.160569][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.162731][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.172092][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.186834][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   55.209268][ T5810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.212379][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.220401][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.222585][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.227140][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.229300][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.240486][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.256996][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   55.274066][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.276780][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.285681][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.287810][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.322913][ T5814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.329493][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.359470][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.397696][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.402582][ T5810] veth0_vlan: entered promiscuous mode
[   55.414490][ T5810] veth1_vlan: entered promiscuous mode
[   55.444882][ T5815] veth0_vlan: entered promiscuous mode
[   55.449780][ T5810] veth0_macvtap: entered promiscuous mode
[   55.455035][ T5810] veth1_macvtap: entered promiscuous mode
[   55.459889][ T5815] veth1_vlan: entered promiscuous mode
[   55.465610][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.479443][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.492924][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.498588][ T5815] veth0_macvtap: entered promiscuous mode
[   55.504479][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.509914][ T5860] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.514120][ T5815] veth1_macvtap: entered promiscuous mode
[   55.521512][ T5860] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.526347][ T5860] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.542193][ T5814] veth0_vlan: entered promiscuous mode
[   55.553022][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.561594][ T5814] veth1_vlan: entered promiscuous mode
[   55.571369][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.585977][ T5860] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.592891][ T5860] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.597201][ T5860] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.599913][ T5860] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.623341][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.626761][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.650232][ T5814] veth0_macvtap: entered promiscuous mode
[   55.660496][ T5814] veth1_macvtap: entered promiscuous mode
[   55.668265][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.674197][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.686228][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.691123][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.702921][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.713435][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.726249][ T5860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.740191][ T5810] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.749439][ T5860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.757213][ T5860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.759978][ T5860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.765442][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.769396][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.821040][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.830477][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.864711][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.867507][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.889731][ T5876] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   55.914271][   T55] Bluetooth: hci1: command tx timeout
[   55.914275][ T5820] Bluetooth: hci0: command tx timeout
[   55.986264][   T55] Bluetooth: hci2: command tx timeout
[   56.027984][ T5880] syz.2.4 uses obsolete (PF_INET,SOCK_PACKET)
[   56.038731][ T5880] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   56.165996][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'.
[   56.197168][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.203986][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.366696][ T5902] netlink: 92 bytes leftover after parsing attributes in process `syz.2.9'.
[   56.398674][ T5908] netlink: 'syz.0.11': attribute type 83 has an invalid length.
[   56.401005][ T5910] Bluetooth: MGMT ver 1.23
[   56.746192][ T5952] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.931630][ T5967] netlink: 'syz.0.28': attribute type 1 has an invalid length.
[   57.000226][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'.
[   57.088051][ T5977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'.
[   57.092580][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'.
[   57.097557][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'.
[   57.109977][ T5860] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   57.122618][ T5860] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   57.133766][ T5860] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   57.136464][ T5860] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   57.162357][ T5983] macsec0: entered promiscuous mode
[   57.169767][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'.
[   57.174879][ T5983] veth1_macvtap: left promiscuous mode
[   57.193799][ T5983] macsec0 (unregistering): left promiscuous mode
[   57.275660][ T5993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.38'.
[   57.279038][ T5993] netlink: 52 bytes leftover after parsing attributes in process `syz.2.38'.
[   57.284595][ T5993] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.303872][ T5993] Zero length message leads to an empty skb
[   57.351143][ T5995] ip6gretap1: entered allmulticast mode
[   57.428495][ T5999] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[   57.475137][ T6003] 8021q: VLANs not supported on lo
[   57.616143][ T6007] netlink: 'syz.1.45': attribute type 1 has an invalid length.
[   57.686170][ T6014] netlink: 44 bytes leftover after parsing attributes in process `syz.2.48'.
[   57.983199][   T55] Bluetooth: hci0: command tx timeout
[   57.994045][   T55] Bluetooth: hci1: command tx timeout
[   58.063267][   T55] Bluetooth: hci2: command tx timeout
[   58.367085][ T6007] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   58.468722][ T6022] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.221791][ T6033] bridge_slave_0: left allmulticast mode
[   59.224029][ T6033] bridge_slave_0: left promiscuous mode
[   59.226573][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.234154][ T6033] bridge_slave_1: left allmulticast mode
[   59.236409][ T6033] bridge_slave_1: left promiscuous mode
[   59.238766][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.245884][ T6033] bond0: (slave bond_slave_0): Releasing backup interface
[   59.257244][ T6033] bond0: (slave bond_slave_1): Releasing backup interface
[   59.275777][ T6033] team0: Port device team_slave_0 removed
[   59.286776][ T6033] team0: Port device team_slave_1 removed
[   59.293621][ T6033] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.296100][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.299372][ T6033] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.302279][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.306002][ T6033] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   59.332899][ T6022] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.406430][ T6022] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.459141][ T6022] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.758257][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   59.761232][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.774074][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   59.780922][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.792401][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   59.796921][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.799822][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   59.802719][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.810668][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.821750][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.841743][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.854151][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.064322][   T55] Bluetooth: hci1: command tx timeout
[   60.064362][ T5820] Bluetooth: hci0: command 0x040f tx timeout
[   60.143828][ T5820] Bluetooth: hci2: command tx timeout
[   60.192638][ T6086] veth3: entered allmulticast mode
[   60.202839][ T6086] ip6t_srh: unknown srh invflags BA61
[   60.237231][ T6086] hsr_slave_1 (unregistering): left promiscuous mode
[   61.538387][ T6131] syz.0.75 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   61.541779][ T6131] CPU: 1 UID: 0 PID: 6131 Comm: syz.0.75 Not tainted syzkaller #0 PREEMPT(full) 
[   61.541790][ T6131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   61.541794][ T6131] Call Trace:
[   61.541799][ T6131]  <TASK>
[   61.541802][ T6131]  dump_stack_lvl+0xe8/0x150
[   61.541817][ T6131]  dump_header+0xd3/0x4c0
[   61.541827][ T6131]  oom_kill_process+0x3ab/0x970
[   61.541837][ T6131]  out_of_memory+0x106c/0x1410
[   61.541847][ T6131]  ? __pfx___mutex_lock+0x10/0x10
[   61.541860][ T6131]  ? __pfx_out_of_memory+0x10/0x10
[   61.541867][ T6131]  ? do_raw_spin_unlock+0x4d/0x210
[   61.541879][ T6131]  try_charge_memcg+0xc53/0x1560
[   61.541894][ T6131]  ? __pfx_try_charge_memcg+0x10/0x10
[   61.541907][ T6131]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[   61.541917][ T6131]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[   61.541927][ T6131]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[   61.541937][ T6131]  __swap_cache_prepare_and_add+0xe8/0x760
[   61.541951][ T6131]  ? page_rmappable_folio+0x9a/0x170
[   61.541964][ T6131]  swap_cache_alloc_folio+0xf1/0x240
[   61.541976][ T6131]  swap_cluster_readahead+0x53a/0x690
[   61.541986][ T6131]  ? __pfx_swap_cluster_readahead+0x10/0x10
[   61.541997][ T6131]  ? get_vma_policy+0x27b/0x3c0
[   61.542007][ T6131]  swapin_readahead+0x196/0xc50
[   61.542018][ T6131]  ? __pfx_swapin_readahead+0x10/0x10
[   61.542026][ T6131]  ? swap_table_get+0x1e/0x260
[   61.542036][ T6131]  ? swap_table_get+0x1e/0x260
[   61.542045][ T6131]  ? swap_table_get+0x1e/0x260
[   61.542056][ T6131]  ? swap_table_get+0x216/0x260
[   61.542067][ T6131]  ? swap_cache_get_folio+0x513/0x520
[   61.542079][ T6131]  do_swap_page+0x56f/0x5a20
[   61.542098][ T6131]  ? do_swap_page+0x127/0x5a20
[   61.542107][ T6131]  ? __pfx_do_swap_page+0x10/0x10
[   61.542117][ T6131]  ? __pte_offset_map+0x1ae/0x240
[   61.542125][ T6131]  ? pte_offset_map_rw_nolock+0xea/0x160
[   61.542133][ T6131]  handle_mm_fault+0x12d2/0x3310
[   61.542150][ T6131]  ? handle_mm_fault+0xee/0x3310
[   61.542164][ T6131]  ? __pfx_handle_mm_fault+0x10/0x10
[   61.542174][ T6131]  ? lock_vma_under_rcu+0x45a/0x500
[   61.542191][ T6131]  do_user_addr_fault+0xa73/0x1340
[   61.542203][ T6131]  ? rcu_is_watching+0x15/0xb0
[   61.542214][ T6131]  ? trace_page_fault_user+0x84/0x210
[   61.542224][ T6131]  exc_page_fault+0x6a/0xc0
[   61.542234][ T6131]  asm_exc_page_fault+0x26/0x30
[   61.542242][ T6131] RIP: 0033:0x7f0baaa507f0
[   61.542251][ T6131] Code: 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 <41> 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 c3 b8 01 00 00 00
[   61.542256][ T6131] RSP: 002b:00007fff8d46ffe8 EFLAGS: 00010246
[   61.542264][ T6131] RAX: 0000000081d77053 RBX: ffffffff81d77053 RCX: ffffffff81d77053
[   61.542269][ T6131] RDX: 0000000000001053 RSI: ffffffff81d77053 RDI: 0000000000000005
[   61.542274][ T6131] RBP: 0000000000000000 R08: 00007f0baae00000 R09: 00007f0baae02000
[   61.542278][ T6131] R10: 0000000081d77057 R11: 0000000000000005 R12: 00007f0baae16218
[   61.542282][ T6131] R13: 0000000000000002 R14: ffffffff81d77053 R15: 00007f0bab945720
[   61.542287][ T6131]  ? __sys_bpf+0x1f3/0x950
[   61.542295][ T6131]  ? __sys_bpf+0x1f3/0x950
[   61.542302][ T6131]  ? __sys_bpf+0x1f3/0x950
[   61.542312][ T6131]  ? __sys_bpf+0x1f3/0x950
[   61.542320][ T6131]  </TASK>
[   61.542323][ T6131] memory: usage 307200kB, limit 307200kB, failcnt 3370
[   61.649440][ T6131] memory+swap: usage 303992kB, limit 9007199254740988kB, failcnt 0
[   61.652530][ T6131] kmem: usage 302564kB, limit 9007199254740988kB, failcnt 0
[   61.655504][ T6131] Memory cgroup stats for /syz0:
[   61.655693][ T6131] cache 729088
[   61.659538][ T6131] rss 24576
[   61.660895][ T6131] rss_huge 0
[   61.662188][ T6131] shmem 0
[   61.663555][ T6131] mapped_file 0
[   61.664948][ T6131] dirty 0
[   61.666121][ T6131] writeback 0
[   61.667470][ T6131] workingset_refault_anon 21
[   61.669279][ T6131] workingset_refault_file 67
[   61.671111][ T6131] swap 176128
[   61.672455][ T6131] swapcached 360448
[   61.674058][ T6131] pgpgin 4124
[   61.675310][ T6131] pgpgout 3935
[   61.676692][ T6131] pgfault 4628
[   61.678039][ T6131] pgmajfault 29
[   61.679454][ T6131] inactive_anon 0
[   61.680888][ T6131] active_anon 45056
[   61.682412][ T6131] inactive_file 0
[   61.684093][ T6131] active_file 634880
[   61.685566][ T6131] unevictable 0
[   61.686716][ T6131] hierarchical_memory_limit 314572800
[   61.688385][ T6131] hierarchical_memsw_limit 9223372036854771712
[   61.690266][ T6131] total_cache 729088
[   61.691501][ T6131] total_rss 24576
[   61.692654][ T6131] total_rss_huge 0
[   61.693901][ T6131] total_shmem 0
[   61.695001][ T6131] total_mapped_file 0
[   61.696301][ T6131] total_dirty 0
[   61.697417][ T6131] total_writeback 0
[   61.698606][ T6131] total_workingset_refault_anon 21
[   61.700170][ T6131] total_workingset_refault_file 67
[   61.701762][ T6131] total_swap 176128
[   61.702994][ T6131] total_swapcached 360448
[   61.704501][ T6131] total_pgpgin 4124
[   61.705695][ T6131] total_pgpgout 3935
[   61.706914][ T6131] total_pgfault 4628
[   61.708119][ T6131] total_pgmajfault 29
[   61.709423][ T6131] total_inactive_anon 0
[   61.710704][ T6131] total_active_anon 45056
[   61.712033][ T6131] total_inactive_file 0
[   61.713410][ T6131] total_active_file 634880
[   61.714916][ T6131] total_unevictable 0
[   61.716287][ T6131] anon_cost 0
[   61.717495][ T6131] file_cost 0
[   61.718535][ T6131] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.75,pid=6131,uid=0
[   61.723617][ T6131] Memory cgroup out of memory: Killed process 6131 (syz.0.75) total-vm:106660kB, anon-rss:1264kB, file-rss:27036kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000
[   62.143248][ T5820] Bluetooth: hci1: command tx timeout
[   62.143428][   T55] Bluetooth: hci0: command 0x040f tx timeout
[   62.223255][   T55] Bluetooth: hci2: command tx timeout
[   63.148962][ T6084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   63.264792][ T6138] __nla_validate_parse: 6 callbacks suppressed
[   63.264802][ T6138] netlink: 36 bytes leftover after parsing attributes in process `syz.1.76'.
[   63.298221][ T6139] bridge2: entered promiscuous mode
[   63.299872][ T6139] bridge2: entered allmulticast mode
[   63.302694][ T6139] team0: Port device bridge2 added
[   63.406417][ T6147] bridge3: entered promiscuous mode
[   63.408109][ T6147] bridge3: entered allmulticast mode
[   63.413983][ T6147] team0: Port device bridge3 added
[   63.419745][ T6139] bridge0: port 1(team0) entered blocking state
[   63.421813][ T6139] bridge0: port 1(team0) entered disabled state
[   63.428671][ T6139] team0: entered allmulticast mode
[   63.434426][ T6139] team0: entered promiscuous mode
[   64.009720][ T6182] netlink: 'syz.0.85': attribute type 2 has an invalid length.
[   64.012767][ T6182] netlink: 36 bytes leftover after parsing attributes in process `syz.0.85'.
[   64.225191][   T55] Bluetooth: hci0: command 0x040f tx timeout
[   64.373525][ T6222] netlink: 32 bytes leftover after parsing attributes in process `syz.0.95'.
[   64.377002][ T6222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.95'.
[   64.554464][ T6236] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7
[   64.724805][ T6261] netlink: 'syz.2.105': attribute type 4 has an invalid length.
[   64.727152][ T6261] netlink: 240 bytes leftover after parsing attributes in process `syz.2.105'.
[   64.731450][ T6261] xt_hashlimit: size too large, truncated to 1048576
[   64.843363][ T6261] netlink: 'syz.2.105': attribute type 1 has an invalid length.
[   64.845740][ T6261] netlink: 224 bytes leftover after parsing attributes in process `syz.2.105'.
[   64.891293][ T6267] netlink: 68 bytes leftover after parsing attributes in process `syz.2.105'.
[   68.014399][ T6295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'.
[   68.095602][ T6295] veth3: entered allmulticast mode
[   68.122665][ T6303] openvswitch: netlink: Flow actions attr not present in new flow.
[   68.131776][ T6306] openvswitch: netlink: Flow actions attr not present in new flow.
[   68.158345][ T6305] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.115'.
[   68.207556][ T6305] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[   68.219129][ T6305] bond2 (unregistering): Released all slaves
[   68.257094][ T6312] netlink: 'syz.2.117': attribute type 1 has an invalid length.
[   68.259656][ T6312] netlink: 224 bytes leftover after parsing attributes in process `syz.2.117'.
[   68.268649][ T6316] hsr0: entered promiscuous mode
[   68.272235][ T6316] netlink: 'syz.1.118': attribute type 1 has an invalid length.
[   68.275814][ T6316] netlink: 'syz.1.118': attribute type 2 has an invalid length.
[   68.278203][ T6316] netlink: 'syz.1.118': attribute type 3 has an invalid length.
[   68.385991][ T6326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'.
[   68.585469][ T6346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'.
[   68.595097][ T6346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   68.597879][ T6346] IPv6: NLM_F_CREATE should be set when creating new route
[   68.773956][ T6362] sctp: [Deprecated]: syz.1.135 (pid 6362) Use of struct sctp_assoc_value in delayed_ack socket option.
[   68.773956][ T6362] Use struct sctp_sack_info instead
[   68.786780][ T6361] bond1: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[   68.789522][ T6361] bond1: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms
[   68.797475][ T6362] netlink: 'syz.1.135': attribute type 4 has an invalid length.
[   68.799843][ T6362] netlink: 224 bytes leftover after parsing attributes in process `syz.1.135'.
[   69.107193][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'.
[   69.146336][ T6378] netlink: 'syz.1.140': attribute type 1 has an invalid length.
[   69.179862][ T6380] syzkaller0: entered promiscuous mode
[   69.181879][ T6380] syzkaller0: entered allmulticast mode
[   69.191690][ T6380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.141'.
[   69.590173][   T10] cfg80211: failed to load regulatory.db
[   69.695136][ T6402] netlink: 'syz.1.151': attribute type 13 has an invalid length.
[   69.697875][ T6402] netlink: 'syz.1.151': attribute type 17 has an invalid length.
[   69.736104][ T6402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.746675][ T6407] netlink: 'syz.0.152': attribute type 1 has an invalid length.
[   69.751758][ T6403] x_tables: duplicate underflow at hook 1
[   69.783279][ T6407] 8021q: adding VLAN 0 to HW filter on device bond3
[   69.786371][ T6407] bond2: (slave bond3): making interface the new active one
[   69.789076][ T6407] bond2: (slave bond3): Enslaving as an active interface with an up link
[   69.805730][ T6407] bond2: (slave gretap1): Enslaving as a backup interface with an up link
[   69.928280][ T6415] netlink: 'syz.0.154': attribute type 13 has an invalid length.
[   69.959268][ T6415] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   70.099770][ T6422] netlink: 180568 bytes leftover after parsing attributes in process `syz.0.157'.
[   70.182550][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.158'.
[   70.306074][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'.
[   70.308758][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'.
[   70.317985][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   70.320909][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   70.324047][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'.
[   70.327282][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   70.330112][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.185074][ T6427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   73.220080][ T6450] netlink: 'syz.1.163': attribute type 10 has an invalid length.
[   73.241806][ T6450] team0: Port device dummy0 added
[   73.258226][ T6452] netlink: 'syz.2.164': attribute type 1 has an invalid length.
[   73.282952][ T6452] bond2: entered promiscuous mode
[   73.285168][ T6452] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.315407][ T6457] netlink: 'syz.1.163': attribute type 10 has an invalid length.
[   73.341868][ T6457] team0: Port device dummy0 removed
[   73.346710][ T6457] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   73.355381][ T6452] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   73.362404][ T6452] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   73.372204][ T6452] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[   73.393703][ T6460] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   73.424081][ T6450] nbd0: detected capacity change from 0 to 63
[   73.441824][   T56] block nbd0: Receive control failed (result -104)
[   73.444982][ T6461] block nbd0: Receive control failed (result -32)
[   73.520007][ T6465] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   73.559844][ T6465] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   73.574393][ T6467] veth3: entered allmulticast mode
[   73.631913][ T6470] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.640598][ T6470] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.667342][ T6479] __nla_validate_parse: 8 callbacks suppressed
[   73.667351][ T6479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.171'.
[   73.708986][ T6470] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.712547][ T6470] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.736562][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'.
[   73.818517][ T6470] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.823848][ T6470] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.004862][ T6470] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   74.008043][ T6470] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.154630][ T5860] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.158153][ T5860] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.169597][ T5860] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.181384][ T5860] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.208245][ T6507] ip6erspan0: entered allmulticast mode
[   74.210620][ T5860] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.214363][ T5860] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.222568][ T6509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.183'.
[   74.227371][ T5860] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.230657][ T5860] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.388785][ T6518] netlink: 'syz.0.185': attribute type 1 has an invalid length.
[   74.435810][ T6518] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[   74.440693][ T6518] bond4: (slave vxcan3): Error -95 calling set_mac_address
[   74.472838][ T6527] netlink: 20 bytes leftover after parsing attributes in process `syz.0.185'.
[   74.482822][ T6527] bond4: (slave bridge1): Enslaving as an active interface with a down link
[   74.496317][ T6527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.185'.
[   74.500090][ T6527] 8021q: adding VLAN 0 to HW filter on device bond4
[   74.504226][ T5860] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[   74.507246][ T6527] netlink: 44 bytes leftover after parsing attributes in process `syz.0.185'.
[   74.555521][ T6530] netlink: 40 bytes leftover after parsing attributes in process `syz.0.188'.
[   74.722819][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'.
[   75.600717][ T6553] syzkaller1: entered promiscuous mode
[   75.602874][ T6553] syzkaller1: entered allmulticast mode
[   76.467360][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   77.444539][ T6523] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   77.632958][ T6566] openvswitch: netlink: Missing key (keys=40, expected=80)
[   77.639730][ T6560] netlink: 80 bytes leftover after parsing attributes in process `syz.1.195'.
[   77.738162][ T6571] veth5: entered allmulticast mode
[   77.775987][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'.
[   77.811780][ T6578] netlink: 'syz.1.202': attribute type 32 has an invalid length.
[   78.067868][ T6594] IPv6: addrconf: prefix option has invalid lifetime
[   78.110824][ T6596] netlink: 'syz.0.209': attribute type 1 has an invalid length.
[   78.152702][ T6599] netlink: 'syz.0.210': attribute type 29 has an invalid length.
[   78.227169][ T6605] syzkaller1: entered promiscuous mode
[   78.229303][ T6605] syzkaller1: entered allmulticast mode
[   78.299963][ T6612] xt_l2tp: invalid flags combination: 8
[   78.376615][ T6615] ip6gre0: Caught tx_queue_len zero misconfig
[   78.502079][ T6629] veth7: entered allmulticast mode
[   78.603024][ T6644] netlink: 'syz.0.221': attribute type 1 has an invalid length.
[   78.697972][ T6651] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[   78.747911][ T6659] syzkaller0: refused to change device tx_queue_len
[   78.750326][ T6659] __nla_validate_parse: 5 callbacks suppressed
[   78.750333][ T6659] netlink: 2652 bytes leftover after parsing attributes in process `syz.2.227'.
[   78.762167][ T6661] x_tables: duplicate underflow at hook 2
[   78.925526][ T6667] veth0: entered promiscuous mode
[   78.943894][ T6666] veth0: left promiscuous mode
[   78.955365][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'.
[   79.014606][ T6677] syzkaller0: entered promiscuous mode
[   79.016416][ T6677] syzkaller0: entered allmulticast mode
[   79.934851][ T6686] bond3: option arp_interval: invalid value (18446744073709551615)
[   79.937953][ T6686] bond3: option arp_interval: allowed values 0 - 2147483647
[   79.942150][ T6686] bond3 (unregistering): Released all slaves
[   80.012424][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'.
[   80.082501][ T6697] lo: Caught tx_queue_len zero misconfig
[   80.221765][ T6714] can: request_module (can-proto-0) failed.
[   80.231381][ T6714] 8021q: VLANs not supported on vxcan1
[   80.240976][ T6713] can: request_module (can-proto-0) failed.
[   80.443388][ T6056] IPVS: starting estimator thread 0...
[   80.495298][ T6742] netlink: 'syz.1.255': attribute type 13 has an invalid length.
[   80.497687][ T6742] netlink: 'syz.1.255': attribute type 17 has an invalid length.
[   80.508061][ T6744] netlink: 'syz.0.257': attribute type 1 has an invalid length.
[   80.546868][ T6749] netlink: 32 bytes leftover after parsing attributes in process `syz.1.255'.
[   80.555332][ T6738] IPVS: using max 85 ests per chain, 204000 per kthread
[   80.559927][ T6742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.593632][ T6751] netlink: 'syz.0.259': attribute type 1 has an invalid length.
[   80.690576][ T6758] bridge0: entered allmulticast mode
[   80.697144][ T6758] pim6reg: entered allmulticast mode
[   80.704096][ T6758] pim6reg: left allmulticast mode
[   80.705886][ T6758] bridge0: left allmulticast mode
[   80.855038][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.266'.
[   80.871353][ T6767] veth9: entered allmulticast mode
[   80.905822][ T6771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.268'.
[   81.121091][ T6785] netlink: 'syz.0.272': attribute type 1 has an invalid length.
[   81.125449][ T6785] netlink: 224 bytes leftover after parsing attributes in process `syz.0.272'.
[   81.129575][ T6784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.273'.
[   81.217725][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.274'.
[   81.237522][ T6794] veth11: entered allmulticast mode
[   81.347706][ T6798] ip6erspan0: entered allmulticast mode
[   81.526888][ T6806] nbd: must specify an index to disconnect
[   81.563390][ T6808] netlink: 32 bytes leftover after parsing attributes in process `syz.1.280'.
[   81.569465][ T6810] netlink: 'syz.0.279': attribute type 1 has an invalid length.
[   81.615440][ T6810] 8021q: adding VLAN 0 to HW filter on device bond7
[   81.662096][ T6808] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7
[   81.855593][ T6832] netlink: 'syz.0.284': attribute type 13 has an invalid length.
[   81.859270][ T6832] netlink: 'syz.0.284': attribute type 17 has an invalid length.
[   81.892233][ T6832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.992481][ T6056] syz1: Port: 1 Link DOWN
[   83.127552][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.130051][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.187747][ T6887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.191925][ T6887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.339349][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.343649][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.352727][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.370805][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.389381][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.392049][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.397147][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.403600][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.597041][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.599751][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.646416][ T6909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.652261][ T6909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.662548][ T6909] hsr0: left promiscuous mode
[   83.698851][ T5860] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.701553][ T5860] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.709557][ T5860] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.712366][ T5860] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.005779][ T6927] netlink: 'syz.0.314': attribute type 4 has an invalid length.
[   84.037880][ T6929] netlink: 'syz.0.315': attribute type 1 has an invalid length.
[   84.040316][ T6929] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.099100][ T6931] syzkaller1: entered promiscuous mode
[   84.100977][ T6931] syzkaller1: entered allmulticast mode
[   84.641449][ T6945] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[   84.853701][ T6951] openvswitch: netlink: IP tunnel dst address not specified
[   85.052933][ T6957] infiniband syz0: set down
[   85.055824][ T6957] infiniband syz0: added bridge_slave_1
[   85.079466][ T6957] RDS/IB: syz0: added
[   85.081081][ T6957] smc: adding ib device syz0 with port count 1
[   85.083719][ T6957] smc:    ib device syz0 port 1 has no pnetid
[   85.777442][ T6960] netlink: 'syz.2.325': attribute type 7 has an invalid length.
[   85.808396][ T6962] Cannot find add_set index 2 as target
[   86.153540][ T6994] __nla_validate_parse: 7 callbacks suppressed
[   86.153550][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'.
[   86.169781][ T6994] netlink: 224 bytes leftover after parsing attributes in process `syz.0.340'.
[   86.174192][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'.
[   86.179601][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'.
[   86.456499][ T7006] netlink: 88 bytes leftover after parsing attributes in process `syz.1.346'.
[   86.566289][ T7024] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[   86.588645][ T7024] bond3 (unregistering): Released all slaves
[   86.822598][ T7048] syzkaller0: entered promiscuous mode
[   86.825741][ T7048] syzkaller0: entered allmulticast mode
[   87.072253][ T7066] netlink: 'syz.2.365': attribute type 1 has an invalid length.
[   87.090980][ T7066] 8021q: adding VLAN 0 to HW filter on device bond3
[   87.362457][ T7083] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   89.879030][ T7054] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   89.969458][ T7092] netem: change failed
[   90.027266][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'.
[   90.080666][ T7106] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[   90.197902][ T7106] netlink: 'syz.0.375': attribute type 1 has an invalid length.
[   90.207353][ T7106] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   90.503545][ T7125] netlink: 52 bytes leftover after parsing attributes in process `syz.0.380'.
[   90.625606][ T7144] netlink: 32 bytes leftover after parsing attributes in process `syz.1.384'.
[   90.628423][ T7144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.384'.
[   90.673559][ T7139] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   91.152703][ T7175] netlink: 84 bytes leftover after parsing attributes in process `syz.1.394'.
[   91.394390][ T7183] netlink: 'syz.1.398': attribute type 1 has an invalid length.
[   91.405372][ T7183] bond2: entered promiscuous mode
[   91.407267][ T7183] 8021q: adding VLAN 0 to HW filter on device bond2
[   91.418803][ T7183] vlan2: entered allmulticast mode
[   91.421011][ T7183] bond2: entered allmulticast mode
[   91.437973][ T7183] bond2: (slave bridge1): making interface the new active one
[   91.441134][ T7183] bridge1: entered promiscuous mode
[   91.443824][ T7183] bridge1: entered allmulticast mode
[   91.447303][ T7183] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   92.454502][ T7203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   92.509933][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'.
[   92.524813][ T7223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.409'.
[   92.534913][ T7223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.409'.
[   92.564366][ T7225] syzkaller1: tun_chr_ioctl cmd 35108
[   92.755690][ T7240] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.758439][ T7240] 8021q: adding VLAN 0 to HW filter on device team0
[   92.764186][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'.
[   92.777076][ T7240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.786056][ T7228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.410'.
[   92.999500][ T7258] netlink: 100 bytes leftover after parsing attributes in process `syz.0.419'.
[   93.027023][ T7258] netlink: 100 bytes leftover after parsing attributes in process `syz.0.419'.
[   93.433425][ T7281] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.478202][ T7281] sit0: entered promiscuous mode
[   93.480987][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'.
[   93.571050][ T7287] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[   93.745753][ T7295] syzkaller0: entered promiscuous mode
[   93.747529][ T7295] syzkaller0: entered allmulticast mode
[   94.048310][ T7300] netlink: 'syz.2.434': attribute type 11 has an invalid length.
[   94.051057][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'.
[   94.594779][ T7300] netlink: 'syz.2.434': attribute type 11 has an invalid length.
[   94.598316][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'.
[   94.602454][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.606915][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.616749][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.620586][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   95.029776][ T7345] netlink: 'syz.0.448': attribute type 4 has an invalid length.
[   95.142808][ T7348] syzkaller0: entered promiscuous mode
[   95.145292][ T7348] syzkaller0: entered allmulticast mode
[   95.589751][ T7367] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[   95.594577][ T7367] syzkaller0: entered promiscuous mode
[   95.596782][ T7367] syzkaller0: entered allmulticast mode
[   95.604823][ T7367] tipc: Started in network mode
[   95.606830][ T7367] tipc: Node identity 66710eee48b2, cluster identity 4711
[   95.609377][ T7367] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.618304][ T7366] tipc: Resetting bearer <eth:syzkaller0>
[   95.630701][ T7366] tipc: Disabling bearer <eth:syzkaller0>
[   95.845479][ T7375] IPVS: persistence engine module ip_vs_pe_ not found
[   96.422903][ T7387] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   96.546160][ T7389] netlink: 'syz.0.464': attribute type 6 has an invalid length.
[   96.987559][ T7420] syzkaller0: entered promiscuous mode
[   96.989307][ T7420] syzkaller0: entered allmulticast mode
[   97.432831][ T7454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.463763][ T7459] openvswitch: netlink: IP tunnel dst address not specified
[   97.495448][ T7462] netlink: 'syz.2.489': attribute type 13 has an invalid length.
[   97.520739][   T10] IPVS: starting estimator thread 0...
[   97.535397][ T7462] __nla_validate_parse: 15 callbacks suppressed
[   97.535407][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'.
[   97.623214][ T7464] IPVS: using max 48 ests per chain, 115200 per kthread
[   97.629739][   T13] nci: nci_rsp_packet: unknown rsp opcode 0x606
[   97.681138][ T7474] netlink: 56 bytes leftover after parsing attributes in process `syz.2.491'.
[   97.899428][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.495'.
[   98.037321][ T7506] netlink: 'syz.1.497': attribute type 1 has an invalid length.
[   98.040920][ T7506] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[   98.155096][ T7513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.499'.
[   98.195793][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.500'.
[   98.222429][ T7515] veth11: entered allmulticast mode
[   98.397474][ T7466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   98.499642][ T7532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.506'.
[   98.520802][ T7532] veth13: entered allmulticast mode
[   98.556001][ T7537] netlink: 'syz.0.508': attribute type 1 has an invalid length.
[   98.570245][ T7537] 8021q: adding VLAN 0 to HW filter on device bond10
[   98.589388][ T7537] bond10: (slave ip6erspan1): making interface the new active one
[   98.592581][ T7537] bond10: (slave ip6erspan1): Enslaving as an active interface with an up link
[   98.627701][ T7542] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.510'.
[   98.636115][ T7542] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   98.796083][ T7556] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9
[   98.844004][ T7561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.517'.
[   99.041182][ T7569] netlink: 32 bytes leftover after parsing attributes in process `syz.2.519'.
[   99.045142][ T7569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.519'.
[   99.118252][ T7569] ip6tnl0: Caught tx_queue_len zero misconfig
[   99.152754][ T7572] netlink: 'syz.2.520': attribute type 1 has an invalid length.
[   99.166176][ T7572] bond5: entered promiscuous mode
[   99.168496][ T7572] 8021q: adding VLAN 0 to HW filter on device bond5
[  100.137784][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.143234][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.146853][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.150409][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.175129][ T7595] netlink: 'syz.2.525': attribute type 13 has an invalid length.
[  100.182279][ T7595] netlink: 'syz.2.525': attribute type 17 has an invalid length.
[  100.215542][ T7595] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.219874][ T7595] 8021q: adding VLAN 0 to HW filter on device team0
[  100.227555][ T7595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.331722][ T7602] syzkaller1: entered promiscuous mode
[  100.334089][ T7602] syzkaller1: entered allmulticast mode
[  100.989483][ T7642] netlink: 'syz.0.539': attribute type 1 has an invalid length.
[  101.015951][ T7642] 8021q: adding VLAN 0 to HW filter on device bond11
[  101.024324][ T7642] macvlan2: entered promiscuous mode
[  101.026879][ T7642] macvlan2: entered allmulticast mode
[  101.029333][ T7642] bond11: entered promiscuous mode
[  101.031563][ T7642] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  101.040569][ T7642] bond11: left promiscuous mode
[  101.663298][ T5820] Bluetooth: hci2: command 0x0405 tx timeout
[  102.247592][ T7739] syzkaller0: entered promiscuous mode
[  102.249464][ T7739] syzkaller0: entered allmulticast mode
[  102.451202][ T7748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.709788][ T7776] __nla_validate_parse: 10 callbacks suppressed
[  102.709804][ T7776] netlink: 68 bytes leftover after parsing attributes in process `syz.0.570'.
[  102.778189][ T7780] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.782002][ T7778] tipc: Disabling bearer <eth:syzkaller0>
[  102.862198][ T7787] netlink: 'syz.2.573': attribute type 8 has an invalid length.
[  102.925469][ T7792] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.928356][ T7792] syzkaller0: entered promiscuous mode
[  102.930267][ T7792] syzkaller0: entered allmulticast mode
[  102.947217][ T7792] tipc: Resetting bearer <eth:syzkaller0>
[  102.951191][ T7791] tipc: Resetting bearer <eth:syzkaller0>
[  102.961814][ T7791] tipc: Disabling bearer <eth:syzkaller0>
[  103.006221][ T7790] netlink: 'syz.0.572': attribute type 1 has an invalid length.
[  103.198557][ T7804] bond13 (unregistering): Released all slaves
[  103.367489][ T7816] netlink: 'syz.2.581': attribute type 1 has an invalid length.
[  103.410242][ T7820] raw_sendmsg: syz.0.582 forgot to set AF_INET. Fix it!
[  103.437525][ T7827] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  103.485878][ T7833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.586'.
[  103.515511][ T7840] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.517932][ T7840] syzkaller0: entered promiscuous mode
[  103.527237][ T7840] syzkaller0: entered allmulticast mode
[  103.538498][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'.
[  103.544096][ T7833] veth15: entered allmulticast mode
[  103.549852][ T7840] tipc: Resetting bearer <eth:syzkaller0>
[  103.554186][ T7840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.587'.
[  103.557183][ T7840] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  103.560322][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'.
[  103.567093][ T7839] tipc: Resetting bearer <eth:syzkaller0>
[  103.591351][ T7839] tipc: Disabling bearer <eth:syzkaller0>
[  103.594452][ T7844] netlink: 'syz.0.589': attribute type 1 has an invalid length.
[  103.604118][ T7842] veth12: entered promiscuous mode
[  103.606038][ T7842] veth12: entered allmulticast mode
[  103.612334][ T7842] veth13: entered allmulticast mode
[  103.666384][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'.
[  103.696133][ T7851] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  103.700772][ T7851] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  103.785280][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.590'.
[  103.795645][ T7851] macvlan2: entered promiscuous mode
[  103.797355][ T7851] macvlan2: entered allmulticast mode
[  103.799283][ T7851] bond6: (slave macvlan2): Error -98 calling set_mac_address
[  103.939046][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'.
[  103.942198][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'.
[  103.961548][ T7870] xt_CT: No such helper "snmp"
[  103.988179][   T11] block nbd0: Connection timed out, retrying (0/2 alive)
[  103.991928][   T11] block nbd0: Connection timed out, retrying (0/2 alive)
[  103.995476][   T11] block nbd0: Connection timed out, retrying (0/2 alive)
[  103.999356][   T11] block nbd0: Connection timed out, retrying (0/2 alive)
[  104.002657][   T11] block nbd0: Dead connection, failed to find a fallback
[  104.006109][   T11] block nbd0: shutting down sockets
[  104.008623][   T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  104.012648][   T11] Buffer I/O error on dev nbd0, logical block 3, async page read
[  104.016553][   T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  104.020392][   T11] Buffer I/O error on dev nbd0, logical block 2, async page read
[  104.023948][   T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  104.027851][   T11] Buffer I/O error on dev nbd0, logical block 1, async page read
[  104.031045][   T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  104.035407][   T11] Buffer I/O error on dev nbd0, logical block 0, async page read
[  104.042726][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  104.047669][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read
[  104.051414][ T5818] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  104.066838][ T5818] Buffer I/O error on dev nbd0, logical block 1, async page read
[  104.069912][ T5818] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  104.074751][ T5818] Buffer I/O error on dev nbd0, logical block 2, async page read
[  104.077924][ T5818] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  104.081721][ T5818] Buffer I/O error on dev nbd0, logical block 3, async page read
[  104.085225][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  104.089093][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read
[  104.092272][ T5818] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  104.096159][ T5818] Buffer I/O error on dev nbd0, logical block 1, async page read
[  104.099954][ T5818] ldm_validate_partition_table(): Disk read failed.
[  104.103482][ T5818] Dev nbd0: unable to read RDB block 0
[  104.106243][ T5818]  nbd0: unable to read partition table
[  104.114419][ T5818] ldm_validate_partition_table(): Disk read failed.
[  104.117385][ T5818] Dev nbd0: unable to read RDB block 0
[  104.119993][ T5818]  nbd0: unable to read partition table
[  104.136007][ T7878] netlink: 40 bytes leftover after parsing attributes in process `syz.0.598'.
[  104.732380][ T7913] syzkaller0: entered promiscuous mode
[  104.735112][ T7913] syzkaller0: entered allmulticast mode
[  104.738984][ T7913] 0: reclassify loop, rule prio 0, protocol 800
[  104.793223][ T7915] ip6_vti0: entered promiscuous mode
[  105.145347][ T7937] netlink: 'syz.0.617': attribute type 18 has an invalid length.
[  105.219903][ T7942] xt_bpf: check failed: parse error
[  105.227073][ T7942] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10
[  105.322659][ T7950] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.325960][ T7950] 8021q: adding VLAN 0 to HW filter on device team0
[  105.330348][ T7950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.429549][ T7955] IPv6: NLM_F_CREATE should be specified when creating new route
[  105.521421][ T7962] syzkaller0: entered promiscuous mode
[  105.523632][ T7962] syzkaller0: entered allmulticast mode
[  106.478231][ T8005] netlink: 'syz.1.640': attribute type 1 has an invalid length.
[  106.484053][ T8005] netlink: 'syz.1.640': attribute type 2 has an invalid length.
[  106.783725][ T8026] IPv6: NLM_F_CREATE should be specified when creating new route
[  106.786382][ T8026] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  106.788732][ T8026] IPv6: NLM_F_CREATE should be set when creating new route
[  106.791152][ T8026] IPv6: NLM_F_CREATE should be set when creating new route
[  106.793631][ T8026] IPv6: NLM_F_CREATE should be set when creating new route
[  106.797284][ T8026] netlink: 'syz.1.648': attribute type 10 has an invalid length.
[  106.800676][ T8026] bond0: (slave dummy0): Releasing backup interface
[  106.806230][ T8026] team0: Port device dummy0 added
[  106.808938][ T8026] netlink: 'syz.1.648': attribute type 10 has an invalid length.
[  106.824034][ T8026] team0: Port device dummy0 removed
[  106.827563][ T8026] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  106.964300][ T8030] bond5: option mode: invalid value (254)
[  106.976736][ T8030] bond5 (unregistering): Released all slaves
[  107.149589][ T8037] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  107.411410][ T8044] netlink: 'syz.2.655': attribute type 6 has an invalid length.
[  107.421096][ T8044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.694968][ T8054] veth5: entered allmulticast mode
[  107.934593][ T8073] __nla_validate_parse: 26 callbacks suppressed
[  107.934602][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.661'.
[  107.942305][ T8073] netlink: 'syz.2.661': attribute type 29 has an invalid length.
[  107.947917][ T5554] macvtap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  107.950714][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'.
[  108.218183][ T8101] netlink: 32 bytes leftover after parsing attributes in process `syz.2.669'.
[  108.221101][ T8101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.669'.
[  108.226350][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'.
[  108.257171][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'.
[  108.269080][ T8103] bond5: entered promiscuous mode
[  108.271538][ T8103] 8021q: adding VLAN 0 to HW filter on device bond5
[  108.327503][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.672'.
[  108.331240][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'.
[  108.335623][ T8111] netlink: 'syz.1.672': attribute type 14 has an invalid length.
[  108.338193][ T8111] netlink: 'syz.1.672': attribute type 11 has an invalid length.
[  108.473465][ T8122] smc: net device geneve0 applied user defined pnetid SYZ2
[  108.510189][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.678'.
[  108.540302][ T8123] netlink: 'syz.0.678': attribute type 3 has an invalid length.
[  108.588593][ T8130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.679'.
[  108.594389][ T8130] vlan3: entered promiscuous mode
[  108.595963][ T8130] erspan0: entered promiscuous mode
[  108.597615][ T8130] vlan3: entered allmulticast mode
[  108.599206][ T8130] erspan0: entered allmulticast mode
[  112.265975][ T8186] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11
[  113.180420][ T8199] __nla_validate_parse: 3 callbacks suppressed
[  113.180435][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.698'.
[  113.189783][ T8199] hsr_slave_1 (unregistering): left promiscuous mode
[  113.364080][ T8205] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20004
[  113.397820][ T8208] netlink: 40 bytes leftover after parsing attributes in process `syz.1.702'.
[  114.261286][ T8212] netlink: 'syz.1.703': attribute type 1 has an invalid length.
[  114.283526][ T8212] bond6: entered promiscuous mode
[  114.285473][ T8212] 8021q: adding VLAN 0 to HW filter on device bond6
[  114.471381][ T8220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.704'.
[  115.219412][ T8179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  115.683272][ T8257] netlink: 40 bytes leftover after parsing attributes in process `syz.2.714'.
[  115.689616][ T8254] netlink: 'syz.1.712': attribute type 10 has an invalid length.
[  115.704905][ T8254] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  115.838737][ T8272] netlink: 'syz.1.716': attribute type 1 has an invalid length.
[  115.857114][ T8272] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address
[  115.860671][ T8272] bond7: (slave vxcan5): Error -95 calling set_mac_address
[  115.906799][ T8274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.716'.
[  115.909607][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'.
[  115.945245][ T8276] Bluetooth: MGMT ver 1.23
[  115.946820][ T8276] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  116.016377][ T8283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  116.269001][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.727'.
[  116.364249][ T8306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.725'.
[  116.525429][ T8316] netlink: 52 bytes leftover after parsing attributes in process `syz.2.728'.
[  116.624749][ T8325] syzkaller0: create flow: hash 588254100 index 1
[  116.639458][ T8324] syzkaller0: delete flow: hash 588254100 index 1
[  117.343669][   T55] Bluetooth: hci0: command 0x040f tx timeout
[  117.494333][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.732'.
[  117.625271][ T8342] netem: incorrect ge model size
[  117.627166][ T8342] netem: change failed
[  117.676732][ T8352] netlink: 'syz.1.737': attribute type 1 has an invalid length.
[  117.707978][ T8352] bond8: entered promiscuous mode
[  117.709662][ T8352] bond8: entered allmulticast mode
[  117.711438][ T8352] 8021q: adding VLAN 0 to HW filter on device bond8
[  117.734827][ T8352] erspan2: entered allmulticast mode
[  117.740978][ T8352] bond8: (slave erspan2): making interface the new active one
[  117.743660][ T8352] erspan2: entered promiscuous mode
[  117.746597][ T8352] 
[  117.747357][ T8352] ============================================
[  117.749194][ T8352] WARNING: possible recursive locking detected
[  117.751035][ T8352] syzkaller #0 Not tainted
[  117.752533][ T8352] --------------------------------------------
[  117.754452][ T8352] syz.1.737/8352 is trying to acquire lock:
[  117.756286][ T8352] ffff88816fd01158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  117.759291][ T8352] 
[  117.759291][ T8352] but task is already holding lock:
[  117.761559][ T8352] ffff8881bade3958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  117.764583][ T8352] 
[  117.764583][ T8352] other info that might help us debug this:
[  117.766985][ T8352]  Possible unsafe locking scenario:
[  117.766985][ T8352] 
[  117.769476][ T8352]        CPU0
[  117.770614][ T8352]        ----
[  117.771677][ T8352]   lock(&qdisc_xmit_lock_key#4);
[  117.773289][ T8352]   lock(&qdisc_xmit_lock_key#4);
[  117.774859][ T8352] 
[  117.774859][ T8352]  *** DEADLOCK ***
[  117.774859][ T8352] 
[  117.777400][ T8352]  May be due to missing lock nesting notation
[  117.777400][ T8352] 
[  117.780302][ T8352] 10 locks held by syz.1.737/8352:
[  117.781871][ T8352]  #0: ffffffff901385e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  117.784952][ T8352]  #1: ffffffff8fbd0c88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[  117.787861][ T8352]  #2: ffffffff8e75e640 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890
[  117.791192][ T8352]  #3: ffff8881744b4228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x101c/0x3890
[  117.795182][ T8352]  #4: ffff8881bade3958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  117.798313][ T8352]  #5: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450
[  117.801011][ T8352]  #6: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070
[  117.803974][ T8352]  #7: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[  117.806732][ T8352]  #8: ffffffff8e75e640 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890
[  117.809721][ T8352]  #9: ffff88816f5ee228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x101c/0x3890
[  117.813509][ T8352] 
[  117.813509][ T8352] stack backtrace:
[  117.815313][ T8352] CPU: 1 UID: 0 PID: 8352 Comm: syz.1.737 Not tainted syzkaller #0 PREEMPT(full) 
[  117.815326][ T8352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  117.815332][ T8352] Call Trace:
[  117.815336][ T8352]  <TASK>
[  117.815340][ T8352]  dump_stack_lvl+0xe8/0x150
[  117.815352][ T8352]  print_deadlock_bug+0x279/0x290
[  117.815365][ T8352]  __lock_acquire+0x253f/0x2cf0
[  117.815375][ T8352]  ? is_bpf_text_address+0x292/0x2b0
[  117.815385][ T8352]  ? kernel_text_address+0xa5/0xe0
[  117.815395][ T8352]  ? validate_xmit_skb+0xc5f/0x14a0
[  117.815405][ T8352]  lock_acquire+0xf0/0x2e0
[  117.815413][ T8352]  ? sch_direct_xmit+0x15f/0x4c0
[  117.815425][ T8352]  _raw_spin_lock+0x2e/0x40
[  117.815435][ T8352]  ? sch_direct_xmit+0x15f/0x4c0
[  117.815445][ T8352]  sch_direct_xmit+0x15f/0x4c0
[  117.815456][ T8352]  ? __pfx_sch_direct_xmit+0x10/0x10
[  117.815467][ T8352]  ? arp_create+0x150/0xa00
[  117.815475][ T8352]  ? arp_send_dst+0xa7/0x2a0
[  117.815485][ T8352]  __dev_queue_xmit+0x1550/0x3890
[  117.815496][ T8352]  ? __dev_queue_xmit+0x277/0x3890
[  117.815508][ T8352]  ? arpt_do_table+0x261/0x1ec0
[  117.815517][ T8352]  ? __pfx___dev_queue_xmit+0x10/0x10
[  117.815528][ T8352]  ? __pfx_arpt_do_table+0x10/0x10
[  117.815536][ T8352]  ? trace_kmem_cache_alloc+0x29/0xf0
[  117.815547][ T8352]  ? NF_HOOK+0xa2/0x3c0
[  117.815556][ T8352]  NF_HOOK+0x33a/0x3c0
[  117.815565][ T8352]  ? __pfx_arp_xmit_finish+0x10/0x10
[  117.815573][ T8352]  ? NF_HOOK+0xa2/0x3c0
[  117.815581][ T8352]  ? __pfx_NF_HOOK+0x10/0x10
[  117.815590][ T8352]  ? __pfx_arp_xmit_finish+0x10/0x10
[  117.815601][ T8352]  arp_xmit+0x16c/0x270
[  117.815609][ T8352]  ? arp_xmit+0x23/0x270
[  117.815617][ T8352]  arp_solicit+0xbe0/0xe40
[  117.815627][ T8352]  ? arp_solicit+0x119/0xe40
[  117.815636][ T8352]  ? __pfx_arp_solicit+0x10/0x10
[  117.815647][ T8352]  ? __pfx_arp_solicit+0x10/0x10
[  117.815655][ T8352]  __neigh_event_send+0xf05/0x1530
[  117.815665][ T8352]  neigh_resolve_output+0x198/0x750
[  117.815672][ T8352]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  117.815684][ T8352]  ? ip_finish_output2+0x3c2/0x1070
[  117.815693][ T8352]  ip_finish_output2+0xca9/0x1070
[  117.815702][ T8352]  ? ip_skb_dst_mtu+0x80b/0xa50
[  117.815711][ T8352]  ? ip_finish_output+0x40e/0x530
[  117.815720][ T8352]  ip_output+0x29f/0x450
[  117.815728][ T8352]  ? ip_output+0x5b/0x450
[  117.815735][ T8352]  iptunnel_xmit+0x616/0xca0
[  117.815748][ T8352]  ip_tunnel_xmit+0x193a/0x1f20
[  117.815760][ T8352]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  117.815770][ T8352]  ? __pfx_gre_build_header+0x10/0x10
[  117.815778][ T8352]  ? kfree+0x1c1/0x630
[  117.815784][ T8352]  ? pskb_expand_head+0x460/0x1270
[  117.815794][ T8352]  __gre_xmit+0x19e/0x240
[  117.815802][ T8352]  ? __pfx___gre_xmit+0x10/0x10
[  117.815811][ T8352]  erspan_xmit+0xa81/0x1670
[  117.815822][ T8352]  ? __pfx_erspan_xmit+0x10/0x10
[  117.815832][ T8352]  dev_hard_start_xmit+0x2d8/0x870
[  117.815843][ T8352]  sch_direct_xmit+0x251/0x4c0
[  117.815854][ T8352]  ? __pfx_sch_direct_xmit+0x10/0x10
[  117.815865][ T8352]  ? bond_select_active_slave+0x860/0xd40
[  117.815874][ T8352]  ? bond_enslave+0x22a5/0x3c40
[  117.815884][ T8352]  __dev_queue_xmit+0x1550/0x3890
[  117.815895][ T8352]  ? __dev_queue_xmit+0x277/0x3890
[  117.815934][ T8352]  ? __pfx___dev_queue_xmit+0x10/0x10
[  117.815945][ T8352]  ? rcu_is_watching+0x15/0xb0
[  117.815955][ T8352]  ? trace_kmem_cache_alloc+0x29/0xf0
[  117.815964][ T8352]  ? kmem_cache_alloc_node_noprof+0x3ce/0x690
[  117.815973][ T8352]  ? __alloc_skb+0x4e5/0x7d0
[  117.815983][ T8352]  ? alb_send_lp_vid+0x14e/0x550
[  117.815994][ T8352]  alb_send_lp_vid+0x348/0x550
[  117.816005][ T8352]  ? dev_addr_mod+0x354/0x520
[  117.816014][ T8352]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  117.816025][ T8352]  ? __pfx_alb_set_slave_mac_addr+0x10/0x10
[  117.816037][ T8352]  alb_send_learning_packets+0x12c/0x300
[  117.816048][ T8352]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  117.816059][ T8352]  ? alb_swap_mac_addr+0x230/0x340
[  117.816069][ T8352]  alb_fasten_mac_swap+0x639/0xf60
[  117.816080][ T8352]  bond_alb_handle_active_change+0xc6d/0xf30
[  117.816092][ T8352]  ? __pfx_bond_alb_handle_active_change+0x10/0x10
[  117.816111][ T8352]  ? __local_bh_enable_ip+0xd0/0x130
[  117.816121][ T8352]  bond_change_active_slave+0x106e/0x35f0
[  117.816133][ T8352]  ? __pfx_bond_change_active_slave+0x10/0x10
[  117.816144][ T8352]  ? __queue_work+0x1a1/0x1020
[  117.816154][ T8352]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  117.816165][ T8352]  ? mod_delayed_work_on+0xdf/0x190
[  117.816176][ T8352]  bond_select_active_slave+0x909/0xd40
[  117.816187][ T8352]  ? __pfx_bond_select_active_slave+0x10/0x10
[  117.816196][ T8352]  ? __pfx_bond_set_carrier+0x10/0x10
[  117.816206][ T8352]  ? netdev_is_rx_handler_busy+0x56/0x120
[  117.816216][ T8352]  ? __pfx_bond_handle_frame+0x10/0x10
[  117.816227][ T8352]  bond_enslave+0x22a5/0x3c40
[  117.816236][ T8352]  ? sock_def_readable+0x2ff/0x580
[  117.816250][ T8352]  ? __pfx_bond_enslave+0x10/0x10
[  117.816261][ T8352]  ? __pfx___dev_notify_flags+0x10/0x10
[  117.816269][ T8352]  ? __dev_change_flags+0x51e/0x690
[  117.816278][ T8352]  ? mutex_is_locked+0x17/0x50
[  117.816288][ T8352]  do_set_master+0x533/0x6d0
[  117.816298][ T8352]  rtnl_newlink_create+0x6af/0xb70
[  117.816306][ T8352]  ? __pfx___nla_validate_parse+0x10/0x10
[  117.816316][ T8352]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  117.816325][ T8352]  ? __pfx___mutex_lock+0x10/0x10
[  117.816336][ T8352]  ? ns_capable+0x89/0xe0
[  117.816346][ T8352]  rtnl_newlink+0x166a/0x1bb0
[  117.816356][ T8352]  ? __pfx_rtnl_newlink+0x10/0x10
[  117.816363][ T8352]  ? __lock_acquire+0x6b5/0x2cf0
[  117.816373][ T8352]  ? __lock_acquire+0x6b5/0x2cf0
[  117.816382][ T8352]  ? __lock_acquire+0x6b5/0x2cf0
[  117.816390][ T8352]  ? __lock_acquire+0x6b5/0x2cf0
[  117.816400][ T8352]  ? unwind_next_frame+0xa5/0x23c0
[  117.816414][ T8352]  ? __lock_acquire+0x6b5/0x2cf0
[  117.816423][ T8352]  ? is_bpf_text_address+0x26/0x2b0
[  117.816431][ T8352]  ? kernel_text_address+0xa5/0xe0
[  117.816442][ T8352]  ? __pfx_rtnl_newlink+0x10/0x10
[  117.816449][ T8352]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  117.816458][ T8352]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  117.816465][ T8352]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  117.816472][ T8352]  ? __lock_acquire+0x6b5/0x2cf0
[  117.816482][ T8352]  netlink_rcv_skb+0x232/0x4b0
[  117.816490][ T8352]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  117.816497][ T8352]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  117.816506][ T8352]  ? netlink_deliver_tap+0x2e/0x1b0
[  117.816514][ T8352]  netlink_unicast+0x80f/0x9b0
[  117.816526][ T8352]  ? __pfx_netlink_unicast+0x10/0x10
[  117.816536][ T8352]  ? netlink_sendmsg+0x650/0xb40
[  117.816543][ T8352]  ? skb_put+0x11b/0x210
[  117.816552][ T8352]  netlink_sendmsg+0x813/0xb40
[  117.816560][ T8352]  ? __pfx_netlink_sendmsg+0x10/0x10
[  117.816568][ T8352]  ? aa_sock_msg_perm+0xf1/0x1b0
[  117.816579][ T8352]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  117.816587][ T8352]  ____sys_sendmsg+0x972/0x9f0
[  117.816597][ T8352]  ? futex_unqueue+0x211/0x240
[  117.816606][ T8352]  ? __pfx_____sys_sendmsg+0x10/0x10
[  117.816616][ T8352]  ? import_iovec+0x73/0xa0
[  117.816625][ T8352]  ___sys_sendmsg+0x2a5/0x360
[  117.816634][ T8352]  ? __pfx____sys_sendmsg+0x10/0x10
[  117.816644][ T8352]  ? futex_wait+0x29a/0x380
[  117.816659][ T8352]  ? __fget_files+0x2a/0x420
[  117.816665][ T8352]  ? __fget_files+0x3a0/0x420
[  117.816673][ T8352]  __x64_sys_sendmsg+0x1bd/0x2a0
[  117.816682][ T8352]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  117.816692][ T8352]  ? rcu_is_watching+0x15/0xb0
[  117.816704][ T8352]  do_syscall_64+0x14d/0xf80
[  117.816713][ T8352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.816721][ T8352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.816728][ T8352] RIP: 0033:0x7f24ad19cdd9
[  117.816737][ T8352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  117.816742][ T8352] RSP: 002b:00007f24ae06e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  117.816751][ T8352] RAX: ffffffffffffffda RBX: 00007f24ad415fa0 RCX: 00007f24ad19cdd9
[  117.816756][ T8352] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[  117.816760][ T8352] RBP: 00007f24ad232d69 R08: 0000000000000000 R09: 0000000000000000
[  117.816764][ T8352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  117.816768][ T8352] R13: 00007f24ad416038 R14: 00007f24ad415fa0 R15: 00007ffd6c61d0e8
[  117.816776][ T8352]  </TASK>
[  117.884542][ T8364] netlink: 'syz.1.737': attribute type 49 has an invalid length.
[  117.892580][ T8352] bond8: (slave erspan2): Enslaving as an active interface with an up link
[  118.113433][ T8363] syz.1.737 (8363) used obsolete PPPIOCDETACH ioctl
[  118.168981][ T8364] ip6gretap0: entered promiscuous mode
[  118.171778][ T8364] ip6gretap0: entered allmulticast mode
[  118.288695][ T8352] syz.1.737 (8352) used greatest stack depth: 16616 bytes left
