last executing test programs:

3m32.025474297s ago: executing program 2 (id=1287):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="fa82", 0xfdef}], 0x1}, 0x20000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x18, 0xa042, 0x20, 0xffffffffffffffff, 0x401}, 0x50)

3m31.848823407s ago: executing program 2 (id=1291):
r0 = socket(0x2a, 0x2, 0x0)
unshare(0x22020400)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0)

3m31.752264831s ago: executing program 2 (id=1292):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)

3m31.752084236s ago: executing program 2 (id=1293):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x2, 0x29, 0xfffffff6}, {0x30, 0x10, 0x1, 0xfffffff7}, {0x6, 0xff, 0x6, 0x100005e}]}, 0x10)

3m31.585089038s ago: executing program 2 (id=1296):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000000000000defe07000800001b00"], 0x50)

3m28.304411619s ago: executing program 2 (id=1315):
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000440)={@multicast2, @loopback})
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0xffff0001}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r5, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000810)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000240))
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
poll(&(0x7f0000000000)=[{r0, 0x7014}], 0x1, 0x7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ffb00000000000000000000004000000bb7f1affc600feff0000000a9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)

3m28.180547839s ago: executing program 32 (id=1315):
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000440)={@multicast2, @loopback})
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0xffff0001}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r5, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000810)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000240))
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fbc84589ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe953054720185010000f1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe0", 0x33f}], 0x2}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
poll(&(0x7f0000000000)=[{r0, 0x7014}], 0x1, 0x7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ffb00000000000000000000004000000bb7f1affc600feff0000000a9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)

2.951396714s ago: executing program 1 (id=4221):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_getvlan={0x28, 0x72, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4808}, 0x44800) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_getvlan={0x28, 0x72, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4808}, 0x44800)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) (async)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{r1, &(0x7f0000000140)='\x00', 0x2000, &(0x7f0000000180)={@align=0xfffffffffffffff9, {0x3, 0xe1e, 0x80000001, 0x8001}}, 0x3, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x1}, {[0xea, 0x7, 0x8, 0x3]}, 0x8001, 0xa6, &(0x7f0000000240)=""/166}) (async)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{<r2=>r1, &(0x7f0000000140)='\x00', 0x2000, &(0x7f0000000180)={@align=0xfffffffffffffff9, {0x3, 0xe1e, 0x80000001, 0x8001}}, 0x3, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x1}, {[0xea, 0x7, 0x8, 0x3]}, 0x8001, 0xa6, &(0x7f0000000240)=""/166})
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2, 0x11, 0xf5, 0x9, 0x4, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d3, 0x6, 0x1, 0xe0, 0x1, 0x80000001}]}, 0x20}}, 0x44)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2, <r3=>0xffffffffffffffff}, 0x4)
ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000580)={<r4=>r1, &(0x7f0000000480)='\x00', 0x10000, &(0x7f00000004c0)={@_ha_fsid={[0x3]}, {0x6, 0x5, 0x7, 0x909}}, 0x7fffffff, &(0x7f0000000500), &(0x7f0000000540)=0x7})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000005c0)={'pimreg0\x00', 0x8000})
ioctl$NILFS_IOCTL_GET_CPSTAT(r2, 0x80186e83, &(0x7f0000000600))
bind$alg(r4, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-ce\x00'}, 0x58)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f00000006c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10010, r2, 0x6e0f1000) (async)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10010, r2, 0x6e0f1000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r5, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "7e677fcfe03e740aa5009827154bcdd1"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x55}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x91) (async)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r5, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "7e677fcfe03e740aa5009827154bcdd1"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x55}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x91)
r7 = socket$key(0xf, 0x3, 0x2)
ioctl$OCFS2_IOC_GROUP_ADD64(r7, 0x40186f03, &(0x7f00000008c0)={0xff, 0x5, 0x0, 0x5}) (async)
ioctl$OCFS2_IOC_GROUP_ADD64(r7, 0x40186f03, &(0x7f00000008c0)={0xff, 0x5, 0x0, 0x5})
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f0000000900)={0x6, 0xf, 0x80000000, 0x0, 0x100})
recvfrom$packet(r4, &(0x7f0000000980)=""/175, 0xaf, 0x40000002, 0x0, 0x0) (async)
recvfrom$packet(r4, &(0x7f0000000980)=""/175, 0xaf, 0x40000002, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a80)={'caif0\x00'})
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) (async)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
ioctl$VHOST_GET_VRING_BASE(r8, 0xc008af12, &(0x7f0000000b00))
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000b40)=0x9a4, 0x4) (async)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000b40)=0x9a4, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b80)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b80)={<r9=>0xffffffffffffffff})
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r9, 0x6628)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x200, 0x3a}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r2, 0x0, 0xf7, 0x77, &(0x7f0000000cc0)="70a004bbd086d9cd0ee3c75f90984a7c80bd6426500ce7c35bdd1b79029511d9050c7c979c4b52088651c3c22f603c772bda4746c0f6880ecc2cd7becf911b6de9ab02ba6affa05405685c8a1187e4884bb4e37b92a826cb4d8f9c35c48d6005bd22d384fbfa62fc5f8a32d9b50fcde8cf41d2b44fd3b8b3fd9f011dbbd60424f1375c0fd37798d547c8413de21df0bb250d9ef1c8cc45c6194bcb0f38d1c1a610473d77cc0763f639754f9b88abc703bcc6b89cb3895816a6a52105fad4bd8d84c11df978c813b18f3f4e3cc0f7e5de7f36975852840c145096d15c2d0c5850f4d2daf6cc9775c3c10dd23e3766efbf7ce3054741c98b", &(0x7f0000000dc0)=""/119, 0x0, 0x0, 0xc2, 0xe4, &(0x7f0000000e40)="57d9b67496930bc229054b6c2655e2c541116b86f1585de90525f9285233c04c7d31fea67c5e7f27490a86d686797727ac0e14ee0329cf1b6824c2ed1f756f8d12748523620983e6059ae090abaea9768569d4eea9c4d0de0be95e9bc4d44bdc5da37220a0063dd02caad55f6c29885315bcbeb37a5646a9009ed01e330dd0707cdec164099fcf7cb03621b123e13006f6d8fc5b1a817448eb6d5486fb997fd829fd59b0f3fc2b0ad44d5301835e92d6fa5b1941e92592bd69c6f53afb577fba35fe", &(0x7f0000000f40)="ede204b68beb5410476c4d4be0a4a240b49884f58b53003ab63a095a72b250ea23ddbea67042f164094e3796f054e92a351f81813740866c1747bc6696579d8bb97bce5f9c617a62c8ba498d7af650e71c59f16950c93b3415ce2cb5816078a50f21cff5e46e6e480d59ede572c3d8717ebd4b9d3e3e4f73207f79936f3748503b445b4801fe451e9bcbcadc073b38f1b028e431da982027a31e497a413a5ac777d3b3a66b79f6e54154094083f37f0864611beba5ac6a71452e95cfac58090582dd976dc2cd305baa39abb7c29fb8ec186bfc546f06b2cd90cadc08b142fbfc6f87dda5", 0x7, 0x0, 0x400}, 0x50)

2.841723469s ago: executing program 1 (id=4222):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x83}, {0xffffffffffffffff, 0x80}, {r0, 0x8000}, {0xffffffffffffffff, 0x2c2}], 0x4, 0x669)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x62}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="100027ce3feb76e1a1e8f8e02ae0"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000300)=0xd025, 0x4)
write$cgroup_pressure(r1, &(0x7f00000000c0)={'some', 0x20, 0x100, 0x20, 0x2e1}, 0x2f)

1.841125691s ago: executing program 1 (id=4239):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x44}}, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x20000fdfd)

1.727710816s ago: executing program 0 (id=4242):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=<r2=>0x0)
r3 = syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/cgroup\x00')
r4 = socket(0x10, 0x2, 0x0)
sendmsg$SOCK_DESTROY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140062282300"/20], 0x14}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000740)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000001380)=0xe8)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x15c0}, 0x1, 0x0, 0x0, 0x2400c811}, 0x4008094)
r7 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r8, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
pipe(&(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
splice(r11, 0x0, r12, 0x0, 0x1000800800f3d, 0x4)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'})
r15 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r14)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac681400", @ANYRES16=r15, @ANYRESDEC=r14], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r16 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r13, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="21022bbd7000fddbdf251400000008001d00", @ANYRES32=r12, @ANYBLOB="08000100030000000800010002000000080001000200000008001c00", @ANYRES32=0x0, @ANYBLOB="080001000100000008001c00", @ANYRES32, @ANYRES64=r10, @ANYRES32=0x0, @ANYBLOB="08001d00", @ANYRES32=r12, @ANYBLOB='\b\x00=\x00', @ANYRES32=r16, @ANYBLOB], 0x64}}, 0x90)
r17 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000240)={<r18=>0x0, <r19=>0x0}, &(0x7f0000000200)=0x10)
sendmsg$netlink(r17, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000002e000100000000000000000008000c00", @ANYRES32=r19, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x2c}], 0x1, 0x0, 0x0, 0x20080c5}, 0x0)
r20 = getgid()
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x1000000}, 0xc, &(0x7f0000000440)=[{&(0x7f00000029c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYRESOCT], 0x398}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000b500a3cf3169468b8c7dbf305f27228dc2606ae1364554e7a6ff9a38675d8e7a00000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESDEC=r19, @ANYRES32=0x0, @ANYRES64=r18, @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=0xee00, @ANYBLOB="000000002c0000000000000099e51e195b91550b", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="00000200"/20, @ANYRES32=r16, @ANYRES32=r19, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x20040050}, 0x1d4dfefa95955b6f)

1.659492705s ago: executing program 1 (id=4244):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)='7', 0x20}], 0x1}}], 0x1, 0x2c000011)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x1b0, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6a}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1a}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x7ab}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x8c, 0xac, "5dd99528e0eb6fc9a45736eb62e2048902bbacd2ac5ffc3bf16a6657e050acac3ec78931cde0b9aa5be4d5f180d40cd3dff3192bdda6fc6a2ea41f43455a52df89aad0df43a9077c078fb64b36d6ff10a901eaf9b3a968c546333197d78ffd8ae01f5632aaacfcda841db180c57e2433c82215a0ac67077fa9bafc9c54c0496c3c45b5f057f1964f"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x564}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xc8, 0xac, "9ecea18dd8e96faeef9a048547bd5e84c2a1f716e6dae07c7566afabf9e12ac5cb7717521faf87a59990d03ae414d101b87ac308fd3742581194efdbbd1d3f42a1e318abda346b98d61010d12205b4efd4f41b2173dea957d60d925a1889a235781374327ffa4c5ff522550e0baaa109cbe9b689a6cbaf0ea97a8ec6cd212e5df53966dbdfda9fb2c744edb9004c00315b75dd20e1c3cf4dfa34472132b41ab6b565a94ddcc87c8a921e2e49855ebc1596edc97473783b89f5e0103a073428a12b2bb249"}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000090}, 0x54)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x12, 0x0, &(0x7f0000001a40)="259a53f2710100000000000000a80845d9f8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

1.459987704s ago: executing program 3 (id=4246):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$AUTOFS_IOC_READY(r0, 0x4001af84, 0x0)

1.459239663s ago: executing program 0 (id=4247):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x2c)

1.370517678s ago: executing program 3 (id=4248):
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)='o', 0x1}], 0x1}}], 0x1, 0x20004000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r1)
sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004010}, 0x41)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800)

1.309998296s ago: executing program 0 (id=4249):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x0, 0x3, 0x1}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x6}, 0x1, 0x0, 0x0, 0x20024095}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000300)={<r3=>0x0, "15a9eadf55539a2d73aa3f09024a1706"})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001300)={{r0}, r2, 0x2, @unused=[0xd, 0xeb0, 0x80000001], @devid=r3})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x40, 0x1}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="ce3c61821c000b250a005f42000000000000", @ANYRES32], 0x1c}}, 0x4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r6, &(0x7f0000001640)={@void, @void, @ipv6=@udp={0xd, 0x6, "6ff169", 0x1dc, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {0x4e25, 0x4e21, 0x1dc, 0x0, @opaque="ee373935ef0f8da10b47000507b0025a9001e6cc070855848340507e8bd26f3ca1d633ec368e2be6a38e100ad79a38fb5c1436b5988215e096f64a843aafad7b82e65587c030411aefc61cb5c51b9788796ac34f4a8e455dd1d07d4684c7b2e91b6fd3fbaeffe77e10e2bd1d0cde2e814806120485b4b6f5c6d14b23c1b00be5fe8ca59610a206c47126484462b109828cae2dbbdd69bf1f853aaaac48ed7002cfe08806b1a56c2886d7fd3c77f48ae33282aa4e245082bbcabdba8d34197fec5a19521e8557bb8c690fdd6f108251a924d3740ce4effb9f65a6d1793829dedca2dd473eb87cbcdc851f6b02132dafbbd4552d7ea0ef47c6b8f38336a3b080da0824e209d3035489ec0d90687c685796cd391982187b701aec19c2135161c5b44555053953299eb4b23b5e4851673c3b59fa598da26913e0c3ac60d5e1cf096d03229469c8d4c1d384ecd008635526b02a78773457a8cfe1805cc420e77ac3610fa9a890c319734bfb3f5b1230951c050af3214ab05acc614337464281fe0e6a9c59c742f9dcbe3e98ca5dc5fe064e91c2e0c855a82a24f8bffebcadf7e608e690da94c0cfff60ff2e45309ea9c2b1d72544b61fb0208ec145ca1a15f302f150cbdaf81ede707938a1864b0e0c6036d64198fb2f"}}}}, 0x204)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0x2}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82)
socket$igmp6(0xa, 0x3, 0x2)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x2)
socket$kcm(0x2, 0xa, 0x2)
ioctl$VHOST_SET_FEATURES(r0, 0x4004af61, &(0x7f00000000c0)=0x200000000)

1.309573664s ago: executing program 1 (id=4250):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10)

1.221103417s ago: executing program 3 (id=4251):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, &(0x7f0000000100), &(0x7f00000001c0)=""/5}, 0x20)
unshare(0x400)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockname(r2, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000000100)=0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x34, r4, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r6, 0x0, 0x1, 0x0, 0x29)

1.220516381s ago: executing program 0 (id=4252):
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', <r1=>0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "7d14a0b0fe0e4906"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r7, &(0x7f00000000c0), 0x12)
close(r7)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000300)={r6, 0x5}, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="fd008800"})
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@mcast1, 0x3e, r1})
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x16, 0xa01}, 0x14}}, 0x0)
recvmmsg$unix(r8, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x4c)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000140)={0x0, <r9=>0x0}, &(0x7f00000001c0)=0xc)
sendmsg$nl_generic(r8, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x17, 0x800, 0x70bd2d, 0x25dfdbfc, {0x16}, [@typed={0x8, 0xf6, 0x0, 0x0, @uid=r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x1)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x150, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x6}, {@in6=@private1, 0x4d4, 0x32}, @in=@multicast1, {0x0, 0x3, 0x76a, 0x80000000000010, 0x3, 0x0, 0x9}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x9, 0x7}, 0x70bd26, 0x0, 0xa, 0x1, 0x9, 0x110}, [@algo_aead={0x60, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xa0, 0x60, "ee975d40df06c77860e09d464fffd622034fe232"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x1b, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xf0}}, 0x0)

1.120614151s ago: executing program 3 (id=4253):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000ffff28bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="57a0000021000014001280090001007663616e0000000004003b8014000300"/48], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
r6 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce0", 0x55}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854)
setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000180)=0x10000, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendfile(0xffffffffffffffff, r3, 0x0, 0x2)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, 0x0, 0x40000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008024)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10)
r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r9, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
ioctl$BTRFS_IOC_WAIT_SYNC(r9, 0x40089416, 0x0)
r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r10, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa)
shutdown(r9, 0x1)

997.35011ms ago: executing program 0 (id=4254):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$AUTOFS_IOC_READY(r0, 0x4008af04, 0x0)

820.054886ms ago: executing program 0 (id=4255):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
pipe(&(0x7f00000001c0))
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000600), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'xfrm0\x00', <r4=>0x0})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(echainiv(aegis128))\x00'}, 0x58)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4040)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r8, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={<r10=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
tee(r10, r11, 0x8f5, 0x0)
recvmsg(r11, &(0x7f00000005c0)={&(0x7f0000000280)=@tipc=@name, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/12, 0xc}], 0x1, &(0x7f0000000540)=""/113, 0x71}, 0x180)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x1, [0xfffe, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r12 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x2, 0xffff}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8805}, 0x10)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001200000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x100000000)

340.843752ms ago: executing program 1 (id=4256):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7020000000000179500c200000000009500001200000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0xc3, &(0x7f0000000280)=""/195}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$SO_COOKIE(r1, 0x1, 0x4a, 0x0, &(0x7f0000000080))
r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
recvmsg(r2, &(0x7f00000037c0)={&(0x7f00000000c0)=@tipc, 0x80, &(0x7f0000002740)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/216, 0xd8}, {&(0x7f0000001600)=""/116, 0x74}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/186, 0xba}], 0x5, &(0x7f00000027c0)=""/4096, 0x1000}, 0x40002100)
socket(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'geneve0\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4840)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0)
sendmsg$nl_route(r4, 0x0, 0x20008004)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24014841)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x20, 0x4, [0x0, 0x4, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}})
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$AUTOFS_IOC_PROTOVER(r8, 0x80049363, &(0x7f0000000380))
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000180)=0xffff, 0x4)

220.608127ms ago: executing program 3 (id=4257):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b3000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket(0x10, 0x803, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x15, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0)

0s ago: executing program 3 (id=4258):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket(0x27, 0xa, 0x9)
ioctl$FICLONE(r1, 0x40049409, r0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000100)="c982bda816d9bc9f0ec4b94496a5fe98d611db93ea879afb4b3d7de5cb199539351f39043f649b302620759ee56471dedd040353e34e4049e8d960e2b065cd5a9f17bf370787d2a23732cd22c7825168c24cec1480bc6cc160d867761db22c07e5b7754589bab68737f35c9e432fb805efba0a3a96d0c728e89257014e9c3b59379a261bd40184e1ebb2613ffc5f8d50761e57e463f643e6761b258b35516c4c92004180eeba41bdedaf1f5b915e0e0489592c2cfed89c3288c8aa5b487644554c21d7074027ba7684d2707b176aacd58238baa82344154321d77eec5db13445d8a89bcf783efefe6083a860305f122892560c3cce28c84866f688b02264b13c7c6680994e9a513828dc427e4e55b389853ac80a6485ef0fb77086ae0227db40127b9e9fc58cc507259a97e93283a24fbc65ef39cbc8c265ab4eaeb610bb48eba5381a4dc2a2db65dcc08eedc31cba020352e3b0426509d0d39021fe6b221672c9", 0x4}, 0x38)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1003, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f00)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x14)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x0)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)

kernel console output (not intermixed with test programs):

   97.573346][ T6892] netlink: 'syz.0.415': attribute type 4 has an invalid length.
[   97.692990][ T6898] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.418'.
[   97.696318][ T6898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.418'.
[   97.699246][ T6898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.418'.
[   97.702134][ T6898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.418'.
[   98.781124][ T6936] netlink: 'syz.2.435': attribute type 6 has an invalid length.
[   98.879729][ T6925] netlink: 'syz.1.429': attribute type 1 has an invalid length.
[   99.424412][ T6972] sock: sock_timestamping_bind_phc: sock not bind to device
[   99.651772][ T6982] xt_hashlimit: size too large, truncated to 1048576
[   99.679575][ T6985] Bluetooth: MGMT ver 1.23
[   99.868271][ T6996] netlink: 44 bytes leftover after parsing attributes in process `syz.0.463'.
[  100.040997][ T7010] netlink: 132 bytes leftover after parsing attributes in process `syz.1.469'.
[  100.907791][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'.
[  102.611299][ T7118] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  102.618410][ T7118] bond1 (unregistering): Released all slaves
[  102.897331][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.529'.
[  102.914927][ T7142] netlink: 104 bytes leftover after parsing attributes in process `syz.0.530'.
[  103.436973][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'.
[  103.753767][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.555'.
[  103.759236][ T7208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.557'.
[  103.769353][ T7208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.557'.
[  103.940368][ T7220] netlink: 7 bytes leftover after parsing attributes in process `syz.1.562'.
[  104.005196][ T7224] syzkaller0: entered promiscuous mode
[  104.012724][ T7224] syzkaller0: entered allmulticast mode
[  104.379965][ T7250] 8021q: adding VLAN 0 to HW filter on device bond2
[  104.393024][ T7250] netlink: 'syz.0.577': attribute type 2 has an invalid length.
[  104.419456][ T7250] vlan2: entered allmulticast mode
[  104.425441][ T7250] bond2: entered allmulticast mode
[  104.436035][ T7259] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  105.645278][ T7294] __nla_validate_parse: 3 callbacks suppressed
[  105.645298][ T7294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.595'.
[  105.661876][ T7294] vlan3: entered promiscuous mode
[  105.663755][ T7294] batadv0: entered promiscuous mode
[  105.808554][ T7300] lo speed is unknown, defaulting to 1000
[  105.816709][ T7300] lo speed is unknown, defaulting to 1000
[  105.859132][ T7300] lo speed is unknown, defaulting to 1000
[  105.862339][ T7303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.598'.
[  105.878615][ T7300] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  105.887356][ T7300] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  105.893403][ T7300] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  105.903295][ T7300] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  105.921238][ T7300] lo speed is unknown, defaulting to 1000
[  105.951133][ T7300] lo speed is unknown, defaulting to 1000
[  105.982363][ T7300] lo speed is unknown, defaulting to 1000
[  106.139800][ T7316] bond3: option lacp_rate: invalid value (3)
[  106.155284][ T7316] bond3 (unregistering): Released all slaves
[  106.170847][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.608'.
[  106.253652][ T7325] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.259903][ T7325] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.395114][ T7336] tipc: Started in network mode
[  106.400956][ T7336] tipc: Node identity 080211000001, cluster identity 4711
[  106.404644][ T7336] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.408758][ T7335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.614'.
[  106.409326][ T7336] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  106.415238][ T7336] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  107.416459][ T6231] tipc: Node number set to 134418688
[  107.579591][ T7374] sctp: [Deprecated]: syz.0.630 (pid 7374) Use of int in max_burst socket option.
[  107.579591][ T7374] Use struct sctp_assoc_value instead
[  107.859429][ T7392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.638'.
[  107.979085][ T7401] netlink: 'syz.0.642': attribute type 4 has an invalid length.
[  107.981643][ T7401] netlink: 152 bytes leftover after parsing attributes in process `syz.0.642'.
[  107.993444][ T7401] .`: renamed from bond0 (while UP)
[  108.066878][ T7405] pim6reg0: tun_chr_ioctl cmd 35111
[  108.424832][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'.
[  108.432447][ T7409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.646'.
[  108.436339][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'.
[  108.824971][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'.
[  109.116839][ T7424] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  109.171132][ T7426] netlink: 'syz.0.654': attribute type 29 has an invalid length.
[  110.442215][ T7457] netlink: 'syz.0.668': attribute type 25 has an invalid length.
[  110.454521][ T7457] netlink: 'syz.0.668': attribute type 3 has an invalid length.
[  110.825706][ T7485] vlan2: entered allmulticast mode
[  110.827981][ T7485] bond0: entered allmulticast mode
[  110.830222][ T7485] bond_slave_0: entered allmulticast mode
[  110.832633][ T7485] bond_slave_1: entered allmulticast mode
[  110.837059][ T7485] __nla_validate_parse: 4 callbacks suppressed
[  110.837073][ T7485] netlink: 14 bytes leftover after parsing attributes in process `syz.1.681'.
[  110.855280][ T7485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.859864][ T7485] bond_slave_0: left allmulticast mode
[  110.865670][ T7485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.870088][ T7485] bond_slave_1: left allmulticast mode
[  110.872990][ T7485] bond0 (unregistering): Released all slaves
[  111.903027][ T7524] netlink: 'syz.0.700': attribute type 3 has an invalid length.
[  112.013522][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'.
[  112.033546][ T7529] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  112.135162][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'.
[  112.139971][ T7536] netlink: 'syz.1.704': attribute type 1 has an invalid length.
[  112.142929][ T7536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.704'.
[  113.616835][ T7592] netlink: 'syz.2.729': attribute type 1 has an invalid length.
[  113.773430][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.734'.
[  114.564041][ T7649] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.759925][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.758'.
[  114.858572][ T7653] 8021q: adding VLAN 0 to HW filter on device bond1
[  114.863807][ T7656] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[  114.871120][ T7659] nbd: socks must be embedded in a SOCK_ITEM attr
[  114.886008][ T7656] bond1: (slave wlan1): Opening slave failed
[  115.134896][ T7666] netlink: 104 bytes leftover after parsing attributes in process `syz.1.764'.
[  115.284147][ T7671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.765'.
[  115.333773][ T7671] vlan3: entered promiscuous mode
[  115.342336][ T7671] bridge0: entered promiscuous mode
[  116.415316][ T7700] netlink: 216 bytes leftover after parsing attributes in process `syz.0.780'.
[  116.441087][ T7700] netlink: 288 bytes leftover after parsing attributes in process `syz.0.780'.
[  116.448412][ T7700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.780'.
[  117.073882][ T7721] syzkaller1: entered promiscuous mode
[  117.077820][ T7721] syzkaller1: entered allmulticast mode
[  117.200534][ T7727] openvswitch: netlink: Unknown key attributes 20
[  117.695797][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'.
[  117.700888][ T7734] netlink: 28 bytes leftover after parsing attributes in process `syz.1.796'.
[  118.078312][ T7739] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.082311][ T7739] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.244768][ T7739] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.254151][ T7739] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.566385][ T7739] vlan2: left allmulticast mode
[  118.568198][ T7739] bond2: left allmulticast mode
[  118.578701][   T10] lo speed is unknown, defaulting to 1000
[  118.584883][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.585394][   T10] syz2: Port: 1 Link DOWN
[  118.595253][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.611116][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.627100][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.424813][ T7768] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  119.497267][ T7776] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  119.507226][ T7776] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  119.657444][ T7780] ip6gretap1: entered promiscuous mode
[  119.792971][ T7785] netlink: 'syz.0.810': attribute type 21 has an invalid length.
[  119.798461][ T7785] netlink: 132 bytes leftover after parsing attributes in process `syz.0.810'.
[  120.952771][ T7816] netdevsim netdevsim0: Direct firmware load for .. failed with error -2
[  120.957536][ T7816] netdevsim netdevsim0: Falling back to sysfs fallback for: ..
[  121.505904][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'.
[  121.722030][ T7839] syzkaller0: entered promiscuous mode
[  121.724336][ T7839] syzkaller0: entered allmulticast mode
[  121.853349][ T7841] vlan1: entered promiscuous mode
[  123.523962][ T7898] netlink: 'syz.1.860': attribute type 15 has an invalid length.
[  123.905636][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'.
[  124.254913][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'.
[  124.884082][ T7945] syzkaller0: entered promiscuous mode
[  124.886099][ T7945] syzkaller0: entered allmulticast mode
[  125.070043][ T7951] netlink: 25 bytes leftover after parsing attributes in process `syz.0.882'.
[  125.159216][ T7952] netlink: 'syz.0.882': attribute type 4 has an invalid length.
[  126.776599][ T7950] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  126.808626][ T6227] lo speed is unknown, defaulting to 1000
[  126.833246][ T6227] syz2: Port: 1 Link ACTIVE
[  126.887515][ T7955] netlink: 'syz.2.884': attribute type 1 has an invalid length.
[  127.181884][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'.
[  127.185631][ T7965] netlink: 'syz.1.890': attribute type 25 has an invalid length.
[  127.189158][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'.
[  128.125640][ T8000] syzkaller0: entered promiscuous mode
[  128.136856][ T8000] syzkaller0: entered allmulticast mode
[  128.236984][ T6236] hid-generic 0005:0007:0007.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa
[  128.420807][ T8012] netlink: 72 bytes leftover after parsing attributes in process `syz.0.911'.
[  128.495124][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'.
[  128.582798][ T8016] netlink: 'syz.0.913': attribute type 5 has an invalid length.
[  128.590798][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'.
[  128.940083][ T8031] vlan2: entered allmulticast mode
[  128.942423][ T8031] bridge0: port 3(vlan2) entered blocking state
[  128.944960][ T8031] bridge0: port 3(vlan2) entered disabled state
[  128.950672][ T8031] vlan2: entered promiscuous mode
[  129.153905][   T10] IPVS: starting estimator thread 0...
[  129.256476][ T8037] IPVS: using max 50 ests per chain, 120000 per kthread
[  129.434366][ T8048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.925'.
[  129.848421][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'.
[  130.361392][ T8081] netlink: 'syz.0.937': attribute type 1 has an invalid length.
[  130.364049][ T8081] netlink: 36 bytes leftover after parsing attributes in process `syz.0.937'.
[  131.911422][ T8118] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.918517][ T8113] syzkaller0: entered promiscuous mode
[  131.925191][ T8113] syzkaller0: entered allmulticast mode
[  131.932944][ T8113] tipc: Resetting bearer <eth:syzkaller0>
[  131.946330][ T8112] tipc: Resetting bearer <eth:syzkaller0>
[  131.972549][ T8112] tipc: Disabling bearer <eth:syzkaller0>
[  132.755429][ T8161] netlink: 72 bytes leftover after parsing attributes in process `syz.1.974'.
[  132.823060][ T8166] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.297190][ T8214] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  134.302905][ T8214] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  134.317199][ T8212] wlan0 speed is unknown, defaulting to 1000
[  134.328212][ T8212] wlan0 speed is unknown, defaulting to 1000
[  134.354066][ T8212] wlan0 speed is unknown, defaulting to 1000
[  134.407306][ T8212] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  134.414595][ T8212] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  134.425176][ T8212] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  134.482374][ T8212] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  134.541181][ T8212] wlan0 speed is unknown, defaulting to 1000
[  134.556887][ T8212] wlan0 speed is unknown, defaulting to 1000
[  134.576421][ T8212] wlan0 speed is unknown, defaulting to 1000
[  134.921710][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'.
[  135.163548][ T8247] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  135.674042][ T8270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1024'.
[  135.945957][ T8283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1029'.
[  136.264734][ T8292] netlink: 'syz.0.1032': attribute type 1 has an invalid length.
[  136.999967][ T8333] vxcan3: entered allmulticast mode
[  137.448314][ T8347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1048'.
[  137.637511][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1054'.
[  137.640476][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1054'.
[  137.734118][ T8358] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1053'.
[  138.121803][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  138.125935][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[  138.149485][ T8377] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1063'.
[  138.901414][ T8413] tipc: Started in network mode
[  138.906453][ T8413] tipc: Node identity 8e70e54fd5c3, cluster identity 4711
[  138.911617][ T8413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.965629][ T8413] syzkaller0: entered promiscuous mode
[  138.969540][ T8413] syzkaller0: entered allmulticast mode
[  138.974376][ T8413] tipc: Resetting bearer <eth:syzkaller0>
[  138.989673][ T8412] tipc: Resetting bearer <eth:syzkaller0>
[  140.532806][ T8447] netlink: 'syz.0.1092': attribute type 8 has an invalid length.
[  140.546181][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1092'.
[  141.963015][ T8412] tipc: Disabling bearer <eth:syzkaller0>
[  141.969976][ T6236] tipc: Node number set to 1538516303
[  142.342351][ T8463] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1099'.
[  142.419249][ T8461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1098'.
[  142.642590][ T8469] tipc: Failed to remove unknown binding: 66,1,1/3594382447:237954085/237954087
[  142.829622][ T8473] C: renamed from veth1_to_team
[  142.839766][ T8473] netlink: 'syz.0.1104': attribute type 1 has an invalid length.
[  142.844268][ T8473] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1104'.
[  142.852652][ T8473] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  145.486898][ T8563] tun0: tun_chr_ioctl cmd 21731
[  146.274268][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1158'.
[  146.286564][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'.
[  146.291552][ T8599] netlink: 'syz.2.1158': attribute type 18 has an invalid length.
[  146.411846][ T8610] netlink: 'syz.2.1163': attribute type 32 has an invalid length.
[  146.415041][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'.
[  146.434117][ T8610] bond2: Setting coupled_control to off (0)
[  146.569392][ T8618] netlink: 'syz.0.1166': attribute type 3 has an invalid length.
[  146.678825][ T8622] netlink: 'syz.0.1168': attribute type 1 has an invalid length.
[  146.860219][ T8622] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.150707][ T8635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1173'.
[  147.624890][ T8655] raw_sendmsg: syz.0.1181 forgot to set AF_INET. Fix it!
[  150.223655][ T8723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1213'.
[  151.252121][ T8761] ip6tnl3: entered allmulticast mode
[  151.261248][   T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  151.271354][   T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  151.287498][ T6229] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  151.442393][ T8770] bond3: Unable to set up delay as MII monitoring is disabled
[  151.448797][ T8770] bond3 (unregistering): Released all slaves
[  151.596505][ T6236] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  151.694146][ T8778] netlink: 'syz.0.1238': attribute type 32 has an invalid length.
[  151.855775][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'.
[  151.866967][ T8788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1239'.
[  152.048115][ T6229] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  152.120432][ T8801] netlink: 'syz.0.1248': attribute type 21 has an invalid length.
[  152.123090][ T8801] IPv6: NLM_F_CREATE should be specified when creating new route
[  152.125609][ T8801] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  152.129659][ T8801] IPv6: NLM_F_CREATE should be set when creating new route
[  152.131986][ T8801] IPv6: NLM_F_CREATE should be set when creating new route
[  152.134429][ T8801] IPv6: NLM_F_CREATE should be set when creating new route
[  152.459117][ T8813] netlink: 'syz.0.1253': attribute type 1 has an invalid length.
[  152.464739][ T8813] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1253'.
[  152.767031][ T8832] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1260'.
[  153.249855][ T8853] netlink: 'syz.1.1269': attribute type 28 has an invalid length.
[  153.362429][ T8857] netlink: 'syz.2.1271': attribute type 1 has an invalid length.
[  153.489470][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1271'.
[  153.531437][ T8857] bond3: entered promiscuous mode
[  153.537139][ T8857] 8021q: adding VLAN 0 to HW filter on device bond3
[  153.580983][ T8864] 8021q: adding VLAN 0 to HW filter on device bond3
[  153.586122][ T8864] bond3: (slave gre2): The slave device specified does not support setting the MAC address
[  153.593351][ T8864] bond3: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  153.622599][ T8864] bond3: (slave gre2): making interface the new active one
[  153.628889][ T8864] gre2: entered promiscuous mode
[  153.656688][ T8864] bond3: (slave gre2): Enslaving as an active interface with an up link
[  153.678059][ T8867] bond3 (unregistering): (slave gre2): Releasing backup interface
[  153.681708][ T8867] gre2: left promiscuous mode
[  153.686032][ T8867] bond3 (unregistering): Released all slaves
[  154.105126][ T6236] IPVS: starting estimator thread 0...
[  154.200633][ T8890] IPVS: using max 64 ests per chain, 153600 per kthread
[  154.409605][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1292'.
[  155.556370][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  155.570950][ T8910] syz.2.1296 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  155.587739][ T8928] team0: Device ipvlan2 failed to register rx_handler
[  155.592421][ T8910] CPU: 0 UID: 0 PID: 8910 Comm: syz.2.1296 Not tainted syzkaller #0 PREEMPT(full) 
[  155.592443][ T8910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  155.592450][ T8910] Call Trace:
[  155.592457][ T8910]  <TASK>
[  155.592463][ T8910]  dump_stack_lvl+0xe8/0x150
[  155.592482][ T8910]  dump_header+0xd3/0x4b0
[  155.592499][ T8910]  oom_kill_process+0x3ab/0x970
[  155.592531][ T8910]  out_of_memory+0x1064/0x1480
[  155.592542][ T8910]  ? try_charge_memcg+0xbca/0x1590
[  155.592558][ T8910]  ? __pfx_out_of_memory+0x10/0x10
[  155.592567][ T8910]  ? do_raw_spin_unlock+0x4d/0x210
[  155.592585][ T8910]  try_charge_memcg+0xc74/0x1590
[  155.592601][ T8910]  ? __pfx_try_charge_memcg+0x10/0x10
[  155.592609][ T8910]  ? percpu_ref_tryget+0x15/0x180
[  155.592651][ T8910]  ? charge_memcg+0x20/0x2b0
[  155.592662][ T8910]  charge_memcg+0x19c/0x2b0
[  155.592672][ T8910]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[  155.592681][ T8910]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[  155.592691][ T8910]  swap_cache_alloc_folio+0x4de/0x990
[  155.592711][ T8910]  swap_cache_read_folio+0x44/0x120
[  155.592724][ T8910]  swap_cluster_readahead+0x3a0/0x640
[  155.592739][ T8910]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  155.592756][ T8910]  ? get_vma_policy+0x27b/0x3c0
[  155.592768][ T8910]  swapin_readahead+0x19a/0xc10
[  155.592781][ T8910]  ? swap_table_get+0x1e/0x260
[  155.592807][ T8910]  ? swap_table_get+0x1e/0x260
[  155.592820][ T8910]  ? __pfx_swapin_readahead+0x10/0x10
[  155.592832][ T8910]  ? swap_table_get+0x1e/0x260
[  155.592842][ T8910]  ? swap_table_get+0x1e/0x260
[  155.592851][ T8910]  ? swap_table_get+0x1e/0x260
[  155.592862][ T8910]  ? swap_table_get+0x216/0x260
[  155.592873][ T8910]  ? swap_cache_get_folio+0x2e7/0x2f0
[  155.592886][ T8910]  do_swap_page+0x455/0x5060
[  155.592904][ T8910]  ? __pte_offset_map+0x29/0x240
[  155.592920][ T8910]  ? __lock_acquire+0x683/0x2cf0
[  155.592928][ T8910]  ? do_swap_page+0x124/0x5060
[  155.592939][ T8910]  ? __pfx_do_swap_page+0x10/0x10
[  155.592950][ T8910]  ? __pte_offset_map+0x1ae/0x240
[  155.592962][ T8910]  ? pte_offset_map_rw_nolock+0xea/0x160
[  155.592975][ T8910]  handle_mm_fault+0x124c/0x3080
[  155.592993][ T8910]  ? handle_mm_fault+0xec/0x3080
[  155.593008][ T8910]  ? __pfx_handle_mm_fault+0x10/0x10
[  155.593018][ T8910]  ? lock_vma_under_rcu+0x45a/0x500
[  155.593043][ T8910]  do_user_addr_fault+0xa4d/0x1340
[  155.593059][ T8910]  ? trace_page_fault_user+0x84/0x1e0
[  155.593070][ T8910]  exc_page_fault+0x6a/0xc0
[  155.593085][ T8910]  asm_exc_page_fault+0x26/0x30
[  155.593094][ T8910] RIP: 0033:0x7f291346a80c
[  155.593105][ T8910] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[  155.593112][ T8910] RSP: 002b:00007ffcc15d79b0 EFLAGS: 00010202
[  155.593121][ T8910] RAX: 0000000000000000 RBX: 00007f2913816090 RCX: 00005555559b6808
[  155.593127][ T8910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  155.593132][ T8910] RBP: 00007f2913817da0 R08: 0000000000000000 R09: 0000000000000000
[  155.593137][ T8910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000025eca
[  155.593142][ T8910] R13: 00007f2913815fac R14: 0000000000025bbc R15: 00007ffcc15d7ab0
[  155.593155][ T8910]  </TASK>
[  155.726085][ T8910] memory: usage 307200kB, limit 307200kB, failcnt 3084
[  155.728797][ T8910] memory+swap: usage 307284kB, limit 9007199254740988kB, failcnt 0
[  155.731192][ T8910] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0
[  155.733505][ T8910] Memory cgroup stats for /syz2:
[  155.733902][ T8910] cache 0
[  155.736736][ T8910] rss 0
[  155.737671][ T8910] rss_huge 0
[  155.738706][ T8910] shmem 0
[  155.739675][ T8910] mapped_file 0
[  155.740787][ T8910] dirty 0
[  155.741749][ T8910] writeback 0
[  155.742838][ T8910] workingset_refault_anon 1
[  155.744397][ T8910] workingset_refault_file 5
[  155.745839][ T8910] swap 86016
[  155.746968][ T8910] swapcached 135168
[  155.748175][ T8910] pgpgin 36853
[  155.749252][ T8910] pgpgout 36846
[  155.750524][ T8910] pgfault 77012
[  155.751823][ T8910] pgmajfault 3
[  155.753031][ T8910] inactive_anon 12288
[  155.754391][ T8910] active_anon 8192
[  155.755713][ T8910] inactive_file 0
[  155.757059][ T8910] active_file 0
[  155.758250][ T8910] unevictable 0
[  155.759798][ T8910] hierarchical_memory_limit 314572800
[  155.762148][ T8910] hierarchical_memsw_limit 9223372036854771712
[  155.764273][ T8910] total_cache 0
[  155.765513][ T8910] total_rss 0
[  155.766779][ T8910] total_rss_huge 0
[  155.768047][ T8910] total_shmem 0
[  155.769254][ T8910] total_mapped_file 0
[  155.770668][ T8910] total_dirty 0
[  155.771888][ T8910] total_writeback 0
[  155.773182][ T8910] total_workingset_refault_anon 1
[  155.774937][ T8910] total_workingset_refault_file 5
[  155.776785][ T8910] total_swap 86016
[  155.778054][ T8910] total_swapcached 135168
[  155.779482][ T8910] total_pgpgin 36853
[  155.780891][ T8910] total_pgpgout 36846
[  155.782267][ T8910] total_pgfault 77012
[  155.783609][ T8910] total_pgmajfault 3
[  155.785162][ T8910] total_inactive_anon 12288
[  155.787247][ T8910] total_active_anon 8192
[  155.788702][ T8910] total_inactive_file 0
[  155.790105][ T8910] total_active_file 0
[  155.791439][ T8910] total_unevictable 0
[  155.792883][ T8910] anon_cost 0
[  155.794065][ T8910] file_cost 0
[  155.795224][ T8910] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1296,pid=8910,uid=0
[  155.802905][ T8910] Memory cgroup out of memory: Killed process 8910 (syz.2.1296) total-vm:102160kB, anon-rss:1252kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  155.974901][ T8934] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  156.315565][   T12] tipc: Subscription rejected, illegal request
[  156.640666][ T5620] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  156.682816][ T5620] CPU: 0 UID: 0 PID: 5620 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  156.682842][ T5620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  156.682851][ T5620] Call Trace:
[  156.682857][ T5620]  <TASK>
[  156.682864][ T5620]  dump_stack_lvl+0xe8/0x150
[  156.682889][ T5620]  dump_header+0xd3/0x4b0
[  156.682915][ T5620]  oom_kill_process+0x3ab/0x970
[  156.682937][ T5620]  out_of_memory+0x1064/0x1480
[  156.682954][ T5620]  ? try_charge_memcg+0xbca/0x1590
[  156.682980][ T5620]  ? __pfx_out_of_memory+0x10/0x10
[  156.682994][ T5620]  ? do_raw_spin_unlock+0x4d/0x210
[  156.683018][ T5620]  try_charge_memcg+0xc74/0x1590
[  156.683041][ T5620]  ? __pfx_try_charge_memcg+0x10/0x10
[  156.683053][ T5620]  ? percpu_ref_tryget+0x15/0x180
[  156.683079][ T5620]  ? charge_memcg+0x20/0x2b0
[  156.683093][ T5620]  charge_memcg+0x19c/0x2b0
[  156.683105][ T5620]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[  156.683117][ T5620]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[  156.683131][ T5620]  swap_cache_alloc_folio+0x4de/0x990
[  156.683158][ T5620]  swap_cache_read_folio+0x44/0x120
[  156.683178][ T5620]  swap_cluster_readahead+0x3a0/0x640
[  156.683199][ T5620]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  156.683227][ T5620]  ? get_vma_policy+0x27b/0x3c0
[  156.683246][ T5620]  swapin_readahead+0x19a/0xc10
[  156.683267][ T5620]  ? swap_table_get+0x1e/0x260
[  156.683285][ T5620]  ? swap_table_get+0x1e/0x260
[  156.683311][ T5620]  ? __pfx_swapin_readahead+0x10/0x10
[  156.683331][ T5620]  ? swap_table_get+0x1e/0x260
[  156.683345][ T5620]  ? swap_table_get+0x1e/0x260
[  156.683358][ T5620]  ? swap_table_get+0x1e/0x260
[  156.683373][ T5620]  ? swap_table_get+0x216/0x260
[  156.683389][ T5620]  ? swap_cache_get_folio+0x2e7/0x2f0
[  156.683412][ T5620]  do_swap_page+0x455/0x5060
[  156.683437][ T5620]  ? __pte_offset_map+0x29/0x240
[  156.683459][ T5620]  ? __lock_acquire+0x683/0x2cf0
[  156.683471][ T5620]  ? do_swap_page+0x124/0x5060
[  156.683488][ T5620]  ? __pfx_do_swap_page+0x10/0x10
[  156.683501][ T5620]  ? __pte_offset_map+0x1ae/0x240
[  156.683514][ T5620]  ? pte_offset_map_rw_nolock+0xea/0x160
[  156.683526][ T5620]  handle_mm_fault+0x124c/0x3080
[  156.683544][ T5620]  ? handle_mm_fault+0xec/0x3080
[  156.683606][ T5620]  ? __pfx_handle_mm_fault+0x10/0x10
[  156.683624][ T5620]  ? lock_vma_under_rcu+0x45a/0x500
[  156.683650][ T5620]  do_user_addr_fault+0xa4d/0x1340
[  156.683666][ T5620]  ? trace_page_fault_user+0x84/0x1e0
[  156.683676][ T5620]  exc_page_fault+0x6a/0xc0
[  156.683691][ T5620]  asm_exc_page_fault+0x26/0x30
[  156.683700][ T5620] RIP: 0033:0x7f291346ae77
[  156.683711][ T5620] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1 39 7c 24
[  156.683718][ T5620] RSP: 002b:00007ffcc15d7bb0 EFLAGS: 00010206
[  156.683728][ T5620] RAX: 0000001b33724000 RBX: 00000000000003e1 RCX: 0000000000025d78
[  156.683736][ T5620] RDX: 00000000038844bc RSI: 00007ffcc15d7c40 RDI: 0000000000000000
[  156.683744][ T5620] RBP: 00007ffcc15d7bec R08: 000000000d7982b4 R09: 3fffffffffffffff
[  156.683753][ T5620] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  156.683760][ T5620] R13: 00000000000927c0 R14: 0000000000025b79 R15: 00007ffcc15d7c40
[  156.683779][ T5620]  </TASK>
[  156.683785][ T5620] memory: usage 307200kB, limit 307200kB, failcnt 3325
[  156.828996][ T8945] sctp: [Deprecated]: syz.1.1308 (pid 8945) Use of int in max_burst socket option deprecated.
[  156.828996][ T8945] Use struct sctp_assoc_value instead
[  156.963982][ T5620] memory+swap: usage 307284kB, limit 9007199254740988kB, failcnt 0
[  156.989931][ T5620] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0
[  157.019043][ T5620] Memory cgroup stats for /syz2:
[  157.019842][ T5620] cache 0
[  157.046503][ T5620] rss 0
[  157.059926][ T5620] rss_huge 0
[  157.061346][ T5620] shmem 0
[  157.078450][ T5620] mapped_file 0
[  157.079811][ T5620] dirty 0
[  157.096736][ T5620] writeback 0
[  157.107798][ T5620] workingset_refault_anon 1
[  157.118554][ T5620] workingset_refault_file 5
[  157.129018][ T5620] swap 86016
[  157.134411][ T5620] swapcached 135168
[  157.140007][ T5620] pgpgin 36853
[  157.144675][ T5620] pgpgout 36846
[  157.149472][ T5620] pgfault 77013
[  157.154139][ T5620] pgmajfault 4
[  157.159639][ T5620] inactive_anon 16384
[  157.164196][ T5620] active_anon 12288
[  157.171601][ T5620] inactive_file 0
[  157.176349][ T5620] active_file 0
[  157.181316][ T5620] unevictable 0
[  157.186108][ T5620] hierarchical_memory_limit 314572800
[  157.193130][ T5620] hierarchical_memsw_limit 9223372036854771712
[  157.200298][ T5620] total_cache 0
[  157.204137][ T5620] total_rss 0
[  157.208848][ T5620] total_rss_huge 0
[  157.212078][ T5620] total_shmem 0
[  157.215208][ T5620] total_mapped_file 0
[  157.219301][ T5620] total_dirty 0
[  157.222035][ T5620] total_writeback 0
[  157.226016][ T5620] total_workingset_refault_anon 1
[  157.229014][ T5620] total_workingset_refault_file 5
[  157.232963][ T5620] total_swap 86016
[  157.234262][ T5620] total_swapcached 135168
[  157.240846][ T5620] total_pgpgin 36853
[  157.243622][ T5620] total_pgpgout 36846
[  157.250081][ T5620] total_pgfault 77013
[  157.256955][ T5620] total_pgmajfault 4
[  157.258296][ T5620] total_inactive_anon 16384
[  157.268337][ T5620] total_active_anon 12288
[  157.269731][ T5620] total_inactive_file 0
[  157.280573][ T5620] total_active_file 0
[  157.281867][ T5620] total_unevictable 0
[  157.292028][ T5620] anon_cost 0
[  157.293208][ T5620] file_cost 0
[  157.300398][ T5620] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor,pid=5620,uid=0
[  157.310984][ T5620] Memory cgroup out of memory: Killed process 5620 (syz-executor) total-vm:98188kB, anon-rss:1280kB, file-rss:21664kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:0
[  157.368740][ T8913] syz.2.1296 (8913) used greatest stack depth: 20440 bytes left
[  157.494752][ T8953] netlink: 'syz.1.1311': attribute type 13 has an invalid length.
[  157.507397][ T8953] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1311'.
[  158.227986][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  158.241059][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  158.251047][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  158.268099][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  158.277289][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  158.764176][ T8971] lo speed is unknown, defaulting to 1000
[  158.799884][ T8971] wlan0 speed is unknown, defaulting to 1000
[  159.147668][ T8971] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.154588][ T8971] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.159500][ T8971] bridge_slave_0: entered allmulticast mode
[  159.165027][ T8971] bridge_slave_0: entered promiscuous mode
[  159.187280][ T8971] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.197867][ T8971] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.209209][ T8971] bridge_slave_1: entered allmulticast mode
[  159.222193][ T8971] bridge_slave_1: entered promiscuous mode
[  159.305150][ T8971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  159.361128][ T8971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  159.453150][ T8971] team0: Port device team_slave_0 added
[  159.467705][ T8971] team0: Port device team_slave_1 added
[  159.504633][ T8971] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.509943][ T8971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  159.526495][ T8971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.532574][ T8971] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.538435][ T8971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  159.557944][ T8971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.650043][ T8971] hsr_slave_0: entered promiscuous mode
[  159.655742][ T8971] hsr_slave_1: entered promiscuous mode
[  159.661925][ T8971] debugfs: 'hsr0' already exists in 'hsr'
[  159.666010][ T8971] Cannot create hsr debugfs directory
[  160.093451][ T8971] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  160.111781][ T8971] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  160.118422][ T8971] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  160.145386][ T8971] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  160.156956][ T8971] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  160.173804][ T8971] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  160.181470][ T8971] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  160.199129][ T8971] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  160.358197][   T53] Bluetooth: hci2: command tx timeout
[  160.392292][ T8971] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.423846][ T8971] 8021q: adding VLAN 0 to HW filter on device team0
[  160.448919][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.451359][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.499927][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.502294][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.793556][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'.
[  161.031010][ T8971] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.098937][ T8971] veth0_vlan: entered promiscuous mode
[  161.114673][ T8971] veth1_vlan: entered promiscuous mode
[  161.170798][ T8971] veth0_macvtap: entered promiscuous mode
[  161.201613][ T8971] veth1_macvtap: entered promiscuous mode
[  161.220506][ T8971] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.229330][ T8971] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.239908][ T5668] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.254330][ T5668] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.270948][ T5668] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.284808][ T5668] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.393586][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.407376][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.446651][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.452194][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.437380][   T53] Bluetooth: hci2: command tx timeout
[  163.402716][ T9162] xt_hashlimit: size too large, truncated to 1048576
[  163.433594][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1390'.
[  163.785362][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1393'.
[  164.011555][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1400'.
[  164.021731][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1400'.
[  164.262393][ T9197] tipc: Started in network mode
[  164.271359][ T9197] tipc: Node identity 8a921492da4, cluster identity 4711
[  164.281140][ T9197] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.294017][ T9193] syzkaller0: entered promiscuous mode
[  164.309356][ T9193] syzkaller0: entered allmulticast mode
[  164.356719][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  164.393834][ T9193] tipc: Resetting bearer <eth:syzkaller0>
[  164.404995][ T9192] tipc: Resetting bearer <eth:syzkaller0>
[  164.436847][ T9192] tipc: Disabling bearer <eth:syzkaller0>
[  164.532416][   T53] Bluetooth: hci2: command tx timeout
[  164.939554][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'.
[  164.985697][ T9219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1414'.
[  165.005256][ T9216] macvtap1: entered promiscuous mode
[  165.010729][ T9216] erspan0: entered promiscuous mode
[  165.018503][ T9216] macvtap1: entered allmulticast mode
[  165.026439][ T9216] erspan0: entered allmulticast mode
[  166.339589][ T9273] geneve2: entered promiscuous mode
[  166.341437][ T9273] geneve2: entered allmulticast mode
[  166.607115][   T53] Bluetooth: hci2: command tx timeout
[  168.091570][ T9221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  168.298009][ T9310] openvswitch: netlink: IP tunnel dst address not specified
[  169.064387][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1469'.
[  169.383390][ T9362] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1474'.
[  169.703512][ T9377] xt_hashlimit: max too large, truncated to 1048576
[  169.986825][ T9386] syzkaller0: entered promiscuous mode
[  169.989966][ T9386] syzkaller0: entered allmulticast mode
[  170.162108][ T9390] netlink: 'syz.3.1483': attribute type 1 has an invalid length.
[  170.169354][ T9390] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1483'.
[  170.190879][ T9390] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1483'.
[  174.303107][ T9531] netlink: 'syz.1.1542': attribute type 14 has an invalid length.
[  174.817515][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.821050][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.826700][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.831735][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.098977][ T9560] netlink: 'syz.0.1557': attribute type 2 has an invalid length.
[  175.118910][ T9560] : entered promiscuous mode
[  175.812119][ T9579] netlink: 'syz.0.1566': attribute type 1 has an invalid length.
[  175.903408][ T9579] bond3: (slave gretap1): making interface the new active one
[  175.909389][ T9579] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  175.969614][ T9585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1568'.
[  176.106820][   T55] block nbd1: Receive control failed (result -1)
[  177.243755][ T9628] syzkaller0: entered promiscuous mode
[  177.245754][ T9628] syzkaller0: entered allmulticast mode
[  177.582989][ T9644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1589'.
[  177.919359][ T9660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.922966][ T9660] syzkaller0: entered promiscuous mode
[  177.925015][ T9660] syzkaller0: entered allmulticast mode
[  177.942181][ T9660] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1597'.
[  177.950640][ T9660] tipc: Resetting bearer <eth:syzkaller0>
[  177.957062][ T9659] tipc: Resetting bearer <eth:syzkaller0>
[  177.977425][ T9659] tipc: Disabling bearer <eth:syzkaller0>
[  179.177920][ T9702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1614'.
[  179.331513][ T9705] netlink: 'syz.0.1615': attribute type 30 has an invalid length.
[  180.612609][ T9736] netlink: 'syz.1.1630': attribute type 1 has an invalid length.
[  180.710945][ T9736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1630'.
[  180.727722][ T9736] 8021q: adding VLAN 0 to HW filter on device bond2
[  180.828194][ T9736] 8021q: adding VLAN 0 to HW filter on device bond2
[  180.849703][ T9736] bond2: (slave geneve2): making interface the new active one
[  180.853924][ T9736] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  180.866119][ T5668] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  180.876153][ T5668] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  180.880915][ T5668] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  180.884147][ T5668] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  181.337447][ T9750] syzkaller0: entered promiscuous mode
[  181.339738][ T9750] syzkaller0: entered allmulticast mode
[  181.775390][ T9758] netlink: 'syz.0.1638': attribute type 27 has an invalid length.
[  181.890447][ T9758] vlan1: left promiscuous mode
[  181.907484][ T9758] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  181.915715][ T9758] geneve2: left promiscuous mode
[  181.995038][ T9758] ip6tnl3: left allmulticast mode
[  182.039518][ T6229] lo speed is unknown, defaulting to 1000
[  182.134319][ T9762] 8021q: adding VLAN 0 to HW filter on device .`
[  182.148641][ T9762] 8021q: adding VLAN 0 to HW filter on device team0
[  182.166555][ T9762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.260002][ T9762] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.269557][ T9762] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.301043][ T9762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  182.331620][ T9762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  182.366789][ T9762] veth1_vlan: left promiscuous mode
[  182.373847][ T9762] veth0_vlan: left promiscuous mode
[  182.383614][ T9762] veth0_vlan: entered promiscuous mode
[  182.397712][ T9762] veth1_vlan: entered promiscuous mode
[  182.429026][ T9762] veth1_macvtap: left promiscuous mode
[  182.431696][ T9762] veth0_macvtap: left promiscuous mode
[  182.434394][ T9762] veth0_macvtap: entered promiscuous mode
[  182.438534][ T9762] veth1_macvtap: entered promiscuous mode
[  182.447208][ T9762] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  182.452893][ T9762] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  182.469262][ T9762] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  182.472547][ T9762] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  182.478575][ T9762] 8021q: adding VLAN 0 to HW filter on device bond1
[  182.530058][ T9762] 8021q: adding VLAN 0 to HW filter on device bond2
[  182.569169][ T9762] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.588056][ T9762] 8021q: adding VLAN 0 to HW filter on device bond3
[  182.594036][ T5690] lo speed is unknown, defaulting to 1000
[  182.601957][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.604284][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.608554][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.610793][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.659237][   T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  182.664260][   T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  182.687687][ T6235] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  183.026707][ T5690] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  183.302615][ T9789] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1655'.
[  183.305458][ T9789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1655'.
[  183.310318][ T9789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1655'.
[  183.408184][ T5690] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  186.212483][ T9890] syzkaller1: entered promiscuous mode
[  186.214873][ T9890] syzkaller1: entered allmulticast mode
[  186.757151][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  186.788418][ T9905] syzkaller0: entered promiscuous mode
[  186.790168][ T9905] syzkaller0: entered allmulticast mode
[  186.796043][ T9905] 0: reclassify loop, rule prio 0, protocol 800
[  187.042281][ T9918] syzkaller0: entered promiscuous mode
[  187.044354][ T9918] syzkaller0: entered allmulticast mode
[  187.216967][ T9924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.224749][ T9924] syzkaller0: entered promiscuous mode
[  187.231757][ T9924] syzkaller0: entered allmulticast mode
[  187.245536][ T9924] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  187.280883][ T9924] tipc: Resetting bearer <eth:syzkaller0>
[  187.287753][ T9923] tipc: Resetting bearer <eth:syzkaller0>
[  187.307928][ T9923] tipc: Disabling bearer <eth:syzkaller0>
[  189.128914][T10022] : renamed from bridge_slave_0 (while UP)
[  189.188904][T10026] netlink: 'syz.1.1742': attribute type 1 has an invalid length.
[  189.227388][T10029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1743'.
[  190.163976][T10064] bridge3: entered promiscuous mode
[  190.166141][T10064] bridge3: entered allmulticast mode
[  190.172915][T10064] team0: Port device bridge3 added
[  190.177861][T10064] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1759'.
[  190.185877][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1759'.
[  191.149606][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'.
[  191.153932][T10099] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1773'.
[  191.415560][   T53] Bluetooth: hci1: command 0x0406 tx timeout
[  191.507825][T10116] netlink: 'syz.0.1780': attribute type 6 has an invalid length.
[  193.964676][T10186] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  195.079142][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  195.305024][T10210] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  195.313244][T10210] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  195.735186][    C1] bridge0: received packet on 1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  196.618414][T10243] syzkaller0: entered promiscuous mode
[  196.621851][T10243] syzkaller0: entered allmulticast mode
[  196.713029][T10248] A link change request failed with some changes committed already. Interface 1 may have been left with an inconsistent configuration, please check.
[  196.724391][T10243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.738957][    C0] bridge0: received packet on 1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  196.749480][T10238] tipc: Resetting bearer <eth:syzkaller0>
[  196.829786][T10238] tipc: Disabling bearer <eth:syzkaller0>
[  196.916822][    C0] bridge0: received packet on 1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  197.002585][T10256] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  197.006620][T10256] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  198.232359][T10286] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1852'.
[  199.558250][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  199.560921][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[  200.430778][T10344] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1875'.
[  200.444179][T10344] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1875'.
[  200.597371][T10350] 8021q: adding VLAN 0 to HW filter on device team0
[  201.116022][T10336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  201.187260][T10350] veth1_vlan: left promiscuous mode
[  201.193104][T10350] veth0_vlan: left promiscuous mode
[  201.217613][T10350] veth0_vlan: entered promiscuous mode
[  201.233791][T10350] veth1_vlan: entered promiscuous mode
[  201.275474][T10350] veth1_macvtap: left promiscuous mode
[  201.292795][T10350] veth0_macvtap: left promiscuous mode
[  201.298997][T10350] veth0_macvtap: entered promiscuous mode
[  201.302496][T10350] veth1_macvtap: entered promiscuous mode
[  201.309291][T10350] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  201.312599][T10350] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  201.315891][T10350] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  201.320626][T10350] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  201.329438][T10350] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.366620][ T6418] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.369519][ T6418] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.389828][ T6418] bridge0: port 3(vlan2) entered blocking state
[  201.392487][ T6418] bridge0: port 3(vlan2) entered forwarding state
[  201.400846][ T6418] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.403817][ T6418] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.473958][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  201.481488][   T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  201.492768][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  201.498822][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  201.505696][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  201.510788][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  201.545222][ T6235] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  201.610088][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  201.614368][   T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  201.620095][   T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  201.815608][T10363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1887'.
[  201.830763][T10364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1882'.
[  202.087742][   T10] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  202.681357][   T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  202.692997][   T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  202.817683][ T6227] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  203.435808][T10383] syzkaller0: entered promiscuous mode
[  203.475949][T10383] syzkaller0: entered allmulticast mode
[  205.031195][T10445] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1920'.
[  205.307762][T10459] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1923'.
[  205.832481][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1936'.
[  206.258298][T10495] lo speed is unknown, defaulting to 1000
[  206.289888][T10495] wlan0 speed is unknown, defaulting to 1000
[  206.681889][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  210.202278][T10639] netlink: 'syz.3.2005': attribute type 1 has an invalid length.
[  210.216041][T10639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2005'.
[  210.441395][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2011'.
[  210.442046][    C1] bridge0: received packet on 1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  210.521698][   T54] block nbd2: Wrong magic (0x3e000000)
[  210.896641][T10683] veth1_to_bond: entered promiscuous mode
[  210.900408][T10683] veth1_to_bond: left promiscuous mode
[  211.069696][T10692] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2030'.
[  212.625459][T10773] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2053'.
[  213.099897][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2064'.
[  213.102725][T10796] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2064'.
[  213.105501][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2064'.
[  213.279181][T10805] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2069'.
[  213.797838][ T5618] Bluetooth: hci2: command tx timeout
[  214.184826][ T5612] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  214.221032][ T5612] CPU: 0 UID: 0 PID: 5612 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  214.221048][ T5612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  214.221053][ T5612] Call Trace:
[  214.221059][ T5612]  <TASK>
[  214.221064][ T5612]  dump_stack_lvl+0xe8/0x150
[  214.221082][ T5612]  dump_header+0xd3/0x4b0
[  214.221101][ T5612]  oom_kill_process+0x3ab/0x970
[  214.221117][ T5612]  out_of_memory+0x1064/0x1480
[  214.221128][ T5612]  ? try_charge_memcg+0xbca/0x1590
[  214.221157][ T5612]  ? __pfx_out_of_memory+0x10/0x10
[  214.221168][ T5612]  ? do_raw_spin_unlock+0x4d/0x210
[  214.221186][ T5612]  try_charge_memcg+0xc74/0x1590
[  214.221202][ T5612]  ? __pfx_try_charge_memcg+0x10/0x10
[  214.221210][ T5612]  ? percpu_ref_tryget+0x15/0x180
[  214.221228][ T5612]  ? charge_memcg+0x20/0x2b0
[  214.221239][ T5612]  charge_memcg+0x19c/0x2b0
[  214.221248][ T5612]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[  214.221256][ T5612]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[  214.221266][ T5612]  swap_cache_alloc_folio+0x4de/0x990
[  214.221285][ T5612]  swap_cache_read_folio+0x44/0x120
[  214.221299][ T5612]  swap_cluster_readahead+0x3a0/0x640
[  214.221314][ T5612]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  214.221334][ T5612]  ? rcu_is_watching+0x15/0xb0
[  214.221351][ T5612]  ? get_vma_policy+0x27b/0x3c0
[  214.221370][ T5612]  swapin_readahead+0x19a/0xc10
[  214.221384][ T5612]  ? swap_table_get+0x1e/0x260
[  214.221395][ T5612]  ? swap_table_get+0x1e/0x260
[  214.221406][ T5612]  ? __pfx_swapin_readahead+0x10/0x10
[  214.221419][ T5612]  ? swap_table_get+0x1e/0x260
[  214.221429][ T5612]  ? swap_table_get+0x1e/0x260
[  214.221438][ T5612]  ? swap_table_get+0x1e/0x260
[  214.221449][ T5612]  ? swap_table_get+0x216/0x260
[  214.221460][ T5612]  ? swap_cache_get_folio+0x2e7/0x2f0
[  214.221474][ T5612]  do_swap_page+0x455/0x5060
[  214.221491][ T5612]  ? __pte_offset_map+0x29/0x240
[  214.221507][ T5612]  ? __lock_acquire+0x683/0x2cf0
[  214.221515][ T5612]  ? do_swap_page+0x124/0x5060
[  214.221525][ T5612]  ? __pfx_do_swap_page+0x10/0x10
[  214.221535][ T5612]  ? __pte_offset_map+0x1ae/0x240
[  214.221548][ T5612]  ? pte_offset_map_rw_nolock+0xea/0x160
[  214.221560][ T5612]  handle_mm_fault+0x124c/0x3080
[  214.221578][ T5612]  ? handle_mm_fault+0xec/0x3080
[  214.221598][ T5612]  ? __pfx_handle_mm_fault+0x10/0x10
[  214.221608][ T5612]  ? lock_vma_under_rcu+0x45a/0x500
[  214.221633][ T5612]  do_user_addr_fault+0xa4d/0x1340
[  214.221649][ T5612]  ? trace_page_fault_user+0x84/0x1e0
[  214.221660][ T5612]  exc_page_fault+0x6a/0xc0
[  214.221673][ T5612]  asm_exc_page_fault+0x26/0x30
[  214.221682][ T5612] RIP: 0033:0x7fd92975d68e
[  214.221692][ T5612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  214.221699][ T5612] RSP: 002b:00007ffc8dfef268 EFLAGS: 00010246
[  214.221708][ T5612] RAX: 0000000000000000 RBX: 000055555b77c500 RCX: 00007fd92975d68e
[  214.221714][ T5612] RDX: 00007ffc8dfef2c0 RSI: 0000000000000000 RDI: 0000000000000000
[  214.221719][ T5612] RBP: 00007ffc8dfef32c R08: 0000000000000000 R09: 0000000000000000
[  214.221724][ T5612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  214.221729][ T5612] R13: 00000000000927c0 R14: 00000000000340b1 R15: 00007ffc8dfef380
[  214.221742][ T5612]  </TASK>
[  214.225613][ T5612] memory: usage 307200kB, limit 307200kB, failcnt 2221
[  214.395042][ T5612] memory+swap: usage 307308kB, limit 9007199254740988kB, failcnt 0
[  214.402257][ T5612] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[  214.417811][ T5612] Memory cgroup stats for /syz1:
[  214.417933][ T5612] cache 0
[  214.423595][ T5612] rss 0
[  214.424461][ T5612] rss_huge 0
[  214.428792][ T5612] shmem 0
[  214.431924][ T5612] mapped_file 0
[  214.441078][ T5612] dirty 0
[  214.442081][ T5612] writeback 0
[  214.450648][ T5612] workingset_refault_anon 0
[  214.455588][ T5612] workingset_refault_file 0
[  214.460034][ T5612] swap 110592
[  214.463573][ T5612] swapcached 118784
[  214.469424][ T5612] pgpgin 60661
[  214.470597][ T5612] pgpgout 60660
[  214.476522][ T5612] pgfault 111495
[  214.479224][ T5612] pgmajfault 1
[  214.483507][ T5612] inactive_anon 0
[  214.484619][ T5612] active_anon 0
[  214.490645][ T5612] inactive_file 0
[  214.494330][ T5612] active_file 0
[  214.507345][ T5612] unevictable 0
[  214.512877][ T5612] hierarchical_memory_limit 314572800
[  214.519167][ T5612] hierarchical_memsw_limit 9223372036854771712
[  214.526348][ T5612] total_cache 0
[  214.527452][ T5612] total_rss 0
[  214.540963][ T5612] total_rss_huge 0
[  214.542300][ T5612] total_shmem 0
[  214.548697][ T5612] total_mapped_file 0
[  214.553453][ T5612] total_dirty 0
[  214.562654][ T5618] Bluetooth: hci2: link tx timeout
[  214.563586][ T5612] total_writeback 0
[  214.565484][ T5618] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  214.565960][ T5612] total_workingset_refault_anon 0
[  214.572112][ T5612] total_workingset_refault_file 0
[  214.574287][ T5612] total_swap 110592
[  214.576118][ T5612] total_swapcached 118784
[  214.583679][ T5612] total_pgpgin 60663
[  214.593738][ T5612] total_pgpgout 60662
[  214.595175][ T5612] total_pgfault 111504
[  214.609111][ T5612] total_pgmajfault 1
[  214.613476][ T5612] total_inactive_anon 0
[  214.614875][ T5612] total_active_anon 0
[  214.624485][ T5612] total_inactive_file 0
[  214.625978][ T5612] total_active_file 0
[  214.634800][ T5612] total_unevictable 0
[  214.642214][ T5612] anon_cost 0
[  214.643422][ T5612] file_cost 0
[  214.651782][ T5612] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2065,pid=10803,uid=0
[  214.674423][ T5612] Memory cgroup out of memory: Killed process 10803 (syz.1.2065) total-vm:102160kB, anon-rss:1244kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  214.705516][T10806] syz.1.2065 (10806) used greatest stack depth: 19528 bytes left
[  214.917889][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  215.383130][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2089'.
[  215.393774][T10858] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.601226][   T53] Bluetooth: hci2: command 0x0406 tx timeout
[  217.569844][T10956] netlink: 'syz.3.2130': attribute type 3 has an invalid length.
[  217.910209][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2136'.
[  218.179458][T10979] geneve2: left promiscuous mode
[  218.181238][T10979] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  218.613512][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2149'.
[  218.621492][T11000] xt_TCPMSS: Only works on TCP SYN packets
[  218.741176][T11000] bridge_slave_1: left allmulticast mode
[  218.743643][T11000] bridge_slave_1: left promiscuous mode
[  218.745918][T11000] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.753992][T11000] bridge_slave_0: left allmulticast mode
[  218.755983][T11000] bridge_slave_0: left promiscuous mode
[  218.759158][T11000] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.379582][T11019] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2157'.
[  220.635948][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2185'.
[  220.846305][T11082] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2187'.
[  222.149193][T11140] syzkaller0: entered promiscuous mode
[  222.151277][T11140] syzkaller0: entered allmulticast mode
[  224.194143][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2241'.
[  224.201057][T11231] netlink: 'syz.1.2241': attribute type 10 has an invalid length.
[  224.207446][T11231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2241'.
[  224.944128][T11274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2261'.
[  225.077998][T11280] syzkaller0: entered promiscuous mode
[  225.081351][T11280] syzkaller0: entered allmulticast mode
[  225.601054][T11293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2270'.
[  225.830250][T11300] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2272'.
[  225.904620][T11303] netlink: 'syz.1.2276': attribute type 1 has an invalid length.
[  225.916414][T11303] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2276'.
[  225.924242][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'.
[  226.486693][T11327] block nbd3: server does not support multiple connections per device.
[  226.493613][T11327] block nbd3: shutting down sockets
[  227.414821][T11360] bridge_slave_0: entered promiscuous mode
[  227.472647][T11362] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  227.742276][T11378] netlink: 'syz.3.2309': attribute type 4 has an invalid length.
[  227.753970][T11378] netlink: 'syz.3.2309': attribute type 4 has an invalid length.
[  228.089865][T11396] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2315'.
[  228.427145][T11410] team0: No ports can be present during mode change
[  228.464351][T11414] veth0: entered promiscuous mode
[  228.467058][T11413] veth0: left promiscuous mode
[  228.532923][T11417] sctp: [Deprecated]: syz.0.2324 (pid 11417) Use of int in max_burst socket option.
[  228.532923][T11417] Use struct sctp_assoc_value instead
[  229.323055][T11441] IPv6: addrconf: prefix option has invalid lifetime
[  229.834181][T11448] sctp: [Deprecated]: syz.0.2337 (pid 11448) Use of int in max_burst socket option.
[  229.834181][T11448] Use struct sctp_assoc_value instead
[  229.935968][T11451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  230.040644][T11458] pimreg: entered allmulticast mode
[  230.281737][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  230.553423][T11482] netlink: 'syz.1.2353': attribute type 3 has an invalid length.
[  230.882746][T11488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2356'.
[  231.014026][T11491] netlink: 'syz.0.2357': attribute type 1 has an invalid length.
[  231.093230][T11491] bond4: entered promiscuous mode
[  231.102345][T11491] 8021q: adding VLAN 0 to HW filter on device bond4
[  231.239954][T11491] bond4: (slave veth5): making interface the new active one
[  231.248951][T11491] veth5: entered promiscuous mode
[  231.272622][T11491] bond4: (slave veth5): Enslaving as an active interface with an up link
[  231.629091][T11516] syzkaller0: entered promiscuous mode
[  231.635912][T11516] syzkaller0: entered allmulticast mode
[  232.163493][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2372'.
[  232.746450][T11542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2374'.
[  232.765901][T11542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2374'.
[  233.532826][T11563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2385'.
[  234.070394][T11574] netlink: 'syz.0.2389': attribute type 39 has an invalid length.
[  235.173452][T11605] netlink: 'syz.0.2403': attribute type 2 has an invalid length.
[  236.149185][T11647] bond5 (unregistering): Released all slaves
[  236.299193][T11652] netlink: 'syz.1.2418': attribute type 26 has an invalid length.
[  236.718473][T11670] netlink: 'syz.3.2426': attribute type 1 has an invalid length.
[  236.739729][T11668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2425'.
[  236.744272][T11668] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2425'.
[  236.756671][T11668] bridge0: port 3(vlan2) entered disabled state
[  236.760726][T11668] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.770107][T11668] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.793001][T11668] bridge0: entered allmulticast mode
[  236.820905][T11668] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2425'.
[  237.985540][T11714] syzkaller0: entered promiscuous mode
[  237.989817][T11714] syzkaller0: entered allmulticast mode
[  238.498543][T11737] openvswitch: netlink: Missing valid actions attribute.
[  238.500859][T11737] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.572573][T11731] nbd0: detected capacity change from 0 to 63
[  238.737753][    C0] bridge0: received packet on 1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  238.843070][T11738] bond4: left promiscuous mode
[  238.844746][T11738] veth5: left promiscuous mode
[  238.848032][ T6235] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  238.856565][ T6418] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.858918][ T6418] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.903769][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  239.013545][ T5612] cgroup: fork rejected by pids controller in /syz1
[  239.246585][   T54] block nbd0: Receive control failed (result -104)
[  239.256727][   T10] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  239.451967][T11766] geneve1: entered promiscuous mode
[  239.773738][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  239.779520][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  239.782356][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  239.787411][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  239.791194][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  239.797172][    C0] bridge0: received packet on 1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  239.918439][T11779] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  240.803603][T11812] syzkaller0: entered promiscuous mode
[  240.805909][T11812] syzkaller0: entered allmulticast mode
[  241.158496][    C1] bridge0: received packet on 1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  241.880224][ T5618] Bluetooth: hci0: command tx timeout
[  242.350567][T11773] lo speed is unknown, defaulting to 1000
[  242.354266][T11773] wlan0 speed is unknown, defaulting to 1000
[  242.597133][T11773] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.600521][T11773] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.603864][T11773] bridge_slave_0: entered allmulticast mode
[  242.608279][T11773] bridge_slave_0: entered promiscuous mode
[  242.614189][T11773] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.618481][T11773] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.621548][T11773] bridge_slave_1: entered allmulticast mode
[  242.624307][T11773] bridge_slave_1: entered promiscuous mode
[  242.655065][T11773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  242.661439][T11773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.683294][T11773] team0: Port device team_slave_0 added
[  242.689888][T11773] team0: Port device team_slave_1 added
[  242.730329][T11773] batman_adv: batadv0: Adding interface: batadv_slave_0
[  242.734744][T11773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  242.764872][T11773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  242.777643][T11773] batman_adv: batadv0: Adding interface: batadv_slave_1
[  242.780663][T11773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  242.790384][T11773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.821409][T11773] hsr_slave_0: entered promiscuous mode
[  242.824282][T11773] hsr_slave_1: entered promiscuous mode
[  242.830671][T11773] debugfs: 'hsr0' already exists in 'hsr'
[  242.833897][T11773] Cannot create hsr debugfs directory
[  242.836335][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  243.260441][T11773] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  243.264704][T11773] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  243.268299][T11773] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  243.358061][T11773] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  243.361723][T11773] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  243.364951][T11773] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  243.468757][T11773] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  243.472249][T11773] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  243.475873][T11773] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  243.568829][T11773] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  243.572125][T11773] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  243.575266][T11773] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  243.807870][T11773] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  243.813866][T11773] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  243.817122][T11773] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  243.822270][T11773] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  243.825221][T11773] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  243.833143][T11773] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  243.839442][T11773] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  243.851730][T11773] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  243.945917][T11862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2502'.
[  243.958382][ T5618] Bluetooth: hci0: command tx timeout
[  244.026156][T11862] 8021q: adding VLAN 0 to HW filter on device bond5
[  244.041306][T11866] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  244.366098][T11773] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.404260][T11773] 8021q: adding VLAN 0 to HW filter on device team0
[  244.411632][ T6422] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.413872][ T6422] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.437073][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.440123][ T6422] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.942248][T11901] netlink: 'syz.3.2512': attribute type 1 has an invalid length.
[  244.996564][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  245.018019][T11901] 8021q: adding VLAN 0 to HW filter on device bond1
[  245.044216][T11905] bond1: (slave geneve3): making interface the new active one
[  245.050762][T11905] bond1: (slave geneve3): Enslaving as an active interface with an up link
[  245.065371][T11773] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.210356][T11773] veth0_vlan: entered promiscuous mode
[  245.222082][T11773] veth1_vlan: entered promiscuous mode
[  245.260215][T11773] veth0_macvtap: entered promiscuous mode
[  245.273030][T11773] veth1_macvtap: entered promiscuous mode
[  245.308980][T11773] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.335838][T11773] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.352328][ T5668] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.356761][ T5668] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.365902][ T5668] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.380477][ T5668] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.539798][ T6418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.549785][ T6418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.652658][T11918] netlink: 'syz.0.2517': attribute type 2 has an invalid length.
[  245.685432][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.691986][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.725917][T11922] netlink: 'syz.0.2519': attribute type 8 has an invalid length.
[  245.790911][T11924] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  245.800811][T11924] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  245.865699][T11926] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  245.928173][T11928] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  245.944113][T11928] x_tables: unsorted entry at hook 2
[  245.959414][T11928] xt_hashlimit: size too large, truncated to 1048576
[  246.036579][ T5618] Bluetooth: hci0: command tx timeout
[  246.482346][T11958] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.486079][T11958] syzkaller0: entered promiscuous mode
[  246.489961][T11958] syzkaller0: entered allmulticast mode
[  246.502848][T11958] tipc: Resetting bearer <eth:syzkaller0>
[  246.527546][T11957] tipc: Resetting bearer <eth:syzkaller0>
[  246.567415][T11957] tipc: Disabling bearer <eth:syzkaller0>
[  246.632763][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2536'.
[  247.312395][T11980] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.315188][T11980] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.400196][T11980] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.409156][T11980] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.615036][ T5824] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.622582][ T5824] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.625773][ T5824] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.629863][ T5824] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  248.116464][ T5618] Bluetooth: hci0: command tx timeout
[  248.550573][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2568'.
[  249.324394][T12068] ip6tnl4: entered allmulticast mode
[  250.064444][T12091] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2595'.
[  250.205914][T12097] syzkaller0: entered promiscuous mode
[  250.208426][T12097] syzkaller0: entered allmulticast mode
[  250.243875][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2599'.
[  250.247941][T12099] netlink: 580 bytes leftover after parsing attributes in process `syz.3.2599'.
[  250.398415][T12104] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2601'.
[  250.741844][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2613'.
[  250.756473][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  250.762535][T12129] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  250.773743][T12129] bond1 (unregistering): Released all slaves
[  251.596521][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2628'.
[  252.827234][T12217] openvswitch: netlink: IP tunnel dst address not specified
[  252.852089][T12212] lo speed is unknown, defaulting to 1000
[  252.880457][T12212] wlan0 speed is unknown, defaulting to 1000
[  253.478554][T12227] batman_adv: batadv0: Adding interface: gretap1
[  253.485721][T12227] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  253.501252][T12227] batman_adv: batadv0: Interface activated: gretap1
[  255.034163][T12310] IPv6: addrconf: prefix option has invalid lifetime
[  255.130827][T12317] lo speed is unknown, defaulting to 1000
[  255.134690][T12317] wlan0 speed is unknown, defaulting to 1000
[  255.789721][T12344] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.931848][T12348] syzkaller1: entered promiscuous mode
[  255.933819][T12348] syzkaller1: entered allmulticast mode
[  256.025687][T12350] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  256.275910][T12354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2710'.
[  256.872344][T12371] xt_CT: You must specify a L4 protocol and not use inversions on it
[  256.890693][T12371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2715'.
[  257.023788][T12381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2723'.
[  257.095154][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2723'.
[  257.162411][T12388] syzkaller0: entered promiscuous mode
[  257.168394][T12388] syzkaller0: entered allmulticast mode
[  257.292779][T12394] netlink: 'syz.3.2728': attribute type 4 has an invalid length.
[  257.298856][T12394] netlink: 'syz.3.2728': attribute type 4 has an invalid length.
[  257.648960][T12408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2734'.
[  257.790120][T12418] Bluetooth: MGMT ver 1.23
[  257.828232][T12420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2741'.
[  257.832313][T12420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2741'.
[  257.981299][T12430] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2744'.
[  258.050866][T12436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2748'.
[  258.064948][ T6237] hid (null): unknown global tag 0xb4
[  258.069714][T12436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2748'.
[  258.075615][ T6237] hid (null): unknown global tag 0xd
[  258.094242][ T6237] hid-generic 0005:0001:0040.0002: unexpected long global item
[  258.098393][ T6237] hid-generic 0005:0001:0040.0002: probe with driver hid-generic failed with error -22
[  258.604551][T12464] syzkaller0: entered promiscuous mode
[  258.609586][T12464] syzkaller0: entered allmulticast mode
[  258.977650][T12474] netlink: zone id is out of range
[  258.979876][T12474] netlink: zone id is out of range
[  258.982030][T12474] netlink: zone id is out of range
[  258.984130][T12474] netlink: zone id is out of range
[  258.986024][T12474] netlink: zone id is out of range
[  258.988069][T12474] netlink: zone id is out of range
[  258.989729][T12474] netlink: zone id is out of range
[  258.991467][T12474] netlink: zone id is out of range
[  258.993225][T12474] netlink: zone id is out of range
[  258.995265][T12474] netlink: zone id is out of range
[  260.642360][T12564] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.648233][T12564] 8021q: adding VLAN 0 to HW filter on device team0
[  260.661471][T12564] 8021q: adding VLAN 0 to HW filter on device batadv0
[  260.769533][T12564] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.781891][T12564] batman_adv: batadv0: Interface activated: batadv_slave_1
[  260.819042][T12564] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  260.832901][T12564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  260.851615][T12564] veth1_vlan: left promiscuous mode
[  260.857097][T12564] veth0_vlan: left promiscuous mode
[  260.864440][T12564] veth0_vlan: entered promiscuous mode
[  260.873348][T12564] veth1_vlan: entered promiscuous mode
[  260.888777][T12564] veth1_macvtap: left promiscuous mode
[  260.894426][T12564] veth0_macvtap: left promiscuous mode
[  260.898238][T12564] veth0_macvtap: entered promiscuous mode
[  260.902203][T12564] veth1_macvtap: entered promiscuous mode
[  260.910120][T12564] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  260.913600][T12564] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  260.922749][T12564] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  260.927135][T12564] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  260.935705][ T6422] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.938006][ T6422] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.945158][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.947770][ T6422] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.991155][ T5668] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.995715][ T5668] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.005491][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  261.006973][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  261.009492][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[  261.062482][T12577] bond6: (slave vti0): The slave device specified does not support setting the MAC address
[  261.067115][T12577] bond6: (slave vti0): Error -95 calling set_mac_address
[  261.148001][ T5668] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.163274][ T5668] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.264279][T12576] syzkaller0: entered promiscuous mode
[  261.275578][T12576] syzkaller0: entered allmulticast mode
[  263.983110][T12635] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  264.447979][T12662] can: request_module (can-proto-0) failed.
[  265.757511][T12711] IPv6: NLM_F_CREATE should be specified when creating new route
[  265.760513][T12711] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  265.763471][T12711] IPv6: NLM_F_CREATE should be set when creating new route
[  266.067382][T12723] lo speed is unknown, defaulting to 1000
[  266.074764][T12723] wlan0 speed is unknown, defaulting to 1000
[  266.116695][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  266.292864][T12723] dvmrp0: entered allmulticast mode
[  266.976868][ T5507] dvmrp0: left allmulticast mode
[  267.257034][T12751] ieee802154 phy0 wpan0: encryption failed: -22
[  267.584173][T12766] syzkaller0: entered promiscuous mode
[  267.586725][T12766] syzkaller0: entered allmulticast mode
[  267.603544][T12766] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.611658][T12765] tipc: Resetting bearer <eth:syzkaller0>
[  267.643025][T12765] tipc: Disabling bearer <eth:syzkaller0>
[  267.918306][T12784] __nla_validate_parse: 5 callbacks suppressed
[  267.918326][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2897'.
[  267.939165][T12780] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  268.145909][T12792] netlink: 'syz.3.2901': attribute type 1 has an invalid length.
[  268.153373][T12792] netlink: 'syz.3.2901': attribute type 2 has an invalid length.
[  268.159682][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2898'.
[  268.930616][T12818] xt_bpf: check failed: parse error
[  269.288915][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2926'.
[  269.323581][  T215] block nbd0: Possible stuck request ffff8880214b0000: control (read@0,1024B). Runtime 30 seconds
[  269.337763][  T215] block nbd0: Possible stuck request ffff8880214b0200: control (read@1024,1024B). Runtime 30 seconds
[  269.341837][  T215] block nbd0: Possible stuck request ffff8880214b0400: control (read@2048,1024B). Runtime 30 seconds
[  269.345994][  T215] block nbd0: Possible stuck request ffff8880214b0600: control (read@3072,1024B). Runtime 30 seconds
[  269.510787][T12855] xt_hashlimit: size too large, truncated to 1048576
[  270.653029][T12920] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2962'.
[  271.198350][T12951] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2976'.
[  271.206033][T12953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2979'.
[  271.553628][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2988'.
[  271.759137][ T5507] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  271.762922][ T5507] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  271.768407][ T5507] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  271.774534][ T5507] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  272.300338][T13009] netlink: 'syz.0.3003': attribute type 1 has an invalid length.
[  272.303099][T13009] netlink: 'syz.0.3003': attribute type 2 has an invalid length.
[  272.697512][T13015] netlink: 'syz.1.3005': attribute type 3 has an invalid length.
[  272.894944][T13024] syzkaller0: entered promiscuous mode
[  272.897732][T13024] syzkaller0: entered allmulticast mode
[  273.282302][T13040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3018'.
[  273.285726][T13040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3018'.
[  273.294531][T13040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3018'.
[  273.304300][T13040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3018'.
[  274.004757][T13072] erspan0: entered promiscuous mode
[  274.007523][T13072] erspan0: entered allmulticast mode
[  274.160269][T13085] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  274.413450][T13097] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  274.431873][T13097] batman_adv: batadv0: Removing interface: batadv_slave_0
[  274.475546][T13097] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  274.481392][T13097] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.034603][   T54] block nbd3: Receive control failed (result -32)
[  275.036995][T10658] block nbd3: Receive control failed (result -32)
[  276.092383][T13179] netlink: 'syz.3.3077': attribute type 9 has an invalid length.
[  276.993862][T13203] No such timeout policy "syz0"
[  277.114087][T13208] netlink: 'syz.3.3090': attribute type 2 has an invalid length.
[  277.721021][T13228] netlink: 'syz.3.3097': attribute type 1 has an invalid length.
[  277.742225][T13228] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3097'.
[  278.682741][T13275] netlink: 'syz.3.3119': attribute type 2 has an invalid length.
[  279.559602][T13313] netlink: 'syz.3.3134': attribute type 2 has an invalid length.
[  279.576853][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3134'.
[  279.612584][T13313] : entered promiscuous mode
[  280.276515][T13353] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.289980][T13353] syzkaller0: entered promiscuous mode
[  280.296132][T13353] syzkaller0: entered allmulticast mode
[  280.314947][T13361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3155'.
[  280.350749][T13353] tipc: Resetting bearer <eth:syzkaller0>
[  280.355526][T13352] tipc: Resetting bearer <eth:syzkaller0>
[  280.387659][T13352] tipc: Disabling bearer <eth:syzkaller0>
[  280.419329][T13363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3156'.
[  281.067521][T13409] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3176'.
[  281.070301][T13409] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3176'.
[  281.146685][T13415] netlink: 'syz.1.3178': attribute type 1 has an invalid length.
[  281.240392][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3182'.
[  281.310702][T13425] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  281.579992][T13435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3185'.
[  281.753702][T13445] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3191'.
[  282.508537][T13469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3203'.
[  282.511603][T13469] netlink: 356 bytes leftover after parsing attributes in process `syz.0.3203'.
[  282.721669][T13484] netlink: 'syz.3.3209': attribute type 4 has an invalid length.
[  283.154751][T13493] : left allmulticast mode
[  283.156516][T13493] : left promiscuous mode
[  283.158167][T13493] bridge0: port 1(1) entered disabled state
[  283.165212][T13493] bridge_slave_1: left allmulticast mode
[  283.174090][T13493] bridge_slave_1: left promiscuous mode
[  283.184185][T13493] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.197825][T13493] .`: (slave bond_slave_0): Releasing backup interface
[  283.214238][T13493] .`: (slave bond_slave_1): Releasing backup interface
[  283.235275][T13493] team0: Port device team_slave_0 removed
[  283.250433][T13493] team0: Port device team_slave_1 removed
[  283.261134][T13493] net_ratelimit: 12 callbacks suppressed
[  283.261143][T13493] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  283.773570][T13516] syzkaller1: tun_chr_ioctl cmd 1074025677
[  283.775736][T13516] syzkaller1: linktype set to 769
[  283.845911][T13519] hsr_slave_1 (unregistering): left promiscuous mode
[  284.793340][T13582] sctp: [Deprecated]: syz.3.3250 (pid 13582) Use of int in max_burst socket option.
[  284.793340][T13582] Use struct sctp_assoc_value instead
[  285.065701][T13596] xt_hashlimit: size too large, truncated to 1048576
[  285.165989][T13602] syzkaller1: entered promiscuous mode
[  285.169568][T13602] syzkaller1: entered allmulticast mode
[  285.283786][T13610] bond2: (slave bond_slave_1): Device is not our slave
[  285.286063][T13610] bond2: option active_slave: invalid value (bond_slave_1)
[  285.294214][T13610] bond2 (unregistering): Released all slaves
[  285.307522][T13608] netlink: 'syz.0.3263': attribute type 62 has an invalid length.
[  285.609780][T13626] __nla_validate_parse: 7 callbacks suppressed
[  285.609791][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3271'.
[  285.621743][T13626] netlink: 'syz.1.3271': attribute type 30 has an invalid length.
[  285.628781][T13626] vxlan0: entered promiscuous mode
[  285.630850][T13626] vxlan0: entered allmulticast mode
[  285.633792][ T5668] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  285.639475][ T5668] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  285.642423][ T5668] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  285.645202][ T5668] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  285.650248][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3271'.
[  285.653229][T13626] netlink: 'syz.1.3271': attribute type 30 has an invalid length.
[  285.662781][T13626] vxlan1: entered promiscuous mode
[  285.664875][T13626] vxlan1: entered allmulticast mode
[  286.871235][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3290'.
[  286.970791][T13679] Bluetooth: MGMT ver 1.23
[  287.090097][T13685] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3296'.
[  287.169076][T13693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3300'.
[  287.177948][T13693] macvtap1: entered promiscuous mode
[  287.182458][T13693] macvtap1: entered allmulticast mode
[  287.195471][T13693] macvtap1: left promiscuous mode
[  287.202938][T13693] macvtap1: left allmulticast mode
[  287.271600][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3301'.
[  287.567202][ T6237] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  287.622834][T13712] netlink: 'syz.3.3307': attribute type 21 has an invalid length.
[  287.626443][T13712] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3307'.
[  287.708808][T13715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3309'.
[  287.712295][T13715] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  287.871097][T13725] ieee802154 phy0 wpan0: encryption failed: -22
[  288.175274][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3325'.
[  288.276642][ T6216] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  289.275756][T13769] netlink: 'syz.0.3333': attribute type 9 has an invalid length.
[  289.402470][T13778] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3336'.
[  289.411501][T13778] Bluetooth: MGMT ver 1.23
[  290.207672][T13804] IPv6: NLM_F_CREATE should be specified when creating new route
[  291.975246][T13860] netlink: 'syz.0.3372': attribute type 2 has an invalid length.
[  295.378914][T13917] netlink: 'syz.0.3399': attribute type 13 has an invalid length.
[  295.385656][T13917] netlink: 'syz.0.3399': attribute type 17 has an invalid length.
[  296.581881][ T6237] lo speed is unknown, defaulting to 1000
[  296.712645][T13917] 8021q: adding VLAN 0 to HW filter on device .`
[  296.719995][T13917] 8021q: adding VLAN 0 to HW filter on device team0
[  296.882633][T13917] veth1_vlan: left promiscuous mode
[  296.890381][T13917] veth0_vlan: left promiscuous mode
[  296.899921][T13917] veth0_vlan: entered promiscuous mode
[  296.915046][T13917] veth1_vlan: entered promiscuous mode
[  296.936115][T13917] veth1_macvtap: left promiscuous mode
[  296.945245][T13917] veth0_macvtap: left promiscuous mode
[  296.958788][T13917] veth0_macvtap: entered promiscuous mode
[  296.982757][T13917] veth1_macvtap: entered promiscuous mode
[  297.007721][T13917] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  297.013233][T13917] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  297.033575][T13917] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  297.048932][T13917] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  297.061441][T13917] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  297.108631][T13917] 8021q: adding VLAN 0 to HW filter on device bond1
[  297.147024][T13917] 8021q: adding VLAN 0 to HW filter on device bond2
[  297.207301][T13917] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.240912][T13917] 8021q: adding VLAN 0 to HW filter on device bond3
[  297.260768][T13917] 8021q: adding VLAN 0 to HW filter on device bond4
[  297.276991][T13917] 8021q: adding VLAN 0 to HW filter on device bond5
[  297.317198][T13917] ip6tnl4: left allmulticast mode
[  297.324574][T13917] 8021q: adding VLAN 0 to HW filter on device bond6
[  297.414076][ T5668] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  297.417796][ T6237] lo speed is unknown, defaulting to 1000
[  297.423347][T13938] vlan2: entered allmulticast mode
[  297.425722][T13938] bridge0: port 3(vlan2) entered blocking state
[  297.429225][T13938] bridge0: port 3(vlan2) entered disabled state
[  297.433180][T13938] vlan2: entered promiscuous mode
[  297.465210][ T5668] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  297.482294][ T5668] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  297.488748][ T5668] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  297.577625][T13953] netlink: 'syz.1.3411': attribute type 1 has an invalid length.
[  297.580982][T13953] __nla_validate_parse: 2 callbacks suppressed
[  297.580997][T13953] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3411'.
[  297.908532][ T5507] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  297.914502][T13968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3417'.
[  297.923769][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3417'.
[  297.951560][T13968] netlink: 10184 bytes leftover after parsing attributes in process `syz.3.3417'.
[  297.956710][T13968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3417'.
[  297.975535][T13970] syzkaller0: entered promiscuous mode
[  297.978233][T13970] syzkaller0: entered allmulticast mode
[  298.130312][T13978] x_tables: duplicate entry at hook 1
[  298.140083][T13978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3422'.
[  298.153673][T13978] netlink: 'syz.0.3422': attribute type 1 has an invalid length.
[  298.464267][T13996] netlink: 'syz.1.3430': attribute type 2 has an invalid length.
[  298.467690][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3430'.
[  299.401264][  T215] block nbd0: Possible stuck request ffff8880214b0000: control (read@0,1024B). Runtime 60 seconds
[  299.405490][  T215] block nbd0: Possible stuck request ffff8880214b0200: control (read@1024,1024B). Runtime 60 seconds
[  299.410060][  T215] block nbd0: Possible stuck request ffff8880214b0400: control (read@2048,1024B). Runtime 60 seconds
[  299.414228][  T215] block nbd0: Possible stuck request ffff8880214b0600: control (read@3072,1024B). Runtime 60 seconds
[  299.447861][T14061] syzkaller0: entered promiscuous mode
[  299.452441][T14061] syzkaller0: entered allmulticast mode
[  299.465992][T14061] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.484043][T14061] tipc: Resetting bearer <eth:syzkaller0>
[  299.507597][T14060] tipc: Resetting bearer <eth:syzkaller0>
[  299.549273][T14060] tipc: Disabling bearer <eth:syzkaller0>
[  299.752811][T14077] syzkaller0: entered promiscuous mode
[  299.754623][T14077] syzkaller0: entered allmulticast mode
[  300.179551][ T6237] IPVS: starting estimator thread 0...
[  300.267811][T14100] IPVS: using max 64 ests per chain, 153600 per kthread
[  300.322727][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3482'.
[  300.325997][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3482'.
[  300.330193][T14108] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3482'.
[  301.317531][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  301.393327][T14166] netlink: 'syz.3.3506': attribute type 1 has an invalid length.
[  301.406596][T14166] netlink: 'syz.3.3506': attribute type 1 has an invalid length.
[  301.797987][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  301.877940][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  301.881303][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  302.036723][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  302.185452][T14193] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  302.189868][T14193] syzkaller0: entered promiscuous mode
[  302.191963][T14193] syzkaller0: entered allmulticast mode
[  302.245997][T14193] tipc: Resetting bearer <eth:syzkaller0>
[  302.258170][T14192] tipc: Resetting bearer <eth:syzkaller0>
[  302.292225][T14192] tipc: Disabling bearer <eth:syzkaller0>
[  303.904296][T14217] __nla_validate_parse: 5 callbacks suppressed
[  303.904309][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3529'.
[  304.757912][ T5054] udevd[5054]: worker [7799] /devices/virtual/block/nbd0 is taking a long time
[  305.359885][T14219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3531'.
[  305.830500][T14241] netlink: 'syz.0.3538': attribute type 1 has an invalid length.
[  305.842547][T14241] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3538'.
[  305.845563][T14241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3538'.
[  305.914026][T14248] netlink: 'syz.3.3542': attribute type 1 has an invalid length.
[  305.957571][T14251] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  306.002484][T14229] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3535'.
[  306.292182][T14259] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3546'.
[  306.303573][T14259] netlink: 'syz.3.3546': attribute type 9 has an invalid length.
[  306.313691][T14259] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3546'.
[  306.323815][T14259] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3546'.
[  306.398687][T14270] bond3: option arp_all_targets: invalid value (3)
[  306.403287][T14270] bond3 (unregistering): Released all slaves
[  307.320616][T14315] netlink: 'syz.1.3572': attribute type 1 has an invalid length.
[  307.477417][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3578'.
[  307.930251][T14346] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3586'.
[  308.148772][T14356] 8021q: adding VLAN 0 to HW filter on device bond7
[  308.190014][T14356] 8021q: adding VLAN 0 to HW filter on device bond7
[  308.198769][T14356] bond7: (slave ip6_vti0): The slave device specified does not support setting the MAC address
[  308.208697][T14356] bond7: (slave ip6_vti0): Error -95 calling set_mac_address
[  308.819419][T14390] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  308.822418][T14390] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  309.525569][T14397] netlink: 'syz.0.3608': attribute type 8 has an invalid length.
[  309.529228][T14397] netlink: 'syz.0.3608': attribute type 9 has an invalid length.
[  309.638360][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  309.907995][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.915623][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.162716][T14417] bond1: option min_links: invalid value (18446744073709551612)
[  310.165489][T14417] bond1: option min_links: allowed values 0 - 2147483647
[  310.193411][T14417] bond1 (unregistering): Released all slaves
[  310.276443][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  310.280262][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  310.917412][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  310.920065][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  312.290828][T14476] __nla_validate_parse: 1 callbacks suppressed
[  312.290854][T14476] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3645'.
[  312.348074][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3645'.
[  313.325580][T14506] netlink: 198796 bytes leftover after parsing attributes in process `syz.1.3657'.
[  313.330437][T14506] netlink: 'syz.1.3657': attribute type 2 has an invalid length.
[  313.834375][T14519] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3665'.
[  313.998215][T14525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3666'.
[  314.028870][T14524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3662'.
[  315.144044][T14551] bridge0: port 3(vlan2) entered blocking state
[  315.146568][T14551] bridge0: port 3(vlan2) entered forwarding state
[  315.321122][T14563] macsec1: entered promiscuous mode
[  315.727082][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3682'.
[  315.974668][T14577] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3686'.
[  317.395734][T14639] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3713'.
[  317.528492][T14646] batadv_slave_1: entered promiscuous mode
[  318.158733][T14678] gre1: entered allmulticast mode
[  318.332125][T14645] batadv_slave_1: left promiscuous mode
[  319.556055][T14698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  319.833604][T14728] netlink: 'syz.0.3746': attribute type 7 has an invalid length.
[  320.428964][T14759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  320.464628][T14756] syzkaller0: entered promiscuous mode
[  320.476681][T14756] syzkaller0: entered allmulticast mode
[  320.493289][T14762] tc_dump_action: action bad kind
[  320.593978][T14764] netlink: 'syz.0.3763': attribute type 13 has an invalid length.
[  320.602064][T14764] netlink: 'syz.0.3763': attribute type 12 has an invalid length.
[  321.333850][T14801] lo speed is unknown, defaulting to 1000
[  321.338472][T14801] wlan0 speed is unknown, defaulting to 1000
[  321.877962][T14811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3782'.
[  321.922426][T14811] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3782'.
[  322.082189][T14814] xt_hashlimit: size too large, truncated to 1048576
[  322.195332][T14822] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3783'.
[  322.286655][T14822] netlink: 'syz.0.3783': attribute type 2 has an invalid length.
[  322.450590][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  322.453994][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[  322.513094][T14828] syzkaller0: entered promiscuous mode
[  322.526065][T14828] syzkaller0: entered allmulticast mode
[  324.148230][T14931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3800'.
[  324.153348][T14931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3800'.
[  324.215492][T14929] lo speed is unknown, defaulting to 1000
[  324.232912][T14929] wlan0 speed is unknown, defaulting to 1000
[  324.902850][T14952] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3806'.
[  324.996524][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  325.249091][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3808'.
[  326.221262][T14981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3813'.
[  326.224244][T14981] block nbd4: Unsupported socket: should be TCP or UNIX.
[  326.243461][T14981] veth1_to_batadv: entered promiscuous mode
[  326.277423][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  326.421868][T14987] netlink: 'syz.0.3815': attribute type 7 has an invalid length.
[  326.617875][T14993] syzkaller0: entered promiscuous mode
[  326.619870][T14993] syzkaller0: entered allmulticast mode
[  326.845593][T15005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3823'.
[  326.850923][T15005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3823'.
[  326.854078][T15005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3823'.
[  326.890465][T15005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3823'.
[  326.893856][T15005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3823'.
[  326.902308][T15009] vlan2: left promiscuous mode
[  326.904563][T15009] bridge0: port 3(vlan2) entered disabled state
[  326.914768][T15009] bridge_slave_1: left allmulticast mode
[  326.932275][T15009] bridge_slave_1: left promiscuous mode
[  326.938308][T15009] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.962741][T15009] bridge_slave_0: left promiscuous mode
[  326.967346][T15009] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.191551][T15022] xt_hashlimit: size too large, truncated to 1048576
[  327.194890][T15023] netlink: 'syz.1.3825': attribute type 11 has an invalid length.
[  327.562856][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  327.574005][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  327.748589][T15041] netlink: 'syz.1.3832': attribute type 7 has an invalid length.
[  327.868724][T15046] x_tables: duplicate underflow at hook 2
[  328.198127][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  328.836833][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  329.030869][T15054] tipc: Resetting bearer <eth:syzkaller0>
[  329.069413][T15103] sctp: [Deprecated]: syz.0.3843 (pid 15103) Use of int in maxseg socket option.
[  329.069413][T15103] Use struct sctp_assoc_value instead
[  329.479864][  T215] block nbd0: Possible stuck request ffff8880214b0000: control (read@0,1024B). Runtime 90 seconds
[  329.483567][  T215] block nbd0: Possible stuck request ffff8880214b0200: control (read@1024,1024B). Runtime 90 seconds
[  329.488023][  T215] block nbd0: Possible stuck request ffff8880214b0400: control (read@2048,1024B). Runtime 90 seconds
[  329.492132][  T215] block nbd0: Possible stuck request ffff8880214b0600: control (read@3072,1024B). Runtime 90 seconds
[  330.217956][T15159] netlink: 'syz.1.3855': attribute type 1 has an invalid length.
[  330.220595][T15160] netlink: 'syz.1.3855': attribute type 1 has an invalid length.
[  330.242997][T15159] bond1: entered promiscuous mode
[  330.245209][T15159] 8021q: adding VLAN 0 to HW filter on device bond1
[  330.282857][T15159] __nla_validate_parse: 7 callbacks suppressed
[  330.282876][T15159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3855'.
[  331.392185][T15209] lo speed is unknown, defaulting to 1000
[  331.396082][T15209] wlan0 speed is unknown, defaulting to 1000
[  331.571645][T15213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3864'.
[  331.692001][T15216] pim6reg: entered allmulticast mode
[  333.794615][T15188] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  333.943061][T15228] netlink: 'syz.3.3868': attribute type 7 has an invalid length.
[  333.994949][T15234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3870'.
[  333.998089][T15234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3870'.
[  334.257785][T15240] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  334.261685][T15240] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  334.385550][T15245] netlink: 'syz.1.3874': attribute type 7 has an invalid length.
[  334.461214][T15247] x_tables: duplicate underflow at hook 1
[  334.974307][T15267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3880'.
[  335.429469][T15291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3885'.
[  335.441790][T15291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3885'.
[  336.043689][T15322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3890'.
[  336.050599][T15322] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  336.055558][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3890'.
[  336.228469][T15326] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.637439][T15355] netlink: 'syz.1.3904': attribute type 7 has an invalid length.
[  337.003220][T15371] syzkaller0: entered promiscuous mode
[  337.005735][T15371] syzkaller0: entered allmulticast mode
[  337.216177][T15378] netlink: 'syz.3.3912': attribute type 6 has an invalid length.
[  337.249223][T15382] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3913'.
[  337.255093][T15382] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3913'.
[  337.383527][T15389] x_tables: duplicate underflow at hook 3
[  337.449349][T15393] lo speed is unknown, defaulting to 1000
[  337.453773][T15393] wlan0 speed is unknown, defaulting to 1000
[  338.032443][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3924'.
[  338.049332][T15414] netlink: 'syz.3.3924': attribute type 5 has an invalid length.
[  338.052980][T15414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3924'.
[  338.057376][T15414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3924'.
[  338.120617][T15417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3923'.
[  339.100998][T15430] netlink: 'syz.1.3928': attribute type 19 has an invalid length.
[  339.104193][T15430] netlink: 'syz.1.3928': attribute type 28 has an invalid length.
[  339.551948][T15455] xt_hashlimit: max too large, truncated to 1048576
[  339.876739][   T53] Bluetooth: hci2: command 0x0406 tx timeout
[  340.597802][T15486] unsupported nlmsg_type 40
[  340.611049][T15485] xt_hashlimit: size too large, truncated to 1048576
[  340.767798][T15492] netlink: 'syz.3.3942': attribute type 11 has an invalid length.
[  340.772181][T15494] __nla_validate_parse: 1 callbacks suppressed
[  340.772192][T15494] netlink: 412 bytes leftover after parsing attributes in process `syz.0.3945'.
[  340.778202][T15492] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3942'.
[  340.784796][T15485] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3942'.
[  340.962813][T15506] netlink: 'syz.0.3946': attribute type 7 has an invalid length.
[  342.209824][T15584] netlink: 'syz.0.3963': attribute type 6 has an invalid length.
[  342.260147][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3963'.
[  342.441921][T15595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3967'.
[  342.555977][T15607] x_tables: duplicate underflow at hook 2
[  342.651985][T15611] syzkaller0: entered promiscuous mode
[  342.656507][T15611] syzkaller0: entered allmulticast mode
[  342.717893][T15613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3973'.
[  342.720699][T15613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3973'.
[  343.471419][T15638] smc: net device wlan0 applied user defined pnetid SYZ0
[  343.577347][T15643] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3983'.
[  343.751980][T15653] bridge_slave_1: invalid flags given to default FDB implementation
[  343.771032][T15655] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3988'.
[  343.779342][T15655] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3988'.
[  343.843695][T15659] lo speed is unknown, defaulting to 1000
[  343.856079][T15659] wlan0 speed is unknown, defaulting to 1000
[  343.940033][T15663] netlink: 'syz.0.3985': attribute type 3 has an invalid length.
[  343.942753][T15663] netlink: 'syz.0.3985': attribute type 1 has an invalid length.
[  345.281494][T15714] openvswitch: netlink: Actions may not be safe on all matching packets
[  345.908825][T15731] netlink: 'syz.3.4011': attribute type 1 has an invalid length.
[  345.928105][T15731] __nla_validate_parse: 6 callbacks suppressed
[  345.928122][T15731] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4011'.
[  346.300584][T15754] lo speed is unknown, defaulting to 1000
[  346.348313][T15754] wlan0 speed is unknown, defaulting to 1000
[  346.587817][T15765] xt_hashlimit: size too large, truncated to 1048576
[  346.696878][T15759] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4019'.
[  347.218571][T15798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  347.389236][T15809] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4039'.
[  349.579063][T15898] sock: sock_set_timeout: `syz.0.4066' (pid 15898) tries to set negative timeout
[  349.583383][T15898] sock: sock_set_timeout: `syz.0.4066' (pid 15898) tries to set negative timeout
[  349.589075][T15898] sock: sock_set_timeout: `syz.0.4066' (pid 15898) tries to set negative timeout
[  349.592453][T15898] sock: sock_set_timeout: `syz.0.4066' (pid 15898) tries to set negative timeout
[  349.602730][T15898] sock: sock_set_timeout: `syz.0.4066' (pid 15898) tries to set negative timeout
[  349.606594][T15898] sock: sock_set_timeout: `syz.0.4066' (pid 15898) tries to set negative timeout
[  349.609909][T15898] sock: sock_set_timeout: `syz.0.4066' (pid 15898) tries to set negative timeout
[  349.614383][T15898] sock: sock_set_timeout: `syz.0.4066' (pid 15898) tries to set negative timeout
[  350.025213][T15919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4073'.
[  350.040494][T15919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4073'.
[  350.056453][T15919] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4073'.
[  350.091887][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4073'.
[  350.094888][T15919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4073'.
[  350.099285][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4073'.
[  350.103023][T15919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4073'.
[  350.964912][T15938] __nla_validate_parse: 3 callbacks suppressed
[  350.965036][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4079'.
[  351.147471][T15945] netlink: 'syz.1.4082': attribute type 2 has an invalid length.
[  351.164103][T15945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4082'.
[  351.236020][T15950] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4084'.
[  351.669733][T15965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4090'.
[  351.683106][T15964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4090'.
[  352.908174][T15983] team0: entered promiscuous mode
[  352.915812][T15983] team_slave_0: entered promiscuous mode
[  352.924670][T15983] team_slave_1: entered promiscuous mode
[  352.932700][T15983] net_ratelimit: 57 callbacks suppressed
[  352.932715][T15983] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  352.933046][T15984] xt_l2tp: v2 tid > 0xffff: 37482740
[  353.149137][T15992] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4100'.
[  353.153323][T15992] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4100'.
[  354.081344][T16034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4118'.
[  354.095826][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4119'.
[  354.335624][T16046] nbd: nbd1 already in use
[  354.338210][T16046] block nbd1: NBD_DISCONNECT
[  354.340544][T16046] block nbd1: Send disconnect failed -104
[  354.344763][T16046] block nbd1: shutting down sockets
[  354.379898][T16046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4123'.
[  354.438632][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  354.833258][T16072] tipc: Started in network mode
[  354.836285][T16072] tipc: Node identity ac14140f, cluster identity 4711
[  354.842923][T16072] tipc: New replicast peer: 255.255.255.255
[  354.853646][T16072] tipc: Enabled bearer <udp:syz2>, priority 10
[  355.869550][ T6219] tipc: Node number set to 2886997007
[  355.975466][T16130] lo speed is unknown, defaulting to 1000
[  355.980166][T16130] wlan0 speed is unknown, defaulting to 1000
[  356.129153][T16138] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20001
[  356.500093][T16156] __nla_validate_parse: 7 callbacks suppressed
[  356.500104][T16156] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4161'.
[  356.505671][T16156] xt_time: invalid argument - start or stop time greater than 23:59:59
[  357.407499][T16169] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  357.876417][   T53] Bluetooth: hci0: command 0x0c1a tx timeout
[  357.879363][ T5618] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  358.916727][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  359.250930][T16149] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  359.507849][T16177] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  359.520595][T16177] bond3 (unregistering): Released all slaves
[  359.535363][T16182] xt_policy: too many policy elements
[  359.571375][  T215] block nbd0: Possible stuck request ffff8880214b0000: control (read@0,1024B). Runtime 120 seconds
[  359.576061][  T215] block nbd0: Possible stuck request ffff8880214b0200: control (read@1024,1024B). Runtime 120 seconds
[  359.581728][  T215] block nbd0: Possible stuck request ffff8880214b0400: control (read@2048,1024B). Runtime 120 seconds
[  359.587592][  T215] block nbd0: Possible stuck request ffff8880214b0600: control (read@3072,1024B). Runtime 120 seconds
[  360.196693][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  360.204205][T16210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4179'.
[  360.283346][T16214] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4181'.
[  360.328926][T16216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4182'.
[  360.379162][T16218] geneve0: entered promiscuous mode
[  360.736045][T16240] nbd: must specify a size in bytes for the device
[  361.692939][T16268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4200'.
[  361.698811][T16268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4200'.
[  362.116595][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  362.419123][T16292] netlink: 'syz.0.4209': attribute type 7 has an invalid length.
[  362.758668][   T53] Bluetooth: hci0: command 0x0c1a tx timeout
[  362.764518][ T5618] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  362.792971][T16307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4213'.
[  363.349011][T16328] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  363.356082][T16328] bond3 (unregistering): Released all slaves
[  363.619215][T16339] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.733208][T16347] netlink: 'syz.0.4229': attribute type 7 has an invalid length.
[  364.036748][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  364.272400][T16370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4238'.
[  364.282081][T16370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4238'.
[  364.331626][T16373] netlink: 'syz.3.4240': attribute type 30 has an invalid length.
[  364.353836][T16373] syzkaller1: tun_chr_ioctl cmd 1074025677
[  364.356003][T16373] syzkaller1: linktype set to 0
[  364.358351][T16374] syzkaller1: tun_chr_ioctl cmd 1074025677
[  364.360379][T16374] syzkaller1: linktype set to 0
[  364.363338][T16373] netlink: 'syz.3.4240': attribute type 29 has an invalid length.
[  364.672918][T16393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  364.979333][T16412] syzkaller0: refused to change device tx_queue_len
[  365.022657][T16414] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4253'.
[  365.114693][T16415] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  365.142448][T16415] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  365.198579][   T53] Bluetooth: hci0: link tx timeout
[  365.206442][   T53] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  366.174804][T16436] 
[  366.175585][T16436] ======================================================
[  366.177618][T16436] WARNING: possible circular locking dependency detected
[  366.179887][T16436] syzkaller #0 Not tainted
[  366.182310][T16436] ------------------------------------------------------
[  366.184807][T16436] syz.3.4258/16436 is trying to acquire lock:
[  366.186612][T16436] ffffffff8ea848a0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0xbc/0x730
[  366.189581][T16436] 
[  366.189581][T16436] but task is already holding lock:
[  366.191904][T16436] ffff8881170160e0 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_check_listen_stop+0x1a6/0x2b0
[  366.195423][T16436] 
[  366.195423][T16436] which lock already depends on the new lock.
[  366.195423][T16436] 
[  366.198511][T16436] 
[  366.198511][T16436] the existing dependency chain (in reverse order) is:
[  366.201227][T16436] 
[  366.201227][T16436] -> #8 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}:
[  366.203647][T16436]        lock_sock_nested+0x41/0x100
[  366.205281][T16436]        mptcp_subflow_create_socket+0x144/0x810
[  366.209201][T16436]        __mptcp_nmpc_sk+0x155/0x770
[  366.211244][T16436]        mptcp_connect+0x6f/0x7a0
[  366.212835][T16436]        __inet_stream_connect+0x258/0xe00
[  366.214688][T16436]        inet_stream_connect+0x66/0xa0
[  366.216317][T16436]        __sys_connect+0x323/0x460
[  366.217785][T16436]        __x64_sys_connect+0x7a/0x90
[  366.219793][T16436]        do_syscall_64+0x174/0x580
[  366.221790][T16436]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.224271][T16436] 
[  366.224271][T16436] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  366.227240][T16436]        lock_sock_nested+0x41/0x100
[  366.229274][T16436]        tls_sw_sendmsg+0x161/0x2860
[  366.231252][T16436]        sock_sendmsg_nosec+0x90/0x180
[  366.233256][T16436]        __sys_sendto+0x408/0x5a0
[  366.235122][T16436]        __x64_sys_sendto+0xde/0x100
[  366.237037][T16436]        do_syscall_64+0x174/0x580
[  366.238986][T16436]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.241359][T16436] 
[  366.241359][T16436] -> #6 (&ctx->tx_lock){+.+.}-{4:4}:
[  366.244122][T16436]        __mutex_lock+0x19d/0x1550
[  366.245989][T16436]        tls_sw_sendmsg+0x13c/0x2860
[  366.247907][T16436]        sock_sendmsg_nosec+0x90/0x180
[  366.249938][T16436]        sock_sendmsg+0x1ca/0x2d0
[  366.251822][T16436]        __sock_xmit+0x245/0x4f0
[  366.253731][T16436]        nbd_disconnect+0x3ad/0x560
[  366.255679][T16436]        nbd_disconnect_and_put+0x32/0x280
[  366.257873][T16436]        nbd_genl_disconnect+0x4af/0x590
[  366.259984][T16436]        genl_family_rcv_msg_doit+0x233/0x340
[  366.261887][T16436]        genl_rcv_msg+0x614/0x7a0
[  366.263802][T16436]        netlink_rcv_skb+0x226/0x4a0
[  366.265898][T16436]        genl_rcv+0x28/0x40
[  366.267612][T16436]        netlink_unicast+0x7bb/0x940
[  366.269576][T16436]        netlink_sendmsg+0x813/0xb40
[  366.271298][T16436]        sock_sendmsg_nosec+0x13a/0x180
[  366.273182][T16436]        ____sys_sendmsg+0x54e/0x850
[  366.275254][T16436]        ___sys_sendmsg+0x2a5/0x360
[  366.277265][T16436]        __x64_sys_sendmsg+0x1b1/0x290
[  366.279109][T16436]        do_syscall_64+0x174/0x580
[  366.280664][T16436]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.282627][T16436] 
[  366.282627][T16436] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  366.284897][T16436]        __mutex_lock+0x19d/0x1550
[  366.286436][T16436]        nbd_queue_rq+0x373/0x1150
[  366.287973][T16436]        blk_mq_dispatch_rq_list+0x499/0x1990
[  366.289866][T16436]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  366.291912][T16436]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  366.293900][T16436]        blk_mq_run_work_fn+0x16c/0x300
[  366.296095][T16436]        process_scheduled_works+0xa8e/0x14e0
[  366.298195][T16436]        worker_thread+0xa47/0xfb0
[  366.299936][T16436]        kthread+0x388/0x470
[  366.301408][T16436]        ret_from_fork+0x514/0xb70
[  366.302911][T16436]        ret_from_fork_asm+0x1a/0x30
[  366.304489][T16436] 
[  366.304489][T16436] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  366.306727][T16436]        __mutex_lock+0x19d/0x1550
[  366.308437][T16436]        nbd_queue_rq+0xc1/0x1150
[  366.310327][T16436]        blk_mq_dispatch_rq_list+0x499/0x1990
[  366.312217][T16436]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  366.314294][T16436]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  366.316199][T16436]        blk_mq_run_work_fn+0x16c/0x300
[  366.317976][T16436]        process_scheduled_works+0xa8e/0x14e0
[  366.320226][T16436]        worker_thread+0xa47/0xfb0
[  366.322059][T16436]        kthread+0x388/0x470
[  366.323481][T16436]        ret_from_fork+0x514/0xb70
[  366.324995][T16436]        ret_from_fork_asm+0x1a/0x30
[  366.326828][T16436] 
[  366.326828][T16436] -> #3 (set->srcu){.+.+}-{0:0}:
[  366.329333][T16436]        __synchronize_srcu+0xc9/0x2f0
[  366.331024][T16436]        elevator_switch+0x1e8/0x7b0
[  366.332662][T16436]        elevator_change+0x2fa/0x480
[  366.334240][T16436]        elevator_set_default+0x375/0x440
[  366.335916][T16436]        blk_register_queue+0x3f3/0x4e0
[  366.337567][T16436]        __add_disk+0x6cb/0xe30
[  366.339038][T16436]        add_disk_fwnode+0xfb/0x4b0
[  366.340485][T16436]        nbd_dev_add+0x733/0xb60
[  366.342136][T16436]        nbd_init+0x15f/0x1e0
[  366.343431][T16436]        do_one_initcall+0x250/0x870
[  366.344987][T16436]        do_initcall_level+0x10a/0x1a0
[  366.346726][T16436]        do_initcalls+0x59/0xa0
[  366.348286][T16436]        kernel_init_freeable+0x29d/0x3e0
[  366.349998][T16436]        kernel_init+0x1d/0x1d0
[  366.351472][T16436]        ret_from_fork+0x514/0xb70
[  366.353335][T16436]        ret_from_fork_asm+0x1a/0x30
[  366.355084][T16436] 
[  366.355084][T16436] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  366.357521][T16436]        __mutex_lock+0x19d/0x1550
[  366.359415][T16436]        elevator_change+0x1af/0x480
[  366.361463][T16436]        elevator_set_none+0xb5/0x140
[  366.363529][T16436]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  366.365583][T16436]        nbd_start_device+0x189/0xb30
[  366.367201][T16436]        nbd_genl_connect+0x1597/0x1c10
[  366.368950][T16436]        genl_family_rcv_msg_doit+0x233/0x340
[  366.371288][T16436]        genl_rcv_msg+0x614/0x7a0
[  366.373166][T16436]        netlink_rcv_skb+0x226/0x4a0
[  366.375092][T16436]        genl_rcv+0x28/0x40
[  366.376726][T16436]        netlink_unicast+0x7bb/0x940
[  366.378672][T16436]        netlink_sendmsg+0x813/0xb40
[  366.380669][T16436]        sock_sendmsg_nosec+0x13a/0x180
[  366.382667][T16436]        ____sys_sendmsg+0x54e/0x850
[  366.384647][T16436]        ___sys_sendmsg+0x2a5/0x360
[  366.386555][T16436]        __x64_sys_sendmsg+0x1b1/0x290
[  366.388582][T16436]        do_syscall_64+0x174/0x580
[  366.390450][T16436]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.392817][T16436] 
[  366.392817][T16436] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  366.396935][T16436]        blk_alloc_queue+0x544/0x690
[  366.399084][T16436]        __blk_mq_alloc_disk+0x194/0x390
[  366.401287][T16436]        nbd_dev_add+0x494/0xb60
[  366.403351][T16436]        nbd_init+0x15f/0x1e0
[  366.405243][T16436]        do_one_initcall+0x250/0x870
[  366.407376][T16436]        do_initcall_level+0x10a/0x1a0
[  366.409603][T16436]        do_initcalls+0x59/0xa0
[  366.412604][T16436]        kernel_init_freeable+0x29d/0x3e0
[  366.414850][T16436]        kernel_init+0x1d/0x1d0
[  366.416777][T16436]        ret_from_fork+0x514/0xb70
[  366.418448][T16436]        ret_from_fork_asm+0x1a/0x30
[  366.419991][T16436] 
[  366.419991][T16436] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  366.422554][T16436]        __lock_acquire+0x1520/0x2cf0
[  366.424631][T16436]        lock_acquire+0x106/0x350
[  366.426561][T16436]        fs_reclaim_acquire+0x71/0x100
[  366.428643][T16436]        __kmalloc_node_track_caller_noprof+0xbc/0x730
[  366.431233][T16436]        __alloc_skb+0x2bd/0x7a0
[  366.433126][T16436]        mptcp_event_pm_listener+0x135/0x560
[  366.435401][T16436]        mptcp_check_listen_stop+0x1d3/0x2b0
[  366.437651][T16436]        __mptcp_close+0xf5/0xda0
[  366.439474][T16436]        mptcp_close+0x28/0x1a0
[  366.441361][T16436]        inet_release+0x143/0x190
[  366.443293][T16436]        sock_close+0xad/0x220
[  366.445132][T16436]        __fput+0x418/0xa50
[  366.446853][T16436]        task_work_run+0x1d9/0x270
[  366.448786][T16436]        exit_to_user_mode_loop+0x1fa/0x730
[  366.451006][T16436]        do_syscall_64+0x353/0x580
[  366.452995][T16436]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.455374][T16436] 
[  366.455374][T16436] other info that might help us debug this:
[  366.455374][T16436] 
[  366.459273][T16436] Chain exists of:
[  366.459273][T16436]   fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6/1
[  366.459273][T16436] 
[  366.464221][T16436]  Possible unsafe locking scenario:
[  366.464221][T16436] 
[  366.466899][T16436]        CPU0                    CPU1
[  366.468925][T16436]        ----                    ----
[  366.470942][T16436]   lock(k-sk_lock-AF_INET6/1);
[  366.472768][T16436]                                lock(sk_lock-AF_INET6);
[  366.475362][T16436]                                lock(k-sk_lock-AF_INET6/1);
[  366.477730][T16436]   lock(fs_reclaim);
[  366.478910][T16436] 
[  366.478910][T16436]  *** DEADLOCK ***
[  366.478910][T16436] 
[  366.482079][T16436] 3 locks held by syz.3.4258/16436:
[  366.483964][T16436]  #0: ffff8881aa880e40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220
[  366.487787][T16436]  #1: ffff88801f37a960 (sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_close+0x1d/0x1a0
[  366.491557][T16436]  #2: ffff8881170160e0 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_check_listen_stop+0x1a6/0x2b0
[  366.495725][T16436] 
[  366.495725][T16436] stack backtrace:
[  366.497842][T16436] CPU: 0 UID: 0 PID: 16436 Comm: syz.3.4258 Not tainted syzkaller #0 PREEMPT(full) 
[  366.497861][T16436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  366.497872][T16436] Call Trace:
[  366.497881][T16436]  <TASK>
[  366.497892][T16436]  dump_stack_lvl+0xe8/0x150
[  366.497908][T16436]  print_circular_bug+0x2e1/0x300
[  366.497922][T16436]  check_noncircular+0x12e/0x150
[  366.497933][T16436]  __lock_acquire+0x1520/0x2cf0
[  366.497943][T16436]  ? inet_release+0x143/0x190
[  366.497953][T16436]  ? __fput+0x418/0xa50
[  366.497962][T16436]  ? exit_to_user_mode_loop+0x1fa/0x730
[  366.497971][T16436]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.497982][T16436]  ? __kmalloc_node_track_caller_noprof+0xbc/0x730
[  366.497997][T16436]  lock_acquire+0x106/0x350
[  366.498005][T16436]  ? __kmalloc_node_track_caller_noprof+0xbc/0x730
[  366.498021][T16436]  fs_reclaim_acquire+0x71/0x100
[  366.498028][T16436]  ? __kmalloc_node_track_caller_noprof+0xbc/0x730
[  366.498041][T16436]  __kmalloc_node_track_caller_noprof+0xbc/0x730
[  366.498083][T16436]  ? __alloc_skb+0x189/0x7a0
[  366.498101][T16436]  ? mptcp_event_pm_listener+0x135/0x560
[  366.498116][T16436]  ? mptcp_event_pm_listener+0x135/0x560
[  366.498130][T16436]  ? __alloc_skb+0x189/0x7a0
[  366.498146][T16436]  __alloc_skb+0x2bd/0x7a0
[  366.498158][T16436]  mptcp_event_pm_listener+0x135/0x560
[  366.498168][T16436]  ? lockdep_hardirqs_on+0x7a/0x110
[  366.498179][T16436]  ? inet_csk_listen_stop+0x9a4/0xb30
[  366.498190][T16436]  ? __pfx_mptcp_event_pm_listener+0x10/0x10
[  366.498197][T16436]  ? inet_csk_listen_stop+0xaed/0xb30
[  366.498207][T16436]  ? __local_bh_enable_ip+0xd0/0x130
[  366.498220][T16436]  ? mptcp_subflow_queue_clean+0x39c/0x3d0
[  366.498235][T16436]  ? __local_bh_enable_ip+0xd0/0x130
[  366.498247][T16436]  mptcp_check_listen_stop+0x1d3/0x2b0
[  366.498257][T16436]  __mptcp_close+0xf5/0xda0
[  366.498265][T16436]  ? mptcp_close+0x1d/0x1a0
[  366.498276][T16436]  ? __local_bh_enable_ip+0xd0/0x130
[  366.498287][T16436]  mptcp_close+0x28/0x1a0
[  366.498298][T16436]  inet_release+0x143/0x190
[  366.498308][T16436]  sock_close+0xad/0x220
[  366.498316][T16436]  ? __pfx_sock_close+0x10/0x10
[  366.498323][T16436]  __fput+0x418/0xa50
[  366.498331][T16436]  task_work_run+0x1d9/0x270
[  366.498342][T16436]  ? __pfx_task_work_run+0x10/0x10
[  366.498353][T16436]  exit_to_user_mode_loop+0x1fa/0x730
[  366.498361][T16436]  ? rcu_is_watching+0x15/0xb0
[  366.498372][T16436]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.498380][T16436]  do_syscall_64+0x353/0x580
[  366.498393][T16436]  ? trace_irq_disable+0x3b/0x140
[  366.498403][T16436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.498411][T16436] RIP: 0033:0x7ff5e299ce59
[  366.498423][T16436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  366.498430][T16436] RSP: 002b:00007ffec48993d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  366.498440][T16436] RAX: 0000000000000000 RBX: 00007ffec48994c0 RCX: 00007ff5e299ce59
[  366.498446][T16436] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  366.498451][T16436] RBP: 00000000000595d7 R08: 0000000000000001 R09: 0000000000000000
[  366.498457][T16436] R10: 0000001b2c520000 R11: 0000000000000246 R12: 00007ffec4899500
[  366.498462][T16436] R13: 00007ff5e2c15fac R14: 0000000000059626 R15: 00007ff5e2c15fa0
[  366.498471][T16436]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  368.520184][ T5824] vlan2: left promiscuous mode
[  368.522027][ T5824] bridge0: port 3(vlan2) entered disabled state
[  368.525024][ T5824] bridge_slave_1: left allmulticast mode
[  368.527570][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.531287][ T5824] bridge_slave_0: left promiscuous mode
[  368.533407][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.663529][ T5824] erspan0 (unregistering): left allmulticast mode
[  368.712776][ T5824] bond2 (unregistering): (slave geneve2): Releasing active interface
[  368.733990][ T5824] bond1 (unregistering): Released all slaves
[  368.739475][ T5824] bond0 (unregistering): Released all slaves
[  368.745730][ T5824] bond2 (unregistering): Released all slaves
[  368.804258][ T5824] tipc: Left network mode
[  369.124333][ T5824] veth1_macvtap: left promiscuous mode
[  369.126783][ T5824] veth0_macvtap: left promiscuous mode
[  369.129049][ T5824] veth1_vlan: left promiscuous mode
[  369.131176][ T5824] veth0_vlan: left promiscuous mode
[  369.347492][ T5824] team0 (unregistering): Port device team_slave_1 removed
[  369.355944][ T5824] team0 (unregistering): Port device team_slave_0 removed
[  369.638704][ T5824] IPVS: stop unused estimator thread 0...
